Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. 2025/06/09 17:52:10 ignoring optional flag "sandboxArg"="0" 2025/06/09 17:52:11 parsed 1 programs [ 317.968956][ T5877] cgroup: Unknown subsys name 'net' [ 318.125069][ T5877] cgroup: Unknown subsys name 'cpuset' [ 318.135296][ T5877] cgroup: Unknown subsys name 'rlimit' [ 319.796153][ T5877] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 322.825740][ T5888] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 324.467096][ T5914] chnl_net:caif_netlink_parms(): no params data found [ 324.587490][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.595439][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.603368][ T5914] bridge_slave_0: entered allmulticast mode [ 324.610717][ T5914] bridge_slave_0: entered promiscuous mode [ 324.620380][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.627836][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.635158][ T5914] bridge_slave_1: entered allmulticast mode [ 324.642449][ T5914] bridge_slave_1: entered promiscuous mode [ 324.680091][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.694775][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.736542][ T5914] team0: Port device team_slave_0 added [ 324.745937][ T5914] team0: Port device team_slave_1 added [ 324.778143][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.785176][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.811141][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.824008][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.831076][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.857075][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.907636][ T5914] hsr_slave_0: entered promiscuous mode [ 324.914207][ T5914] hsr_slave_1: entered promiscuous mode [ 325.079918][ T5914] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 325.093675][ T5914] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 325.104876][ T5914] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 325.115582][ T5914] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 325.149371][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.156732][ T5914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.164879][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.172142][ T5914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.234519][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.255783][ T2990] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.264327][ T2990] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.283597][ T5914] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.298563][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.305781][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.320741][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.327953][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.529486][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.576128][ T5914] veth0_vlan: entered promiscuous mode [ 325.588552][ T5914] veth1_vlan: entered promiscuous mode [ 325.619554][ T5914] veth0_macvtap: entered promiscuous mode [ 325.630603][ T5914] veth1_macvtap: entered promiscuous mode [ 325.652722][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.667330][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.679347][ T5914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.689703][ T5914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.698540][ T5914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.707751][ T5914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.879790][ T2990] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.961181][ T2990] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.034458][ T2990] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.119016][ T2990] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.383737][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.392140][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.400088][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.409574][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.418011][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.766206][ T3035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.775144][ T3035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.805325][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.814736][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/06/09 17:52:25 executed programs: 0 [ 328.416409][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.425288][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.435508][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.445213][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.454247][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.641375][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 