Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. 2025/06/06 03:32:04 ignoring optional flag "sandboxArg"="0" 2025/06/06 03:32:05 parsed 1 programs [ 181.097472][ T5863] cgroup: Unknown subsys name 'net' [ 181.273986][ T5863] cgroup: Unknown subsys name 'cpuset' [ 181.283067][ T5863] cgroup: Unknown subsys name 'rlimit' [ 182.768913][ T5863] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 185.340485][ T5876] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 186.399770][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.417888][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.456638][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.464795][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.063772][ T5908] chnl_net:caif_netlink_parms(): no params data found [ 187.163277][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.171379][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.178508][ T5908] bridge_slave_0: entered allmulticast mode [ 187.186014][ T5908] bridge_slave_0: entered promiscuous mode [ 187.194577][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.201789][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.208912][ T5908] bridge_slave_1: entered allmulticast mode [ 187.216154][ T5908] bridge_slave_1: entered promiscuous mode [ 187.248991][ T5908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.261471][ T5908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.301391][ T5908] team0: Port device team_slave_0 added [ 187.310126][ T5908] team0: Port device team_slave_1 added [ 187.341318][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.348265][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.374565][ T5908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.387218][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.394607][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.420979][ T5908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.468319][ T5908] hsr_slave_0: entered promiscuous mode [ 187.474715][ T5908] hsr_slave_1: entered promiscuous mode [ 187.611424][ T5908] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.623230][ T5908] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.633091][ T5908] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.643700][ T5908] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.715669][ T5908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.732347][ T5908] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.748754][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.756006][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.771288][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.778411][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.943304][ T5908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.980172][ T5908] veth0_vlan: entered promiscuous mode [ 187.992507][ T5908] veth1_vlan: entered promiscuous mode [ 188.019919][ T5908] veth0_macvtap: entered promiscuous mode [ 188.029736][ T5908] veth1_macvtap: entered promiscuous mode [ 188.046986][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.059550][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.071950][ T5908] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.080761][ T5908] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.089476][ T5908] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.099619][ T5908] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.234626][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.312506][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.379612][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.392633][ T5930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.400811][ T5930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.408613][ T5930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.416883][ T5930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.426611][ T5930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.454451][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/06/06 03:32:17 executed programs: 0 [ 190.169928][ T5930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.178783][ T5930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.188108][ T5930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.197096][ T5930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.205043][ T5930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.358500][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 