Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. 2025/07/09 01:55:13 ignoring optional flag "sandboxArg"="0" 2025/07/09 01:55:14 parsed 1 programs [ 88.010477][ T5794] cgroup: Unknown subsys name 'net' [ 88.152247][ T5794] cgroup: Unknown subsys name 'rlimit' [ 89.831166][ T5794] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.001399][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 92.081380][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.090396][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.097791][ T5813] bridge_slave_0: entered allmulticast mode [ 92.105239][ T5813] bridge_slave_0: entered promiscuous mode [ 92.118649][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.125849][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.133017][ T5813] bridge_slave_1: entered allmulticast mode [ 92.140710][ T5813] bridge_slave_1: entered promiscuous mode [ 92.173250][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.186639][ T786] cfg80211: failed to load regulatory.db [ 92.197034][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.237515][ T5813] team0: Port device team_slave_0 added [ 92.250638][ T5813] team0: Port device team_slave_1 added [ 92.278854][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.285907][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.313714][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.330891][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.338156][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.364254][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.412711][ T5813] hsr_slave_0: entered promiscuous mode [ 92.420269][ T5813] hsr_slave_1: entered promiscuous mode [ 92.593665][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.605951][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.617203][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.628128][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.662602][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.670160][ T5813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.678393][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.685603][ T5813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.749557][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.769881][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.778417][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.796550][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.812350][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.819631][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.834668][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.841885][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.044321][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.090614][ T5813] veth0_vlan: entered promiscuous mode [ 93.105648][ T5813] veth1_vlan: entered promiscuous mode [ 93.136983][ T5813] veth0_macvtap: entered promiscuous mode [ 93.148031][ T5813] veth1_macvtap: entered promiscuous mode [ 93.167341][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.184445][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.199636][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.208881][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.218413][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.228177][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.402759][ T1003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.092382][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.106530][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.116221][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.126426][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.135752][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.143900][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.488964][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.500828][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.532848][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.541537][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.345678][ T1003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/07/09 01:55:25 executed programs: 0 [ 96.687568][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.696806][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.705361][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.715195][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.722985][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.730814][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.894992][ T5899] chnl_net:caif_netlink_parms(): no params data found [ 96.962539][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.969810][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.977571][ T5899] bridge_slave_0: entered allmulticast mode [ 96.984822][ T5899] bridge_slave_0: entered promiscuous mode [ 96.993201][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.001262][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.008682][ T5899] bridge_slave_1: entered allmulticast mode [ 97.016623][ T5899] bridge_slave_1: entered promiscuous mode [ 97.048903][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.063769][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.099873][ T5899] team0: Port device team_slave_0 added [ 97.108624][ T5899] team0: Port device team_slave_1 added [ 97.140050][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.147915][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.174650][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.187716][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.194823][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.221559][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.266238][ T5899] hsr_slave_0: entered promiscuous mode [ 97.272780][ T5899] hsr_slave_1: entered promiscuous mode [ 97.279718][ T5899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.287813][ T5899] Cannot create hsr debugfs directory [ 98.685093][ T1003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.740249][ T1003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.815405][ T5102] Bluetooth: hci0: command tx timeout [ 99.659609][ T5899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.674318][ T5899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.688763][ T5899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.726940][ T5899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.779544][ T1003] hsr_slave_0: left promiscuous mode [ 99.789617][ T1003] hsr_slave_1: left promiscuous mode [ 99.796621][ T1003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.806859][ T1003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.816492][ T1003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.826870][ T1003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.835332][ T1003] bridge_slave_1: left allmulticast mode [ 99.841474][ T1003] bridge_slave_1: left promiscuous mode [ 99.850968][ T1003] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.869048][ T1003] bridge_slave_0: left allmulticast mode [ 99.876144][ T1003] bridge_slave_0: left promiscuous mode [ 99.881973][ T1003] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.918157][ T1003] veth1_macvtap: left promiscuous mode [ 99.927781][ T1003] veth0_macvtap: left promiscuous mode [ 99.934108][ T1003] veth1_vlan: left promiscuous mode [ 99.939707][ T1003] veth0_vlan: left promiscuous mode [ 100.360646][ T1003] team0 (unregistering): Port device team_slave_1 removed [ 100.393881][ T1003] team0 (unregistering): Port device team_slave_0 removed [ 100.428929][ T1003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.470740][ T1003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.786960][ T1003] bond0 (unregistering): Released all slaves [ 100.893420][ T5102] Bluetooth: hci0: command tx timeout [ 100.933089][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.970384][ T5899] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.986190][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.993438][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.023117][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.030328][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.278562][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.366923][ T5899] veth0_vlan: entered promiscuous mode [ 101.381494][ T5899] veth1_vlan: entered promiscuous mode [ 101.429142][ T5899] veth0_macvtap: entered promiscuous mode [ 101.451628][ T5899] veth1_macvtap: entered promiscuous mode [ 101.490394][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.511550][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.530963][ T5899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.540936][ T5899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.552753][ T5899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.562750][ T5899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.705740][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.720405][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/09 01:55:30 executed programs: 2 [ 101.747896][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.757239][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.820595][ T5950] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 101.855928][ T5950] team0: Port device wlan1 added [ 101.888728][ T5951] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 101.936840][ T5952] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 101.970797][ T5953] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 102.070100][ T5954] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 102.171139][ T5955] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 102.265246][ T5956] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 102.380557][ T5957] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 102.454439][ T5958] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 102.555760][ T5959] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 102.984553][ T5102] Bluetooth: hci0: command tx timeout [ 105.060799][ T5102] Bluetooth: hci0: command tx timeout 2025/07/09 01:55:35 executed programs: 156 [ 106.827102][ T6106] validate_nla: 146 callbacks suppressed [ 106.827119][ T6106] netlink: 'syz.0.172': attribute type 10 has an invalid length. [ 106.862752][ T6107] netlink: 'syz.0.173': attribute type 10 has an invalid length. [ 106.895292][ T6108] netlink: 'syz.0.174': attribute type 10 has an invalid length. [ 106.926065][ T6109] netlink: 'syz.0.175': attribute type 10 has an invalid length. [ 106.955218][ T6110] netlink: 'syz.0.176': attribute type 10 has an invalid length. [ 106.988517][ T6111] netlink: 'syz.0.177': attribute type 10 has an invalid length. [ 107.027849][ T6112] netlink: 'syz.0.178': attribute type 10 has an invalid length. [ 107.060834][ T6113] netlink: 'syz.0.179': attribute type 10 has an invalid length. [ 107.090999][ T6114] netlink: 'syz.0.180': attribute type 10 has an invalid length. [ 107.127897][ T6115] netlink: 'syz.0.181': attribute type 10 has an invalid length. 2025/07/09 01:55:40 executed programs: 364 [ 111.840692][ T6313] validate_nla: 197 callbacks suppressed [ 111.840708][ T6313] netlink: 'syz.0.379': attribute type 10 has an invalid length. [ 111.877918][ T6314] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 111.907868][ T6315] netlink: 'syz.0.381': attribute type 10 has an invalid length. [ 111.939670][ T6316] netlink: 'syz.0.382': attribute type 10 has an invalid length. [ 111.966624][ T6317] netlink: 'syz.0.383': attribute type 10 has an invalid length. [ 111.997547][ T6318] netlink: 'syz.0.384': attribute type 10 has an invalid length. [ 112.030027][ T6319] netlink: 'syz.0.385': attribute type 10 has an invalid length. [ 112.060087][ T6320] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 112.089201][ T6321] netlink: 'syz.0.387': attribute type 10 has an invalid length. [ 112.119148][ T6322] netlink: 'syz.0.388': attribute type 10 has an invalid length. 2025/07/09 01:55:45 executed programs: 572 [ 116.848114][ T6520] validate_nla: 196 callbacks suppressed [ 116.848130][ T6520] netlink: 'syz.0.585': attribute type 10 has an invalid length. [ 116.885856][ T6521] netlink: 'syz.0.586': attribute type 10 has an invalid length. [ 116.919715][ T6522] netlink: 'syz.0.587': attribute type 10 has an invalid length. [ 116.949024][ T6523] netlink: 'syz.0.588': attribute type 10 has an invalid length. [ 117.005024][ T6524] netlink: 'syz.0.589': attribute type 10 has an invalid length. [ 117.030539][ T6526] netlink: 'syz.0.590': attribute type 10 has an invalid length. [ 117.062679][ T6527] netlink: 'syz.0.591': attribute type 10 has an invalid length. [ 117.093133][ T6528] netlink: 'syz.0.592': attribute type 10 has an invalid length. [ 117.121027][ T6529] netlink: 'syz.0.593': attribute type 10 has an invalid length. [ 117.151598][ T6530] netlink: 'syz.0.594': attribute type 10 has an invalid length. [ 117.733075][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.742288][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.752406][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.761237][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.785419][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 117.792940][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.006568][ T1135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.028657][ T6554] chnl_net:caif_netlink_parms(): no params data found [ 118.097102][ T1135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.125100][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.132323][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.139756][ T6554] bridge_slave_0: entered allmulticast mode [ 118.147269][ T6554] bridge_slave_0: entered promiscuous mode [ 118.164870][ T1135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.180246][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.187621][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.196242][ T6554] bridge_slave_1: entered allmulticast mode [ 118.203402][ T6554] bridge_slave_1: entered promiscuous mode [ 118.234759][ T1135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.263477][ T6554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.275476][ T6554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.322631][ T6554] team0: Port device team_slave_0 added [ 118.334590][ T6554] team0: Port device team_slave_1 added [ 118.370394][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.377451][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.404186][ T6554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.417043][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.424100][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.450081][ T6554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.522541][ T6554] hsr_slave_0: entered promiscuous mode [ 118.529823][ T6554] hsr_slave_1: entered promiscuous mode [ 119.220388][ T6554] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.230999][ T6554] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.243059][ T6554] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.269250][ T6554] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.377654][ T1135] [ 119.380092][ T1135] ====================================================== [ 119.387135][ T1135] WARNING: possible circular locking dependency detected [ 119.394190][ T1135] 6.6.96-syzkaller #0 Not tainted [ 119.399238][ T1135] ------------------------------------------------------ [ 119.406292][ T1135] kworker/u4:7/1135 is trying to acquire lock: [ 119.412470][ T1135] ffff888022470d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 119.422143][ T1135] [ 119.422143][ T1135] but task is already holding lock: [ 119.429558][ T1135] ffff88807abb8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 119.439976][ T1135] [ 119.439976][ T1135] which lock already depends on the new lock. [ 119.439976][ T1135] [ 119.450408][ T1135] [ 119.450408][ T1135] the existing dependency chain (in reverse order) is: [ 119.459475][ T1135] [ 119.459475][ T1135] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 119.467274][ T1135] __mutex_lock+0x129/0xcc0 [ 119.472353][ T1135] ieee80211_open+0x144/0x200 [ 119.477602][ T1135] __dev_open+0x2bc/0x430 [ 119.482473][ T1135] dev_open+0xab/0x170 [ 119.487081][ T1135] team_add_slave+0xae7/0x2660 [ 119.492382][ T1135] do_setlink+0xe14/0x3fb0 [ 119.497326][ T1135] rtnl_newlink+0x175b/0x2020 [ 119.502546][ T1135] rtnetlink_rcv_msg+0x7c7/0xf10 [ 119.508018][ T1135] netlink_rcv_skb+0x216/0x480 [ 119.513329][ T1135] netlink_unicast+0x750/0x8c0 [ 119.518663][ T1135] netlink_sendmsg+0x8c1/0xbe0 [ 119.523967][ T1135] ____sys_sendmsg+0x5bf/0x950 [ 119.529261][ T1135] ___sys_sendmsg+0x220/0x290 [ 119.534473][ T1135] __se_sys_sendmsg+0x1a5/0x270 [ 119.539857][ T1135] do_syscall_64+0x55/0xb0 [ 119.544807][ T1135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.551293][ T1135] [ 119.551293][ T1135] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 119.559485][ T1135] __lock_acquire+0x2ddb/0x7c80 [ 119.564898][ T1135] lock_acquire+0x197/0x410 [ 119.569934][ T1135] __mutex_lock+0x129/0xcc0 [ 119.575062][ T1135] team_del_slave+0x32/0x1c0 [ 119.580192][ T1135] team_device_event+0x28d/0xa20 [ 119.585667][ T1135] notifier_call_chain+0x197/0x390 [ 119.591416][ T1135] unregister_netdevice_many_notify+0xf36/0x1810 [ 119.598351][ T1135] unregister_netdevice_queue+0x324/0x360 [ 119.604620][ T1135] _cfg80211_unregister_wdev+0x16b/0x580 [ 119.610792][ T1135] ieee80211_remove_interfaces+0x496/0x680 [ 119.617138][ T1135] ieee80211_unregister_hw+0x5d/0x2a0 [ 119.623052][ T1135] mac80211_hwsim_del_radio+0x274/0x450 [ 119.629137][ T1135] hwsim_exit_net+0x585/0x640 [ 119.634353][ T1135] cleanup_net+0x6f4/0xb90 [ 119.639308][ T1135] process_scheduled_works+0xa45/0x15b0 [ 119.645394][ T1135] worker_thread+0xa55/0xfc0 [ 119.650531][ T1135] kthread+0x2fa/0x390 [ 119.655138][ T1135] ret_from_fork+0x48/0x80 [ 119.660090][ T1135] ret_from_fork_asm+0x11/0x20 [ 119.665392][ T1135] [ 119.665392][ T1135] other info that might help us debug this: [ 119.665392][ T1135] [ 119.675712][ T1135] Possible unsafe locking scenario: [ 119.675712][ T1135] [ 119.683168][ T1135] CPU0 CPU1 [ 119.688539][ T1135] ---- ---- [ 119.693960][ T1135] lock(&rdev->wiphy.mtx); [ 119.698481][ T1135] lock(team->team_lock_key#2); [ 119.705964][ T1135] lock(&rdev->wiphy.mtx); [ 119.712998][ T1135] lock(team->team_lock_key#2); [ 119.717955][ T1135] [ 119.717955][ T1135] *** DEADLOCK *** [ 119.717955][ T1135] [ 119.726106][ T1135] 5 locks held by kworker/u4:7/1135: [ 119.731399][ T1135] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 119.742304][ T1135] #1: