[ 92.007004][ T978] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. 2025/07/21 23:59:06 ignoring optional flag "sandboxArg"="0" 2025/07/21 23:59:07 parsed 1 programs [ 99.109600][ T5858] cgroup: Unknown subsys name 'net' [ 99.298812][ T5858] cgroup: Unknown subsys name 'cpuset' [ 99.308568][ T5858] cgroup: Unknown subsys name 'rlimit' [ 101.152308][ T5858] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.330679][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 104.411501][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.419138][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.426955][ T5865] bridge_slave_0: entered allmulticast mode [ 104.434478][ T5865] bridge_slave_0: entered promiscuous mode [ 104.444980][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.452187][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.459957][ T5865] bridge_slave_1: entered allmulticast mode [ 104.467275][ T5865] bridge_slave_1: entered promiscuous mode [ 104.498567][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.510713][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.546485][ T5865] team0: Port device team_slave_0 added [ 104.554429][ T5865] team0: Port device team_slave_1 added [ 104.583056][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.590956][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.617158][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.629724][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.636831][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.663087][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.710267][ T5865] hsr_slave_0: entered promiscuous mode [ 104.716874][ T5865] hsr_slave_1: entered promiscuous mode [ 104.868560][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.880750][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.891280][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.902770][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.937616][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.945051][ T5865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.952805][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.960222][ T5865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.022073][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.041422][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.050328][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.069145][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.083311][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.090511][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.105271][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.112408][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.306503][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.350910][ T5865] veth0_vlan: entered promiscuous mode [ 105.363167][ T5865] veth1_vlan: entered promiscuous mode [ 105.393778][ T5865] veth0_macvtap: entered promiscuous mode [ 105.403240][ T5865] veth1_macvtap: entered promiscuous mode [ 105.422562][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.438372][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.451365][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.461359][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.470554][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.479944][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.551967][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.692510][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.787142][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.893047][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.976018][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.893111][ T5929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.902414][ T5929] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.914224][ T5929] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.923860][ T5929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.932821][ T5929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.748048][ T60] bridge_slave_1: left allmulticast mode [ 108.760345][ T60] bridge_slave_1: left promiscuous mode [ 108.775721][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.790384][ T60] bridge_slave_0: left allmulticast mode [ 108.797215][ T60] bridge_slave_0: left promiscuous mode [ 108.803496][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.058030][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.069286][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.079808][ T60] bond0 (unregistering): Released all slaves [ 109.113603][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.133302][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.195816][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.203893][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.260860][ T60] hsr_slave_0: left promiscuous mode [ 109.284757][ T60] hsr_slave_1: left promiscuous mode [ 109.293791][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.314839][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.335446][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.343175][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.413964][ T60] veth1_macvtap: left promiscuous mode [ 109.434977][ T60] veth0_macvtap: left promiscuous mode [ 109.440859][ T60] veth1_vlan: left promiscuous mode [ 109.449151][ T60] veth0_vlan: left promiscuous mode [ 109.954411][ T60] team0 (unregistering): Port device team_slave_1 removed [ 109.986514][ T60] team0 (unregistering): Port device team_slave_0 removed 2025/07/21 23:59:22 executed programs: 0 [ 111.347497][ T5167] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.357145][ T5167] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.369508][ T5167] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.378549][ T5167] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.387175][ T5167] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.261174][ T5984] chnl_net:caif_netlink_parms(): no params data found [ 112.558268][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.580455][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.588712][ T5984] bridge_slave_0: entered allmulticast mode [ 112.597315][ T5984] bridge_slave_0: entered promiscuous mode [ 112.678074][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.692480][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.700599][ T5984] bridge_slave_1: entered allmulticast mode [ 112.708721][ T5984] bridge_slave_1: entered promiscuous mode [ 112.749946][ T5984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.762579][ T5984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.802904][ T5984] team0: Port device team_slave_0 added [ 112.815075][ T5984] team0: Port device team_slave_1 added [ 112.867072][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.874287][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.901286][ T5984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.915969][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.923019][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.949253][ T5984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.057961][ T5984] hsr_slave_0: entered promiscuous mode [ 113.065896][ T5984] hsr_slave_1: entered promiscuous mode [ 113.445640][ T5929] Bluetooth: hci0: command tx timeout [ 113.925038][ T5984] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.940367][ T5984] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.955309][ T5984] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.969230][ T5984] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.099008][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.130696][ T5984] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.146172][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.153590][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.173221][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.180500][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.504189][ T5984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.573032][ T5984] veth0_vlan: entered promiscuous mode [ 114.591353][ T5984] veth1_vlan: entered promiscuous mode [ 114.638154][ T5984] veth0_macvtap: entered promiscuous mode [ 114.660061][ T5984] veth1_macvtap: entered promiscuous mode [ 114.690139][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.709834][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.727048][ T5984] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.738595][ T5984] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.747948][ T5984] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.757996][ T5984] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.857806][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.874211][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.919005][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.928852][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.024282][ T6058] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 115.064322][ T6058] team0: Port device wlan1 added [ 115.109450][ T6060] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 115.169467][ T6061] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 115.221840][ T6063] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 115.271081][ T6066] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 115.301791][ T6067] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 115.353729][ T6068] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 115.399084][ T6070] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 115.433981][ T6072] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 115.477520][ T6073] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 115.540178][ T5929] Bluetooth: hci0: command tx timeout 2025/07/21 23:59:27 executed programs: 32 [ 117.604911][ T5929] Bluetooth: hci0: command tx timeout [ 119.685473][ T5929] Bluetooth: hci0: command tx timeout [ 120.043646][ T6308] validate_nla: 188 callbacks suppressed [ 120.043660][ T6308] netlink: 'syz.0.214': attribute type 10 has an invalid length. [ 120.069769][ T6309] netlink: 'syz.0.215': attribute type 10 has an invalid length. [ 120.090736][ T6310] netlink: 'syz.0.216': attribute type 10 has an invalid length. [ 120.113950][ T6311] netlink: 'syz.0.217': attribute type 10 has an invalid length. [ 120.139259][ T6312] netlink: 'syz.0.218': attribute type 10 has an invalid length. [ 120.159628][ T6313] netlink: 'syz.0.219': attribute type 10 has an invalid length. [ 120.182999][ T6314] netlink: 'syz.0.220': attribute type 10 has an invalid length. [ 120.205798][ T6315] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 120.226944][ T6316] netlink: 'syz.0.222': attribute type 10 has an invalid length. [ 120.262910][ T6317] netlink: 'syz.0.223': attribute type 10 has an invalid length. 