Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. 2025/06/05 11:44:34 ignoring optional flag "sandboxArg"="0" 2025/06/05 11:44:36 parsed 1 programs [ 301.290316][ T5870] cgroup: Unknown subsys name 'net' [ 301.439391][ T5870] cgroup: Unknown subsys name 'cpuset' [ 301.447927][ T5870] cgroup: Unknown subsys name 'rlimit' [ 302.861832][ T5870] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 305.624587][ T5883] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 305.744234][ T5891] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.754161][ T5891] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.764031][ T5891] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.775672][ T5891] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.783688][ T5891] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.901089][ T5912] chnl_net:caif_netlink_parms(): no params data found [ 307.000888][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.008835][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.017695][ T5912] bridge_slave_0: entered allmulticast mode [ 307.027159][ T5912] bridge_slave_0: entered promiscuous mode [ 307.041674][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.049182][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.056730][ T5912] bridge_slave_1: entered allmulticast mode [ 307.063656][ T5912] bridge_slave_1: entered promiscuous mode [ 307.098057][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.109432][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.139454][ T5912] team0: Port device team_slave_0 added [ 307.149129][ T5912] team0: Port device team_slave_1 added [ 307.175039][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.182149][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.208184][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.221309][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.228333][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.254292][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.304776][ T5912] hsr_slave_0: entered promiscuous mode [ 307.311138][ T5912] hsr_slave_1: entered promiscuous mode [ 307.438270][ T5912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.450388][ T5912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.460617][ T5912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.470361][ T5912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.498896][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.506253][ T5912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.513868][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.521146][ T5912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.572680][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.595011][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.604696][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.621924][ T5912] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.634670][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.641942][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.655011][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.662224][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.838563][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.881324][ T5912] veth0_vlan: entered promiscuous mode [ 307.893571][ T5912] veth1_vlan: entered promiscuous mode [ 307.922304][ T5912] veth0_macvtap: entered promiscuous mode [ 307.931558][ T5912] veth1_macvtap: entered promiscuous mode [ 307.950315][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.963853][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.976222][ T5912] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.985084][ T5912] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.994774][ T5912] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.004336][ T5912] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.149418][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.241224][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.271257][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.281123][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.314786][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.333083][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.341438][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.383441][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/06/05 11:44:47 executed programs: 0 [ 310.583656][ T5891] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.592509][ T5891] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.601112][ T5891] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.610175][ T5891] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.618038][ T5891] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.771979][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 310.844203][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.851636][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.859265][ T5968] bridge_slave_0: entered allmulticast mode [ 310.866472][ T5968] bridge_slave_0: entered promiscuous mode [ 310.874811][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.882205][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.889778][ T5968] bridge_slave_1: entered allmulticast mode [ 310.897053][ T5968] bridge_slave_1: entered promiscuous mode [ 310.929092][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.940693][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.972771][ T5968] team0: Port device team_slave_0 added [ 310.981630][ T5968] team0: Port device team_slave_1 added [ 311.014231][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.021433][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.047826][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.060009][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.067242][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.093442][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.152668][ T5968] hsr_slave_0: entered promiscuous mode [ 311.159724][ T5968] hsr_slave_1: entered promiscuous mode [ 311.166242][ T5968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.173992][ T5968] Cannot create hsr debugfs directory [ 311.322066][ T12] bridge_slave_1: left allmulticast mode [ 311.328043][ T12] bridge_slave_1: left promiscuous mode [ 311.334705][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.350961][ T12] bridge_slave_0: left allmulticast mode [ 311.357564][ T12] bridge_slave_0: left promiscuous mode [ 311.363348][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.736218][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.748421][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.759788][ T12] bond0 (unregistering): Released all slaves [ 311.867136][ T12] hsr_slave_0: left promiscuous mode [ 311.873738][ T12] hsr_slave_1: left promiscuous mode [ 311.881567][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.889384][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.898303][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.905721][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.922407][ T12] veth1_macvtap: left promiscuous mode [ 311.928155][ T12] veth0_macvtap: left promiscuous mode [ 311.933896][ T12] veth1_vlan: left promiscuous mode [ 311.939587][ T12] veth0_vlan: left promiscuous mode [ 312.254330][ T12] team0 (unregistering): Port device team_slave_1 removed [ 312.281964][ T12] team0 (unregistering): Port device team_slave_0 removed [ 312.716773][ T5151] Bluetooth: hci0: command tx timeout [ 313.342350][ T5968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 313.363697][ T5968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 313.400647][ T5968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 313.418370][ T5968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 313.661401][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.759615][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.777383][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.784472][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.804042][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.811229][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.239895][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.312447][ T5968] veth0_vlan: entered promiscuous mode [ 314.324266][ T5968] veth1_vlan: entered promiscuous mode [ 314.383568][ T5968] veth0_macvtap: entered promiscuous mode [ 314.394337][ T5968] veth1_macvtap: entered promiscuous mode [ 314.419611][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.443007][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.453835][ T5968] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.464997][ T5968] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.476159][ T5968] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.484885][ T5968] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.587309][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.595493][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.644797][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.653502][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.734506][ T6038] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 314.765575][ T6038] team0: Port device wlan1 added [ 314.786445][ T5151] Bluetooth: hci0: command tx timeout [ 314.802666][ T6040] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 314.845378][ T6043] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 314.904556][ T6044] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 314.935456][ T6047] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 314.991036][ T6048] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 315.023619][ T6049] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 315.073931][ T6051] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 315.115105][ T6054] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 315.149773][ T6055] netlink: 'syz.0.25': attribute type 10 has an invalid length. 2025/06/05 11:44:52 executed programs: 23 [ 316.866395][ T5151] Bluetooth: hci0: command tx timeout [ 317.189408][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.196331][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.946530][ T5151] Bluetooth: hci0: command tx timeout [ 319.761881][ T6289] validate_nla: 216 callbacks suppressed [ 319.761894][ T6289] netlink: 'syz.0.242': attribute type 10 has an invalid length. [ 319.787975][ T6290] netlink: 'syz.0.243': attribute type 10 has an invalid length. [ 319.807386][ T6291] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 319.833634][ T6292] netlink: 'syz.0.245': attribute type 10 has an invalid length. [ 319.854167][ T6293] netlink: 'syz.0.246': attribute type 10 has an invalid length. [ 319.874243][ T6294] netlink: 'syz.0.247': attribute type 10 has an invalid length. [ 319.917543][ T6295] netlink: 'syz.0.248': attribute type 10 has an invalid length. [ 319.935433][ T6296] netlink: 'syz.0.249': attribute type 10 has an invalid length. [ 319.963400][ T6297] netlink: 'syz.0.250': attribute type 10 has an invalid length. [ 319.983371][ T6298] netlink: 'syz.0.251': attribute type 10 has an invalid length. 