Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. 2025/07/26 04:17:05 ignoring optional flag "sandboxArg"="0" 2025/07/26 04:17:06 parsed 1 programs [ 83.063635][ T5844] cgroup: Unknown subsys name 'net' [ 83.173677][ T5844] cgroup: Unknown subsys name 'cpuset' [ 83.182831][ T5844] cgroup: Unknown subsys name 'rlimit' [ 84.711977][ T5844] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.509943][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.686237][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.694406][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.703346][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.711621][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.719897][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.570000][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 88.653239][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.660706][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.667889][ T5878] bridge_slave_0: entered allmulticast mode [ 88.676682][ T5878] bridge_slave_0: entered promiscuous mode [ 88.685955][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.693225][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.701013][ T5878] bridge_slave_1: entered allmulticast mode [ 88.708239][ T5878] bridge_slave_1: entered promiscuous mode [ 88.742625][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.754310][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.790683][ T5878] team0: Port device team_slave_0 added [ 88.799996][ T5878] team0: Port device team_slave_1 added [ 88.829934][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.837026][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.862965][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.876087][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.883128][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.909797][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.956826][ T5878] hsr_slave_0: entered promiscuous mode [ 88.963225][ T5878] hsr_slave_1: entered promiscuous mode [ 89.103042][ T5878] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.114481][ T5878] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.124668][ T5878] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.134255][ T5878] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.163176][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.170488][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.178123][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.185282][ T5878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.241633][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.261037][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.269147][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.285312][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.297942][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.305172][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.318466][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.325721][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.496939][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.536421][ T5878] veth0_vlan: entered promiscuous mode [ 89.547084][ T5878] veth1_vlan: entered promiscuous mode [ 89.572152][ T5878] veth0_macvtap: entered promiscuous mode [ 89.582089][ T5878] veth1_macvtap: entered promiscuous mode [ 89.599013][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.613412][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.628941][ T5878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.638268][ T5878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.647237][ T5878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.657247][ T5878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.811000][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.913444][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.994562][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.037703][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.365002][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.374044][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.404011][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.412177][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.781452][ T92] cfg80211: failed to load regulatory.db 2025/07/26 04:17:18 executed programs: 0 [ 92.011521][ T5160] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.019320][ T5160] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.028966][ T5160] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.038149][ T5160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.046427][ T5160] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.195440][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 92.269858][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.276980][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.284433][ T5946] bridge_slave_0: entered allmulticast mode [ 92.291657][ T5946] bridge_slave_0: entered promiscuous mode [ 92.300344][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.307567][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.314875][ T5946] bridge_slave_1: entered allmulticast mode [ 92.322127][ T5946] bridge_slave_1: entered promiscuous mode [ 92.354972][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.367082][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.402570][ T5946] team0: Port device team_slave_0 added [ 92.411741][ T5946] team0: Port device team_slave_1 added [ 92.442433][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.449388][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.475697][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.488492][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.496556][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.523048][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.572232][ T5946] hsr_slave_0: entered promiscuous mode [ 92.578870][ T5946] hsr_slave_1: entered promiscuous mode [ 92.585498][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.593307][ T5946] Cannot create hsr debugfs directory [ 92.835980][ T12] bridge_slave_1: left allmulticast mode [ 92.843431][ T12] bridge_slave_1: left promiscuous mode [ 92.849747][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.862692][ T12] bridge_slave_0: left allmulticast mode [ 92.868364][ T12] bridge_slave_0: left promiscuous mode [ 92.874783][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.069985][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.082771][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.092887][ T12] bond0 (unregistering): Released all slaves [ 93.254752][ T12] hsr_slave_0: left promiscuous mode [ 93.261248][ T12] hsr_slave_1: left promiscuous mode [ 93.267276][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.277807][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.291448][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.298865][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.321132][ T12] veth1_macvtap: left promiscuous mode [ 93.326844][ T12] veth0_macvtap: left promiscuous mode [ 93.334169][ T12] veth1_vlan: left promiscuous mode [ 93.339785][ T12] veth0_vlan: left promiscuous mode [ 93.728835][ T12] team0 (unregistering): Port device team_slave_1 removed [ 93.752555][ T12] team0 (unregistering): Port device team_slave_0 removed [ 94.100446][ T5160] Bluetooth: hci0: command tx timeout [ 94.154854][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.171327][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.183073][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.199093][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.344110][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.737407][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.773162][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.780425][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.791882][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.799026][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.217225][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.306892][ T5946] veth0_vlan: entered promiscuous mode [ 95.326053][ T5946] veth1_vlan: entered promiscuous mode [ 95.360793][ T5946] veth0_macvtap: entered promiscuous mode [ 95.372162][ T5946] veth1_macvtap: entered promiscuous mode [ 95.393305][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.407705][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.422832][ T5946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.431652][ T5946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.441038][ T5946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.450116][ T5946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.537564][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.562089][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.587782][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.595967][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.649100][ T5995] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 95.664993][ T5995] team0: Port device wlan1 added [ 95.692298][ T5996] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 95.723090][ T5997] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 95.757501][ T5998] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 95.795022][ T5999] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 95.832978][ T6000] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 95.860862][ T6001] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 95.889185][ T6002] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 95.927021][ T6003] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 95.967956][ T6004] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 96.180498][ T5160] Bluetooth: hci0: command tx timeout 2025/07/26 04:17:23 executed programs: 56 [ 98.260381][ T5160] Bluetooth: hci0: command tx timeout [ 100.340976][ T5160] Bluetooth: hci0: command tx timeout [ 100.651933][ T6242] validate_nla: 237 callbacks suppressed [ 100.651947][ T6242] netlink: 'syz.0.263': attribute type 10 has an invalid length. [ 100.681447][ T6243] netlink: 'syz.0.264': attribute type 10 has an invalid length. [ 100.702808][ T6244] netlink: 'syz.0.265': attribute type 10 has an invalid length. [ 100.722930][ T6245] netlink: 'syz.0.266': attribute type 10 has an invalid length. [ 100.746663][ T6246] netlink: 'syz.0.267': attribute type 10 has an invalid length. [ 100.771387][ T6247] netlink: 'syz.0.268': attribute type 10 has an invalid length. [ 100.791450][ T6248] netlink: 'syz.0.269': attribute type 10 has an invalid length. [ 100.817119][ T6249] netlink: 'syz.0.270': attribute type 10 has an invalid length. [ 100.841864][ T6250] netlink: 'syz.0.271': attribute type 10 has an invalid length. [ 100.861342][ T6251] netlink: 'syz.0.272': attribute type 10 has an invalid length. 