2025/07/21 23:59:32 executed programs: 260 [ 125.057368][ T6567] validate_nla: 241 callbacks suppressed [ 125.057383][ T6567] netlink: 'syz.0.465': attribute type 10 has an invalid length. [ 125.091969][ T6568] netlink: 'syz.0.466': attribute type 10 has an invalid length. [ 125.114224][ T6569] netlink: 'syz.0.467': attribute type 10 has an invalid length. [ 125.136129][ T6570] netlink: 'syz.0.468': attribute type 10 has an invalid length. [ 125.160880][ T6571] netlink: 'syz.0.469': attribute type 10 has an invalid length. [ 125.181656][ T6572] netlink: 'syz.0.470': attribute type 10 has an invalid length. [ 125.207371][ T6573] netlink: 'syz.0.471': attribute type 10 has an invalid length. [ 125.229858][ T6574] netlink: 'syz.0.472': attribute type 10 has an invalid length. [ 125.251216][ T6575] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 125.273701][ T6576] netlink: 'syz.0.474': attribute type 10 has an invalid length. 2025/07/21 23:59:37 executed programs: 511 [ 128.127209][ T5167] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.144748][ T5167] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.157048][ T5167] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.167959][ T5167] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.178177][ T5167] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.333755][ T1107] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.360137][ T6720] chnl_net:caif_netlink_parms(): no params data found [ 128.410836][ T1107] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.473808][ T1107] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.491533][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.499774][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.507689][ T6720] bridge_slave_0: entered allmulticast mode [ 128.515218][ T6720] bridge_slave_0: entered promiscuous mode [ 128.523155][ T6720] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.532159][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.540229][ T6720] bridge_slave_1: entered allmulticast mode [ 128.547536][ T6720] bridge_slave_1: entered promiscuous mode [ 128.567586][ T1107] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.609097][ T6720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.623119][ T6720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.670707][ T6720] team0: Port device team_slave_0 added [ 128.680836][ T6720] team0: Port device team_slave_1 added [ 128.758523][ T6720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.766884][ T6720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.793781][ T6720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.808088][ T6720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.815123][ T6720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.841147][ T6720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.891920][ T1107] bridge_slave_1: left allmulticast mode [ 128.897877][ T1107] bridge_slave_1: left promiscuous mode [ 128.903593][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.914267][ T1107] bridge_slave_0: left allmulticast mode [ 128.921030][ T1107] bridge_slave_0: left promiscuous mode [ 128.927016][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.201454][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.212135][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.222317][ T1107] bond0 (unregistering): Released all slaves [ 129.261270][ T6720] hsr_slave_0: entered promiscuous mode [ 129.268144][ T6720] hsr_slave_1: entered promiscuous mode [ 129.274224][ T6720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.284255][ T6720] Cannot create hsr debugfs directory [ 129.375647][ T1107] [ 129.378044][ T1107] ====================================================== [ 129.385091][ T1107] WARNING: possible circular locking dependency detected [ 129.392151][ T1107] 6.16.0-rc7-syzkaller #0 Not tainted [ 129.397557][ T1107] ------------------------------------------------------ [ 129.404879][ T1107] kworker/u8:7/1107 is trying to acquire lock: [ 129.411064][ T1107] ffff88807b110e00 (team->team_lock_key){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 129.420523][ T1107] [ 129.420523][ T1107] but task is already holding lock: [ 129.427905][ T1107] ffff8880298d0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 129.438268][ T1107] [ 129.438268][ T1107] which lock already depends on the new lock. [ 129.438268][ T1107] [ 129.448855][ T1107] [ 129.448855][ T1107] the existing dependency chain (in reverse order) is: [ 129.457879][ T1107] [ 129.457879][ T1107] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 129.465622][ T1107] lock_acquire+0x120/0x360 [ 129.470656][ T1107] __mutex_lock+0x182/0xe80 [ 129.475793][ T1107] ieee80211_open+0xed/0x1f0 [ 129.480994][ T1107] __dev_open+0x46d/0x880 [ 129.485856][ T1107] netif_open+0xaa/0x170 [ 129.490709][ T1107] dev_open+0x125/0x260 [ 129.495479][ T1107] team_add_slave+0xb36/0x2840 [ 129.500828][ T1107] do_set_master+0x533/0x6d0 [ 129.505957][ T1107] do_setlink+0xcf0/0x41c0 [ 129.510910][ T1107] rtnl_newlink+0x160b/0x1c70 [ 129.516114][ T1107] rtnetlink_rcv_msg+0x7cf/0xb70 [ 129.521583][ T1107] netlink_rcv_skb+0x208/0x470 [ 129.526901][ T1107] netlink_unicast+0x759/0x8e0 [ 129.532193][ T1107] netlink_sendmsg+0x805/0xb30 [ 129.537485][ T1107] __sock_sendmsg+0x21c/0x270 [ 129.542774][ T1107] ____sys_sendmsg+0x505/0x830 [ 129.548065][ T1107] ___sys_sendmsg+0x21f/0x2a0 [ 129.553268][ T1107] __x64_sys_sendmsg+0x19b/0x260 [ 129.558996][ T1107] do_syscall_64+0xfa/0x3b0 [ 129.564131][ T1107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.570550][ T1107] [ 129.570550][ T1107] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 129.578586][ T1107] validate_chain+0xb9b/0x2140 [ 129.583912][ T1107] __lock_acquire+0xab9/0xd20 [ 129.589486][ T1107] lock_acquire+0x120/0x360 [ 129.594698][ T1107] __mutex_lock+0x182/0xe80 [ 129.599743][ T1107] team_del_slave+0x32/0x1c0 [ 129.604863][ T1107] team_device_event+0x285/0xa20 [ 129.610517][ T1107] notifier_call_chain+0x1b3/0x3e0 [ 129.616247][ T1107] unregister_netdevice_many_notify+0x15d8/0x2320 [ 129.623214][ T1107] unregister_netdevice_queue+0x33c/0x380 [ 129.629569][ T1107] _cfg80211_unregister_wdev+0x165/0x590 [ 129.636016][ T1107] ieee80211_remove_interfaces+0x49a/0x6d0 [ 129.642704][ T1107] ieee80211_unregister_hw+0x5d/0x2c0 [ 129.648830][ T1107] mac80211_hwsim_del_radio+0x275/0x460 [ 129.654999][ T1107] hwsim_exit_net+0x584/0x640 [ 129.660206][ T1107] ops_undo_list+0x497/0x990 [ 129.665502][ T1107] cleanup_net+0x4c5/0x800 [ 129.670530][ T1107] process_scheduled_works+0xae1/0x17b0 [ 129.676658][ T1107] worker_thread+0x8a0/0xda0 [ 129.681777][ T1107] kthread+0x70e/0x8a0 [ 129.686462][ T1107] ret_from_fork+0x3fc/0x770 [ 129.692049][ T1107] ret_from_fork_asm+0x1a/0x30 [ 129.697345][ T1107] [ 129.697345][ T1107] other info that might help us debug this: [ 129.697345][ T1107] [ 129.707753][ T1107] Possible unsafe locking scenario: [ 129.707753][ T1107] [ 129.715297][ T1107] CPU0 CPU1 [ 129.720660][ T1107] ---- ---- [ 129.726038][ T1107] lock(&rdev->wiphy.mtx); [ 129.730640][ T1107] lock(team->team_lock_key); [ 129.738383][ T1107] lock(&rdev->wiphy.mtx); [ 129.745807][ T1107] lock(team->team_lock_key); [ 129.750604][ T1107] [ 129.750604][ T1107] *** DEADLOCK *** [ 129.750604][ T1107] [ 129.758756][ T1107] 5 locks held by kworker/u8:7/1107: [ 129.764049][ T1107] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 129.774952][ T1107] #1: ffffc90003d9fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 129.785587][ T1107] #2: ffffffff8f50f510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 129.794921][ T1107] #3: ffffffff8f51c108 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 129.804800][ T1107] #4: ffff8880298d0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 129.815601][ T1107] [ 129.815601][ T1107] stack backtrace: [ 129.821497][ T1107] CPU: 0 UID: 0 PID: 1107 Comm: kworker/u8:7 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 129.821515][ T1107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.821526][ T1107] Workqueue: netns cleanup_net [ 129.821547][ T1107] Call Trace: [ 129.821557][ T1107] [ 129.821564][ T1107] dump_stack_lvl+0x189/0x250 [ 129.821583][ T1107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.821599][ T1107] ? __pfx__printk+0x10/0x10 [ 129.821624][ T1107] ? print_lock_name+0xde/0x100 [ 129.821642][ T1107] print_circular_bug+0x2ee/0x310 [ 129.821661][ T1107] check_noncircular+0x134/0x160 [ 129.821680][ T1107] validate_chain+0xb9b/0x2140 [ 129.821700][ T1107] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.821718][ T1107] __lock_acquire+0xab9/0xd20 [ 129.821734][ T1107] ? team_del_slave+0x32/0x1c0 [ 129.821751][ T1107] lock_acquire+0x120/0x360 [ 129.821764][ T1107] ? team_del_slave+0x32/0x1c0 [ 129.821783][ T1107] ? __mutex_trylock_common+0x153/0x260 [ 129.821802][ T1107] __mutex_lock+0x182/0xe80 [ 129.821819][ T1107] ? team_del_slave+0x32/0x1c0 [ 129.821836][ T1107] ? rcu_is_watching+0x15/0xb0 [ 129.821855][ T1107] ? team_del_slave+0x32/0x1c0 [ 129.821874][ T1107] ? __pfx___mutex_lock+0x10/0x10 [ 129.821889][ T1107] ? bond_netdev_event+0xd9/0xe80 [ 129.821909][ T1107] ? __pfx___mutex_lock+0x10/0x10 [ 129.821924][ T1107] ? __pfx_bond_netdev_event+0x10/0x10 [ 129.821946][ T1107] team_del_slave+0x32/0x1c0 [ 129.821965][ T1107] team_device_event+0x285/0xa20 [ 129.821980][ T1107] notifier_call_chain+0x1b3/0x3e0 [ 129.822000][ T1107] unregister_netdevice_many_notify+0x15d8/0x2320 [ 129.822020][ T1107] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 129.822037][ T1107] ? __lock_acquire+0xab9/0xd20 [ 129.822057][ T1107] unregister_netdevice_queue+0x33c/0x380 [ 129.822072][ T1107] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 129.822089][ T1107] _cfg80211_unregister_wdev+0x165/0x590 [ 129.822109][ T1107] ieee80211_remove_interfaces+0x49a/0x6d0 [ 129.822125][ T1107] ? __pfx_synchronize_rcu+0x10/0x10 [ 129.822143][ T1107] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 129.822159][ T1107] ? rcu_is_watching+0x15/0xb0 [ 129.822177][ T1107] ieee80211_unregister_hw+0x5d/0x2c0 [ 129.822191][ T1107] mac80211_hwsim_del_radio+0x275/0x460 [ 129.822213][ T1107] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 129.822236][ T1107] hwsim_exit_net+0x584/0x640 [ 129.822254][ T1107] ? __pfx_hwsim_exit_net+0x10/0x10 [ 129.822272][ T1107] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 129.822293][ T1107] ops_undo_list+0x497/0x990 [ 129.822313][ T1107] ? __pfx_ops_undo_list+0x10/0x10 [ 129.822334][ T1107] cleanup_net+0x4c5/0x800 [ 129.822353][ T1107] ? __pfx_cleanup_net+0x10/0x10 [ 129.822371][ T1107] ? _raw_spin_unlock_irq+0x23/0x50 [ 129.822384][ T1107] ? process_scheduled_works+0x9ef/0x17b0 [ 129.822399][ T1107] ? process_scheduled_works+0x9ef/0x17b0 [ 129.822414][ T1107] process_scheduled_works+0xae1/0x17b0 [ 129.822437][ T1107] ? __pfx_process_scheduled_works+0x10/0x10 [ 129.822457][ T1107] worker_thread+0x8a0/0xda0 [ 129.822473][ T1107] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 129.822489][ T1107] ? __kthread_parkme+0x7b/0x200 [ 129.822508][ T1107] kthread+0x70e/0x8a0 [ 129.822526][ T1107] ? __pfx_worker_thread+0x10/0x10 [ 129.822541][ T1107] ? __pfx_kthread+0x10/0x10 [ 129.822559][ T1107] ? _raw_spin_unlock_irq+0x23/0x50 [ 129.822572][ T1107] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.822585][ T1107] ? __pfx_kthread+0x10/0x10 [ 129.822602][ T1107] ret_from_fork+0x3fc/0x770 [ 129.822624][ T1107] ? __pfx_ret_from_fork+0x10/0x10 [ 129.822639][ T1107] ? __switch_to_asm+0x39/0x70 [ 129.822656][ T1107] ? __switch_to_asm+0x33/0x70 [ 129.822672][ T1107] ? __pfx_kthread+0x10/0x10 [ 129.822690][ T1107] ret_from_fork_asm+0x1a/0x30 [ 129.822712][ T1107] [ 130.228406][ T1107] team0: Port device wlan1 removed [ 130.247387][ T5167] Bluetooth: hci0: command tx timeout [ 130.392615][ T1107] hsr_slave_0: left promiscuous mode [ 130.399252][ T1107] hsr_slave_1: left promiscuous mode [ 130.407835][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.415319][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.423178][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.430887][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.444706][ T1107] veth1_macvtap: left promiscuous mode [ 130.450291][ T1107] veth0_macvtap: left promiscuous mode [ 130.455975][ T1107] veth1_vlan: left promiscuous mode [ 130.461574][ T1107] veth0_vlan: left promiscuous mode [ 130.593737][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 130.618285][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 130.903924][ T6720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.926509][ T6720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.941779][ T6720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 130.951972][ T6720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.045129][ T6720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.063650][ T6720] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.077235][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.084714][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.108641][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.116213][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.237576][ T6720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.265380][ T6720] veth0_vlan: entered promiscuous mode [ 131.273973][ T6720] veth1_vlan: entered promiscuous mode [ 131.293157][ T6720] veth0_macvtap: entered promiscuous mode [ 131.302014][ T6720] veth1_macvtap: entered promiscuous mode [ 131.314152][ T6720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.326844][ T6720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.337818][ T6720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.346779][ T6720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.355933][ T6720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.365316][ T6720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.390739][ T6720] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 131.411408][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.412764][ T6720] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 131.427551][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/21 23:59:42 executed programs: 602 [ 131.446530][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.454486][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.482560][ T6768] validate_nla: 141 callbacks suppressed [ 131.482576][ T6768] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 131.502366][ T6768] team0: Port device wlan1 added [ 131.517413][ T6769] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 131.536066][ T6770] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 131.559125][ T6771] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 131.575079][ T6772] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 131.591830][ T6773] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 131.620440][ T6774] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 131.637452][ T6775] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 131.652703][ T6776] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 131.679495][ T6777] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 132.336762][ T5167] Bluetooth: hci0: command tx timeout [ 132.967726][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.974280][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.405223][ T5167] Bluetooth: hci0: command tx timeout 2025/07/21 23:59:47 executed programs: 891 [ 136.485483][ T5167] Bluetooth: hci0: command tx timeout [ 136.495646][ T7059] validate_nla: 281 callbacks suppressed [ 136.495659][ T7059] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 136.517723][ T7060] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 136.532549][ T7061] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 136.559482][ T7062] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 136.576627][ T7063] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 136.592440][ T7064] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 136.620244][ T7065] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 136.637259][ T7066] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 136.654170][ T7067] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 136.679164][ T7068] netlink: 'syz.0.916': attribute type 10 has an invalid length.