2025/06/05 11:44:57 executed programs: 273 [ 324.776599][ T6565] validate_nla: 266 callbacks suppressed [ 324.776612][ T6565] netlink: 'syz.0.518': attribute type 10 has an invalid length. [ 324.800352][ T6566] netlink: 'syz.0.519': attribute type 10 has an invalid length. [ 324.823521][ T6567] netlink: 'syz.0.520': attribute type 10 has an invalid length. [ 324.843460][ T6568] netlink: 'syz.0.521': attribute type 10 has an invalid length. [ 324.861699][ T6569] netlink: 'syz.0.522': attribute type 10 has an invalid length. [ 324.884089][ T6570] netlink: 'syz.0.523': attribute type 10 has an invalid length. [ 324.903684][ T6571] netlink: 'syz.0.524': attribute type 10 has an invalid length. [ 324.921509][ T6572] netlink: 'syz.0.525': attribute type 10 has an invalid length. [ 324.943607][ T6573] netlink: 'syz.0.526': attribute type 10 has an invalid length. [ 324.963071][ T6574] netlink: 'syz.0.527': attribute type 10 has an invalid length. 2025/06/05 11:45:02 executed programs: 552 [ 326.551097][ T5891] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.559800][ T5891] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.568395][ T5891] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.581276][ T5891] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.589346][ T5891] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.747292][ T6664] chnl_net:caif_netlink_parms(): no params data found [ 326.802500][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.850188][ T6664] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.857511][ T6664] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.864688][ T6664] bridge_slave_0: entered allmulticast mode [ 326.872871][ T6664] bridge_slave_0: entered promiscuous mode [ 326.880963][ T6664] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.888292][ T6664] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.895453][ T6664] bridge_slave_1: entered allmulticast mode [ 326.902789][ T6664] bridge_slave_1: entered promiscuous mode [ 326.926823][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.953039][ T6664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.964827][ T6664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.996814][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.023688][ T6664] team0: Port device team_slave_0 added [ 327.033850][ T6664] team0: Port device team_slave_1 added [ 327.071889][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.087058][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.094018][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.120559][ T6664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.133469][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.140548][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.166557][ T6664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.218233][ T6664] hsr_slave_0: entered promiscuous mode [ 327.224588][ T6664] hsr_slave_1: entered promiscuous mode [ 327.302100][ T13] bridge_slave_1: left allmulticast mode [ 327.308424][ T13] bridge_slave_1: left promiscuous mode [ 327.314922][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.324958][ T13] bridge_slave_0: left allmulticast mode [ 327.330898][ T13] bridge_slave_0: left promiscuous mode [ 327.337296][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.631535][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.643302][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.655463][ T13] bond0 (unregistering): Released all slaves [ 327.785374][ T13] [ 327.787728][ T13] ====================================================== [ 327.794722][ T13] WARNING: possible circular locking dependency detected [ 327.801732][ T13] 6.15.0-syzkaller-07819-g919d763d6094 #0 Not tainted [ 327.808474][ T13] ------------------------------------------------------ [ 327.815467][ T13] kworker/u8:1/13 is trying to acquire lock: [ 327.821421][ T13] ffff888024380e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 327.830986][ T13] [ 327.830986][ T13] but task is already holding lock: [ 327.838331][ T13] ffff888033098768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 327.848659][ T13] [ 327.848659][ T13] which lock already depends on the new lock. [ 327.848659][ T13] [ 327.859059][ T13] [ 327.859059][ T13] the existing dependency chain (in reverse order) is: [ 327.868054][ T13] [ 327.868054][ T13] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 327.875765][ T13] lock_acquire+0x120/0x360 [ 327.880872][ T13] __mutex_lock+0x182/0xe80 [ 327.885880][ T13] ieee80211_open+0xed/0x1f0 [ 327.890996][ T13] __dev_open+0x470/0x880 [ 327.895833][ T13] netif_open+0xaa/0x170 [ 327.900586][ T13] dev_open+0x125/0x260 [ 327.905244][ T13] team_add_slave+0xb36/0x2840 [ 327.910510][ T13] do_set_master+0x533/0x6d0 [ 327.915600][ T13] do_setlink+0xcf0/0x41c0 [ 327.920516][ T13] rtnl_newlink+0x160b/0x1c70 [ 327.925691][ T13] rtnetlink_rcv_msg+0x7cf/0xb70 [ 327.931241][ T13] netlink_rcv_skb+0x205/0x470 [ 327.936508][ T13] netlink_unicast+0x758/0x8d0 [ 327.941768][ T13] netlink_sendmsg+0x805/0xb30 [ 327.947028][ T13] __sock_sendmsg+0x21c/0x270 [ 327.952203][ T13] ____sys_sendmsg+0x505/0x830 [ 327.957460][ T13] ___sys_sendmsg+0x21f/0x2a0 [ 327.962629][ T13] __x64_sys_sendmsg+0x19b/0x260 [ 327.968079][ T13] do_syscall_64+0xfa/0x3b0 [ 327.973104][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.979619][ T13] [ 327.979619][ T13] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 327.987774][ T13] validate_chain+0xb9b/0x2140 [ 327.993045][ T13] __lock_acquire+0xab9/0xd20 [ 327.998282][ T13] lock_acquire+0x120/0x360 [ 328.003413][ T13] __mutex_lock+0x182/0xe80 [ 328.008421][ T13] team_del_slave+0x32/0x1c0 [ 328.013515][ T13] team_device_event+0x285/0xa20 [ 328.018952][ T13] notifier_call_chain+0x1b3/0x3e0 [ 328.024570][ T13] unregister_netdevice_many_notify+0x15d8/0x2320 [ 328.031490][ T13] unregister_netdevice_queue+0x33c/0x380 [ 328.037712][ T13] _cfg80211_unregister_wdev+0x165/0x590 [ 328.043863][ T13] ieee80211_remove_interfaces+0x49a/0x6d0 [ 328.050173][ T13] ieee80211_unregister_hw+0x5d/0x2c0 [ 328.056045][ T13] mac80211_hwsim_del_radio+0x275/0x460 [ 328.062110][ T13] hwsim_exit_net+0x584/0x640 [ 328.067385][ T13] ops_undo_list+0x497/0x990 [ 328.072483][ T13] cleanup_net+0x4c5/0x8a0 [ 328.077404][ T13] process_scheduled_works+0xae1/0x17b0 [ 328.083454][ T13] worker_thread+0x8a0/0xda0 [ 328.088547][ T13] kthread+0x70e/0x8a0 [ 328.093115][ T13] ret_from_fork+0x3fc/0x770 [ 328.098216][ T13] ret_from_fork_asm+0x1a/0x30 [ 328.103481][ T13] [ 328.103481][ T13] other info that might help us debug this: [ 328.103481][ T13] [ 328.113779][ T13] Possible unsafe locking scenario: [ 328.113779][ T13] [ 328.121207][ T13] CPU0 CPU1 [ 328.126552][ T13] ---- ---- [ 328.131924][ T13] lock(&rdev->wiphy.mtx); [ 328.136412][ T13] lock(team->team_lock_key#2); [ 328.143853][ T13] lock(&rdev->wiphy.mtx); [ 328.150855][ T13] lock(team->team_lock_key#2); [ 328.155777][ T13] [ 328.155777][ T13] *** DEADLOCK *** [ 328.155777][ T13] [ 328.163899][ T13] 5 locks held by kworker/u8:1/13: [ 328.168987][ T13] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 328.179842][ T13] #1: ffffc90000127bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 328.190352][ T13] #2: ffffffff8f4fdc10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x8a0 [ 328.199652][ T13] #3: ffffffff8f50a808 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 328.209463][ T13] #4: ffff888033098768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 328.220404][ T13] [ 328.220404][ T13] stack backtrace: [ 328.226310][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-syzkaller-07819-g919d763d6094 #0 PREEMPT(full) [ 328.226330][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.226340][ T13] Workqueue: netns cleanup_net [ 328.226378][ T13] Call Trace: [ 328.226384][ T13] [ 328.226391][ T13] dump_stack_lvl+0x189/0x250 [ 328.226418][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.226441][ T13] ? __pfx__printk+0x10/0x10 [ 328.226459][ T13] ? print_lock_name+0xde/0x100 [ 328.226477][ T13] print_circular_bug+0x2ee/0x310 [ 328.226503][ T13] check_noncircular+0x134/0x160 [ 328.226529][ T13] validate_chain+0xb9b/0x2140 [ 328.226554][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.226578][ T13] __lock_acquire+0xab9/0xd20 [ 328.226599][ T13] ? team_del_slave+0x32/0x1c0 [ 328.226614][ T13] lock_acquire+0x120/0x360 [ 328.226632][ T13] ? team_del_slave+0x32/0x1c0 [ 328.226649][ T13] ? __mutex_trylock_common+0x153/0x260 [ 328.226674][ T13] __mutex_lock+0x182/0xe80 [ 328.226694][ T13] ? team_del_slave+0x32/0x1c0 [ 328.226709][ T13] ? rcu_is_watching+0x15/0xb0 [ 328.226733][ T13] ? team_del_slave+0x32/0x1c0 [ 328.226749][ T13] ? __pfx___mutex_lock+0x10/0x10 [ 328.226768][ T13] ? bond_netdev_event+0xd9/0xe80 [ 328.226787][ T13] ? __pfx___mutex_lock+0x10/0x10 [ 328.226806][ T13] ? __pfx_bond_netdev_event+0x10/0x10 [ 328.226824][ T13] team_del_slave+0x32/0x1c0 [ 328.226839][ T13] team_device_event+0x285/0xa20 [ 328.226853][ T13] notifier_call_chain+0x1b3/0x3e0 [ 328.226869][ T13] unregister_netdevice_many_notify+0x15d8/0x2320 [ 328.226883][ T13] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 328.226894][ T13] ? call_rcu+0x6dd/0x990 [ 328.226907][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.226921][ T13] unregister_netdevice_queue+0x33c/0x380 [ 328.226932][ T13] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 328.226944][ T13] _cfg80211_unregister_wdev+0x165/0x590 [ 328.226960][ T13] ieee80211_remove_interfaces+0x49a/0x6d0 [ 328.226973][ T13] ? __pfx_synchronize_rcu+0x10/0x10 [ 328.226987][ T13] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 328.226999][ T13] ? rcu_is_watching+0x15/0xb0 [ 328.227012][ T13] ieee80211_unregister_hw+0x5d/0x2c0 [ 328.227024][ T13] mac80211_hwsim_del_radio+0x275/0x460 [ 328.227036][ T13] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 328.227047][ T13] hwsim_exit_net+0x584/0x640 [ 328.227061][ T13] ? __pfx_hwsim_exit_net+0x10/0x10 [ 328.227075][ T13] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 328.227091][ T13] ops_undo_list+0x497/0x990 [ 328.227105][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 328.227120][ T13] cleanup_net+0x4c5/0x8a0 [ 328.227133][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 328.227147][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.227157][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 328.227170][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 