328.726417][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.734110][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.741491][ T5980] bridge_slave_0: entered allmulticast mode [ 328.748842][ T5980] bridge_slave_0: entered promiscuous mode [ 328.757839][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.765119][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.772666][ T5980] bridge_slave_1: entered allmulticast mode [ 328.779907][ T5980] bridge_slave_1: entered promiscuous mode [ 328.819359][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.832175][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.876321][ T5980] team0: Port device team_slave_0 added [ 328.886814][ T5980] team0: Port device team_slave_1 added [ 328.962951][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.969986][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.996881][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.009867][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.016914][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.043211][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.155990][ T5980] hsr_slave_0: entered promiscuous mode [ 329.164452][ T5980] hsr_slave_1: entered promiscuous mode [ 329.172663][ T5980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.181342][ T5980] Cannot create hsr debugfs directory [ 329.187973][ T2990] bridge_slave_1: left allmulticast mode [ 329.194666][ T2990] bridge_slave_1: left promiscuous mode [ 329.201249][ T2990] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.214039][ T2990] bridge_slave_0: left allmulticast mode [ 329.219726][ T2990] bridge_slave_0: left promiscuous mode [ 329.225865][ T2990] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.571074][ T2990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.583676][ T2990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.594874][ T2990] bond0 (unregistering): Released all slaves [ 329.733131][ T2990] hsr_slave_0: left promiscuous mode [ 329.739862][ T2990] hsr_slave_1: left promiscuous mode [ 329.746282][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.753976][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.764607][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.773103][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.797432][ T2990] veth1_macvtap: left promiscuous mode [ 329.803306][ T2990] veth0_macvtap: left promiscuous mode [ 329.809614][ T2990] veth1_vlan: left promiscuous mode [ 329.817073][ T2990] veth0_vlan: left promiscuous mode [ 330.308364][ T2990] team0 (unregistering): Port device team_slave_1 removed [ 330.343240][ T2990] team0 (unregistering): Port device team_slave_0 removed [ 330.474969][ T5156] Bluetooth: hci0: command tx timeout [ 331.524251][ T5980] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 331.540209][ T5980] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 331.559727][ T5980] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 331.576512][ T5980] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 331.879118][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.904575][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.936152][ T3035] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.943414][ T3035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.031903][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.039116][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.439622][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.503866][ T5980] veth0_vlan: entered promiscuous mode [ 332.520427][ T5980] veth1_vlan: entered promiscuous mode [ 332.551810][ T5156] Bluetooth: hci0: command tx timeout [ 332.573440][ T5980] veth0_macvtap: entered promiscuous mode [ 332.586159][ T5980] veth1_macvtap: entered promiscuous mode [ 332.608268][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.627442][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.654803][ T5980] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.672860][ T5980] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.690926][ T5980] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.699689][ T5980] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.859209][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.877988][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.930482][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.939795][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.066597][ T6053] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 333.123045][ T6053] team0: Port device wlan1 added [ 333.176211][ T6056] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 333.238502][ T6058] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 333.280043][ T6059] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 333.330432][ T6061] netlink: 'syz.0.20': attribute type 10 has an invalid length. 