Warning: Permanently added '10.128.10.59' (ED25519) to the list of known hosts. 2025/06/21 20:01:02 ignoring optional flag "sandboxArg"="0" 2025/06/21 20:01:03 parsed 1 programs [ 294.454402][ T5876] cgroup: Unknown subsys name 'net' [ 294.642633][ T5876] cgroup: Unknown subsys name 'cpuset' [ 294.652077][ T5876] cgroup: Unknown subsys name 'rlimit' [ 296.388445][ T5876] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 299.433052][ T5888] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 299.934244][ T5904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.946919][ T5904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.960495][ T5904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.975172][ T5904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.983399][ T5904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.190113][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 302.320912][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.328750][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.335923][ T5933] bridge_slave_0: entered allmulticast mode [ 302.343642][ T5933] bridge_slave_0: entered promiscuous mode [ 302.353373][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.361851][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.369314][ T5933] bridge_slave_1: entered allmulticast mode [ 302.376445][ T5933] bridge_slave_1: entered promiscuous mode [ 302.413435][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.426356][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.467561][ T5933] team0: Port device team_slave_0 added [ 302.477171][ T5933] team0: Port device team_slave_1 added [ 302.513053][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.520402][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.546985][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.560669][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.567638][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.593950][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.638297][ T5933] hsr_slave_0: entered promiscuous mode [ 302.644860][ T5933] hsr_slave_1: entered promiscuous mode [ 302.792372][ T5933] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.804740][ T5933] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.815239][ T5933] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.825434][ T5933] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 302.853062][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.860312][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.868104][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.875899][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.940705][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.960038][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.968100][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.985805][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.000135][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.007287][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.023072][ T3431] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.030246][ T3431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.220640][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.263920][ T5933] veth0_vlan: entered promiscuous mode [ 303.277563][ T5933] veth1_vlan: entered promiscuous mode [ 303.309571][ T5933] veth0_macvtap: entered promiscuous mode [ 303.320336][ T5933] veth1_macvtap: entered promiscuous mode [ 303.343732][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.360940][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.376323][ T5933] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.386078][ T5933] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.395509][ T5933] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.405709][ T5933] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.573052][ T3431] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.680536][ T3431] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.757363][ T3431] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.846578][ T3431] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.354277][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.362425][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.400971][ T3454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.410227][ T3454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/06/21 20:01:16 executed programs: 0 [ 304.990794][ T5904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.999753][ T5904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.010039][ T5904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.018002][ T5904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.029532][ T5904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.204408][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 305.290295][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.297520][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.305090][ T5967] bridge_slave_0: entered allmulticast mode [ 305.313625][ T5967] bridge_slave_0: entered promiscuous mode [ 305.321995][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.329327][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.336483][ T5967] bridge_slave_1: entered allmulticast mode [ 305.344143][ T5967] bridge_slave_1: entered promiscuous mode [ 