Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. 2025/06/13 17:14:00 ignoring optional flag "sandboxArg"="0" 2025/06/13 17:14:01 parsed 1 programs [ 323.194016][ T5880] cgroup: Unknown subsys name 'net' [ 323.344561][ T5880] cgroup: Unknown subsys name 'cpuset' [ 323.354248][ T5880] cgroup: Unknown subsys name 'rlimit' [ 324.961662][ T5880] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 327.839168][ T5886] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 328.885584][ T5903] chnl_net:caif_netlink_parms(): no params data found [ 328.974832][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.982469][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.989775][ T5903] bridge_slave_0: entered allmulticast mode [ 328.996993][ T5903] bridge_slave_0: entered promiscuous mode [ 329.006314][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.013569][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.021184][ T5903] bridge_slave_1: entered allmulticast mode [ 329.028222][ T5903] bridge_slave_1: entered promiscuous mode [ 329.059955][ T5903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.071921][ T5903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.105846][ T5903] team0: Port device team_slave_0 added [ 329.113651][ T5903] team0: Port device team_slave_1 added [ 329.142935][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.150140][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.176730][ T5903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.191202][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.198174][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.224142][ T5903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.271696][ T5903] hsr_slave_0: entered promiscuous mode [ 329.278097][ T5903] hsr_slave_1: entered promiscuous mode [ 329.431471][ T5903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 329.442696][ T5903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 329.453576][ T5903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 329.463567][ T5903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 329.494434][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.501810][ T5903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.509671][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.516768][ T5903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.573593][ T5903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.590633][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.598836][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.617706][ T5903] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.631156][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.638258][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.651949][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.659092][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.844592][ T5903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.888763][ T5903] veth0_vlan: entered promiscuous mode [ 329.901055][ T5903] veth1_vlan: entered promiscuous mode [ 329.932662][ T5903] veth0_macvtap: entered promiscuous mode [ 329.942357][ T5903] veth1_macvtap: entered promiscuous mode [ 329.959090][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.977605][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.992252][ T5903] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.001996][ T5903] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.011175][ T5903] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.020389][ T5903] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.147144][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.223181][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.284513][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.300536][ T3441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.308467][ T3441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.349142][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.370925][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.379038][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.112437][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.121150][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.128624][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.137346][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.145416][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/06/13 17:14:14 executed programs: 0 [ 332.831960][ T12] bridge_slave_1: left allmulticast mode [ 332.837768][ T12] bridge_slave_1: left promiscuous mode [ 332.863248][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.875788][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.877788][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.892146][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.907251][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.915839][ T12] bridge_slave_0: left allmulticast mode [ 332.922012][ T12] bridge_slave_0: left promiscuous mode [ 332.928511][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.936110][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.297500][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.309762][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.320488][ T12] bond0 (unregistering): Released all slaves [ 333.455307][ T12] hsr_slave_0: left promiscuous mode [ 333.461753][ T12] hsr_slave_1: left promiscuous mode [ 