ffffc9000459fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 119.752857][ T1135] #2: ffffffff8dfae950 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 119.762280][ T1135] #3: ffffffff8dfbb748 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 119.772313][ T1135] #4: ffff88807abb8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 119.783129][ T1135] [ 119.783129][ T1135] stack backtrace: [ 119.789033][ T1135] CPU: 1 PID: 1135 Comm: kworker/u4:7 Not tainted 6.6.96-syzkaller #0 [ 119.797191][ T1135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.807261][ T1135] Workqueue: netns cleanup_net [ 119.812062][ T1135] Call Trace: [ 119.815355][ T1135] [ 119.818305][ T1135] dump_stack_lvl+0x16c/0x230 [ 119.823008][ T1135] ? load_image+0x3b0/0x3b0 [ 119.827524][ T1135] ? show_regs_print_info+0x20/0x20 [ 119.832926][ T1135] ? print_circular_bug+0x12b/0x1a0 [ 119.838142][ T1135] check_noncircular+0x2bd/0x3c0 [ 119.843095][ T1135] ? print_deadlock_bug+0x5d0/0x5d0 [ 119.848306][ T1135] ? lockdep_lock+0xe0/0x220 [ 119.853002][ T1135] ? __lock_acquire+0x1334/0x7c80 [ 119.858051][ T1135] ? _find_first_zero_bit+0xd3/0x100 [ 119.863404][ T1135] __lock_acquire+0x2ddb/0x7c80 [ 119.868292][ T1135] ? verify_lock_unused+0x140/0x140 [ 119.873509][ T1135] ? verify_lock_unused+0x140/0x140 [ 119.878729][ T1135] lock_acquire+0x197/0x410 [ 119.883247][ T1135] ? team_del_slave+0x32/0x1c0 [ 119.888054][ T1135] ? __might_sleep+0xe0/0xe0 [ 119.892662][ T1135] ? read_lock_is_recursive+0x20/0x20 [ 119.898051][ T1135] __mutex_lock+0x129/0xcc0 [ 119.902574][ T1135] ? team_del_slave+0x32/0x1c0 [ 119.907374][ T1135] ? __lock_acquire+0x7c80/0x7c80 [ 119.912415][ T1135] ? rcu_is_watching+0x15/0xb0 [ 119.917197][ T1135] ? trace_contention_end+0x39/0xe0 [ 119.922404][ T1135] ? __mutex_lock+0x304/0xcc0 [ 119.927109][ T1135] ? team_del_slave+0x32/0x1c0 [ 119.931888][ T1135] ? mutex_lock_nested+0x20/0x20 [ 119.936845][ T1135] ? bond_netdev_event+0xe1/0xef0 [ 119.941882][ T1135] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 119.947536][ T1135] ? bond_ipsec_offload_ok+0x410/0x410 [ 119.953016][ T1135] team_del_slave+0x32/0x1c0 [ 119.957629][ T1135] team_device_event+0x28d/0xa20 [ 119.962589][ T1135] notifier_call_chain+0x197/0x390 [ 119.967719][ T1135] unregister_netdevice_many_notify+0xf36/0x1810 [ 119.974069][ T1135] ? lock_chain_count+0x20/0x20 [ 119.978940][ T1135] ? unregister_netdevice_many+0x20/0x20 [ 119.984596][ T1135] ? kernfs_remove_by_name_ns+0x117/0x150 [ 119.990327][ T1135] ? __lock_acquire+0x7c80/0x7c80 [ 119.995366][ T1135] unregister_netdevice_queue+0x324/0x360 [ 120.001106][ T1135] ? list_netdevice+0x730/0x730 [ 120.005977][ T1135] ? kernfs_remove_by_name_ns+0x117/0x150 [ 120.011711][ T1135] _cfg80211_unregister_wdev+0x16b/0x580 [ 120.017378][ T1135] ieee80211_remove_interfaces+0x496/0x680 [ 120.023214][ T1135] ? ieee80211_do_stop+0x1db0/0x1db0 [ 120.028552][ T1135] ? rcu_is_watching+0x15/0xb0 [ 120.033335][ T1135] ieee80211_unregister_hw+0x5d/0x2a0 [ 120.038726][ T1135] mac80211_hwsim_del_radio+0x274/0x450 [ 120.044291][ T1135] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 120.049855][ T1135] hwsim_exit_net+0x585/0x640 [ 120.054643][ T1135] ? hwsim_init_net+0x90/0x90 [ 120.059356][ T1135] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 120.065189][ T1135] cleanup_net+0x6f4/0xb90 [ 120.069629][ T1135] ? ops_free_list+0x3b0/0x3b0 [ 120.074417][ T1135] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.079721][ T1135] ? process_scheduled_works+0x957/0x15b0 [ 120.085457][ T1135] ? process_scheduled_works+0x957/0x15b0 [ 120.091242][ T1135] process_scheduled_works+0xa45/0x15b0 [ 120.096839][ T1135] ? assign_work+0x400/0x400 [ 120.101448][ T1135] ? assign_work+0x39e/0x400 [ 120.106059][ T1135] worker_thread+0xa55/0xfc0 [ 120.110667][ T1135] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 120.116574][ T1135] ? _raw_spin_unlock+0x40/0x40 [ 120.121441][ T1135] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 120.127382][ T1135] kthread+0x2fa/0x390 [ 120.131470][ T1135] ? pr_cont_work+0x560/0x560 [ 120.136166][ T1135] ? kthread_blkcg+0xd0/0xd0 [ 120.140764][ T1135] ret_from_fork+0x48/0x80 [ 120.145192][ T1135] ? kthread_blkcg+0xd0/0xd0 [ 120.149797][ T1135] ret_from_fork_asm+0x11/0x20 [ 120.154586][ T1135] [ 120.158884][ T5852] Bluetooth: hci1: command tx timeout [ 120.186445][ T1135] team0: Port device wlan1 removed [ 120.231910][ T6554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.287755][ T6554] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.301068][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.308306][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.332415][ T1135] hsr_slave_0: left promiscuous mode [ 120.338860][ T1135] hsr_slave_1: left promiscuous mode [ 120.346303][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.353792][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.361692][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.373009][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.380986][ T1135] bridge_slave_1: left allmulticast mode [ 120.386807][ T1135] bridge_slave_1: left promiscuous mode [ 120.392610][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.401984][ T1135] bridge_slave_0: left allmulticast mode [ 120.408103][ T1135] bridge_slave_0: left promiscuous mode [ 120.413981][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.426816][ T1135] veth1_macvtap: left promiscuous mode [ 120.432338][ T1135] veth0_macvtap: left promiscuous mode [ 120.437990][ T1135] veth1_vlan: left promiscuous mode [ 120.443452][ T1135] veth0_vlan: left promiscuous mode [ 120.642728][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 120.680144][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 120.700771][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.728313][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.822756][ T1135] bond0 (unregistering): Released all slaves [ 120.914735][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.921943][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.956810][ T6554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.098607][ T6554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.147894][ T6554] veth0_vlan: entered promiscuous mode [ 121.158706][ T6554] veth1_vlan: entered promiscuous mode [ 121.184301][ T6554] veth0_macvtap: entered promiscuous mode [ 121.192950][ T6554] veth1_macvtap: entered promiscuous mode [ 121.224576][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.238988][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.251526][ T6554] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.260444][ T6554] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.269205][ T6554] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.278183][ T6554] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.317681][ T6554] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 121.340695][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.342847][ T6554] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 121.355644][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.377602][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.387259][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.445023][ T6603] team0: Port device wlan1 added [ 121.857332][ T6624] validate_nla: 42 callbacks suppressed [ 121.857349][ T6624] netlink: 'syz.0.637': attribute type 10 has an invalid length. 2025/07/09 01:55:50 executed programs: 625 [ 121.899518][ T6625] netlink: 'syz.0.638': attribute type 10 has an invalid length. [ 121.920645][ T6626] netlink: 'syz.0.639': attribute type 10 has an invalid length. [ 121.956386][ T6627] netlink: 'syz.0.640': attribute type 10 has an invalid length. [ 121.978509][ T6628] netlink: 'syz.0.641': attribute type 10 has an invalid length. [ 122.000482][ T6629] netlink: 'syz.0.642': attribute type 10 has an invalid length. [ 122.026074][ T6630] netlink: 'syz.0.643': attribute type 10 has an invalid length. [ 122.055747][ T6631] netlink: 'syz.0.644': attribute type 10 has an invalid length. [ 122.077314][ T6632] netlink: 'syz.0.645': attribute type 10 has an invalid length. [ 122.103463][ T6633] netlink: 'syz.0.646': attribute type 10 has an invalid length. [ 122.174087][ T5852] Bluetooth: hci1: command tx timeout [ 124.254599][ T5852] Bluetooth: hci1: command tx timeout [ 126.333675][ T5852] Bluetooth: hci1: command tx timeout [ 126.881593][ T6881] validate_nla: 247 callbacks suppressed [ 126.881606][ T6881] netlink: 'syz.0.894': attribute type 10 has an invalid length. [ 126.917954][ T6882] netlink: 'syz.0.895': attribute type 10 has an invalid length. 2025/07/09 01:55:56 executed programs: 882 [ 126.939408][ T6883] netlink: 'syz.0.896': attribute type 10 has an invalid length. [ 126.979206][ T6884] netlink: 'syz.0.897': attribute type 10 has an invalid length. [ 127.000874][ T6885] netlink: 'syz.0.898': attribute type 10 has an invalid length. [ 127.029803][ T6886] netlink: 'syz.0.899': attribute type 10 has an invalid length. [ 127.056540][ T6887] netlink: 'syz.0.900': attribute type 10 has an invalid length. [ 127.081201][ T6888] netlink: 'syz.0.901': attribute type 10 has an invalid length. [ 127.117241][ T6889] netlink: 'syz.0.902': attribute type 10 has an invalid length. [ 127.143005][ T6890] netlink: 'syz.0.903': attribute type 10 has an invalid length.