305.383489][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.395501][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.435062][ T5967] team0: Port device team_slave_0 added [ 305.443196][ T5967] team0: Port device team_slave_1 added [ 305.474034][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.481077][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.507667][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.521267][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.528236][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.554290][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.604526][ T5967] hsr_slave_0: entered promiscuous mode [ 305.611070][ T5967] hsr_slave_1: entered promiscuous mode [ 305.617428][ T5967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.625477][ T5967] Cannot create hsr debugfs directory [ 305.888324][ T3431] bridge_slave_1: left allmulticast mode [ 305.896164][ T3431] bridge_slave_1: left promiscuous mode [ 305.903271][ T3431] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.914999][ T3431] bridge_slave_0: left allmulticast mode [ 305.922906][ T3431] bridge_slave_0: left promiscuous mode [ 305.929481][ T3431] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.183778][ T3431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.195273][ T3431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.205736][ T3431] bond0 (unregistering): Released all slaves [ 306.323598][ T3431] hsr_slave_0: left promiscuous mode [ 306.332432][ T3431] hsr_slave_1: left promiscuous mode [ 306.345662][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.354555][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.366027][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.374032][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.398121][ T3431] veth1_macvtap: left promiscuous mode [ 306.405776][ T3431] veth0_macvtap: left promiscuous mode [ 306.412220][ T3431] veth1_vlan: left promiscuous mode [ 306.417728][ T3431] veth0_vlan: left promiscuous mode [ 306.968698][ T3431] team0 (unregistering): Port device team_slave_1 removed [ 306.999517][ T3431] team0 (unregistering): Port device team_slave_0 removed [ 307.091603][ T5158] Bluetooth: hci0: command tx timeout [ 307.476539][ T5967] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.505494][ T5967] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.539623][ T5967] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.566109][ T5967] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 308.114667][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.134975][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.149892][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.157030][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.193005][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.200261][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.524157][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.590058][ T5967] veth0_vlan: entered promiscuous mode [ 308.604735][ T5967] veth1_vlan: entered promiscuous mode [ 308.635762][ T5967] veth0_macvtap: entered promiscuous mode [ 308.645489][ T5967] veth1_macvtap: entered promiscuous mode [ 308.663494][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.678344][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.695460][ T5967] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.706436][ T5967] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.715561][ T5967] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.724341][ T5967] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.788273][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.805545][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.835429][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.844546][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.895382][ T6006] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 308.917019][ T6006] team0: Port device wlan1 added [ 308.960933][ T6007] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 308.995034][ T6008] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 309.028819][ T6009] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 309.060246][ T6010] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 309.093014][ T6011] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 309.133915][ T6013] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 309.163801][ T6014] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 309.169009][ T5158] Bluetooth: hci0: command tx timeout [ 309.202879][ T6015] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 309.247654][ T6016] netlink: 'syz.0.25': attribute type 10 has an invalid length. 2025/06/21 20:01:21 executed programs: 45 [ 311.249163][ T5158] Bluetooth: hci0: command tx timeout [ 313.329568][ T5158] Bluetooth: hci0: command tx timeout [ 313.917931][ T6262] validate_nla: 241 callbacks suppressed [ 313.917945][ T6262] netlink: 'syz.0.267': attribute type 10 has an invalid length. [ 313.944315][ T6263] netlink: 'syz.0.268': attribute type 10 has an invalid length. [ 313.965444][ T6264] netlink: 'syz.0.269': attribute type 10 has an invalid length. [ 313.988384][ T6265] netlink: 'syz.0.270': attribute type 10 has an invalid length. [ 314.011546][ T6266] netlink: 'syz.0.271': attribute type 10 has an invalid length. [ 314.032135][ T6267] netlink: 'syz.0.272': attribute type 10 has an invalid length. [ 314.055833][ T6268] netlink: 'syz.0.273': attribute type 10 has an invalid length. [ 314.081752][ T6269] netlink: 'syz.0.274': attribute type 10 has an invalid length. [ 314.102986][ T6270] netlink: 'syz.0.275': attribute type 10 has an invalid length. [ 314.131177][ T6272] netlink: 'syz.0.276': attribute type 10 has an invalid length. 