Warning: Permanently added '10.128.10.35' (ED25519) to the list of known hosts. 2025/06/20 08:47:48 ignoring optional flag "sandboxArg"="0" 2025/06/20 08:47:49 parsed 1 programs [ 316.341134][ T5876] cgroup: Unknown subsys name 'net' [ 316.438503][ T5876] cgroup: Unknown subsys name 'cpuset' [ 316.449012][ T5876] cgroup: Unknown subsys name 'rlimit' [ 317.288451][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.295110][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.174403][ T5876] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 321.232191][ T5887] chnl_net:caif_netlink_parms(): no params data found [ 321.324055][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.331856][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.339453][ T5887] bridge_slave_0: entered allmulticast mode [ 321.347015][ T5887] bridge_slave_0: entered promiscuous mode [ 321.356770][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.364641][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.371852][ T5887] bridge_slave_1: entered allmulticast mode [ 321.379341][ T5887] bridge_slave_1: entered promiscuous mode [ 321.413996][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.427097][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.463578][ T5887] team0: Port device team_slave_0 added [ 321.472773][ T5887] team0: Port device team_slave_1 added [ 321.504839][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.511866][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.538391][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.551548][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.559076][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.585246][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.633876][ T5887] hsr_slave_0: entered promiscuous mode [ 321.640897][ T5887] hsr_slave_1: entered promiscuous mode [ 321.804983][ T5887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.817880][ T5887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 321.828690][ T5887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 321.839436][ T5887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 321.869050][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.876396][ T5887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.884557][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.891734][ T5887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.955793][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.974660][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.985097][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.002998][ T5887] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.018381][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.025577][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.039524][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.046746][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.249198][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.295600][ T5887] veth0_vlan: entered promiscuous mode [ 322.308562][ T5887] veth1_vlan: entered promiscuous mode [ 322.341202][ T5887] veth0_macvtap: entered promiscuous mode [ 322.351401][ T5887] veth1_macvtap: entered promiscuous mode [ 322.372169][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.389171][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.402049][ T5887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.411461][ T5887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.420593][ T5887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.430210][ T5887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.505655][ T5887] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 322.632775][ T1140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.680065][ T1140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.749920][ T1140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.832063][ T1140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.094096][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.103608][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.112148][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.121323][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.134048][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.453811][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.464337][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.496361][ T3957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.504807][ T3957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.663916][ T1140] bridge_slave_1: left allmulticast mode [ 325.671503][ T1140] bridge_slave_1: left promiscuous mode [ 325.679193][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.696577][ T1140] bridge_slave_0: left allmulticast mode [ 325.702305][ T1140] bridge_slave_0: left promiscuous mode [ 325.710415][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.963911][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.976906][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.987780][ T1140] bond0 (unregistering): Released all slaves [ 326.126681][ T1140] hsr_slave_0: left promiscuous mode [ 326.152862][ T1140] hsr_slave_1: left promiscuous mode [ 326.168628][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.179624][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.196575][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.204053][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.272074][ T1140] veth1_macvtap: left promiscuous mode [ 326.279094][ T1140] veth0_macvtap: left promiscuous mode [ 326.285242][ T1140] veth1_vlan: left promiscuous mode [ 326.290756][ T1140] veth0_vlan: left promiscuous mode [ 326.765939][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 326.795741][ T1140] team0 (unregistering): Port device team_slave_0 removed 2025/06/20 08:48:06 executed programs: 0 [ 329.390837][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 329.401658][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 329.409873][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 329.419260][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 329.427155][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.776809][ T6016] chnl_net:caif_netlink_parms(): no params data found [ 329.901943][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.910784][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.919845][ T6016] bridge_slave_0: entered allmulticast mode [ 329.928829][ T6016] bridge_slave_0: entered promiscuous mode [ 329.939495][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.947137][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.955477][ T6016] bridge_slave_1: entered allmulticast mode [ 329.963598][ T6016] bridge_slave_1: entered promiscuous mode [ 330.012528][ T6016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.028227][ T6016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.079162][ T6016] team0: Port device team_slave_0 added [ 330.089470][ T6016] team0: Port device team_slave_1 added [ 330.134180][ T6016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.142305][ T6016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.170987][ T6016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.184203][ T6016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.192478][ T6016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.218626][ T6016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.287602][ T6016] hsr_slave_0: entered promiscuous mode [ 330.293946][ T6016] hsr_slave_1: entered promiscuous mode [ 330.838280][ T6016] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 330.851012][ T6016] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 330.865773][ T6016] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 330.879520][ T6016] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 331.000841][ T6016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.031451][ T6016] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.048059][ T3957] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.055409][ T3957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.075179][ T3957] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.082405][ T3957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.359529][ T6016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.412402][ T6016] veth0_vlan: entered promiscuous mode [ 331.431291][ T6016] veth1_vlan: entered promiscuous mode [ 331.445293][ T5154] Bluetooth: hci0: command tx timeout [ 331.471460][ T6016] veth0_macvtap: entered promiscuous mode [ 331.484084][ T6016] veth1_macvtap: entered promiscuous mode [ 331.510771][ T6016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.530231][ T6016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.549872][ T6016] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.561633][ T6016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.572337][ T6016] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.582409][ T6016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.685996][ T3957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.698862][ T3957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.733848][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.743853][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.819202][ T6072] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 331.862366][ T6072] team0: Port device wlan1 added [ 331.873512][ T6072] syz.0.16 (6072) used greatest stack depth: 20008 bytes left [ 331.912228][ T6074] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 331.999554][ T6076] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 332.059280][ T6080] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 332.093147][ T6081] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 332.133026][ T6082] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 332.183891][ T6085] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 332.231546][ T6086] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 332.272046][ T6088] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 332.350750][ T6091] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 333.526437][ T5154] Bluetooth: hci0: command tx timeout 2025/06/20 08:48:11 executed programs: 65 [ 335.605107][ T5154] Bluetooth: hci0: command tx timeout [ 336.851820][ T6321] validate_nla: 173 callbacks suppressed [ 336.851835][ T6321] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 336.878974][ T6322] netlink: 'syz.0.200': attribute type 10 has an invalid length. [ 336.902106][ T6323] netlink: 'syz.0.201': attribute type 10 has an invalid length. [ 336.928247][ T6324] netlink: 'syz.0.202': attribute type 10 has an invalid length. [ 336.951679][ T6325] netlink: 'syz.0.203': attribute type 10 has an invalid length. [ 336.977033][ T6326] netlink: 'syz.0.204': attribute type 10 has an invalid length. [ 337.001400][ T6327] netlink: 'syz.0.205': attribute type 10 has an invalid length. [ 337.023339][ T6328] netlink: 'syz.0.206': attribute type 10 has an invalid length. [ 337.047247][ T6329] netlink: 'syz.0.207': attribute type 10 has an invalid length. [ 337.072228][ T6330] netlink: 'syz.0.208': attribute type 10 has an invalid length. [ 337.685033][ T5154] Bluetooth: hci0: command tx timeout 2025/06/20 08:48:16 executed programs: 307 [ 341.856960][ T6569] validate_nla: 238 callbacks suppressed [ 341.856975][ T6569] netlink: 'syz.0.447': attribute type 10 has an invalid length. [ 341.883884][ T6570] netlink: 'syz.0.448': attribute type 10 has an invalid length. [ 341.908595][ T6571] netlink: 'syz.0.449': attribute type 10 has an invalid length. [ 341.930504][ T6572] netlink: 'syz.0.450': attribute type 10 has an invalid length. [ 341.954558][ T6573] netlink: 'syz.0.451': attribute type 10 has an invalid length. [ 341.977262][ T6574] netlink: 'syz.0.452': attribute type 10 has an invalid length. [ 341.999259][ T6575] netlink: 'syz.0.453': attribute type 10 has an invalid length. [ 342.023166][ T6576] netlink: 'syz.0.454': attribute type 10 has an invalid length. [ 342.046823][ T6577] netlink: 'syz.0.455': attribute type 10 has an invalid length. [ 342.069861][ T6578] netlink: 'syz.0.456': attribute type 10 has an invalid length. 2025/06/20 08:48:21 executed programs: 558 [ 345.296699][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.305292][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.319375][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.332018][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.340352][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.511526][ T3957] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.536242][ T6739] chnl_net:caif_netlink_parms(): no params data found [ 345.570805][ T3957] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.648858][ T3957] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.664816][ T6739] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.671979][ T6739] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.679326][ T6739] bridge_slave_0: entered allmulticast mode [ 345.686669][ T6739] bridge_slave_0: entered promiscuous mode [ 345.697673][ T6739] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.704944][ T6739] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.712112][ T6739] bridge_slave_1: entered allmulticast mode [ 345.720290][ T6739] bridge_slave_1: entered promiscuous mode [ 345.737698][ T3957] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.779809][ T6739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.791884][ T6739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.833828][ T6739] team0: Port device team_slave_0 added [ 345.843107][ T6739] team0: Port device team_slave_1 added [ 345.901936][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.911454][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.937898][ T6739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.957888][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.965111][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.991950][ T6739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.024161][ T3957] bridge_slave_1: left allmulticast mode [ 346.030101][ T3957] bridge_slave_1: left promiscuous mode [ 346.036398][ T3957] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.047339][ T3957] bridge_slave_0: left allmulticast mode [ 346.053019][ T3957] bridge_slave_0: left promiscuous mode [ 346.060144][ T3957] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.305614][ T3957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.317383][ T3957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.327649][ T3957] bond0 (unregistering): Released all slaves [ 346.391058][ T6739] hsr_slave_0: entered promiscuous mode [ 346.398020][ T6739] hsr_slave_1: entered promiscuous mode [ 346.409018][ T6739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.417347][ T6739] Cannot create hsr debugfs directory [ 346.466187][ T3957] [ 346.468560][ T3957] ====================================================== [ 346.475615][ T3957] WARNING: possible circular locking dependency detected [ 346.482728][ T3957] 6.15.0-syzkaller-ge30329b8a647 #0 Not tainted [ 346.489057][ T3957] ------------------------------------------------------ [ 346.496075][ T3957] kworker/u8:7/3957 is trying to acquire lock: [ 346.502225][ T3957] ffff88802fe50e00 (team->team_lock_key){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 346.511648][ T3957] [ 346.511648][ T3957] but task is already holding lock: [ 346.519332][ T3957] ffff88802f918768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 346.529794][ T3957] [ 346.529794][ T3957] which lock already depends on the new lock. [ 346.529794][ T3957] [ 346.540205][ T3957] [ 346.540205][ T3957] the existing dependency chain (in reverse order) is: [ 346.549223][ T3957] [ 346.549223][ T3957] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 346.556982][ T3957] lock_acquire+0x120/0x360 [ 346.562030][ T3957] __mutex_lock+0x182/0xe80 [ 346.567073][ T3957] ieee80211_open+0xed/0x1f0 [ 346.572204][ T3957] __dev_open+0x46d/0x880 [ 346.577073][ T3957] netif_open+0xaa/0x170 [ 346.581856][ T3957] dev_open+0x125/0x260 [ 346.586568][ T3957] team_add_slave+0xb36/0x2840 [ 346.591868][ T3957] do_set_master+0x530/0x6d0 [ 346.596999][ T3957] do_setlink+0xcf0/0x41c0 [ 346.601950][ T3957] rtnl_newlink+0x160b/0x1c70 [ 346.607168][ T3957] rtnetlink_rcv_msg+0x7cc/0xb70 [ 346.612643][ T3957] netlink_rcv_skb+0x208/0x470 [ 346.617954][ T3957] netlink_unicast+0x75b/0x8d0 [ 346.623269][ T3957] netlink_sendmsg+0x805/0xb30 [ 346.628576][ T3957] __sock_sendmsg+0x21c/0x270 [ 346.633875][ T3957] ____sys_sendmsg+0x505/0x830 [ 346.639197][ T3957] ___sys_sendmsg+0x21f/0x2a0 [ 346.644406][ T3957] __x64_sys_sendmsg+0x19b/0x260 [ 346.649871][ T3957] do_syscall_64+0xfa/0x3b0 [ 346.654922][ T3957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.661449][ T3957] [ 346.661449][ T3957] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 346.669465][ T3957] validate_chain+0xb9b/0x2140 [ 346.674767][ T3957] __lock_acquire+0xab9/0xd20 [ 346.679980][ T3957] lock_acquire+0x120/0x360 [ 346.685022][ T3957] __mutex_lock+0x182/0xe80 [ 346.690070][ T3957] team_del_slave+0x32/0x1c0 [ 346.695190][ T3957] team_device_event+0x285/0xa20 [ 346.700694][ T3957] notifier_call_chain+0x1b3/0x3e0 [ 346.706335][ T3957] unregister_netdevice_many_notify+0x15d8/0x2320 [ 346.713289][ T3957] unregister_netdevice_queue+0x33c/0x380 [ 346.719539][ T3957] _cfg80211_unregister_wdev+0x165/0x590 [ 346.725741][ T3957] ieee80211_remove_interfaces+0x49a/0x6d0 [ 346.732090][ T3957] ieee80211_unregister_hw+0x5d/0x2c0 [ 346.738028][ T3957] mac80211_hwsim_del_radio+0x275/0x460 [ 346.744108][ T3957] hwsim_exit_net+0x584/0x640 [ 346.749330][ T3957] ops_undo_list+0x49a/0x990 [ 346.754452][ T3957] cleanup_net+0x4c5/0x800 [ 346.759395][ T3957] process_scheduled_works+0xae1/0x17b0 [ 346.765478][ T3957] worker_thread+0x8a0/0xda0 [ 346.770594][ T3957] kthread+0x70e/0x8a0 [ 346.775195][ T3957] ret_from_fork+0x3f9/0x770 [ 346.780321][ T3957] ret_from_fork_asm+0x1a/0x30 [ 346.785635][ T3957] [ 346.785635][ T3957] other info that might help us debug this: [ 346.785635][ T3957] [ 346.796083][ T3957] Possible unsafe locking scenario: [ 346.796083][ T3957] [ 346.803547][ T3957] CPU0 CPU1 [ 346.808915][ T3957] ---- ---- [ 346.814308][ T3957] lock(&rdev->wiphy.mtx); [ 346.818833][ T3957] lock(team->team_lock_key); [ 346.826131][ T3957] lock(&rdev->wiphy.mtx); [ 