190.430375][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.437557][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.445096][ T5961] bridge_slave_0: entered allmulticast mode [ 190.453925][ T5961] bridge_slave_0: entered promiscuous mode [ 190.461930][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.469428][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.476772][ T5961] bridge_slave_1: entered allmulticast mode [ 190.484519][ T5961] bridge_slave_1: entered promiscuous mode [ 190.515984][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.527768][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.562787][ T5961] team0: Port device team_slave_0 added [ 190.570975][ T5961] team0: Port device team_slave_1 added [ 190.599858][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.607266][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.633527][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.645856][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.652941][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.679186][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.722454][ T5961] hsr_slave_0: entered promiscuous mode [ 190.728898][ T5961] hsr_slave_1: entered promiscuous mode [ 190.735195][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.742939][ T5961] Cannot create hsr debugfs directory [ 190.969568][ T49] bridge_slave_1: left allmulticast mode [ 190.975703][ T49] bridge_slave_1: left promiscuous mode [ 190.982292][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.997055][ T49] bridge_slave_0: left allmulticast mode [ 191.002789][ T49] bridge_slave_0: left promiscuous mode [ 191.008466][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.198363][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.210847][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.221768][ T49] bond0 (unregistering): Released all slaves [ 191.334787][ T49] hsr_slave_0: left promiscuous mode [ 191.344046][ T49] hsr_slave_1: left promiscuous mode [ 191.355132][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.362770][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.371283][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.378883][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.401073][ T49] veth1_macvtap: left promiscuous mode [ 191.406771][ T49] veth0_macvtap: left promiscuous mode [ 191.412598][ T49] veth1_vlan: left promiscuous mode [ 191.418024][ T49] veth0_vlan: left promiscuous mode [ 191.794838][ T49] team0 (unregistering): Port device team_slave_1 removed [ 191.831213][ T49] team0 (unregistering): Port device team_slave_0 removed [ 192.209616][ T5961] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.226628][ T5961] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.230996][ T51] Bluetooth: hci0: command tx timeout [ 192.243162][ T5961] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.265832][ T5961] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.394652][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.429319][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.738076][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.745364][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.757690][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.764856][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.007873][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.070050][ T5961] veth0_vlan: entered promiscuous mode [ 193.096358][ T5961] veth1_vlan: entered promiscuous mode [ 193.135097][ T5961] veth0_macvtap: entered promiscuous mode [ 193.145029][ T5961] veth1_macvtap: entered promiscuous mode [ 193.162136][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.179480][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.191535][ T5961] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.200918][ T5961] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.209652][ T5961] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.218924][ T5961] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.276066][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.286315][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.311776][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.319706][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.374204][ T6002] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 193.394232][ T6002] team0: Port device wlan1 added [ 193.418562][ T6003] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 193.450193][ T6004] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 193.478510][ T6005] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 193.520642][ T6006] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 193.547255][ T6007] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 193.576024][ T6008] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 193.606872][ T6009] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 193.634003][ T6010] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 193.667100][ T6011] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 194.146315][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.152972][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.310350][ T51] Bluetooth: hci0: command tx timeout 2025/06/06 03:32:22 executed programs: 75 [ 196.380351][ T51] Bluetooth: hci0: command tx timeout [ 198.388770][ T6239] validate_nla: 227 callbacks suppressed [ 198.388784][ T6239] netlink: 'syz.0.253': attribute type 10 has an invalid length. [ 198.415249][ T6240] netlink: 'syz.0.254': attribute type 10 has an invalid length. [ 198.438029][ T6241] netlink: 'syz.0.255': attribute type 10 has an invalid length. [ 198.457762][ T6242] netlink: 'syz.0.256': attribute type 10 has an invalid length. [ 198.461345][ T51] Bluetooth: hci0: command tx timeout [ 198.485173][ T6243] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 198.504733][ T6244] netlink: 'syz.0.258': attribute type 10 has an invalid length. [ 198.526673][ T6245] netlink: 'syz.0.259': attribute type 10 has an invalid length. [ 198.552642][ T6246] netlink: 'syz.0.260': attribute type 10 has an invalid length. [ 198.573917][ T6247] netlink: 'syz.0.261': attribute type 10 has an invalid length. [ 198.596815][ T6248] netlink: 'syz.0.262': attribute type 10 has an invalid length. 2025/06/06 03:32:27 executed programs: 334 [ 203.396715][ T6516] validate_nla: 267 callbacks suppressed [ 203.396734][ T6516] netlink: 'syz.0.530': attribute type 10 has an invalid length. [ 203.426818][ T6517] netlink: 'syz.0.531': attribute type 10 has an invalid length. [ 203.447082][ T6518] netlink: 'syz.0.532': attribute type 10 has an invalid length. [ 203.477195][ T6519] netlink: 'syz.0.533': attribute type 10 has an invalid length. [ 203.498982][ T6520] netlink: 'syz.0.534': attribute type 10 has an invalid length. [ 203.519192][ T6521] netlink: 'syz.0.535': attribute type 10 has an invalid length. [ 203.540360][ T6522] netlink: 'syz.0.536': attribute type 10 has an invalid length. [ 203.559678][ T6523] netlink: 'syz.0.537': attribute type 10 has an invalid length. [ 203.580884][ T6524] netlink: 'syz.0.538': attribute type 10 has an invalid length. [ 203.605999][ T6525] netlink: 'syz.0.539': attribute type 10 has an invalid length. [ 205.008044][ T5930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.017037][ T5930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.035973][ T5930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.049944][ T5930] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.058191][ T5930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.189384][ T1004] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.217157][ T6604] chnl_net:caif_netlink_parms(): no params data found [ 205.237218][ T1004] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.304605][ T1004] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.331845][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.338987][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.346323][ T6604] bridge_slave_0: entered allmulticast mode [ 205.353481][ T6604] bridge_slave_0: entered promiscuous mode [ 205.361227][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.368356][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.375560][ T6604] bridge_slave_1: entered allmulticast mode [ 205.382691][ T6604] bridge_slave_1: entered promiscuous mode [ 205.409773][ T1004] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.436701][ T6604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.448377][ T6604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.488185][ T6604] team0: Port device team_slave_0 added [ 205.496683][ T6604] team0: Port device team_slave_1 added [ 205.527624][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.535302][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.561371][ T6604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.582048][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.589026][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.615261][ T6604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.692733][ T6604] hsr_slave_0: entered promiscuous mode [ 205.699028][ T6604] hsr_slave_1: entered promiscuous mode [ 205.723925][ T1004] bridge_slave_1: left allmulticast mode [ 205.729581][ T1004] bridge_slave_1: left promiscuous mode [ 205.735474][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.744769][ T1004] bridge_slave_0: left allmulticast mode [ 205.750983][ T1004] bridge_slave_0: left promiscuous mode [ 205.756707][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.978820][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.991016][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.001180][ T1004] bond0 (unregistering): Released all slaves [ 206.132058][ T1004] [ 206.134448][ T1004] ====================================================== [ 206.141480][ T1004] WARNING: possible circular locking dependency detected [ 206.148529][ T1004] 6.15.0-next-20250605-syzkaller #0 Not tainted [ 206.154783][ T1004] ------------------------------------------------------ [ 206.161806][ T1004] kworker/u8:5/1004 is trying to acquire lock: [ 206.167994][ T1004] ffff88805d1bce00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 206.177644][ T1004] [ 206.177644][ T1004] but task is already holding lock: [ 206.185035][ T1004] ffff888032610768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 206.195430][ T1004] [ 206.195430][ T1004] which lock already depends on the new lock. [ 206.195430][ T1004] [ 206.205839][ T1004] [ 206.205839][ T1004] the existing dependency chain (in reverse order) is: [ 206.214865][ T1004] [ 206.214865][ T1004] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 206.222628][ T1004] lock_acquire+0x120/0x360 [ 206.227657][ T1004] __mutex_lock+0x182/0xe80 [ 206.232679][ T1004] ieee80211_open+0xed/0x1f0 [ 206.237790][ T1004] __dev_open+0x46d/0x880 [ 206.242655][ T1004] netif_open+0xaa/0x170 [ 206.247420][ T1004] dev_open+0x125/0x260 [ 206.252112][ T1004] team_add_slave+0xb36/0x2840 [ 206.257399][ T1004] do_set_master+0x533/0x6d0 [ 206.262516][ T1004] do_setlink+0xcf0/0x41c0 [ 206.267457][ T1004] rtnl_newlink+0x160b/0x1c70 [ 206.272655][ T1004] rtnetlink_rcv_msg+0x7cf/0xb70 [ 206.278121][ T1004] netlink_rcv_skb+0x208/0x470 [ 206.283414][ T1004] netlink_unicast+0x75b/0x8d0 [ 206.288702][ T1004] netlink_sendmsg+0x805/0xb30 [ 206.293996][ T1004] __sock_sendmsg+0x219/0x270 [ 206.299219][ T1004] ____sys_sendmsg+0x505/0x830 [ 206.304522][ T1004] ___sys_sendmsg+0x21f/0x2a0 [ 206.309734][ T1004] __x64_sys_sendmsg+0x19b/0x260 [ 206.315201][ T1004] do_syscall_64+0xfa/0x3b0 [ 206.320226][ T1004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.326638][ T1004] [ 206.326638][ T1004] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 206.334813][ T1004] validate_chain+0xb9b/0x2140 [ 206.340098][ T1004] __lock_acquire+0xab9/0xd20 [ 206.345300][ T1004] lock_acquire+0x120/0x360 [ 206.350330][ T1004] __mutex_lock+0x182/0xe80 [ 206.355385][ T1004] team_del_slave+0x32/0x1c0 [ 206.360495][ T1004] team_device_event+0x285/0xa20 [ 206.365974][ T1004] notifier_call_chain+0x1b3/0x3e0 [ 206.371600][ T1004] unregister_netdevice_many_notify+0x15d8/0x2320 [ 206.378535][ T1004] unregister_netdevice_queue+0x33c/0x380 [ 206.384800][ T1004] _cfg80211_unregister_wdev+0x165/0x590 [ 206.390966][ T1004] ieee80211_remove_interfaces+0x49a/0x6d0 [ 206.397287][ T1004] ieee80211_unregister_hw+0x5d/0x2c0 [ 206.403183][ T1004] mac80211_hwsim_del_radio+0x275/0x460 [ 206.409247][ T1004] hwsim_exit_net+0x584/0x640 [ 206.414444][ T1004] ops_undo_list+0x49a/0x990 [ 206.419565][ T1004] cleanup_net+0x4c5/0x800 [ 206.424511][ T1004] process_scheduled_works+0xae1/0x17b0 [ 206.430612][ T1004] worker_thread+0x8a0/0xda0 [ 206.435721][ T1004] kthread+0x70e/0x8a0 [ 206.440317][ T1004] ret_from_fork+0x3f9/0x770 [ 206.445441][ T1004] ret_from_fork_asm+0x1a/0x30 [ 206.450727][ T1004] [ 206.450727][ T1004] other info that might help us debug this: [ 206.450727][ T1004] [ 206.460965][ T1004] Possible unsafe locking scenario: [ 206.460965][ T1004] [ 206.468409][ T1004] CPU0 CPU1 [ 206.473774][ T1004] ---- ---- [ 206.479150][ T1004] lock(&rdev->wiphy.mtx); [ 206.483665][ T1004] lock(team->team_lock_key#2); [ 206.491127][ T1004] lock(&rdev->wiphy.mtx); [ 206.498149][ T1004] lock(team->team_lock_key#2); [ 206.503103][ T1004] [ 206.503103][ T1004] *** DEADLOCK *** [ 206.503103][ T1004] [ 206.511239][ T1004] 5 locks held by kworker/u8:5/1004: [ 206.516516][ T1004] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 206.527413][ T1004] #1: ffffc900037ffbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 