Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. 2025/05/22 09:26:03 ignoring optional flag "sandboxArg"="0" 2025/05/22 09:26:04 parsed 1 programs [ 104.485822][ T5842] cgroup: Unknown subsys name 'net' [ 104.614990][ T5842] cgroup: Unknown subsys name 'cpuset' [ 104.624416][ T5842] cgroup: Unknown subsys name 'rlimit' [ 106.227936][ T5842] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.280146][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.677062][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.690990][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.716596][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.726820][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.988787][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 111.109276][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.117082][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.124597][ T5883] bridge_slave_0: entered allmulticast mode [ 111.135155][ T5883] bridge_slave_0: entered promiscuous mode [ 111.146678][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.154291][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.161631][ T5883] bridge_slave_1: entered allmulticast mode [ 111.168866][ T5883] bridge_slave_1: entered promiscuous mode [ 111.221908][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.236382][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.299507][ T5883] team0: Port device team_slave_0 added [ 111.310363][ T5883] team0: Port device team_slave_1 added [ 111.354096][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.361261][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.387634][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.402221][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.409179][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.435279][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.487167][ T5883] hsr_slave_0: entered promiscuous mode [ 111.494270][ T5883] hsr_slave_1: entered promiscuous mode [ 111.641749][ T5883] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.654252][ T5883] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.665090][ T5883] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.675584][ T5883] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.706410][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.713673][ T5883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.721724][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.728858][ T5883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.742843][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.752723][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.813612][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.836806][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.848514][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.855677][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.871548][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.878768][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.068706][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.116182][ T5883] veth0_vlan: entered promiscuous mode [ 112.128375][ T5883] veth1_vlan: entered promiscuous mode [ 112.164984][ T5883] veth0_macvtap: entered promiscuous mode [ 112.175024][ T5883] veth1_macvtap: entered promiscuous mode [ 112.192972][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.208332][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.222949][ T5883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.233505][ T5883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.242801][ T5883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.251720][ T5883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.372729][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.455372][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.542136][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.617298][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.682255][ T5925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.691134][ T5925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.698778][ T5925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.708003][ T5925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.718208][ T5925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/05/22 09:26:17 executed programs: 0 [ 114.277650][ T5925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.285430][ T5925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.294379][ T5925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.303302][ T5925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.312021][ T5925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.476074][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 114.560986][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.568199][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.575533][ T5935] bridge_slave_0: entered allmulticast mode [ 114.582854][ T5935] bridge_slave_0: entered promiscuous mode [ 114.591813][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.599527][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.607815][ T5935] bridge_slave_1: entered allmulticast mode [ 114.615762][ T5935] bridge_slave_1: entered promiscuous mode [ 