Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. 2025/06/17 16:06:24 ignoring optional flag "sandboxArg"="0" 2025/06/17 16:06:25 parsed 1 programs [ 313.911473][ T5862] cgroup: Unknown subsys name 'net' [ 314.038776][ T5862] cgroup: Unknown subsys name 'cpuset' [ 314.049087][ T5862] cgroup: Unknown subsys name 'rlimit' [ 315.721890][ T5862] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 318.796434][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 320.818087][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 320.928503][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.936865][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.944174][ T5901] bridge_slave_0: entered allmulticast mode [ 320.952131][ T5901] bridge_slave_0: entered promiscuous mode [ 320.962577][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.969875][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.977196][ T5901] bridge_slave_1: entered allmulticast mode [ 320.984671][ T5901] bridge_slave_1: entered promiscuous mode [ 321.018766][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.032542][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.070074][ T5901] team0: Port device team_slave_0 added [ 321.078800][ T5901] team0: Port device team_slave_1 added [ 321.109413][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.116539][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.142668][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.156031][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.163023][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.189371][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.242812][ T5901] hsr_slave_0: entered promiscuous mode [ 321.249457][ T5901] hsr_slave_1: entered promiscuous mode [ 321.421349][ T5901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.434168][ T5901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 321.445453][ T5901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 321.458018][ T5901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 321.493809][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.501095][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.509456][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.516721][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.581684][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.603216][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.612516][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.632886][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.648120][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.655399][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.671424][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.678707][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.890992][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.942737][ T5901] veth0_vlan: entered promiscuous mode [ 321.962369][ T5901] veth1_vlan: entered promiscuous mode [ 321.992884][ T5901] veth0_macvtap: entered promiscuous mode [ 322.002866][ T5901] veth1_macvtap: entered promiscuous mode [ 322.023346][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.042698][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.056335][ T5901] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.065983][ T5901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.075375][ T5901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.084316][ T5901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.250462][ T1154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.265887][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.276176][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.284884][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.293846][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.302059][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.339587][ T1154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.397671][ T1154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.429012][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.437154][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.477327][ T1154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.912951][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.922128][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.958712][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.968483][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/06/17 16:06:40 executed programs: 0 [ 324.486164][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 324.497780][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 324.505933][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 324.514264][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 324.522015][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 324.707808][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 324.792237][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.799593][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.807061][ T5967] bridge_slave_0: entered allmulticast mode [ 324.814598][ T5967] bridge_slave_0: entered promiscuous mode [ 324.823280][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.831717][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.839439][ T5967] bridge_slave_1: entered allmulticast mode [ 324.847067][ T5967] bridge_slave_1: entered promiscuous