206.537952][ T1004] #2: ffffffff8f504fd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 206.547281][ T1004] #3: ffffffff8f511bc8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 206.557126][ T1004] #4: ffff888032610768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 206.567923][ T1004] [ 206.567923][ T1004] stack backtrace: [ 206.573854][ T1004] CPU: 1 UID: 0 PID: 1004 Comm: kworker/u8:5 Not tainted 6.15.0-next-20250605-syzkaller #0 PREEMPT(full) [ 206.573871][ T1004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.573881][ T1004] Workqueue: netns cleanup_net [ 206.573907][ T1004] Call Trace: [ 206.573913][ T1004] [ 206.573920][ T1004] dump_stack_lvl+0x189/0x250 [ 206.573935][ T1004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.573948][ T1004] ? __pfx__printk+0x10/0x10 [ 206.573963][ T1004] ? print_lock_name+0xde/0x100 [ 206.573979][ T1004] print_circular_bug+0x2ee/0x310 [ 206.573994][ T1004] check_noncircular+0x134/0x160 [ 206.574011][ T1004] validate_chain+0xb9b/0x2140 [ 206.574028][ T1004] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.574046][ T1004] __lock_acquire+0xab9/0xd20 [ 206.574068][ T1004] ? team_del_slave+0x32/0x1c0 [ 206.574083][ T1004] lock_acquire+0x120/0x360 [ 206.574102][ T1004] ? team_del_slave+0x32/0x1c0 [ 206.574121][ T1004] ? __mutex_trylock_common+0x153/0x260 [ 206.574137][ T1004] __mutex_lock+0x182/0xe80 [ 206.574152][ T1004] ? team_del_slave+0x32/0x1c0 [ 206.574168][ T1004] ? rcu_is_watching+0x15/0xb0 [ 206.574193][ T1004] ? team_del_slave+0x32/0x1c0 [ 206.574209][ T1004] ? __pfx___mutex_lock+0x10/0x10 [ 206.574224][ T1004] ? bond_netdev_event+0xd9/0xe80 [ 206.574243][ T1004] ? __pfx___mutex_lock+0x10/0x10 [ 206.574258][ T1004] ? __pfx_bond_netdev_event+0x10/0x10 [ 206.574279][ T1004] team_del_slave+0x32/0x1c0 [ 206.574295][ T1004] team_device_event+0x285/0xa20 [ 206.574317][ T1004] notifier_call_chain+0x1b3/0x3e0 [ 206.574332][ T1004] unregister_netdevice_many_notify+0x15d8/0x2320 [ 206.574360][ T1004] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 206.574375][ T1004] ? call_rcu+0x6dd/0x990 [ 206.574387][ T1004] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.574410][ T1004] unregister_netdevice_queue+0x33c/0x380 [ 206.574425][ T1004] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 206.574441][ T1004] _cfg80211_unregister_wdev+0x165/0x590 [ 206.574463][ T1004] ieee80211_remove_interfaces+0x49a/0x6d0 [ 206.574481][ T1004] ? __pfx_synchronize_rcu+0x10/0x10 [ 206.574495][ T1004] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 206.574511][ T1004] ? rcu_is_watching+0x15/0xb0 [ 206.574536][ T1004] ieee80211_unregister_hw+0x5d/0x2c0 [ 206.574560][ T1004] mac80211_hwsim_del_radio+0x275/0x460 [ 206.574580][ T1004] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 206.574602][ T1004] hwsim_exit_net+0x584/0x640 [ 206.574618][ T1004] ? __pfx_hwsim_exit_net+0x10/0x10 [ 206.574634][ T1004] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 206.574655][ T1004] ops_undo_list+0x49a/0x990 [ 206.574676][ T1004] ? __pfx_ops_undo_list+0x10/0x10 [ 206.574698][ T1004] cleanup_net+0x4c5/0x800 [ 206.574717][ T1004] ? __pfx_cleanup_net+0x10/0x10 [ 206.574736][ T1004] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.574758][ T1004] ? process_scheduled_works+0x9ef/0x17b0 [ 206.574779][ T1004] ? process_scheduled_works+0x9ef/0x17b0 [ 206.574801][ T1004] process_scheduled_works+0xae1/0x17b0 [ 206.574832][ T1004] ? __pfx_process_scheduled_works+0x10/0x10 [ 206.574859][ T1004] worker_thread+0x8a0/0xda0 [ 206.574872][ T1004] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 206.574897][ T1004] ? __kthread_parkme+0x7b/0x200 [ 206.574914][ T1004] kthread+0x70e/0x8a0 [ 206.574930][ T1004] ? __pfx_worker_thread+0x10/0x10 [ 206.574942][ T1004] ? __pfx_kthread+0x10/0x10 [ 206.574957][ T1004] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.574979][ T1004] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.574992][ T1004] ? __pfx_kthread+0x10/0x10 [ 206.575008][ T1004] ret_from_fork+0x3f9/0x770 [ 206.575029][ T1004] ? __pfx_ret_from_fork+0x10/0x10 [ 206.575050][ T1004] ? __switch_to_asm+0x39/0x70 [ 206.575064][ T1004] ? __switch_to_asm+0x33/0x70 [ 206.575078][ T1004] ? __pfx_kthread+0x10/0x10 [ 206.575093][ T1004] ret_from_fork_asm+0x1a/0x30 [ 206.575115][ T1004] [ 206.944788][ T1004] team0: Port device wlan1 removed [ 207.100408][ T5930] Bluetooth: hci1: command tx timeout [ 207.119499][ T1004] hsr_slave_0: left promiscuous mode [ 207.125320][ T1004] hsr_slave_1: left promiscuous mode [ 