2025/06/09 17:52:30 executed programs: 7 [ 333.397844][ T6062] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 333.449139][ T6064] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 333.485924][ T6065] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 333.535875][ T6067] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 333.568921][ T6069] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 334.631124][ T5156] Bluetooth: hci0: command tx timeout [ 336.711363][ T5156] Bluetooth: hci0: command tx timeout [ 338.078226][ T6256] validate_nla: 163 callbacks suppressed [ 338.078246][ T6256] netlink: 'syz.0.189': attribute type 10 has an invalid length. [ 338.113100][ T6257] netlink: 'syz.0.190': attribute type 10 has an invalid length. [ 338.153024][ T6258] netlink: 'syz.0.191': attribute type 10 has an invalid length. [ 338.182864][ T6259] netlink: 'syz.0.192': attribute type 10 has an invalid length. [ 338.214156][ T6260] netlink: 'syz.0.193': attribute type 10 has an invalid length. [ 338.240415][ T6261] netlink: 'syz.0.194': attribute type 10 has an invalid length. [ 338.276137][ T6262] netlink: 'syz.0.195': attribute type 10 has an invalid length. [ 338.305429][ T6263] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 338.345366][ T6264] netlink: 'syz.0.197': attribute type 10 has an invalid length. [ 338.375215][ T6265] netlink: 'syz.0.198': attribute type 10 has an invalid length. 2025/06/09 17:52:35 executed programs: 186 [ 343.092970][ T6483] validate_nla: 217 callbacks suppressed [ 343.092986][ T6483] netlink: 'syz.0.416': attribute type 10 has an invalid length. [ 343.119762][ T6484] netlink: 'syz.0.417': attribute type 10 has an invalid length. [ 343.142848][ T6485] netlink: 'syz.0.418': attribute type 10 has an invalid length. [ 343.165971][ T6486] netlink: 'syz.0.419': attribute type 10 has an invalid length. [ 343.187554][ T6487] netlink: 'syz.0.420': attribute type 10 has an invalid length. [ 343.220597][ T6488] netlink: 'syz.0.421': attribute type 10 has an invalid length. [ 343.241940][ T6489] netlink: 'syz.0.422': attribute type 10 has an invalid length. [ 343.265291][ T6490] netlink: 'syz.0.423': attribute type 10 has an invalid length. [ 343.289614][ T6491] netlink: 'syz.0.424': attribute type 10 has an invalid length. [ 343.313275][ T6492] netlink: 'syz.0.425': attribute type 10 has an invalid length. 2025/06/09 17:52:40 executed programs: 417 [ 347.215698][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.228872][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.242626][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.253333][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.261330][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.408582][ T3009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.476938][ T3009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.492215][ T6685] chnl_net:caif_netlink_parms(): no params data found [ 347.540402][ T3009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.598419][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.606079][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.613899][ T6685] bridge_slave_0: entered allmulticast mode [ 347.622064][ T6685] bridge_slave_0: entered promiscuous mode [ 347.640260][ T3009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.656011][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.663283][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.670499][ T6685] bridge_slave_1: entered allmulticast mode [ 347.678930][ T6685] bridge_slave_1: entered promiscuous mode [ 347.718443][ T6685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.731579][ T6685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.773737][ T6685] team0: Port device team_slave_0 added [ 347.793140][ T6685] team0: Port device team_slave_1 added [ 347.865996][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.874172][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.900637][ T6685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.913449][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.920419][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.947470][ T6685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.959412][ T3009] bridge_slave_1: left allmulticast mode [ 347.965401][ T3009] bridge_slave_1: left promiscuous mode [ 347.971699][ T3009] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.982484][ T3009] bridge_slave_0: left allmulticast mode [ 347.988152][ T3009] bridge_slave_0: left promiscuous mode [ 347.994354][ T3009] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.252616][ T3009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.263921][ T3009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.274486][ T3009] bond0 (unregistering): Released