2025/07/26 04:17:28 executed programs: 317 [ 105.662792][ T6505] validate_nla: 251 callbacks suppressed [ 105.662806][ T6505] netlink: 'syz.0.524': attribute type 10 has an invalid length. [ 105.696891][ T6506] netlink: 'syz.0.525': attribute type 10 has an invalid length. [ 105.720508][ T6507] netlink: 'syz.0.526': attribute type 10 has an invalid length. [ 105.741093][ T6508] netlink: 'syz.0.527': attribute type 10 has an invalid length. [ 105.766577][ T6509] netlink: 'syz.0.528': attribute type 10 has an invalid length. [ 105.786533][ T6510] netlink: 'syz.0.529': attribute type 10 has an invalid length. [ 105.806871][ T6511] netlink: 'syz.0.530': attribute type 10 has an invalid length. [ 105.827664][ T6512] netlink: 'syz.0.531': attribute type 10 has an invalid length. [ 105.848539][ T6513] netlink: 'syz.0.532': attribute type 10 has an invalid length. [ 105.871735][ T6514] netlink: 'syz.0.533': attribute type 10 has an invalid length. 2025/07/26 04:17:33 executed programs: 579 [ 107.444192][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.457009][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.465294][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.473512][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.493490][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.637459][ T6598] chnl_net:caif_netlink_parms(): no params data found [ 107.676297][ T3008] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.725760][ T3008] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.762085][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.769191][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.777143][ T6598] bridge_slave_0: entered allmulticast mode [ 107.785766][ T6598] bridge_slave_0: entered promiscuous mode [ 107.803514][ T3008] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.819111][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.826619][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.833931][ T6598] bridge_slave_1: entered allmulticast mode [ 107.841136][ T6598] bridge_slave_1: entered promiscuous mode [ 107.880863][ T3008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.901606][ T6598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.913932][ T6598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.951269][ T6598] team0: Port device team_slave_0 added [ 107.961171][ T6598] team0: Port device team_slave_1 added [ 108.006240][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.014304][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.041309][ T6598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.064057][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.071685][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.098026][ T6598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.174584][ T3008] bridge_slave_1: left allmulticast mode [ 108.181344][ T3008] bridge_slave_1: left promiscuous mode [ 108.187094][ T3008] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.196658][ T3008] bridge_slave_0: left allmulticast mode [ 108.202749][ T3008] bridge_slave_0: left promiscuous mode [ 108.208445][ T3008] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.430941][ T3008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.442435][ T3008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.453008][ T3008] bond0 (unregistering): Released all slaves [ 108.471207][ T6598] hsr_slave_0: entered promiscuous mode [ 108.477439][ T6598] hsr_slave_1: entered promiscuous mode [ 108.602749][ T3008] [ 108.605167][ T3008] ====================================================== [ 108.612186][ T3008] WARNING: possible circular locking dependency detected [ 108.619229][ T3008] 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 Not tainted [ 108.626336][ T3008] ------------------------------------------------------ [ 108.633347][ T3008] kworker/u8:7/3008 is trying to acquire lock: [ 108.639489][ T3008] ffff88807ae3ce00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 108.649099][ T3008] [ 108.649099][ T3008] but task is already holding lock: [ 108.656547][ T3008] ffff888033270768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 108.666991][ T3008] [ 108.666991][ T3008] which lock already depends on the new lock. [ 108.666991][ T3008] [ 108.677385][ T3008] [ 108.677385][ T3008] the existing dependency chain (in reverse order) is: [ 108.686392][ T3008] [ 108.686392][ T3008] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 108.694120][ T3008] lock_acquire+0x120/0x360 [ 108.699140][ T3008] __mutex_lock+0x182/0xe80 [ 108.704170][ T3008] ieee80211_open+0xed/0x1f0 [ 108.709279][ T3008] __dev_open+0x470/0x880 [ 108.714128][ T3008] netif_open+0xaa/0x170 [ 108.718888][ T3008] dev_open+0x125/0x260 [ 108.723562][ T3008] team_add_slave+0xb36/0x2840 [ 108.728844][ T3008] do_set_master+0x530/0x6d0 [ 108.733954][ T3008] do_setlink+0xcf0/0x41c0 [ 108.738899][ T3008] rtnl_newlink+0x160b/0x1c70 [ 108.744097][ T3008] rtnetlink_rcv_msg+0x7cc/0xb70 [ 108.749554][ T3008] netlink_rcv_skb+0x208/0x470 [ 108.754838][ T3008] netlink_unicast+0x75c/0x8e0 [ 108.760117][ T3008] netlink_sendmsg+0x805/0xb30 [ 108.765417][ T3008] __sock_sendmsg+0x219/0x270 [ 108.770615][ T3008] ____sys_sendmsg+0x505/0x830 [ 108.775899][ T3008] ___sys_sendmsg+0x21f/0x2a0 [ 108.781100][ T3008] __x64_sys_sendmsg+0x19b/0x260 [ 108.786563][ T3008] do_syscall_64+0xfa/0x3b0 [ 108.791583][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.797995][ T3008] [ 108.797995][ T3008] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 108.806183][ T3008] validate_chain+0xb9b/0x2140 [ 108.811482][ T3008] __lock_acquire+0xab9/0xd20 [ 108.816682][ T3008] lock_acquire+0x120/0x360 [ 108.821708][ T3008] __mutex_lock+0x182/0xe80 [ 108.826736][ T3008] team_del_slave+0x32/0x1c0 [ 108.831854][ T3008] team_device_event+0x285/0xa20 [ 108.837317][ T3008] notifier_call_chain+0x1b3/0x3e0 [ 108.842959][ T3008] unregister_netdevice_many_notify+0x15d8/0x2320 [ 108.849913][ T3008] unregister_netdevice_queue+0x33c/0x380 [ 108.856150][ T3008] _cfg80211_unregister_wdev+0x165/0x590 [ 108.862314][ T3008] ieee80211_remove_interfaces+0x49a/0x6d0 [ 108.868648][ T3008] ieee80211_unregister_hw+0x5d/0x2c0 [ 108.874558][ T3008] mac80211_hwsim_del_radio+0x275/0x460 [ 108.880635][ T3008] hwsim_exit_net+0x584/0x640 [ 108.885841][ T3008] ops_undo_list+0x49a/0x990 [ 108.890962][ T3008] cleanup_net+0x4c5/0x800 [ 108.895934][ T3008] process_scheduled_works+0xade/0x17b0 [ 108.902004][ T3008] worker_thread+0x8a0/0xda0 [ 108.907118][ T3008] kthread+0x70e/0x8a0 [ 108.911712][ T3008] ret_from_fork+0x3fc/0x770 [ 108.916820][ T3008] ret_from_fork_asm+0x1a/0x30 [ 108.922107][ T3008] [ 108.922107][ T3008] other info that might help us debug this: [ 108.922107][ T3008] [ 108.932333][ T3008] Possible unsafe locking scenario: [ 108.932333][ T3008] [ 108.939777][ T3008] CPU0 CPU1 [ 108.945140][ T3008] ---- ---- [ 108.950504][ T3008] lock(&rdev->wiphy.mtx); [ 108.955020][ T3008] lock(team->team_lock_key#2); [ 108.962485][ T3008] lock(&rdev->wiphy.mtx); [ 108.969523][ T3008] lock(team->team_lock_key#2); [ 108.974503][ T3008] [ 108.974503][ T3008] *** DEADLOCK *** [ 108.974503][ T3008] [ 108.982653][ T3008] 5 locks held by kworker/u8:7/3008: [ 108.987941][ T3008] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 108.998842][ T3008] #1: ffffc9000adc7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 109.009387][ T3008] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 109.018710][ T3008] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 109.028596][ T3008] #4: ffff888033270768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 109.039488][ T3008] [ 109.039488][ T3008] stack backtrace: [ 109.045386][ T3008] CPU: 0 UID: 0 PID: 3008 Comm: kworker/u8:7 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 109.045404][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.045414][ T3008] Workqueue: netns cleanup_net [ 109.045441][ T3008] Call Trace: [ 109.045452][ T3008] [ 109.045459][ T3008] dump_stack_lvl+0x189/0x250 [ 109.045477][ T3008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.045493][ T3008] ? __pfx__printk+0x10/0x10 [ 109.045511][ T3008] ? print_lock_name+0xde/0x100 [ 109.045529][ T3008] print_circular_bug+0x2ee/0x310 [ 109.045548][ T3008] check_noncircular+0x134/0x160 [ 109.045567][ T3008] validate_chain+0xb9b/0x2140 [ 109.045585][ T3008] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.045605][ T3008] __lock_acquire+0xab9/0xd20 [ 109.045619][ T3008] ? team_del_slave+0x32/0x1c0 [ 109.045638][ T3008] lock_acquire+0x120/0x360 [ 109.045650][ T3008] ? team_del_slave+0x32/0x1c0 [ 109.045670][ T3008] ? __mutex_trylock_common+0x153/0x260 [ 109.045689][ T3008] __mutex_lock+0x182/0xe80 [ 109.045704][ T3008] ? team_del_slave+0x32/0x1c0 [ 109.045723][ T3008] ? rcu_is_watching+0x15/0xb0 [ 109.045740][ T3008] ? team_del_slave+0x32/0x1c0 [ 109.045759][ T3008] ? __pfx___mutex_lock+0x10/0x10 [ 109.045774][ T3008] ? bond_netdev_event+0xd9/0xe80 [ 109.045796][ T3008] ? __pfx___mutex_lock+0x10/0x10 [ 109.045811][ T3008] ? __pfx_bond_netdev_event+0x10/0x10 [ 109.045835][ T3008] team_del_slave+0x32/0x1c0 [ 109.045855][ T3008] team_device_event+0x285/0xa20 [ 109.045887][ T3008] notifier_call_chain+0x1b3/0x3e0 [ 109.045907][ T3008] unregister_netdevice_many_notify+0x15d8/0x2320 [ 109.045930][ T3008] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 109.045948][ T3008] ? __lock_acquire+0xab9/0xd20 [ 109.045975][ T3008] unregister_netdevice_queue+0x33c/0x380 [ 109.045992][ T3008] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 109.046011][ T3008] _cfg80211_unregister_wdev+0x165/0x590 [ 109.046034][ T3008] ieee80211_remove_interfaces+0x49a/0x6d0 [ 109.046052][ T3008] ? __pfx_synchronize_rcu+0x10/0x10 [ 109.046070][ T3008] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 109.046088][ T3008] ? rcu_is_watching+0x15/0xb0 [ 109.046106][ T3008] ieee80211_unregister_hw+0x5d/0x2c0 [ 109.046131][ T3008] mac80211_hwsim_del_radio+0x275/0x460 [ 109.046155][ T3008] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 109.046181][ T3008] hwsim_exit_net+0x584/0x640 [ 109.046201][ T3008] ? __pfx_hwsim_exit_net+0x10/0x10 [ 109.046222][ T3008] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 109.046246][ T3008] ops_undo_list+0x49a/0x990 [ 109.046268][ T3008] ? __pfx_ops_undo_list+0x10/0x10 [ 109.046292][ T3008] cleanup_net+0x4c5/0x800 [ 109.046313][ T3008] ? __pfx_cleanup_net+0x10/0x10 [ 109.046334][ T3008] ? _raw_spin_unlock_irq+0x23/0x50 [ 109.046347][ T3008] ? process_scheduled_works+0x9ef/0x17b0 [ 109.046362][ T3008] ? process_scheduled_works+0x9ef/0x17b0 [ 109.046378][ T3008] process_scheduled_works+0xade/0x17b0 [ 109.046403][ T3008] ? __pfx_process_scheduled_works+0x10/0x10 [ 109.046424][ T3008] worker_thread+0x8a0/0xda0 [ 109.046441][ T3008] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 109.046468][ T3008] ? __kthread_parkme+0x7b/0x200 [ 109.046488][ T3008] kthread+0x70e/0x8a0 [ 109.046508][ T3008] ? __pfx_worker_thread+0x10/0x10 [ 109.046523][ T3008] ? __pfx_kthread+0x10/0x10 [ 109.046543][ T3008] ? _raw_spin_unlock_irq+0x23/0x50 [ 109.046556][ T3008] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.046570][ T3008] ? __pfx_kthread+0x10/0x10 [ 109.046589][ T3008] ret_from_fork+0x3fc/0x770 [ 109.046604][ T3008] ? __pfx_ret_from_fork+0x10/0x10 [ 109.046620][ T3008] ? __switch_to_asm+0x39/0x70 [ 109.046638][ T3008] ? __switch_to_asm+0x33/0x70 [ 109.046655][ T3008] ? __pfx_kthread+0x10/0x10 [ 109.046674][ T3008] ret_from_fork_asm+0x1a/0x30 [ 109.046698][ T3008] [ 109.422937][ T3008] team0: Port device wlan1 removed [ 109.539658][ T51] Bluetooth: hci1: command tx timeout [ 109.576504][ T3008] hsr_slave_0: left promiscuous mode [ 109.582678][ T3008] hsr_slave_1: left promiscuous mode [ 109.588470][ T3008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.598160][ T3008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.606047][ T3008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.613705][ T3008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.626985][ T3008] veth1_macvtap: left promiscuous mode [ 109.634680][ T3008] veth0_macvtap: left promiscuous mode [ 109.642423][ T3008] veth1_vlan: left promiscuous mode [ 109.647749][ T3008] veth0_vlan: left promiscuous mode [ 109.771827][ T3008] team0 (unregistering): Port device team_slave_1 removed [ 109.786688][ T3008] team0 (unregistering): Port device team_slave_0 removed [ 110.039222][ T6598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.055723][ T6598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.065312][ T6598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.081788][ T6598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.145971][ T6598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.166772][ T6598] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.187764][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.194922][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.209377][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.216476][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.373124][ T6598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.405558][ T6598] veth0_vlan: entered promiscuous mode [ 110.417089][ T6598] veth1_vlan: entered promiscuous mode [ 110.445249][ T6598] veth0_macvtap: entered promiscuous mode [ 110.454071][ T6598] veth1_macvtap: entered promiscuous mode [ 110.472576][ T6598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.485542][ T6598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.496907][ T6598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.506219][ T6598] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.517261][ T6598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.527576][ T6598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.558273][ T6598] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 110.584548][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.594462][ T6598] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 110.602202][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.624225][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.635343][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.682029][ T6660] validate_nla: 82 callbacks suppressed [ 110.682048][ T6660] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 110.709029][ T6660] team0: Port device wlan1 added [ 110.733401][ T6662] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 110.758866][ T6665] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 110.787418][ T6667] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 110.812663][ T6670] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 110.841343][ T6671] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 110.862438][ T6674] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 110.886720][ T6676] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 110.918387][ T6679] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 110.951909][ T6681] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 111.620897][ T51] Bluetooth: hci1: command tx timeout 2025/07/26 04:17:38 executed programs: 672 [ 113.699787][ T51] Bluetooth: hci1: command tx timeout [ 115.694621][ T6966] validate_nla: 282 callbacks suppressed [ 115.694634][ T6966] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 115.717675][ T6967] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 115.734852][ T6968] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 115.750473][ T6969] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 115.768067][ T6970] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 115.779982][ T51] Bluetooth: hci1: command tx timeout [ 115.794105][ T6971] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 115.811326][ T6972] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 115.827123][ T6973] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 115.854972][ T6974] netlink: 'syz.0.916': attribute type 10 has an invalid length. [ 115.873562][ T6975] netlink: 'syz.0.917': attribute type 10 has an invalid length. 2025/07/26 04:17:43 executed programs: 969