mode [ 324.888117][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.900899][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.939705][ T5967] team0: Port device team_slave_0 added [ 324.950534][ T5967] team0: Port device team_slave_1 added [ 324.983766][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.991232][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.017968][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.032706][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.039811][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.066891][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.189280][ T5967] hsr_slave_0: entered promiscuous mode [ 325.197426][ T5967] hsr_slave_1: entered promiscuous mode [ 325.216061][ T5967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.223966][ T5967] Cannot create hsr debugfs directory [ 325.280323][ T1154] bridge_slave_1: left allmulticast mode [ 325.287822][ T1154] bridge_slave_1: left promiscuous mode [ 325.295036][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.311023][ T1154] bridge_slave_0: left allmulticast mode [ 325.316892][ T1154] bridge_slave_0: left promiscuous mode [ 325.322706][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.915104][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.937856][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.963047][ T1154] bond0 (unregistering): Released all slaves [ 326.113808][ T1154] hsr_slave_0: left promiscuous mode [ 326.120309][ T1154] hsr_slave_1: left promiscuous mode [ 326.128788][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.137398][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.148349][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.156190][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.181756][ T1154] veth1_macvtap: left promiscuous mode [ 326.189265][ T1154] veth0_macvtap: left promiscuous mode [ 326.195908][ T1154] veth1_vlan: left promiscuous mode [ 326.201466][ T1154] veth0_vlan: left promiscuous mode [ 326.585988][ T51] Bluetooth: hci0: command tx timeout [ 326.710413][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 326.751523][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 327.998736][ T5967] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 328.019966][ T5967] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 328.037183][ T5967] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 328.050266][ T5967] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 328.260425][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.284832][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.301097][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.308295][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.351685][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.358922][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.666303][ T51] Bluetooth: hci0: command tx timeout [ 328.861200][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.946936][ T5967] veth0_vlan: entered promiscuous mode [ 328.963601][ T5967] veth1_vlan: entered promiscuous mode [ 329.009885][ T5967] veth0_macvtap: entered promiscuous mode [ 329.021766][ T5967] veth1_macvtap: entered promiscuous mode [ 329.052290][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.069692][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.087512][ T5967] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.097527][ T5967] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.106680][ T5967] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.115613][ T5967] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.223678][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.243444][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.287867][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.296841][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.367143][ T6050] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 329.393980][ T6050] team0: Port device wlan1 added 2025/06/17 16:06:45 executed programs: 3 [ 329.425518][ T6053] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 329.463857][ T6055] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 329.499140][ T6056] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 329.540132][ T6058] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 329.575916][ T6060] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 329.610308][ T6061] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 329.650140][ T6063] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 329.683562][ T6065] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 329.722003][ T6066] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 330.748343][ T51] Bluetooth: hci0: command tx timeout [ 332.844326][ T51] Bluetooth: hci0: command tx timeout [ 334.392787][ T6305] validate_nla: 212 callbacks suppressed [ 334.392803][ T6305] netlink: 'syz.0.238': attribute type 10 has an invalid length. [ 334.421258][ T6306] netlink: 'syz.0.239': attribute type 10 has an invalid length. 