333.467764][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.476366][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.486272][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.494783][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.512461][ T12] veth1_macvtap: left promiscuous mode [ 333.518070][ T12] veth0_macvtap: left promiscuous mode [ 333.524370][ T12] veth1_vlan: left promiscuous mode [ 333.529988][ T12] veth0_vlan: left promiscuous mode [ 333.817248][ T12] team0 (unregistering): Port device team_slave_1 removed [ 333.843582][ T12] team0 (unregistering): Port device team_slave_0 removed [ 334.258923][ T5982] chnl_net:caif_netlink_parms(): no params data found [ 334.518287][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.525792][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.538447][ T5982] bridge_slave_0: entered allmulticast mode [ 334.546513][ T5982] bridge_slave_0: entered promiscuous mode [ 334.557276][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.564885][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.572815][ T5982] bridge_slave_1: entered allmulticast mode [ 334.580540][ T5982] bridge_slave_1: entered promiscuous mode [ 334.652012][ T5982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.667521][ T5982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.009650][ T5156] Bluetooth: hci0: command tx timeout [ 335.228773][ T5982] team0: Port device team_slave_0 added [ 335.281704][ T5982] team0: Port device team_slave_1 added [ 335.499340][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.515835][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.553383][ T5982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.566697][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.573869][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.600682][ T5982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.722121][ T5982] hsr_slave_0: entered promiscuous mode [ 335.728936][ T5982] hsr_slave_1: entered promiscuous mode [ 336.475539][ T5982] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 336.488583][ T5982] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 336.500722][ T5982] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 336.513089][ T5982] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 336.628716][ T5982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.660877][ T5982] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.675165][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.682389][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.699907][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.707083][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.968794][ T5982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.026553][ T5982] veth0_vlan: entered promiscuous mode [ 337.042666][ T5982] veth1_vlan: entered promiscuous mode [ 337.079899][ T5156] Bluetooth: hci0: command tx timeout [ 337.088049][ T5982] veth0_macvtap: entered promiscuous mode [ 337.102716][ T5982] veth1_macvtap: entered promiscuous mode [ 337.124557][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.141987][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.155962][ T5982] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.168288][ T5982] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.178085][ T5982] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.188298][ T5982] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.274646][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.292489][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.328060][ T5927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.340198][ T5927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.398619][ T6072] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 337.426112][ T6072] team0: Port device wlan1 added [ 337.455864][ T6074] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 337.498419][ T6075] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 337.536010][ T6077] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 337.576988][ T6079] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 337.611613][ T6082] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 337.657884][ T6083] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 337.693805][ T6086] netlink: 'syz.0.23': attribute type 10 has an invalid length. 2025/06/13 17:14:19 executed programs: 11 [ 337.734146][ T6087] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 337.763767][ T6090] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 339.159653][ T5156] Bluetooth: hci0: command tx timeout [ 341.240674][ T5156] Bluetooth: hci0: command tx timeout [ 342.405966][ T6359] validate_nla: 224 callbacks suppressed [ 342.405979][ T6359] netlink: 'syz.0.250': attribute type 10 has an invalid length. [ 342.434964][ T6360] netlink: 'syz.0.251': attribute type 10 has an invalid length. [ 342.457214][ T6361] netlink: 'syz.0.252': attribute type 10 has an invalid length. [ 342.486505][ T6362] netlink: 'syz.0.253': attribute type 10 has an invalid length. [ 342.509459][ T6363] netlink: 'syz.0.254': attribute type 10 has an invalid length. [ 342.531886][ T6364] netlink: 'syz.0.255': attribute type 10 has an invalid length. [ 342.552819][ T6365] netlink: 'syz.0.256': attribute type 10 has an invalid length. [ 342.573515][ T6366] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 342.597230][ T6367] netlink: 'syz.0.258': attribute type 10 has an invalid length. [ 342.622334][ T6368] netlink: 'syz.0.259': attribute type 10 has an invalid length. 