207.131091][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.138470][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.146201][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.153655][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.165751][ T1004] veth1_macvtap: left promiscuous mode [ 207.171311][ T1004] veth0_macvtap: left promiscuous mode [ 207.176828][ T1004] veth1_vlan: left promiscuous mode [ 207.182488][ T1004] veth0_vlan: left promiscuous mode [ 207.292196][ T1004] team0 (unregistering): Port device team_slave_1 removed [ 207.308539][ T1004] team0 (unregistering): Port device team_slave_0 removed [ 207.577790][ T6604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.593001][ T6604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.602159][ T6604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 207.613064][ T6604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 207.673191][ T6604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.699343][ T6604] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.712548][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.719656][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.732196][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.739289][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.890100][ T6604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.928752][ T6604] veth0_vlan: entered promiscuous mode [ 207.939334][ T6604] veth1_vlan: entered promiscuous mode [ 207.963704][ T6604] veth0_macvtap: entered promiscuous mode [ 207.972730][ T6604] veth1_macvtap: entered promiscuous mode [ 207.993683][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.007021][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.017944][ T6604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.027464][ T6604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.037232][ T6604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.047163][ T6604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.084382][ T6604] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 208.105513][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.114945][ T6604] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 208.122739][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/06/06 03:32:35 executed programs: 602 [ 208.142681][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.151861][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.196714][ T6662] team0: Port device wlan1 added [ 208.425195][ T6685] validate_nla: 88 callbacks suppressed [ 208.425207][ T6685] netlink: 'syz.0.628': attribute type 10 has an invalid length. [ 208.448865][ T6686] netlink: 'syz.0.629': attribute type 10 has an invalid length. [ 208.464647][ T6687] netlink: 'syz.0.630': attribute type 10 has an invalid length. [ 208.494698][ T6688] netlink: 'syz.0.631': attribute type 10 has an invalid length. [ 208.510067][ T6689] netlink: 'syz.0.632': attribute type 10 has an invalid length. [ 208.526389][ T6690] netlink: 'syz.0.633': attribute type 10 has an invalid length. [ 208.555225][ T6691] netlink: 'syz.0.634': attribute type 10 has an invalid length. [ 208.572968][ T6692] netlink: 'syz.0.635': attribute type 10 has an invalid length. [ 208.587850][ T6693] netlink: 'syz.0.636': attribute type 10 has an invalid length. [ 208.615014][ T6694] netlink: 'syz.0.637': attribute type 10 has an invalid length. [ 209.180402][ T5930] Bluetooth: hci1: command tx timeout [ 211.260275][ T5930] Bluetooth: hci1: command tx timeout 2025/06/06 03:32:40 executed programs: 894 [ 213.340848][ T5930] Bluetooth: hci1: command tx timeout [ 213.454530][ T6983] validate_nla: 287 callbacks suppressed [ 213.454542][ T6983] netlink: 'syz.0.925': attribute type 10 has an invalid length. [ 213.475940][ T6984] netlink: 'syz.0.926': attribute type 10 has an invalid length. [ 213.491243][ T6985] netlink: 'syz.0.927': attribute type 10 has an invalid length. [ 213.526151][ T6986] netlink: 'syz.0.928': attribute type 10 has an invalid length. [ 213.541553][ T6987] netlink: 'syz.0.929': attribute type 10 has an invalid length. [ 213.557011][ T6988] netlink: 'syz.0.930': attribute type 10 has an invalid length. [ 213.585498][ T6989] netlink: 'syz.0.931': attribute type 10 has an invalid length. [ 213.604119][ T6990] netlink: 'syz.0.932': attribute type 10 has an invalid length. [ 213.619642][ T6991] netlink: 'syz.0.933': attribute type 10 has an invalid length. [ 213.644308][ T6992] netlink: 'syz.0.934': attribute type 10 has an invalid length.