114.697280][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.713924][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.751065][ T36] bridge_slave_1: left allmulticast mode [ 114.756848][ T36] bridge_slave_1: left promiscuous mode [ 114.763754][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.774494][ T36] bridge_slave_0: left allmulticast mode [ 114.780136][ T36] bridge_slave_0: left promiscuous mode [ 114.787120][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.993048][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.004115][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.014360][ T36] bond0 (unregistering): Released all slaves [ 115.031955][ T5935] team0: Port device team_slave_0 added [ 115.043865][ T5935] team0: Port device team_slave_1 added [ 115.084021][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.091304][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.118002][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.135777][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.142846][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.169178][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.185860][ T36] hsr_slave_0: left promiscuous mode [ 115.191910][ T36] hsr_slave_1: left promiscuous mode [ 115.197806][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.205844][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.213977][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.221900][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.238750][ T36] veth1_macvtap: left promiscuous mode [ 115.248220][ T36] veth0_macvtap: left promiscuous mode [ 115.253938][ T36] veth1_vlan: left promiscuous mode [ 115.259321][ T36] veth0_vlan: left promiscuous mode [ 115.549917][ T36] team0 (unregistering): Port device team_slave_1 removed [ 115.576364][ T36] team0 (unregistering): Port device team_slave_0 removed [ 115.858500][ T5935] hsr_slave_0: entered promiscuous mode [ 115.865871][ T5935] hsr_slave_1: entered promiscuous mode [ 116.361822][ T5141] Bluetooth: hci0: command tx timeout [ 116.780355][ T5935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.805160][ T5935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.831312][ T5935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.849471][ T5935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.980466][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.008144][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.024339][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.031557][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.048478][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.055685][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.519480][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.577619][ T5935] veth0_vlan: entered promiscuous mode [ 117.595961][ T5935] veth1_vlan: entered promiscuous mode [ 117.631560][ T5935] veth0_macvtap: entered promiscuous mode [ 117.643623][ T5935] veth1_macvtap: entered promiscuous mode [ 117.666547][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.683870][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.699775][ T5935] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.710868][ T5935] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.719788][ T5935] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.732242][ T5935] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.829196][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.850650][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.898100][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.908331][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.975216][ T5988] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 117.997679][ T5988] team0: Port device wlan1 added [ 118.026554][ T5989] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 118.072860][ T5991] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 118.107233][ T5992] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 118.134546][ T5993] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 118.156723][ T5994] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 118.182503][ T5995] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 118.211123][ T5996] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 118.232354][ T5997] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 118.257224][ T5998] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 118.442778][ T5141] Bluetooth: hci0: command tx timeout 2025/05/22 09:26:23 executed programs: 62 [ 120.520733][ T5141] Bluetooth: hci0: command tx timeout [ 122.601386][ T5141] Bluetooth: hci0: command tx timeout [ 123.007816][ T6248] validate_nla: 244 callbacks suppressed [ 123.007830][ T6248] netlink: 'syz.0.270': attribute type 10 has an invalid length. [ 123.038431][ T6249] netlink: 'syz.0.271': attribute type 10 has an invalid length. [ 123.059826][ T6250] netlink: 'syz.0.272': attribute type 10 has an invalid length. [ 123.083212][ T6251] netlink: 'syz.0.273': attribute type 10 has an invalid length. [ 123.104543][ T6252] netlink: 'syz.0.274': attribute type 10 has an invalid length. [ 123.127041][ T6253] netlink: 'syz.0.275': attribute type 10 has an invalid length. [ 123.149374][ T6254] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 123.175068][ T6255] netlink: 'syz.0.277': attribute type 10 has an invalid length. [ 123.197086][ T6256] netlink: 'syz.0.278': attribute type 10 has an invalid length. [ 123.217760][ T6257] netlink: 'syz.0.279': attribute type 10 has an invalid length. 