2025/06/13 17:14:24 executed programs: 254 [ 347.417534][ T6618] validate_nla: 249 callbacks suppressed [ 347.417547][ T6618] netlink: 'syz.0.509': attribute type 10 has an invalid length. [ 347.450502][ T6619] netlink: 'syz.0.510': attribute type 10 has an invalid length. [ 347.472323][ T6620] netlink: 'syz.0.511': attribute type 10 has an invalid length. [ 347.492020][ T6621] netlink: 'syz.0.512': attribute type 10 has an invalid length. [ 347.516087][ T6622] netlink: 'syz.0.513': attribute type 10 has an invalid length. [ 347.538780][ T6623] netlink: 'syz.0.514': attribute type 10 has an invalid length. [ 347.558831][ T6624] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 347.582629][ T6625] netlink: 'syz.0.516': attribute type 10 has an invalid length. [ 347.605157][ T6626] netlink: 'syz.0.517': attribute type 10 has an invalid length. [ 347.628844][ T6627] netlink: 'syz.0.518': attribute type 10 has an invalid length. 2025/06/13 17:14:29 executed programs: 514 [ 349.498900][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.507015][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.521060][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.530326][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.538073][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.671067][ T993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.741512][ T993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.760411][ T6728] chnl_net:caif_netlink_parms(): no params data found [ 349.815406][ T993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.858539][ T6728] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.866151][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.874504][ T6728] bridge_slave_0: entered allmulticast mode [ 349.881749][ T6728] bridge_slave_0: entered promiscuous mode [ 349.899753][ T993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.913631][ T6728] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.920951][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.928074][ T6728] bridge_slave_1: entered allmulticast mode [ 349.936024][ T6728] bridge_slave_1: entered promiscuous mode [ 349.969704][ T6728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.982442][ T6728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.029959][ T6728] team0: Port device team_slave_0 added [ 350.049870][ T6728] team0: Port device team_slave_1 added [ 350.116043][ T6728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.123579][ T6728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.149678][ T6728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.163392][ T6728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.170555][ T6728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.198898][ T6728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.212960][ T993] bridge_slave_1: left allmulticast mode [ 350.218643][ T993] bridge_slave_1: left promiscuous mode [ 350.225800][ T993] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.237741][ T993] bridge_slave_0: left allmulticast mode [ 350.243903][ T993] bridge_slave_0: left promiscuous mode [ 350.251741][ T993] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.565782][ T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.581437][ T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.593326][ T993] bond0 (unregistering): Released all slaves [ 350.714468][ T6728] hsr_slave_0: entered promiscuous mode [ 350.723008][ T6728] hsr_slave_1: entered promiscuous mode [ 350.730347][ T6728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.738133][ T6728] Cannot create hsr debugfs directory [ 350.752371][ T993] [ 350.754743][ T993] ====================================================== [ 350.761783][ T993] WARNING: possible circular locking dependency detected [ 350.768828][ T993] 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 Not tainted [ 350.775936][ T993] ------------------------------------------------------ [ 350.782947][ T993] kworker/u8:5/993 is trying to acquire lock: [ 350.789005][ T993] ffff888028b74e00 (team->team_lock_key){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 350.798431][ T993] [ 350.798431][ T993] but task is already holding lock: [ 350.805794][ T993] ffff888079c08768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 350.816146][ T993] [ 350.816146][ T993] which lock already depends on the new lock. [ 350.816146][ T993] [ 350.826553][ T993] [ 350.826553][ T993] the existing dependency chain (in reverse order) is: [ 350.835560][ T993] [ 350.835560][ T993] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 350.843299][ T993] lock_acquire+0x120/0x360 [ 350.848350][ T993] __mutex_lock+0x182/0xe80 [ 350.853374][ T993] ieee80211_open+0xed/0x1f0 [ 350.858491][ T993] __dev_open+0x470/0x880 [ 350.863348][ T993] netif_open+0xaa/0x170 [ 350.868111][ T993] dev_open+0x125/0x260 [ 350.872792][ T993] team_add_slave+0xb36/0x2840 [ 350.878071][ T993] do_set_master+0x530/0x6d0 [ 350.883177][ T993] do_setlink+0xcf0/0x41c0 [ 350.888114][ T993] rtnl_newlink+0x160b/0x1c70 [ 350.893310][ T993] rtnetlink_rcv_msg+0x7cc/0xb70 [ 350.898780][ T993] netlink_rcv_skb+0x208/0x470 [ 350.904069][ T993] netlink_unicast+0x75b/0x8d0 [ 350.909370][ T993] netlink_sendmsg+0x805/0xb30 [ 350.914652][ T993] __sock_sendmsg+0x219/0x270 [ 350.919868][ T993] ____sys_sendmsg+0x505/0x830 [ 350.925190][ T993] ___sys_sendmsg+0x21f/0x2a0 [ 350.930391][ T993] __x64_sys_sendmsg+0x19b/0x260 [ 350.935851][ T993] do_syscall_64+0xfa/0x3b0 [ 350.940878][ T993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.947287][ T993] [ 350.947287][ T993] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 350.955412][ T993] validate_chain+0xb9b/0x2140 [ 350.960710][ T993] __lock_acquire+0xab9/0xd20 [ 350.965913][ T993] lock_acquire+0x120/0x360 [ 350.970938][ T993] __mutex_lock+0x182/0xe80 [ 350.975958][ T993] team_del_slave+0x32/0x1c0 [ 350.981097][ T993] team_device_event+0x285/0xa20 [ 350.986575][ T993] notifier_call_chain+0x1b3/0x3e0 [ 350.992215][ T993] unregister_netdevice_many_notify+0x15d8/0x2320 [ 350.999151][ T993] unregister_netdevice_queue+0x33c/0x380 [ 351.005407][ T993] _cfg80211_unregister_wdev+0x165/0x590 [ 351.011555][ T993] ieee80211_remove_interfaces+0x49a/0x6d0 [ 351.017872][ T993] ieee80211_unregister_hw+0x5d/0x2c0 [ 351.023765][ T993] mac80211_hwsim_del_radio+0x275/0x460 [ 351.029833][ T993] hwsim_exit_net+0x584/0x640 [ 351.035034][ T993] ops_undo_list+0x49a/0x990 [ 351.040144][ T993] cleanup_net+0x4c5/0x800 [ 351.045078][ T993] process_scheduled_works+0xae1/0x17b0 [ 351.051147][ T993] worker_thread+0x8a0/0xda0 [ 351.056251][ T993] kthread+0x70e/0x8a0 [ 351.060839][ T993] ret_from_fork+0x3fc/0x770 [ 351.065945][ T993] ret_from_fork_asm+0x1a/0x30 [ 351.071227][ T993] [ 351.071227][ T993] other info that might help us debug this: [ 351.071227][ T993] [ 351.081445][ T993] Possible unsafe locking scenario: [ 351.081445][ T993] [ 351.088885][ T993] CPU0 CPU1 [ 351.094245][ T993] ---- ---- [ 351.099613][ T993] lock(&rdev->wiphy.mtx); [ 351.104124][ T993] lock(team->team_lock_key); [ 351.111428][ T993] lock(&rdev->wiphy.mtx); [ 351.118451][ T993] lock(team->team_lock_key); [ 351.123225][ T993] [ 351.123225][ T993] *** DEADLOCK *** [ 351.123225][ T993] [ 351.131378][ T993] 5 locks held by kworker/u8:5/993: [ 351.136567][ T993] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 351.147453][ T993] #1: ffffc9000393fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 351.157985][ T993] #2: ffffffff8f503510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 351.167309][ T993] #3: ffffffff8f510108 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 351.177179][ T993] #4: ffff888079c08768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 351.187981][ T993] [ 351.187981][ T993] stack backtrace: [ 351.193876][ T993] CPU: 1 UID: 0 PID: 993 Comm: kworker/u8:5 Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 351.193892][ T993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.193902][ T993] Workqueue: netns cleanup_net [ 351.193924][ T993] Call Trace: [ 351.193930][ T993] [ 351.193936][ T993] dump_stack_lvl+0x189/0x250 [ 351.193960][ T993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.193980][ T993] ? __pfx__printk+0x10/0x10 [ 351.193994][ T993] ? print_lock_name+0xde/0x100 [ 351.194008][ T993] print_circular_bug+0x2ee/0x310 [ 351.194023][ T993] check_noncircular+0x134/0x160 [ 351.194038][ T993] validate_chain+0xb9b/0x2140 [ 351.194052][ T993] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.194093][ T993] __lock_acquire+0xab9/0xd20 [ 351.194116][ T993] ? team_del_slave+0x32/0x1c0 [ 351.194128][ T993] lock_acquire+0x120/0x360 [ 351.194147][ T993] ? team_del_slave+0x32/0x1c0 [ 351.194162][ T993] ? __mutex_trylock_common+0x153/0x260 [ 351.194178][ T993] __mutex_lock+0x182/0xe80 [ 351.194191][ T993] ? team_del_slave+0x32/0x1c0 [ 351.194204][ T993] ? rcu_is_watching+0x15/0xb0 [ 351.194229][ T993] ? team_del_slave+0x32/0x1c0 [ 351.194242][ T993] ? __pfx___mutex_lock+0x10/0x10 [ 351.194255][ T993] ? bond_netdev_event+0xd9/0xe80 [ 351.194272][ T993] ? __pfx___mutex_lock+0x10/0x10 [ 351.194284][ T993] ? __pfx_bond_netdev_event+0x10/0x10 [ 351.194322][ T993] team_del_slave+0x32/0x1c0 [ 351.194336][ T993] team_device_event+0x285/0xa20 [ 351.194355][ T993] notifier_call_chain+0x1b3/0x3e0 [ 351.194380][ T993] unregister_netdevice_many_notify+0x15d8/0x2320 [ 351.194408][ T993] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 351.194430][ T993] ? call_rcu+0x6dd/0x990 [ 351.194443][ T993] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.194472][ T993] unregister_netdevice_queue+0x33c/0x380 [ 351.194494][ T993] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 351.194518][ T993] _cfg80211_unregister_wdev+0x165/0x590 [ 351.194537][ T993] ieee80211_remove_interfaces+0x49a/0x6d0 [ 351.194552][ T993] ? __pfx_synchronize_rcu+0x10/0x10 [ 351.194566][ T993] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 351.194580][ T993] ? rcu_is_watching+0x15/0xb0 [ 351.194604][ T993] ieee80211_unregister_hw+0x5d/0x2c0 [ 351.194626][ T993] mac80211_hwsim_del_radio+0x275/0x460 [ 351.194644][ T993] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 351.194663][ T993] hwsim_exit_net+0x584/0x640 [ 351.194686][ T993] ? __pfx_hwsim_exit_net+0x10/0x10 [ 351.194708][ T993] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 351.194728][ T993] ops_undo_list+0x49a/0x990 [ 351.194746][ T993] ? __pfx_ops_undo_list+0x10/0x10 [ 351.194765][ T993] cleanup_net+0x4c5/0x800 [ 351.194782][ T993] ? __pfx_cleanup_net+0x10/0x10 [ 351.194798][ T993] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.194818][ T993] ? process_scheduled_works+0x9ef/0x17b0 [ 351.194839][ T993] ? process_scheduled_works+0x9ef/0x17b0 [ 351.194860][ T993] process_scheduled_works+0xae1/0x17b0 [ 351.194891][ T993] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.194917][ T993] worker_thread+0x8a0/0xda0 [ 351.194930][ T993] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 351.194953][ T993] ? __kthread_parkme+0x7b/0x200 [ 351.194969][ T993] kthread+0x70e/0x8a0 [ 351.194985][ T993] ? __pfx_worker_thread+0x10/0x10 [ 351.195007][ T993] ? __pfx_kthread+0x10/0x10 [ 351.195022][ T993] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.195041][ T993] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.195061][ T993] ? __pfx_kthread+0x10/0x10 [ 351.195077][ T993] ret_from_fork+0x3fc/0x770 [ 351.195098][ T993] ? __pfx_ret_from_fork+0x10/0x10 [ 351.195120][ T993] ? __switch_to_asm+0x39/0x70 [ 351.195134][ T993] ? __switch_to_asm+0x33/0x70 [ 351.195148][ T993] ? __pfx_kthread+0x10/0x10 [ 351.195163][ T993] ret_from_fork_asm+0x1a/0x30 [ 351.195183][ T993] [ 351.560231][ T5156] Bluetooth: hci0: command tx timeout [ 351.574273][ T993] team0: Port device wlan1 removed [ 351.699020][ T993] hsr_slave_0: left promiscuous mode [ 351.705598][ T993] hsr_slave_1: left promiscuous mode [ 351.713997][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.721526][ T993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.729837][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.737260][ T993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.749711][ T993] veth1_macvtap: left promiscuous mode [ 351.755267][ T993] veth0_macvtap: left promiscuous mode [ 351.761006][ T993] veth1_vlan: left promiscuous mode [ 351.766299][ T993] veth0_vlan: left promiscuous mode [ 351.939906][ T993] team0 (unregistering): Port device team_slave_1 removed [ 351.961357][ T993] team0 (unregistering): Port device team_slave_0 removed [ 352.330041][ T6728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 352.349936][ T6728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 352.362973][ T6728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 352.373154][ T6728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 352.456178][ T6728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.474956][ T6728] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.485879][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.493045][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.516952][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.524100][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.666050][ T6728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.701435][ T6728] veth0_vlan: entered promiscuous mode [ 352.714064][ T6728] veth1_vlan: entered promiscuous mode [ 352.740623][ T6728] veth0_macvtap: entered promiscuous mode [ 352.750113][ T6728] veth1_macvtap: entered promiscuous mode [ 352.766327][ T6728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.778855][ T6728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.792060][ T6728] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.801707][ T6728] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.811576][ T6728] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.820538][ T6728] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.851326][ T6728] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 352.877702][ T6012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.887575][ T6728] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 352.899569][ T6012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/06/13 17:14:34 executed programs: 602 [ 352.926143][ T6012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.935313][ T6012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.977743][ T6805] validate_nla: 97 callbacks suppressed [ 352.977761][ T6805] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 353.000357][ T6805] team0: Port device wlan1 added [ 353.020107][ T6809] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 353.043276][ T6811] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 353.067940][ T6813] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 353.087644][ T6814] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 353.116806][ T6817] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 353.136870][ T6819] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 353.161156][ T6821] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 353.183588][ T6823] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 353.206531][ T6824] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 353.639459][ T5156] Bluetooth: hci0: command tx timeout [ 355.719429][ T5156] Bluetooth: hci0: command tx timeout [ 357.799756][ T5156] Bluetooth: hci0: command tx timeout 2025/06/13 17:14:40 executed programs: 892 [ 357.990551][ T7121] validate_nla: 280 callbacks suppressed [ 357.990571][ T7121] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 358.013473][ T7122] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 358.030691][ T7123] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 358.048510][ T7124] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 358.073671][ T7125] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 358.090312][ T7126] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 358.107654][ T7127] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 358.134026][ T7128] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 358.150946][ T7129] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 358.167318][ T7130] netlink: 'syz.0.915': attribute type 10 has an invalid length.