2025/06/17 16:06:50 executed programs: 225 [ 334.448823][ T6307] netlink: 'syz.0.240': attribute type 10 has an invalid length. [ 334.474311][ T6308] netlink: 'syz.0.241': attribute type 10 has an invalid length. [ 334.497120][ T6309] netlink: 'syz.0.242': attribute type 10 has an invalid length. [ 334.522624][ T6310] netlink: 'syz.0.243': attribute type 10 has an invalid length. [ 334.547582][ T6311] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 334.571300][ T6312] netlink: 'syz.0.245': attribute type 10 has an invalid length. [ 334.598483][ T6313] netlink: 'syz.0.246': attribute type 10 has an invalid length. [ 334.622496][ T6314] netlink: 'syz.0.247': attribute type 10 has an invalid length. [ 339.398501][ T6551] validate_nla: 236 callbacks suppressed [ 339.398518][ T6551] netlink: 'syz.0.484': attribute type 10 has an invalid length. [ 339.428846][ T6552] netlink: 'syz.0.485': attribute type 10 has an invalid length. 2025/06/17 16:06:55 executed programs: 472 [ 339.452508][ T6553] netlink: 'syz.0.486': attribute type 10 has an invalid length. [ 339.477743][ T6554] netlink: 'syz.0.487': attribute type 10 has an invalid length. [ 339.501577][ T6555] netlink: 'syz.0.488': attribute type 10 has an invalid length. [ 339.526426][ T6556] netlink: 'syz.0.489': attribute type 10 has an invalid length. [ 339.550337][ T6557] netlink: 'syz.0.490': attribute type 10 has an invalid length. [ 339.573889][ T6558] netlink: 'syz.0.491': attribute type 10 has an invalid length. [ 339.598744][ T6559] netlink: 'syz.0.492': attribute type 10 has an invalid length. [ 339.621336][ T6560] netlink: 'syz.0.493': attribute type 10 has an invalid length. [ 342.162418][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.171988][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.180734][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.192612][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.201286][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.298771][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.386715][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.419456][ T6684] chnl_net:caif_netlink_parms(): no params data found [ 342.454168][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.521706][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.549583][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.556971][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.564148][ T6684] bridge_slave_0: entered allmulticast mode [ 342.571737][ T6684] bridge_slave_0: entered promiscuous mode [ 342.579678][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.587480][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.595750][ T6684] bridge_slave_1: entered allmulticast mode [ 342.603046][ T6684] bridge_slave_1: entered promiscuous mode [ 342.642255][ T6684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.656436][ T6684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.729796][ T6684] team0: Port device team_slave_0 added [ 342.738905][ T6684] team0: Port device team_slave_1 added [ 342.808302][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.815385][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.841668][ T6684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.854121][ T59] bridge_slave_1: left allmulticast mode [ 342.861451][ T59] bridge_slave_1: left promiscuous mode [ 342.867627][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.877792][ T59] bridge_slave_0: left allmulticast mode [ 342.883476][ T59] bridge_slave_0: left promiscuous mode [ 342.890406][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.134692][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.146655][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.157021][ T59] bond0 (unregistering): Released all slaves [ 343.171735][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.178801][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.205191][ T6684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.315322][ T59] [ 343.317730][ T59] ====================================================== [ 343.324800][ T59] WARNING: possible circular locking dependency detected [ 343.331894][ T59] 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 Not tainted [ 343.339117][ T59] ------------------------------------------------------ [ 343.346178][ T59] kworker/u8:4/59 is trying to acquire lock: [ 343.352253][ T59] ffff88807d96ce00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 343.362063][ T59] [ 343.362063][ T59] but task is already holding lock: [ 343.369441][ T59] ffff8880761d0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 343.379833][ T59] [ 343.379833][ T59] which lock already depends on the new lock. [ 343.379833][ T59] [ 343.390330][ T59] [ 343.390330][ T59] the existing dependency chain (in reverse order) is: [ 343.399616][ T59] [ 343.399616][ T59] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 343.407463][ T59] lock_acquire+0x120/0x360 [ 343.412513][ T59] __mutex_lock+0x182/0xe80 [ 343.417565][ T59] ieee80211_open+0xed/0x1f0 [ 343.422704][ T59] __dev_open+0x46d/0x880 [ 343.427567][ T59] netif_open+0xaa/0x170 [ 343.432352][ T59] dev_open+0x125/0x260 [ 343.437103][ T59] team_add_slave+0xb36/0x2840 [ 343.442415][ T59] do_set_master+0x533/0x6d0 [ 343.447544][ T59] do_setlink+0xcf0/0x41c0 [ 343.452492][ T59] rtnl_newlink+0x160b/0x1c70 [ 343.457702][ T59] rtnetlink_rcv_msg+0x7cf/0xb70 [ 343.463187][ T59] netlink_rcv_skb+0x205/0x470 [ 343.468546][ T59] netlink_unicast+0x758/0x8d0 [ 343.474171][ T59] netlink_sendmsg+0x805/0xb30 [ 343.479574][ T59] __sock_sendmsg+0x21c/0x270 [ 343.484794][ T59] ____sys_sendmsg+0x505/0x830 [ 343.490095][ T59] ___sys_sendmsg+0x21f/0x2a0 [ 343.495312][ T59] __x64_sys_sendmsg+0x19b/0x260 [ 343.500784][ T59] do_syscall_64+0xfa/0x3b0 [ 343.505869][ T59] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.512301][ T59] [ 343.512301][ T59] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 343.520651][ T59] validate_chain+0xb9b/0x2140 [ 343.525977][ T59] __lock_acquire+0xab9/0xd20 [ 343.531199][ T59] lock_acquire+0x120/0x360 [ 343.536245][ T59] __mutex_lock+0x182/0xe80 [ 343.541429][ T59] team_del_slave+0x32/0x1c0 [ 343.546685][ T59] team_device_event+0x285/0xa20 [ 343.552167][ T59] notifier_call_chain+0x1b3/0x3e0 [ 343.557827][ T59] unregister_netdevice_many_notify+0x15d8/0x2320 [ 343.564783][ T59] unregister_netdevice_queue+0x33c/0x380 [ 343.571046][ T59] _cfg80211_unregister_wdev+0x165/0x590 [ 343.577301][ T59] ieee80211_remove_interfaces+0x49a/0x6d0 [ 343.583745][ T59] ieee80211_unregister_hw+0x5d/0x2c0 [ 343.589662][ T59] mac80211_hwsim_del_radio+0x275/0x460 [ 343.595748][ T59] hwsim_exit_net+0x584/0x640 [ 343.600964][ T59] ops_undo_list+0x49a/0x990 [ 343.606085][ T59] cleanup_net+0x4c5/0x800 [ 343.611041][ T59] process_scheduled_works+0xade/0x17b0 [ 343.617121][ T59] worker_thread+0x8a0/0xda0 [ 343.622245][ T59] kthread+0x70e/0x8a0 [ 343.626861][ T59] ret_from_fork+0x3f9/0x770 [ 343.631999][ T59] ret_from_fork_asm+0x1a/0x30 [ 343.637294][ T59] [ 343.637294][ T59] other info that might help us debug this: [ 343.637294][ T59] [ 343.647527][ T59] Possible unsafe locking scenario: [ 343.647527][ T59] [ 343.654984][ T59] CPU0 CPU1 [ 343.660505][ T59] ---- ---- [ 343.665877][ T59] lock(&rdev->wiphy.mtx); [ 343.670394][ T59] lock(team->team_lock_key#2); [ 343.677877][ T59] lock(&rdev->wiphy.mtx); [ 343.685022][ T59] lock(team->team_lock_key#2); [ 343.689984][ T59] [ 343.689984][ T59] *** DEADLOCK *** [ 343.689984][ T59] [ 343.698241][ T59] 5 locks held by kworker/u8:4/59: [ 343.703353][ T59] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 343.714355][ T59] #1: ffffc9000210fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 343.725221][ T59] #2: ffffffff8f4f1410 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 343.734583][ T59] #3: ffffffff8f4fe008 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 343.744449][ T59] #4: ffff8880761d0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 343.755271][ T59] [ 343.755271][ T59] stack backtrace: [ 343.761203][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 343.761224][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 343.761236][ T59] Workqueue: netns cleanup_net [ 343.761260][ T59] Call Trace: [ 343.761275][ T59] [ 343.761283][ T59] dump_stack_lvl+0x189/0x250 [ 343.761311][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.761335][ T59] ? __pfx__printk+0x10/0x10 [ 343.761351][ T59] ? print_lock_name+0xde/0x100 [ 343.761379][ T59] print_circular_bug+0x2ee/0x310 [ 343.761408][ T59] check_noncircular+0x134/0x160 [ 343.761436][ T59] validate_chain+0xb9b/0x2140 [ 343.761465][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.761495][ T59] __lock_acquire+0xab9/0xd20 [ 343.761519][ T59] ? team_del_slave+0x32/0x1c0 [ 343.761546][ T59] lock_acquire+0x120/0x360 [ 343.761566][ T59] ? team_del_slave+0x32/0x1c0 [ 343.761594][ T59] ? __mutex_trylock_common+0x153/0x260 [ 343.761622][ T59] __mutex_lock+0x182/0xe80 [ 343.761648][ T59] ? team_del_slave+0x32/0x1c0 [ 343.761673][ T59] ? rcu_is_watching+0x15/0xb0 [ 343.761699][ T59] ? team_del_slave+0x32/0x1c0 [ 343.761725][ T59] ? __pfx___mutex_lock+0x10/0x10 [ 343.761751][ T59] ? bond_netdev_event+0xd9/0xe80 [ 343.761769][ T59] ? __pfx___mutex_lock+0x10/0x10 [ 343.761800][ T59] ? __pfx_bond_netdev_event+0x10/0x10 [ 343.761819][ T59] team_del_slave+0x32/0x1c0 [ 343.761846][ T59] team_device_event+0x285/0xa20 [ 343.761867][ T59] notifier_call_chain+0x1b3/0x3e0 [ 343.761896][ T59] unregister_netdevice_many_notify+0x15d8/0x2320 [ 343.761927][ T59] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 343.761951][ T59] ? call_rcu+0x6dd/0x990 [ 343.761976][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.762009][ T59] unregister_netdevice_queue+0x33c/0x380 [ 343.762033][ T59] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 343.762060][ T59] _cfg80211_unregister_wdev+0x165/0x590 [ 343.762082][ T59] ieee80211_remove_interfaces+0x49a/0x6d0 [ 343.762109][ T59] ? __pfx_synchronize_rcu+0x10/0x10 [ 343.762136][ T59] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 343.762162][ T59] ? rcu_is_watching+0x15/0xb0 [ 343.762188][ T59] ieee80211_unregister_hw+0x5d/0x2c0 [ 343.762212][ T59] mac80211_hwsim_del_radio+0x275/0x460 [ 343.762232][ T59] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 343.762252][ T59] hwsim_exit_net+0x584/0x640 [ 343.762278][ T59] ? __pfx_hwsim_exit_net+0x10/0x10 [ 343.762303][ T59] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 343.762325][ T59] ops_undo_list+0x49a/0x990 [ 343.762345][ T59] ? __pfx_ops_undo_list+0x10/0x10 [ 343.762366][ T59] cleanup_net+0x4c5/0x800 [ 343.762384][ T59] ? __pfx_cleanup_net+0x10/0x10 [ 343.762402][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.762423][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 343.762447][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 343.762470][ T59] process_scheduled_works+0xade/0x17b0 [ 343.762505][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 343.762536][ T59] worker_thread+0x8a0/0xda0 [ 343.762562][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 