2025/06/21 20:01:26 executed programs: 305 [ 317.173734][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.180549][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.922680][ T6523] validate_nla: 250 callbacks suppressed [ 318.922697][ T6523] netlink: 'syz.0.527': attribute type 10 has an invalid length. [ 318.955112][ T6524] netlink: 'syz.0.528': attribute type 10 has an invalid length. [ 318.977405][ T6525] netlink: 'syz.0.529': attribute type 10 has an invalid length. [ 318.998007][ T6526] netlink: 'syz.0.530': attribute type 10 has an invalid length. [ 319.020767][ T6527] netlink: 'syz.0.531': attribute type 10 has an invalid length. [ 319.043079][ T6528] netlink: 'syz.0.532': attribute type 10 has an invalid length. [ 319.065698][ T6529] netlink: 'syz.0.533': attribute type 10 has an invalid length. [ 319.086800][ T6530] netlink: 'syz.0.534': attribute type 10 has an invalid length. [ 319.110105][ T6531] netlink: 'syz.0.535': attribute type 10 has an invalid length. [ 319.132502][ T6532] netlink: 'syz.0.536': attribute type 10 has an invalid length. 2025/06/21 20:01:31 executed programs: 567 [ 320.699208][ T5904] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.725638][ T5904] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.733608][ T5904] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.745459][ T5904] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.753436][ T5904] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.910028][ T6613] chnl_net:caif_netlink_parms(): no params data found [ 320.971795][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.035128][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.051702][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.059451][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.066609][ T6613] bridge_slave_0: entered allmulticast mode [ 321.074108][ T6613] bridge_slave_0: entered promiscuous mode [ 321.091558][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.105946][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.113563][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.121299][ T6613] bridge_slave_1: entered allmulticast mode [ 321.128423][ T6613] bridge_slave_1: entered promiscuous mode [ 321.160491][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.189876][ T6613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.201672][ T6613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.246213][ T6613] team0: Port device team_slave_0 added [ 321.255495][ T6613] team0: Port device team_slave_1 added [ 321.302736][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.314853][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.340950][ T6613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.362415][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.372108][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.398892][ T6613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.488114][ T6613] hsr_slave_0: entered promiscuous mode [ 321.495170][ T6613] hsr_slave_1: entered promiscuous mode [ 321.502279][ T12] bridge_slave_1: left allmulticast mode [ 321.507959][ T12] bridge_slave_1: left promiscuous mode [ 321.514282][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.523813][ T12] bridge_slave_0: left allmulticast mode [ 321.529909][ T12] bridge_slave_0: left promiscuous mode [ 321.535716][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.773564][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.784469][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.794527][ T12] bond0 (unregistering): Released all slaves [ 321.943578][ T12] [ 321.945964][ T12] ====================================================== [ 321.953010][ T12] WARNING: possible circular locking dependency detected [ 321.960023][ T12] 6.15.0-syzkaller-g99fe8af069a9 #0 Not tainted [ 321.966249][ T12] ------------------------------------------------------ [ 321.973273][ T12] kworker/u8:0/12 is trying to acquire lock: [ 321.979280][ T12] ffff88806235ce00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 321.988923][ T12] [ 321.988923][ T12] but task is already holding lock: [ 321.996318][ T12] ffff88802f778768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 322.006721][ T12] [ 322.006721][ T12] which lock already depends on the new lock. [ 322.006721][ T12] [ 322.017220][ T12] [ 322.017220][ T12] the existing dependency chain (in reverse order) is: [ 322.026326][ T12] [ 322.026326][ T12] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 322.034068][ T12] lock_acquire+0x120/0x360 [ 322.039102][ T12] __mutex_lock+0x182/0xe80 [ 322.044133][ T12] ieee80211_open+0xed/0x1f0 [ 322.049257][ T12] __dev_open+0x46d/0x880 [ 322.054204][ T12] netif_open+0xaa/0x170 [ 322.058986][ T12] dev_open+0x125/0x260 [ 322.063664][ T12] team_add_slave+0xb36/0x2840 [ 322.068953][ T12] do_set_master+0x530/0x6d0 [ 322.074158][ T12] do_setlink+0xcf0/0x41c0 [ 322.079095][ T12] rtnl_newlink+0x160b/0x1c70 [ 322.084321][ T12] rtnetlink_rcv_msg+0x7cc/0xb70 [ 322.089787][ T12] netlink_rcv_skb+0x208/0x470 [ 322.095075][ T12] netlink_unicast+0x75b/0x8d0 [ 322.100390][ T12] netlink_sendmsg+0x805/0xb30 [ 322.105676][ T12] __sock_sendmsg+0x21c/0x270 [ 322.110890][ T12] ____sys_sendmsg+0x505/0x830 [ 322.116177][ T12] ___sys_sendmsg+0x21f/0x2a0 [ 322.121375][ T12] __x64_sys_sendmsg+0x19b/0x260 [ 322.126835][ T12] do_syscall_64+0xfa/0x3b0 [ 322.131865][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.138372][ T12] [ 322.138372][ T12] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 322.146637][ T12] validate_chain+0xb9b/0x2140 [ 322.151926][ T12] __lock_acquire+0xab9/0xd20 [ 322.157221][ T12] lock_acquire+0x120/0x360 [ 322.162254][ T12] __mutex_lock+0x182/0xe80 [ 322.167286][ T12] team_del_slave+0x32/0x1c0 [ 322.172397][ T12] team_device_event+0x285/0xa20 [ 322.177857][ T12] notifier_call_chain+0x1b3/0x3e0 [ 322.183490][ T12] unregister_netdevice_many_notify+0x15d8/0x2320 [ 322.190433][ T12] unregister_netdevice_queue+0x33c/0x380 [ 322.196686][ T12] _cfg80211_unregister_wdev+0x165/0x590 [ 322.202955][ T12] ieee80211_remove_interfaces+0x49a/0x6d0 [ 322.209309][ T12] ieee80211_unregister_hw+0x5d/0x2c0 [ 322.215214][ T12] mac80211_hwsim_del_radio+0x275/0x460 [ 322.221289][ T12] hwsim_exit_net+0x584/0x640 [ 322.226487][ T12] ops_undo_list+0x49a/0x990 [ 322.231601][ T12] cleanup_net+0x4c5/0x800 [ 322.236538][ T12] process_scheduled_works+0xae1/0x17b0 [ 322.242612][ T12] worker_thread+0x8a0/0xda0 [ 322.247723][ T12] kthread+0x70e/0x8a0 [ 322.252312][ T12] ret_from_fork+0x3f9/0x770 [ 322.257436][ T12] ret_from_fork_asm+0x1a/0x30 [ 322.262731][ T12] [ 322.262731][ T12] other info that might help us debug this: [ 322.262731][ T12] [ 322.272965][ T12] Possible unsafe locking scenario: [ 322.272965][ T12] [ 322.280412][ T12] CPU0 CPU1 [ 322.285775][ T12] ---- ---- [ 322.291138][ T12] lock(&rdev->wiphy.mtx); [ 322.295652][ T12] lock(team->team_lock_key#2); [ 322.303119][ T12] lock(&rdev->wiphy.mtx); [ 322.310148][ T12] lock(team->team_lock_key#2); [ 322.315101][ T12] [ 322.315101][ T12] *** DEADLOCK *** [ 322.315101][ T12] [ 322.323240][ T12] 5 locks held by kworker/u8:0/12: [ 322.328345][ T12] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 322.339257][ T12] #1: ffffc90000117bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 322.349798][ T12] #2: ffffffff8f502ad0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 322.359114][ T12] #3: ffffffff8f50f6c8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 322.368955][ T12] #4: ffff88802f778768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 322.379759][ T12] [ 322.379759][ T12] stack backtrace: [ 322.385656][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-syzkaller-g99fe8af069a9 #0 PREEMPT(full) [ 322.385673][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.385683][ T12] Workqueue: netns cleanup_net [ 322.385697][ T12] Call Trace: [ 322.385704][ T12] [ 322.385710][ T12] dump_stack_lvl+0x189/0x250 [ 322.385733][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.385753][ T12] ? __pfx__printk+0x10/0x10 [ 322.385768][ T12] ? print_lock_name+0xde/0x100 [ 322.385783][ T12] print_circular_bug+0x2ee/0x310 [ 322.385798][ T12] check_noncircular+0x134/0x160 [ 322.385814][ T12] validate_chain+0xb9b/0x2140 [ 322.385829][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.385850][ T12] __lock_acquire+0xab9/0xd20 [ 322.385870][ T12] ? team_del_slave+0x32/0x1c0 [ 322.385883][ T12] lock_acquire+0x120/0x360 [ 322.385901][ T12] ? team_del_slave+0x32/0x1c0 [ 322.385922][ T12] ? __mutex_trylock_common+0x153/0x260 [ 322.385938][ T12] __mutex_lock+0x182/0xe80 [ 322.385956][ T12] ? team_del_slave+0x32/0x1c0 [ 322.385968][ T12] ? rcu_is_watching+0x15/0xb0 [ 322.385983][ T12] ? team_del_slave+0x32/0x1c0 [ 322.385996][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 322.386014][ T12] ? bond_netdev_event+0xd9/0xe80 [ 322.386029][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 322.386047][ T12] ? __pfx_bond_netdev_event+0x10/0x10 [ 322.386064][ T12] team_del_slave+0x32/0x1c0 [ 322.386079][ T12] team_device_event+0x285/0xa20 [ 322.386096][ T12] notifier_call_chain+0x1b3/0x3e0 [ 322.386112][ T12] unregister_netdevice_many_notify+0x15d8/0x2320 [ 322.386134][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 322.386152][ T12] ? call_rcu+0x6dd/0x990 [ 322.386164][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.386188][ T12] unregister_netdevice_queue+0x33c/0x380 [ 322.386205][ T12] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 322.386224][ T12] _cfg80211_unregister_wdev+0x165/0x590 [ 322.386240][ T12] ieee80211_remove_interfaces+0x49a/0x6d0 [ 322.386259][ T12] ? __pfx_synchronize_rcu+0x10/0x10 [ 322.386273][ T12] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 322.386292][ T12] ? rcu_is_watching+0x15/0xb0 [ 322.386306][ T12] ieee80211_unregister_hw+0x5d/0x2c0 [ 322.386323][ T12] mac80211_hwsim_del_radio+0x275/0x460 [ 322.386340][ T12] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 322.386358][ T12] hwsim_exit_net+0x584/0x640 [ 322.386371][ T12] ? __pfx_hwsim_exit_net+0x10/0x10 [ 322.386392][ T12] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 322.386407][ T12] ops_undo_list+0x49a/0x990 [ 322.386422][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 322.386437][ T12] cleanup_net+0x4c5/0x800 [ 322.386449][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 322.386462][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.386477][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 