Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. 2025/07/30 09:56:09 ignoring optional flag "sandboxArg"="0" 2025/07/30 09:56:11 parsed 1 programs [ 91.154522][ T5851] cgroup: Unknown subsys name 'net' [ 91.286731][ T5851] cgroup: Unknown subsys name 'cpuset' [ 91.296279][ T5851] cgroup: Unknown subsys name 'rlimit' [ 91.914261][ T3091] cfg80211: failed to load regulatory.db [ 92.992771][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.037814][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.443939][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 96.545151][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.552801][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.559991][ T5871] bridge_slave_0: entered allmulticast mode [ 96.567837][ T5871] bridge_slave_0: entered promiscuous mode [ 96.577187][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.584427][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.591571][ T5871] bridge_slave_1: entered allmulticast mode [ 96.599441][ T5871] bridge_slave_1: entered promiscuous mode [ 96.634218][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.646033][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.680047][ T5871] team0: Port device team_slave_0 added [ 96.688757][ T5871] team0: Port device team_slave_1 added [ 96.718901][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.726013][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.752734][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.766188][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.773219][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.799177][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.846683][ T5871] hsr_slave_0: entered promiscuous mode [ 96.853414][ T5871] hsr_slave_1: entered promiscuous mode [ 97.007272][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.019840][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.030888][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.041521][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.075982][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.083278][ T5871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.091049][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.098287][ T5871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.155250][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.174490][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.184635][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.201353][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.215931][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.223117][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.236566][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.243811][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.435714][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.477586][ T5871] veth0_vlan: entered promiscuous mode [ 97.490759][ T5871] veth1_vlan: entered promiscuous mode [ 97.520085][ T5871] veth0_macvtap: entered promiscuous mode [ 97.536590][ T5871] veth1_macvtap: entered promiscuous mode [ 97.556429][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.571092][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.584826][ T5871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.593788][ T5871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.604114][ T5871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.613436][ T5871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.761498][ T1096] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.858423][ T1096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.936917][ T1096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.010938][ T1096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.943457][ T5913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.951557][ T5913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.959795][ T5913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.968653][ T5913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.977617][ T5913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.525185][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.538364][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.566414][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.574844][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.424883][ T1096] bridge_slave_1: left allmulticast mode [ 100.430726][ T1096] bridge_slave_1: left promiscuous mode [ 100.453782][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.496750][ T1096] bridge_slave_0: left allmulticast mode [ 100.513968][ T1096] bridge_slave_0: left promiscuous mode [ 100.519820][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.865943][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.879736][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.891288][ T1096] bond0 (unregistering): Released all slaves [ 101.022247][ T1096] hsr_slave_0: left promiscuous mode [ 101.029065][ T1096] hsr_slave_1: left promiscuous mode [ 101.035554][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.043870][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.053029][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.060440][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.077826][ T1096] veth1_macvtap: left promiscuous mode [ 101.083561][ T1096] veth0_macvtap: left promiscuous mode [ 101.089871][ T1096] veth1_vlan: left promiscuous mode [ 101.095631][ T1096] veth0_vlan: left promiscuous mode [ 101.400615][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 101.427145][ T1096] team0 (unregistering): Port device team_slave_0 removed 2025/07/30 09:56:26 executed programs: 0 [ 102.817126][ T5913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.826357][ T5913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.837333][ T5913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.845456][ T5913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.853207][ T5913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.375558][ T5986] chnl_net:caif_netlink_parms(): no params data found [ 103.683914][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.691191][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.698496][ T5986] bridge_slave_0: entered allmulticast mode [ 103.705797][ T5986] bridge_slave_0: entered promiscuous mode [ 103.722487][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.729616][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.737352][ T5986] bridge_slave_1: entered allmulticast mode [ 103.745064][ T5986] bridge_slave_1: entered promiscuous mode [ 103.790947][ T5986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.803900][ T5986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.884300][ T5986] team0: Port device team_slave_0 added [ 103.901462][ T5986] team0: Port device team_slave_1 added [ 103.958539][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.966570][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.995551][ T5986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.009240][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.017402][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.044611][ T5986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.166360][ T5986] hsr_slave_0: entered promiscuous mode [ 104.174745][ T5986] hsr_slave_1: entered promiscuous mode [ 104.874610][ T5913] Bluetooth: hci0: command tx timeout [ 104.897585][ T5986] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.911854][ T5986] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.925421][ T5986] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.941487][ T5986] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.065499][ T5986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.097978][ T5986] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.117278][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.124578][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.141684][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.148871][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.413430][ T5986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.481745][ T5986] veth0_vlan: entered promiscuous mode [ 105.497614][ T5986] veth1_vlan: entered promiscuous mode [ 105.541152][ T5986] veth0_macvtap: entered promiscuous mode [ 105.554592][ T5986] veth1_macvtap: entered promiscuous mode [ 105.580181][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.604292][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.622145][ T5986] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.631691][ T5986] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.644005][ T5986] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.653159][ T5986] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.754480][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.769430][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.810618][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.819849][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.894542][ T6062] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 105.936575][ T6062] team0: Port device wlan1 added [ 105.986376][ T6066] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 106.059546][ T6068] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 106.129857][ T6070] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 106.185415][ T6073] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 106.215816][ T6075] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 106.250812][ T6076] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 106.286812][ T6077] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 106.327637][ T6079] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 106.384995][ T6081] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 106.959958][ T5913] Bluetooth: hci0: command tx timeout 2025/07/30 09:56:31 executed programs: 47 [ 109.032544][ T5913] Bluetooth: hci0: command tx timeout [ 110.916167][ T6277] validate_nla: 128 callbacks suppressed [ 110.916185][ T6277] netlink: 'syz.0.154': attribute type 10 has an invalid length. [ 110.949929][ T6278] netlink: 'syz.0.155': attribute type 10 has an invalid length. [ 110.986934][ T6279] netlink: 'syz.0.156': attribute type 10 has an invalid length. [ 111.014856][ T6280] netlink: 'syz.0.157': attribute type 10 has an invalid length. [ 111.054704][ T6281] netlink: 'syz.0.158': attribute type 10 has an invalid length. [ 111.085246][ T6282] netlink: 'syz.0.159': attribute type 10 has an invalid length. [ 111.113305][ T5913] Bluetooth: hci0: command tx timeout [ 111.115177][ T6283] netlink: 'syz.0.160': attribute type 10 has an invalid length. [ 111.150142][ T6284] netlink: 'syz.0.161': attribute type 10 has an invalid length. [ 111.176860][ T6285] netlink: 'syz.0.162': attribute type 10 has an invalid length. [ 111.217376][ T6286] netlink: 'syz.0.163': attribute type 10 has an invalid length. 