343.762587][ T59] ? __kthread_parkme+0x7b/0x200 [ 343.762616][ T59] kthread+0x70e/0x8a0 [ 343.762634][ T59] ? __pfx_worker_thread+0x10/0x10 [ 343.762657][ T59] ? __pfx_kthread+0x10/0x10 [ 343.762673][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.762694][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.762717][ T59] ? __pfx_kthread+0x10/0x10 [ 343.762733][ T59] ret_from_fork+0x3f9/0x770 [ 343.762756][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 343.762784][ T59] ? __switch_to_asm+0x39/0x70 [ 343.762799][ T59] ? __switch_to_asm+0x33/0x70 [ 343.762814][ T59] ? __pfx_kthread+0x10/0x10 [ 343.762830][ T59] ret_from_fork_asm+0x1a/0x30 [ 343.762852][ T59] [ 344.139966][ T59] team0: Port device wlan1 removed [ 344.154306][ T6684] hsr_slave_0: entered promiscuous mode [ 344.161291][ T6684] hsr_slave_1: entered promiscuous mode [ 344.264497][ T5143] Bluetooth: hci0: command tx timeout [ 344.307942][ T59] hsr_slave_0: left promiscuous mode [ 344.315057][ T59] hsr_slave_1: left promiscuous mode [ 344.320918][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.328397][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.345079][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.352538][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.369549][ T59] veth1_macvtap: left promiscuous mode [ 344.375175][ T59] veth0_macvtap: left promiscuous mode [ 344.380889][ T59] veth1_vlan: left promiscuous mode [ 344.388110][ T59] veth0_vlan: left promiscuous mode [ 344.552115][ T59] team0 (unregistering): Port device team_slave_1 removed [ 344.574720][ T59] team0 (unregistering): Port device team_slave_0 removed [ 344.932887][ T6684] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.952616][ T6684] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 344.967078][ T6684] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 344.976943][ T6684] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 345.053838][ T6684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.075751][ T6684] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.086950][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.094096][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.107618][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.114792][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.286667][ T6684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.328450][ T6684] veth0_vlan: entered promiscuous mode [ 345.341462][ T6684] veth1_vlan: entered promiscuous mode [ 345.374190][ T6684] veth0_macvtap: entered promiscuous mode [ 345.383283][ T6684] veth1_macvtap: entered promiscuous mode [ 345.403258][ T6684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.417348][ T6684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.431618][ T6684] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.442906][ T6684] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.452094][ T6684] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.461177][ T6684] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.508581][ T6684] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 345.536419][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/06/17 16:07:01 executed programs: 602 [ 345.555596][ T6684] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 345.564866][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.588181][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.599156][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.637916][ T6748] validate_nla: 122 callbacks suppressed [ 345.637938][ T6748] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 345.657432][ T6748] team0: Port device wlan1 added [ 345.679235][ T6752] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 345.707189][ T6753] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 345.732703][ T6756] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 345.759981][ T6757] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 345.786533][ T6761] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 345.813630][ T6762] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 345.837725][ T6765] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 345.866173][ T6766] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 345.892654][ T6768] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 346.344460][ T5143] Bluetooth: hci0: command tx timeout [ 348.424430][ T5143] Bluetooth: hci0: command tx timeout [ 350.504771][ T5143] Bluetooth: hci0: command tx timeout 2025/06/17 16:07:06 executed programs: 887 [ 350.670899][ T7060] validate_nla: 277 callbacks suppressed [ 350.670915][ T7060] netlink: 'syz.0.903': attribute type 10 has an invalid length. [ 350.695185][ T7061] netlink: 'syz.0.904': attribute type 10 has an invalid length. [ 350.712015][ T7062] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 350.739485][ T7063] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 350.758084][ T7064] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 350.776121][ T7065] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 350.809501][ T7066] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 350.829080][ T7067] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 350.846798][ T7068] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 350.869336][ T7069] netlink: 'syz.0.912': attribute type 10 has an invalid length.