322.386497][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 322.386517][ T12] process_scheduled_works+0xae1/0x17b0 [ 322.386544][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 322.386568][ T12] worker_thread+0x8a0/0xda0 [ 322.386587][ T12] kthread+0x70e/0x8a0 [ 322.386603][ T12] ? __pfx_worker_thread+0x10/0x10 [ 322.386615][ T12] ? __pfx_kthread+0x10/0x10 [ 322.386630][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.386644][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.386660][ T12] ? __pfx_kthread+0x10/0x10 [ 322.386675][ T12] ret_from_fork+0x3f9/0x770 [ 322.386695][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 322.386715][ T12] ? __switch_to_asm+0x39/0x70 [ 322.386727][ T12] ? __switch_to_asm+0x33/0x70 [ 322.386740][ T12] ? __pfx_kthread+0x10/0x10 [ 322.386754][ T12] ret_from_fork_asm+0x1a/0x30 [ 322.386773][ T12] [ 322.749199][ T12] team0: Port device wlan1 removed [ 322.769128][ T5904] Bluetooth: hci1: command tx timeout [ 322.876460][ T12] hsr_slave_0: left promiscuous mode [ 322.883758][ T12] hsr_slave_1: left promiscuous mode [ 322.889664][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.897084][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.905521][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.915137][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.926443][ T12] veth1_macvtap: left promiscuous mode [ 322.932927][ T12] veth0_macvtap: left promiscuous mode [ 322.938556][ T12] veth1_vlan: left promiscuous mode [ 322.944499][ T12] veth0_vlan: left promiscuous mode [ 323.095253][ T12] team0 (unregistering): Port device team_slave_1 removed [ 323.115276][ T12] team0 (unregistering): Port device team_slave_0 removed [ 323.433399][ T6613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.457843][ T6613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.468530][ T6613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.478392][ T6613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.557735][ T6613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.578684][ T6613] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.590948][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.598091][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.613668][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.620857][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.796994][ T6613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.835594][ T6613] veth0_vlan: entered promiscuous mode [ 323.847542][ T6613] veth1_vlan: entered promiscuous mode [ 323.875635][ T6613] veth0_macvtap: entered promiscuous mode [ 323.885331][ T6613] veth1_macvtap: entered promiscuous mode [ 323.903475][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.916719][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.928425][ T6613] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.937906][ T6613] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.948323][ T6613] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.958204][ T6613] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.991609][ T6613] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 324.013075][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.016922][ T6613] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 324.035350][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.060161][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.068036][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.113838][ T6675] validate_nla: 79 callbacks suppressed [ 324.113858][ T6675] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 324.140600][ T6675] team0: Port device wlan1 added [ 324.160669][ T6678] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 324.187821][ T6680] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 324.215340][ T6683] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 324.237070][ T6684] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 324.264496][ T6686] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 324.286902][ T6688] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 324.314053][ T6690] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 324.338933][ T6692] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 324.359090][ T6693] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 324.848955][ T5904] Bluetooth: hci1: command tx timeout 2025/06/21 20:01:36 executed programs: 647 [ 326.929394][ T5904] Bluetooth: hci1: command tx timeout [ 329.008789][ T5904] Bluetooth: hci1: command tx timeout [ 329.122974][ T6987] validate_nla: 279 callbacks suppressed [ 329.122989][ T6987] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 329.145502][ T6988] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 329.161208][ T6989] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 329.194118][ T6990] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 329.209746][ T6991] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 329.224685][ T6992] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 329.254291][ T6993] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 329.269669][ T6994] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 329.284807][ T6995] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 329.313962][ T6996] netlink: 'syz.0.914': attribute type 10 has an invalid length. 2025/06/21 20:01:41 executed programs: 940