328.227182][ T13] process_scheduled_works+0xae1/0x17b0 [ 328.227200][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.227215][ T13] worker_thread+0x8a0/0xda0 [ 328.227232][ T13] kthread+0x70e/0x8a0 [ 328.227242][ T13] ? __pfx_worker_thread+0x10/0x10 [ 328.227254][ T13] ? __pfx_kthread+0x10/0x10 [ 328.227263][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.227273][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.227282][ T13] ? __pfx_kthread+0x10/0x10 [ 328.227291][ T13] ret_from_fork+0x3fc/0x770 [ 328.227304][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 328.227317][ T13] ? __switch_to_asm+0x39/0x70 [ 328.227325][ T13] ? __switch_to_asm+0x33/0x70 [ 328.227334][ T13] ? __pfx_kthread+0x10/0x10 [ 328.227343][ T13] ret_from_fork_asm+0x1a/0x30 [ 328.227355][ T13] [ 328.587031][ T13] team0: Port device wlan1 removed [ 328.626112][ T5151] Bluetooth: hci1: command tx timeout [ 328.715572][ T13] hsr_slave_0: left promiscuous mode [ 328.721492][ T13] hsr_slave_1: left promiscuous mode [ 328.728896][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.737491][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.750799][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.762930][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.773535][ T13] veth1_macvtap: left promiscuous mode [ 328.784212][ T13] veth0_macvtap: left promiscuous mode [ 328.789873][ T13] veth1_vlan: left promiscuous mode [ 328.795359][ T13] veth0_vlan: left promiscuous mode [ 328.965491][ T13] team0 (unregistering): Port device team_slave_1 removed [ 328.983343][ T13] team0 (unregistering): Port device team_slave_0 removed [ 329.274557][ T6664] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 329.291110][ T6664] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 329.304447][ T6664] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 329.313967][ T6664] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 329.373919][ T6664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.393131][ T6664] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.403587][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.410747][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.423146][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.430309][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.558941][ T6664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.583426][ T6664] veth0_vlan: entered promiscuous mode [ 329.594715][ T6664] veth1_vlan: entered promiscuous mode [ 329.612451][ T6664] veth0_macvtap: entered promiscuous mode [ 329.620479][ T6664] veth1_macvtap: entered promiscuous mode [ 329.632594][ T6664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.644492][ T6664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.654603][ T6664] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.663964][ T6664] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.672729][ T6664] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.682561][ T6664] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.706269][ T6664] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 329.721790][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.723204][ T6664] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 329.733134][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.753190][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.761718][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.788493][ T6709] validate_nla: 88 callbacks suppressed [ 329.788508][ T6709] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 329.807386][ T6709] team0: Port device wlan1 added [ 329.820533][ T6710] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 329.839266][ T6711] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 329.869885][ T6712] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 329.885743][ T6713] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 329.902166][ T6714] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 329.930051][ T6715] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 329.945955][ T6716] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 329.960699][ T6717] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 329.990666][ T6718] netlink: 'syz.0.625': attribute type 10 has an invalid length. 2025/06/05 11:45:07 executed programs: 651 [ 330.706063][ T5151] Bluetooth: hci1: command tx timeout [ 332.786193][ T5151] Bluetooth: hci1: command tx timeout [ 334.819855][ T7003] validate_nla: 284 callbacks suppressed [ 334.819868][ T7003] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 334.842390][ T7004] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 334.856916][ T7005] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 334.866414][ T5151] Bluetooth: hci1: command tx timeout [ 334.879726][ T7006] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 334.894699][ T7007] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 334.909907][ T7008] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 334.941417][ T7009] netlink: 'syz.0.916': attribute type 10 has an invalid length. [ 334.957327][ T7010] netlink: 'syz.0.917': attribute type 10 has an invalid length. [ 334.973269][ T7011] netlink: 'syz.0.918': attribute type 10 has an invalid length. [ 334.999657][ T7012] netlink: 'syz.0.919': attribute type 10 has an invalid length. 2025/06/05 11:45:12 executed programs: 945