2025/07/30 09:56:36 executed programs: 222 [ 115.941021][ T6520] validate_nla: 233 callbacks suppressed [ 115.941036][ T6520] netlink: 'syz.0.397': attribute type 10 has an invalid length. [ 115.969146][ T6521] netlink: 'syz.0.398': attribute type 10 has an invalid length. [ 115.989733][ T6522] netlink: 'syz.0.399': attribute type 10 has an invalid length. [ 116.017559][ T6523] netlink: 'syz.0.400': attribute type 10 has an invalid length. [ 116.040311][ T6524] netlink: 'syz.0.401': attribute type 10 has an invalid length. [ 116.065509][ T6525] netlink: 'syz.0.402': attribute type 10 has an invalid length. [ 116.089929][ T6526] netlink: 'syz.0.403': attribute type 10 has an invalid length. [ 116.110758][ T6527] netlink: 'syz.0.404': attribute type 10 has an invalid length. [ 116.135930][ T6528] netlink: 'syz.0.405': attribute type 10 has an invalid length. [ 116.157179][ T6529] netlink: 'syz.0.406': attribute type 10 has an invalid length. 2025/07/30 09:56:41 executed programs: 472 [ 120.404456][ T5168] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.414548][ T5168] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.422789][ T5168] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.433961][ T5168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.442140][ T5168] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.599432][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.623767][ T6742] chnl_net:caif_netlink_parms(): no params data found [ 120.674557][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.738515][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.745801][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.755714][ T6742] bridge_slave_0: entered allmulticast mode [ 120.763121][ T6742] bridge_slave_0: entered promiscuous mode [ 120.782327][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.802807][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.810004][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.818524][ T6742] bridge_slave_1: entered allmulticast mode [ 120.826144][ T6742] bridge_slave_1: entered promiscuous mode [ 120.848790][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.892217][ T6742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.905568][ T6742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.949278][ T6742] team0: Port device team_slave_0 added [ 120.957986][ T6742] team0: Port device team_slave_1 added [ 121.034377][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.041375][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.068329][ T6742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.081670][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.088857][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.115209][ T6742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.154735][ T12] bridge_slave_1: left allmulticast mode [ 121.160514][ T12] bridge_slave_1: left promiscuous mode [ 121.167019][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.177030][ T12] bridge_slave_0: left allmulticast mode [ 121.183529][ T12] bridge_slave_0: left promiscuous mode [ 121.189300][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.406123][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.417222][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.427368][ T12] bond0 (unregistering): Released all slaves [ 121.515982][ T6742] hsr_slave_0: entered promiscuous mode [ 121.525757][ T6742] hsr_slave_1: entered promiscuous mode [ 121.532210][ T6742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.540285][ T6742] Cannot create hsr debugfs directory [ 121.552007][ T12] [ 121.554401][ T12] ====================================================== [ 121.561443][ T12] WARNING: possible circular locking dependency detected [ 121.568490][ T12] 6.16.0-rc7-syzkaller-00100-gafd8c2c9e2e2 #0 Not tainted [ 121.575629][ T12] ------------------------------------------------------ [ 121.582650][ T12] kworker/u8:0/12 is trying to acquire lock: [ 121.588629][ T12] ffff888032f48e00 (team->team_lock_key){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 121.598073][ T12] [ 121.598073][ T12] but task is already holding lock: [ 121.605443][ T12] ffff888032828768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 121.615817][ T12] [ 121.615817][ T12] which lock already depends on the new lock. [ 121.615817][ T12] [ 121.626224][ T12] [ 121.626224][ T12] the existing dependency chain (in reverse order) is: [ 121.635241][ T12] [ 121.635241][ T12] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 121.642998][ T12] lock_acquire+0x120/0x360 [ 121.648033][ T12] __mutex_lock+0x182/0xe80 [ 121.653077][ T12] ieee80211_open+0xed/0x1f0 [ 121.658197][ T12] __dev_open+0x46d/0x880 [ 121.663076][ T12] netif_open+0xaa/0x170 [ 121.667899][ T12] dev_open+0x125/0x260 [ 121.672592][ T12] team_add_slave+0xb36/0x2840 [ 121.677890][ T12] do_set_master+0x533/0x6d0 [ 121.683010][ T12] do_setlink+0xcf0/0x41c0 [ 121.687977][ T12] rtnl_newlink+0x160b/0x1c70 [ 121.693208][ T12] rtnetlink_rcv_msg+0x7cf/0xb70 [ 121.698689][ T12] netlink_rcv_skb+0x205/0x470 [ 121.704000][ T12] netlink_unicast+0x759/0x8e0 [ 121.709394][ T12] netlink_sendmsg+0x805/0xb30 [ 121.714695][ T12] __sock_sendmsg+0x21c/0x270 [ 121.719907][ T12] ____sys_sendmsg+0x505/0x830 [ 121.725200][ T12] ___sys_sendmsg+0x21f/0x2a0 [ 121.730424][ T12] __x64_sys_sendmsg+0x19b/0x260 [ 121.735898][ T12] do_syscall_64+0xfa/0x3b0 [ 121.741022][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.747442][ T12] [ 121.747442][ T12] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 121.755447][ T12] validate_chain+0xb9b/0x2140 [ 121.760741][ T12] __lock_acquire+0xab9/0xd20 [ 121.765944][ T12] lock_acquire+0x120/0x360 [ 121.770974][ T12] __mutex_lock+0x182/0xe80 [ 121.776014][ T12] team_del_slave+0x32/0x1c0 [ 121.781137][ T12] team_device_event+0x285/0xa20 [ 121.786603][ T12] notifier_call_chain+0x1b3/0x3e0 [ 121.792251][ T12] unregister_netdevice_many_notify+0x15d8/0x2320 [ 121.799217][ T12] unregister_netdevice_queue+0x33c/0x380 [ 121.805474][ T12] _cfg80211_unregister_wdev+0x165/0x590 [ 121.811725][ T12] ieee80211_remove_interfaces+0x49a/0x6d0 [ 121.818077][ T12] ieee80211_unregister_hw+0x5d/0x2c0 [ 121.824020][ T12] mac80211_hwsim_del_radio+0x275/0x460 [ 121.830102][ T12] hwsim_exit_net+0x584/0x640 [ 121.835333][ T12] ops_undo_list+0x497/0x990 [ 121.840473][ T12] cleanup_net+0x4c5/0x800 [ 121.845432][ T12] process_scheduled_works+0xae1/0x17b0 [ 121.851510][ T12] worker_thread+0x8a0/0xda0 [ 121.856635][ T12] kthread+0x70e/0x8a0 [ 121.861250][ T12] ret_from_fork+0x3fc/0x770 [ 121.866370][ T12] ret_from_fork_asm+0x1a/0x30 [ 121.871678][ T12] [ 121.871678][ T12] other info that might help us debug this: [ 121.871678][ T12] [ 121.881907][ T12] Possible unsafe locking scenario: [ 121.881907][ T12] [ 121.889360][ T12] CPU0 CPU1 [ 121.894732][ T12] ---- ---- [ 121.900098][ T12] lock(&rdev->wiphy.mtx); [ 121.904612][ T12] lock(team->team_lock_key); [ 121.911901][ T12] lock(&rdev->wiphy.mtx); [ 121.918937][ T12] lock(team->team_lock_key); [ 121.923706][ T12] [ 121.923706][ T12] *** DEADLOCK *** [ 121.923706][ T12] [ 121.931849][ T12] 5 locks held by kworker/u8:0/12: [ 121.936960][ T12] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 121.947859][ T12] #1: ffffc90000117bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 121.958406][ T12] #2: ffffffff8f50f610 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 121.967760][ T12] #3: ffffffff8f51c248 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 121.977616][ T12] #4: ffff888032828768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 121.988432][ T12] [ 121.988432][ T12] stack backtrace: [ 121.994348][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc7-syzkaller-00100-gafd8c2c9e2e2 #0 PREEMPT(full) [ 121.994368][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.994380][ T12] Workqueue: netns cleanup_net [ 121.994414][ T12] Call Trace: [ 121.994422][ T12] [ 121.994430][ T12] dump_stack_lvl+0x189/0x250 [ 121.994452][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.994471][ T12] ? __pfx__printk+0x10/0x10 [ 121.994493][ T12] ? print_lock_name+0xde/0x100 [ 121.994514][ T12] print_circular_bug+0x2ee/0x310 [ 121.994537][ T12] check_noncircular+0x134/0x160 [ 121.994561][ T12] validate_chain+0xb9b/0x2140 [ 121.994583][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.994605][ T12] __lock_acquire+0xab9/0xd20 [ 121.994623][ T12] ? team_del_slave+0x32/0x1c0 [ 121.994645][ T12] lock_acquire+0x120/0x360 [ 121.994659][ T12] ? team_del_slave+0x32/0x1c0 [ 121.994683][ T12] ? __mutex_trylock_common+0x153/0x260 [ 121.994705][ T12] __mutex_lock+0x182/0xe80 [ 121.994723][ T12] ? team_del_slave+0x32/0x1c0 [ 121.994744][ T12] ? rcu_is_watching+0x15/0xb0 [ 121.994765][ T12] ? team_del_slave+0x32/0x1c0 [ 121.994787][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 121.994805][ T12] ? bond_netdev_event+0xd9/0xe80 [ 121.994831][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 121.994848][ T12] ? __pfx_bond_netdev_event+0x10/0x10 [ 121.994875][ T12] team_del_slave+0x32/0x1c0 [ 121.994898][ T12] team_device_event+0x285/0xa20 [ 121.994915][ T12] notifier_call_chain+0x1b3/0x3e0 [ 121.994937][ T12] unregister_netdevice_many_notify+0x15d8/0x2320 [ 121.994962][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 121.994983][ T12] ? __lock_acquire+0xab9/0xd20 [ 121.995007][ T12] unregister_netdevice_queue+0x33c/0x380 [ 121.995025][ T12] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 121.995046][ T12] _cfg80211_unregister_wdev+0x165/0x590 [ 121.995071][ T12] ieee80211_remove_interfaces+0x49a/0x6d0 [ 121.995090][ T12] ? __pfx_synchronize_rcu+0x10/0x10 [ 121.995111][ T12] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 121.995130][ T12] ? rcu_is_watching+0x15/0xb0 [ 121.995150][ T12] ieee80211_unregister_hw+0x5d/0x2c0 [ 121.995167][ T12] mac80211_hwsim_del_radio+0x275/0x460 [ 121.995193][ T12] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 121.995222][ T12] hwsim_exit_net+0x584/0x640 [ 121.995243][ T12] ? __pfx_hwsim_exit_net+0x10/0x10 [ 121.995265][ T12] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 121.995297][ T12] ops_undo_list+0x497/0x990 [ 121.995322][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 121.995348][ T12] cleanup_net+0x4c5/0x800 [ 121.995370][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 121.995393][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.995408][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 121.995425][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 