346.833169][ T3957] lock(team->team_lock_key); [ 346.837952][ T3957] [ 346.837952][ T3957] *** DEADLOCK *** [ 346.837952][ T3957] [ 346.846101][ T3957] 5 locks held by kworker/u8:7/3957: [ 346.851411][ T3957] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 346.862325][ T3957] #1: ffffc9000c817bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 346.872936][ T3957] #2: ffffffff8f502ad0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 346.882314][ T3957] #3: ffffffff8f50f6c8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 346.892187][ T3957] #4: ffff88802f918768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 346.903009][ T3957] [ 346.903009][ T3957] stack backtrace: [ 346.909025][ T3957] CPU: 0 UID: 0 PID: 3957 Comm: kworker/u8:7 Not tainted 6.15.0-syzkaller-ge30329b8a647 #0 PREEMPT(full) [ 346.909045][ T3957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 346.909056][ T3957] Workqueue: netns cleanup_net [ 346.909080][ T3957] Call Trace: [ 346.909090][ T3957] [ 346.909097][ T3957] dump_stack_lvl+0x189/0x250 [ 346.909125][ T3957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.909150][ T3957] ? __pfx__printk+0x10/0x10 [ 346.909167][ T3957] ? print_lock_name+0xde/0x100 [ 346.909184][ T3957] print_circular_bug+0x2ee/0x310 [ 346.909202][ T3957] check_noncircular+0x134/0x160 [ 346.909220][ T3957] validate_chain+0xb9b/0x2140 [ 346.909238][ T3957] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.909264][ T3957] __lock_acquire+0xab9/0xd20 [ 346.909289][ T3957] ? team_del_slave+0x32/0x1c0 [ 346.909303][ T3957] lock_acquire+0x120/0x360 [ 346.909325][ T3957] ? team_del_slave+0x32/0x1c0 [ 346.909341][ T3957] ? __mutex_trylock_common+0x153/0x260 [ 346.909359][ T3957] __mutex_lock+0x182/0xe80 [ 346.909381][ T3957] ? team_del_slave+0x32/0x1c0 [ 346.909395][ T3957] ? rcu_is_watching+0x15/0xb0 [ 346.909412][ T3957] ? team_del_slave+0x32/0x1c0 [ 346.909427][ T3957] ? __pfx___mutex_lock+0x10/0x10 [ 346.909449][ T3957] ? bond_netdev_event+0xd9/0xe80 [ 346.909468][ T3957] ? __pfx___mutex_lock+0x10/0x10 [ 346.909489][ T3957] ? __pfx_bond_netdev_event+0x10/0x10 [ 346.909509][ T3957] team_del_slave+0x32/0x1c0 [ 346.909525][ T3957] team_device_event+0x285/0xa20 [ 346.909547][ T3957] notifier_call_chain+0x1b3/0x3e0 [ 346.909564][ T3957] unregister_netdevice_many_notify+0x15d8/0x2320 [ 346.909592][ T3957] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 346.909613][ T3957] ? call_rcu+0x6dd/0x990 [ 346.909626][ T3957] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.909656][ T3957] unregister_netdevice_queue+0x33c/0x380 [ 346.909677][ T3957] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 346.909699][ T3957] _cfg80211_unregister_wdev+0x165/0x590 [ 346.909717][ T3957] ieee80211_remove_interfaces+0x49a/0x6d0 [ 346.909740][ T3957] ? __pfx_synchronize_rcu+0x10/0x10 [ 346.909757][ T3957] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 346.909781][ T3957] ? rcu_is_watching+0x15/0xb0 [ 346.909797][ T3957] ieee80211_unregister_hw+0x5d/0x2c0 [ 346.909817][ T3957] mac80211_hwsim_del_radio+0x275/0x460 [ 346.909837][ T3957] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 346.909859][ T3957] hwsim_exit_net+0x584/0x640 [ 346.909874][ T3957] ? __pfx_hwsim_exit_net+0x10/0x10 [ 346.909900][ T3957] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 346.909918][ T3957] ops_undo_list+0x49a/0x990 [ 346.909934][ T3957] ? __pfx_ops_undo_list+0x10/0x10 [ 346.909952][ T3957] cleanup_net+0x4c5/0x800 [ 346.909967][ T3957] ? __pfx_cleanup_net+0x10/0x10 [ 346.909982][ T3957] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.909999][ T3957] ? process_scheduled_works+0x9ef/0x17b0 [ 346.910029][ T3957] ? process_scheduled_works+0x9ef/0x17b0 [ 346.910053][ T3957] process_scheduled_works+0xae1/0x17b0 [ 346.910088][ T3957] ? __pfx_process_scheduled_works+0x10/0x10 [ 346.910118][ T3957] worker_thread+0x8a0/0xda0 [ 346.910133][ T3957] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 346.910155][ T3957] ? __kthread_parkme+0x7b/0x200 [ 346.910173][ T3957] kthread+0x70e/0x8a0 [ 346.910192][ T3957] ? __pfx_worker_thread+0x10/0x10 [ 346.910205][ T3957] ? __pfx_kthread+0x10/0x10 [ 346.910223][ T3957] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.910240][ T3957] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.910259][ T3957] ? __pfx_kthread+0x10/0x10 [ 346.910276][ T3957] ret_from_fork+0x3f9/0x770 [ 346.910300][ T3957] ? __pfx_ret_from_fork+0x10/0x10 [ 346.910324][ T3957] ? __switch_to_asm+0x39/0x70 [ 346.910340][ T3957] ? __switch_to_asm+0x33/0x70 [ 346.910355][ T3957] ? __pfx_kthread+0x10/0x10 [ 346.910372][ T3957] ret_from_fork_asm+0x1a/0x30 [ 346.910394][ T3957] [ 347.281176][ T3957] team0: Port device wlan1 removed [ 347.366122][ T5154] Bluetooth: hci0: command tx timeout [ 347.385257][ T3957] hsr_slave_0: left promiscuous mode [ 347.391303][ T3957] hsr_slave_1: left promiscuous mode [ 347.397820][ T3957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.408506][ T3957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.417964][ T3957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.426484][ T3957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.437664][ T3957] veth1_macvtap: left promiscuous mode [ 347.443411][ T3957] veth0_macvtap: left promiscuous mode [ 347.450128][ T3957] veth1_vlan: left promiscuous mode [ 347.456458][ T3957] veth0_vlan: left promiscuous mode [ 347.657666][ T3957] team0 (unregistering): Port device team_slave_1 removed [ 347.679547][ T3957] team0 (unregistering): Port device team_slave_0 removed [ 348.108473][ T6739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 348.118477][ T6739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 348.128038][ T6739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 348.137697][ T6739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.200790][ T6739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.221328][ T6739] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.232979][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.240173][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.252576][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.259732][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.430258][ T6739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.471791][ T6739] veth0_vlan: entered promiscuous mode [ 348.483273][ T6739] veth1_vlan: entered promiscuous mode [ 348.512234][ T6739] veth0_macvtap: entered promiscuous mode [ 348.522465][ T6739] veth1_macvtap: entered promiscuous mode [ 348.540515][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.554091][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.567414][ T6739] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.577847][ T6739] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.587825][ T6739] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.597070][ T6739] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.635588][ T6739] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 348.662637][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.668917][ T6739] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 348.674315][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.706106][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.714014][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.755079][ T6798] validate_nla: 159 callbacks suppressed [ 348.755100][ T6798] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 348.775572][ T6798] team0: Port device wlan1 added [ 348.797856][ T6802] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 348.830102][ T6804] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 348.853352][ T6806] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 348.878428][ T6807] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 348.900810][ T6811] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 348.922282][ T6812] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 348.948478][ T6814] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 348.969607][ T6816] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 348.994188][ T6817] netlink: 'syz.0.625': attribute type 10 has an invalid length. 2025/06/20 08:48:26 executed programs: 631 [ 349.445154][ T5154] Bluetooth: hci0: command tx timeout [ 351.534422][ T5154] Bluetooth: hci0: command tx timeout [ 353.614386][ T5154] Bluetooth: hci0: command tx timeout [ 353.771335][ T7125] validate_nla: 279 callbacks suppressed [ 353.771353][ T7125] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 353.794649][ T7126] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 353.811690][ T7127] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 353.829864][ T7128] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 353.869037][ T7129] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 353.887602][ T7130] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 353.904966][ T7131] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 353.929542][ T7132] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 353.947501][ T7133] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 353.965150][ T7134] netlink: 'syz.0.914': attribute type 10 has an invalid length. 2025/06/20 08:48:31 executed programs: 926