2025/05/22 09:26:28 executed programs: 319 [ 128.040029][ T6510] validate_nla: 250 callbacks suppressed [ 128.040045][ T6510] netlink: 'syz.0.530': attribute type 10 has an invalid length. [ 128.067050][ T6511] netlink: 'syz.0.531': attribute type 10 has an invalid length. [ 128.086832][ T6512] netlink: 'syz.0.532': attribute type 10 has an invalid length. [ 128.107671][ T6513] netlink: 'syz.0.533': attribute type 10 has an invalid length. [ 128.133132][ T6514] netlink: 'syz.0.534': attribute type 10 has an invalid length. [ 128.153066][ T6515] netlink: 'syz.0.535': attribute type 10 has an invalid length. [ 128.178001][ T6516] netlink: 'syz.0.536': attribute type 10 has an invalid length. [ 128.199102][ T6517] netlink: 'syz.0.537': attribute type 10 has an invalid length. [ 128.224403][ T6518] netlink: 'syz.0.538': attribute type 10 has an invalid length. [ 128.246471][ T6519] netlink: 'syz.0.539': attribute type 10 has an invalid length. 2025/05/22 09:26:33 executed programs: 580 [ 129.755948][ T5925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.764325][ T5925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.773145][ T5925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.781904][ T5925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.789638][ T5925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.936457][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.961547][ T6598] chnl_net:caif_netlink_parms(): no params data found [ 130.011151][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.083463][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.098882][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.106552][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.113847][ T6598] bridge_slave_0: entered allmulticast mode [ 130.121367][ T6598] bridge_slave_0: entered promiscuous mode [ 130.139163][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.153630][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.161200][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.168610][ T6598] bridge_slave_1: entered allmulticast mode [ 130.175844][ T6598] bridge_slave_1: entered promiscuous mode [ 130.215421][ T6598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.227753][ T6598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.277968][ T6598] team0: Port device team_slave_0 added [ 130.297726][ T6598] team0: Port device team_slave_1 added [ 130.330299][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.338260][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.364891][ T6598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.391367][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.398570][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.425137][ T6598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.491061][ T6598] hsr_slave_0: entered promiscuous mode [ 130.497434][ T6598] hsr_slave_1: entered promiscuous mode [ 130.504664][ T6598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.512535][ T6598] Cannot create hsr debugfs directory [ 130.518286][ T12] bridge_slave_1: left allmulticast mode [ 130.525304][ T12] bridge_slave_1: left promiscuous mode [ 130.531274][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.540432][ T12] bridge_slave_0: left allmulticast mode [ 130.546756][ T12] bridge_slave_0: left promiscuous mode [ 130.552810][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.793818][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.804676][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.814657][ T12] bond0 (unregistering): Released all slaves [ 130.946252][ T12] [ 130.948640][ T12] ====================================================== [ 130.955668][ T12] WARNING: possible circular locking dependency detected [ 130.962696][ T12] 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 Not tainted [ 130.969799][ T12] ------------------------------------------------------ [ 130.976811][ T12] kworker/u8:0/12 is trying to acquire lock: [ 130.982782][ T12] ffff888011380e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 130.992398][ T12] [ 130.992398][ T12] but task is already holding lock: [ 130.999783][ T12] ffff888028e18768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 131.010184][ T12] [ 131.010184][ T12] which lock already depends on the new lock. [ 131.010184][ T12] [ 131.020603][ T12] [ 131.020603][ T12] the existing dependency chain (in reverse order) is: [ 131.029639][ T12] [ 131.029639][ T12] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 131.037413][ T12] lock_acquire+0x120/0x360 [ 131.042464][ T12] __mutex_lock+0x182/0xe80 [ 131.047493][ T12] ieee80211_open+0xed/0x1f0 [ 131.052611][ T12] __dev_open+0x470/0x880 [ 131.057463][ T12] netif_open+0xaa/0x170 [ 131.062225][ T12] dev_open+0x125/0x260 [ 131.066901][ T12] team_add_slave+0xb36/0x2840 [ 131.072185][ T12] do_set_master+0x533/0x6d0 [ 131.077298][ T12] do_setlink+0xd47/0x40d0 [ 131.082240][ T12] rtnl_newlink+0x160b/0x1c70 [ 131.087437][ T12] rtnetlink_rcv_msg+0x7cf/0xb70 [ 131.092900][ T12] netlink_rcv_skb+0x21c/0x490 [ 131.098196][ T12] netlink_unicast+0x758/0x8d0 [ 131.103477][ T12] netlink_sendmsg+0x805/0xb30 [ 131.108776][ T12] __sock_sendmsg+0x219/0x270 [ 131.113973][ T12] ____sys_sendmsg+0x505/0x830 [ 131.119260][ T12] ___sys_sendmsg+0x21f/0x2a0 [ 131.124464][ T12] __x64_sys_sendmsg+0x19b/0x260 [ 131.129929][ T12] do_syscall_64+0xf6/0x210 [ 131.134955][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.141366][ T12] [ 131.141366][ T12] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 131.149543][ T12] validate_chain+0xb9b/0x2140 [ 131.154829][ T12] __lock_acquire+0xaac/0xd20 [ 131.160028][ T12] lock_acquire+0x120/0x360 [ 131.165052][ T12] __mutex_lock+0x182/0xe80 [ 131.170076][ T12] team_del_slave+0x32/0x1c0 [ 131.175189][ T12] team_device_event+0x285/0xa20 [ 131.180646][ T12] notifier_call_chain+0x1b6/0x3e0 [ 131.186275][ T12] unregister_netdevice_many_notify+0x15d8/0x2330 [ 131.193208][ T12] unregister_netdevice_queue+0x33c/0x380 [ 131.199466][ T12] _cfg80211_unregister_wdev+0x165/0x590 [ 131.205613][ T12] ieee80211_remove_interfaces+0x49a/0x6d0 [ 131.211940][ T12] ieee80211_unregister_hw+0x5d/0x2c0 [ 131.217830][ T12] mac80211_hwsim_del_radio+0x275/0x460 [ 131.223889][ T12] hwsim_exit_net+0x584/0x640 [ 131.229119][ T12] cleanup_net+0x71a/0xbd0 [ 131.234056][ T12] process_scheduled_works+0xadb/0x17a0 [ 131.240120][ T12] worker_thread+0x8a0/0xda0 [ 131.245230][ T12] kthread+0x70e/0x8a0 [ 131.249824][ T12] ret_from_fork+0x4b/0x80 [ 131.254759][ T12] ret_from_fork_asm+0x1a/0x30 [ 131.260049][ T12] [ 131.260049][ T12] other info that might help us debug this: [ 131.260049][ T12] [ 131.270269][ T12] Possible unsafe locking scenario: [ 131.270269][ T12] [ 131.277711][ T12] CPU0 CPU1 [ 131.283066][ T12] ---- ---- [ 131.288425][ T12] lock(&rdev->wiphy.mtx); [ 131.292930][ T12] lock(team->team_lock_key#2); [ 131.300393][ T12] lock(&rdev->wiphy.mtx); [ 131.307411][ T12] lock(team->team_lock_key#2); [ 131.312355][ T12] [ 131.312355][ T12] *** DEADLOCK *** [ 131.312355][ T12] [ 131.320494][ T12] 5 locks held by kworker/u8:0/12: [ 131.325615][ T12] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 131.336493][ T12] #1: ffffc90000117c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 131.347036][ T12] #2: ffffffff8f2edd10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 131.356441][ T12] #3: ffffffff8f2fa848 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 131.366279][ T12] #4: ffff888028e18768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 131.377077][ T12] [ 131.377077][ T12] stack backtrace: [ 131.382985][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 131.383008][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.383020][ T12] Workqueue: netns cleanup_net [ 131.383046][ T12] Call Trace: [ 131.383056][ T12] [ 131.383063][ T12] dump_stack_lvl+0x189/0x250 [ 131.383089][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.383110][ T12] ? __pfx__printk+0x10/0x10 [ 131.383125][ T12] ? print_lock_name+0xde/0x100 [ 131.383148][ T12] print_circular_bug+0x2ee/0x310 [ 131.383165][ T12] check_noncircular+0x134/0x160 [ 131.383193][ T12] validate_chain+0xb9b/0x2140 [ 131.383207][ T12] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 131.383223][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.383244][ T12] __lock_acquire+0xaac/0xd20 [ 131.383265][ T12] ? team_del_slave+0x32/0x1c0 [ 131.383276][ T12] lock_acquire+0x120/0x360 [ 131.383294][ T12] ? team_del_slave+0x32/0x1c0 [ 131.383308][ T12] ? __mutex_trylock_common+0x153/0x260 [ 131.383323][ T12] __mutex_lock+0x182/0xe80 [ 131.383342][ T12] ? team_del_slave+0x32/0x1c0 [ 131.383353][ T12] ? rcu_is_watching+0x15/0xb0 [ 131.383367][ T12] ? team_del_slave+0x32/0x1c0 [ 131.383396][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 131.383415][ T12] ? bond_netdev_event+0xd9/0xe80 [ 131.383431][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 131.383449][ T12] ? __pfx_bond_netdev_event+0x10/0x10 [ 131.383467][ T12] team_del_slave+0x32/0x1c0 [ 131.383481][ T12] team_device_event+0x285/0xa20 [ 131.383498][ T12] notifier_call_chain+0x1b6/0x3e0 [ 131.383516][ T12] unregister_netdevice_many_notify+0x15d8/0x2330 [ 131.383535][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 131.383549][ T12] ? call_rcu+0x6dd/0x990 [ 131.383561][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.383587][ T12] unregister_netdevice_queue+0x33c/0x380 [ 131.383610][ T12] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 131.383635][ T12] _cfg80211_unregister_wdev+0x165/0x590 [ 131.383650][ T12] ieee80211_remove_interfaces+0x49a/0x6d0 [ 131.383671][ T12] ? __pfx_synchronize_rcu+0x10/0x10 [ 131.383686][ T12] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 131.383706][ T12] ? rcu_is_watching+0x15/0xb0 [ 131.383720][ T12] ieee80211_unregister_hw+0x5d/0x2c0 [ 131.383738][ T12] mac80211_hwsim_del_radio+0x275/0x460 [ 131.383755][ T12] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 131.383773][ T12] hwsim_exit_net+0x584/0x640 [ 131.383794][ T12] ? __pfx_hwsim_exit_net+0x10/0x10 [ 131.383815][ T12] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 131.383833][ T12] cleanup_net+0x71a/0xbd0 [ 131.383851][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 131.383870][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 131.383885][ T12] ? process_scheduled_works+0x9ec/0x17a0 [ 131.383898][ T12] ? process_scheduled_works+0x9ec/0x17a0 [ 131.383911][ T12] process_scheduled_works+0xadb/0x17a0 [ 131.383934][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 131.383962][ T12] worker_thread+0x8a0/0xda0 [ 131.383985][ T12] kthread+0x70e/0x8a0 [ 131.384002][ T12] ? __pfx_worker_thread+0x10/0x10 [ 131.384015][ T12] ? __pfx_kthread+0x10/0x10 [ 131.384032][ T12] ? __pfx_kthread+0x10/0x10 [ 131.384048][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 131.384063][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.384081][ T12] ? __pfx_kthread+0x10/0x10 [ 131.384119][ T12] ret_from_fork+0x4b/0x80 [ 131.384135][ T12] ? __pfx_kthread+0x10/0x10 [ 131.384152][ T12] ret_from_fork_asm+0x1a/0x30 [ 131.384172][ T12] [ 131.729861][ T12] team0: Port device wlan1 removed [ 131.880841][ T5925] Bluetooth: hci0: command tx timeout [ 131.889297][ T12] hsr_slave_0: left promiscuous mode [ 131.895180][ T12] hsr_slave_1: left promiscuous mode [ 131.901200][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.908606][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.916529][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.924712][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.939300][ T12] veth1_macvtap: left promiscuous mode [ 131.945870][ T12] veth0_macvtap: left promiscuous mode [ 131.951785][ T12] veth1_vlan: left promiscuous mode [ 131.957077][ T12] veth0_vlan: left promiscuous mode [ 132.073965][ T12] team0 (unregistering): Port device team_slave_1 removed [ 132.097207][ T12] team0 (unregistering): Port device team_slave_0 removed [ 132.369408][ T6598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.379772][ T6598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.390338][ T6598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.399778][ T6598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.466445][ T6598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.487317][ T6598] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.499281][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.506452][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.532224][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.539375][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.702926][ T6598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.745725][ T6598] veth0_vlan: entered promiscuous mode [ 132.757349][ T6598] veth1_vlan: entered promiscuous mode [ 132.767754][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.775680][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.803447][ T6598] veth0_macvtap: entered promiscuous mode [ 132.813010][ T6598] veth1_macvtap: entered promiscuous mode [ 132.829436][ T6598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.843742][ T6598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.854540][ T6598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.864849][ T6598] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.875208][ T6598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.885258][ T6598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.926765][ T6598] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 132.954800][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.965203][ T6598] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 132.978297][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.002541][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.010441][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.050026][ T6655] validate_nla: 76 callbacks suppressed [ 133.050046][ T6655] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 133.070053][ T6655] team0: Port device wlan1 added [ 133.089061][ T6657] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 133.114890][ T6658] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 133.135144][ T6660] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 133.154874][ T6663] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 133.179281][ T6664] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 133.199161][ T6666] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 133.219232][ T6668] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 133.245318][ T6669] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 133.267567][ T6672] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 133.961131][ T5925] Bluetooth: hci0: command tx timeout 2025/05/22 09:26:38 executed programs: 667 [ 136.040831][ T5925] Bluetooth: hci0: command tx timeout [ 138.065999][ T6970] validate_nla: 279 callbacks suppressed [ 138.066017][ T6970] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 138.088023][ T6971] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 138.103980][ T6972] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 138.120936][ T5925] Bluetooth: hci0: command tx timeout [ 138.135551][ T6973] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 138.153437][ T6974] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 138.169464][ T6975] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 138.194617][ T6976] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 138.213130][ T6977] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 138.229449][ T6978] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 138.255848][ T6979] netlink: 'syz.0.914': attribute type 10 has an invalid length. 2025/05/22 09:26:43 executed programs: 964