121.995443][ T12] process_scheduled_works+0xae1/0x17b0 [ 121.995472][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 121.995508][ T12] worker_thread+0x8a0/0xda0 [ 121.995535][ T12] kthread+0x70e/0x8a0 [ 121.995559][ T12] ? __pfx_worker_thread+0x10/0x10 [ 121.995576][ T12] ? __pfx_kthread+0x10/0x10 [ 121.995597][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.995611][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.995626][ T12] ? __pfx_kthread+0x10/0x10 [ 121.995647][ T12] ret_from_fork+0x3fc/0x770 [ 121.995663][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 121.995680][ T12] ? __switch_to_asm+0x39/0x70 [ 121.995700][ T12] ? __switch_to_asm+0x33/0x70 [ 121.995719][ T12] ? __pfx_kthread+0x10/0x10 [ 121.995739][ T12] ret_from_fork_asm+0x1a/0x30 [ 121.995765][ T12] [ 122.374857][ T12] team0: Port device wlan1 removed [ 122.476836][ T5913] Bluetooth: hci0: command tx timeout [ 122.574640][ T12] hsr_slave_0: left promiscuous mode [ 122.580571][ T12] hsr_slave_1: left promiscuous mode [ 122.588507][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.596074][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.606333][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.613929][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.625761][ T12] veth1_macvtap: left promiscuous mode [ 122.631333][ T12] veth0_macvtap: left promiscuous mode [ 122.637167][ T12] veth1_vlan: left promiscuous mode [ 122.642668][ T12] veth0_vlan: left promiscuous mode [ 122.775494][ T12] team0 (unregistering): Port device team_slave_1 removed [ 122.793830][ T12] team0 (unregistering): Port device team_slave_0 removed [ 123.098537][ T6742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.117380][ T6742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.135766][ T6742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.145867][ T6742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.230042][ T6742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.252233][ T6742] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.265994][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.273162][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.286208][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.293370][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.478198][ T6742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.520338][ T6742] veth0_vlan: entered promiscuous mode [ 123.533152][ T6742] veth1_vlan: entered promiscuous mode [ 123.559894][ T6742] veth0_macvtap: entered promiscuous mode [ 123.568959][ T6742] veth1_macvtap: entered promiscuous mode [ 123.591107][ T6742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.605098][ T6742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.617412][ T6742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.626838][ T6742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.636262][ T6742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.646051][ T6742] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.679333][ T6742] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 123.707206][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.718994][ T6742] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 123.729261][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/30 09:56:47 executed programs: 602 [ 123.754983][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.763088][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.795171][ T6808] validate_nla: 209 callbacks suppressed [ 123.795186][ T6808] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 123.815038][ T6808] team0: Port device wlan1 added [ 123.831473][ T6809] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 123.852637][ T6810] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 123.887194][ T6811] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 123.907035][ T6812] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 123.924440][ T6813] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 123.946861][ T6814] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 123.963848][ T6815] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 123.980682][ T6816] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 124.008044][ T6817] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 124.552742][ T5913] Bluetooth: hci0: command tx timeout [ 126.632482][ T5913] Bluetooth: hci0: command tx timeout [ 128.713083][ T5913] Bluetooth: hci0: command tx timeout 2025/07/30 09:56:52 executed programs: 894 [ 128.807771][ T7103] validate_nla: 285 callbacks suppressed [ 128.807784][ T7103] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 128.830689][ T7104] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 128.849272][ T7105] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 128.867941][ T7106] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 128.885816][ T7107] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 128.906886][ T7108] netlink: 'syz.0.916': attribute type 10 has an invalid length. [ 128.923277][ T7109] netlink: 'syz.0.917': attribute type 10 has an invalid length. [ 128.941044][ T7110] netlink: 'syz.0.918': attribute type 10 has an invalid length. [ 128.978252][ T7111] netlink: 'syz.0.919': attribute type 10 has an invalid length. [ 128.994793][ T7112] netlink: 'syz.0.920': attribute type 10 has an invalid length.