all slaves [ 348.350685][ T6685] hsr_slave_0: entered promiscuous mode [ 348.357392][ T6685] hsr_slave_1: entered promiscuous mode [ 348.371054][ T3009] [ 348.373437][ T3009] ====================================================== [ 348.380458][ T3009] WARNING: possible circular locking dependency detected [ 348.387588][ T3009] 6.15.0-syzkaller-g02670deede22 #0 Not tainted [ 348.393924][ T3009] ------------------------------------------------------ [ 348.400954][ T3009] kworker/u8:7/3009 is trying to acquire lock: [ 348.407121][ T3009] ffff888030978e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 348.416762][ T3009] [ 348.416762][ T3009] but task is already holding lock: [ 348.424136][ T3009] ffff888030fc0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 348.434508][ T3009] [ 348.434508][ T3009] which lock already depends on the new lock. [ 348.434508][ T3009] [ 348.444921][ T3009] [ 348.444921][ T3009] the existing dependency chain (in reverse order) is: [ 348.453946][ T3009] [ 348.453946][ T3009] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 348.461699][ T3009] lock_acquire+0x120/0x360 [ 348.466753][ T3009] __mutex_lock+0x182/0xe80 [ 348.471842][ T3009] ieee80211_open+0xed/0x1f0 [ 348.477028][ T3009] __dev_open+0x46d/0x880 [ 348.481903][ T3009] netif_open+0xaa/0x170 [ 348.486742][ T3009] dev_open+0x125/0x260 [ 348.491442][ T3009] team_add_slave+0xb36/0x2840 [ 348.496745][ T3009] do_set_master+0x533/0x6d0 [ 348.501890][ T3009] do_setlink+0xcf0/0x41c0 [ 348.506839][ T3009] rtnl_newlink+0x160b/0x1c70 [ 348.512050][ T3009] rtnetlink_rcv_msg+0x7cf/0xb70 [ 348.517526][ T3009] netlink_rcv_skb+0x205/0x470 [ 348.522831][ T3009] netlink_unicast+0x758/0x8d0 [ 348.528129][ T3009] netlink_sendmsg+0x805/0xb30 [ 348.533429][ T3009] __sock_sendmsg+0x21c/0x270 [ 348.538741][ T3009] ____sys_sendmsg+0x505/0x830 [ 348.544049][ T3009] ___sys_sendmsg+0x21f/0x2a0 [ 348.549263][ T3009] __x64_sys_sendmsg+0x19b/0x260 [ 348.554741][ T3009] do_syscall_64+0xfa/0x3b0 [ 348.559784][ T3009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.566215][ T3009] [ 348.566215][ T3009] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 348.574417][ T3009] validate_chain+0xb9b/0x2140 [ 348.579721][ T3009] __lock_acquire+0xab9/0xd20 [ 348.584939][ T3009] lock_acquire+0x120/0x360 [ 348.589982][ T3009] __mutex_lock+0x182/0xe80 [ 348.595017][ T3009] team_del_slave+0x32/0x1c0 [ 348.600141][ T3009] team_device_event+0x285/0xa20 [ 348.605619][ T3009] notifier_call_chain+0x1b3/0x3e0 [ 348.611264][ T3009] unregister_netdevice_many_notify+0x15d8/0x2320 [ 348.618226][ T3009] unregister_netdevice_queue+0x33c/0x380 [ 348.624491][ T3009] _cfg80211_unregister_wdev+0x165/0x590 [ 348.630665][ T3009] ieee80211_remove_interfaces+0x49a/0x6d0 [ 348.637034][ T3009] ieee80211_unregister_hw+0x5d/0x2c0 [ 348.642968][ T3009] mac80211_hwsim_del_radio+0x275/0x460 [ 348.649067][ T3009] hwsim_exit_net+0x584/0x640 [ 348.654289][ T3009] ops_undo_list+0x497/0x990 [ 348.659422][ T3009] cleanup_net+0x4c5/0x800 [ 348.664395][ T3009] process_scheduled_works+0xae1/0x17b0 [ 348.670594][ T3009] worker_thread+0x8a0/0xda0 [ 348.675729][ T3009] kthread+0x70e/0x8a0 [ 348.680344][ T3009] ret_from_fork+0x3f9/0x770 [ 348.685474][ T3009] ret_from_fork_asm+0x1a/0x30 [ 348.690793][ T3009] [ 348.690793][ T3009] other info that might help us debug this: [ 348.690793][ T3009] [ 348.701032][ T3009] Possible unsafe locking scenario: [ 348.701032][ T3009] [ 348.708489][ T3009] CPU0 CPU1 [ 348.713887][ T3009] ---- ---- [ 348.719279][ T3009] lock(&rdev->wiphy.mtx); [ 348.723808][ T3009] lock(team->team_lock_key#2); [ 348.731380][ T3009] lock(&rdev->wiphy.mtx); [ 348.738417][ T3009] lock(team->team_lock_key#2); [ 348.743380][ T3009] [ 348.743380][ T3009] *** DEADLOCK *** [ 348.743380][ T3009] [ 348.751538][ T3009] 5 locks held by kworker/u8:7/3009: [ 348.756851][ T3009] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 348.767782][ T3009] #1: ffffc9000b8afbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 348.778345][ T3009] #2: ffffffff8f503b10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 348.787858][ T3009] #3: ffffffff8f510708 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 348.797731][ T3009] #4: ffff888030fc0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 348.808556][ T3009] [ 348.808556][ T3009] stack backtrace: [ 348.814483][ T3009] CPU: 1 UID: 0 PID: 3009 Comm: kworker/u8:7 Not tainted 6.15.0-syzkaller-g02670deede22 #0 PREEMPT(full) [ 348.814502][ T3009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 348.814514][ T3009] Workqueue: netns cleanup_net [ 348.814543][ T3009] Call Trace: [ 348.814551][ T3009] [ 348.814558][ T3009] dump_stack_lvl+0x189/0x250 [ 348.814588][ T3009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.814612][ T3009] ? __pfx__printk+0x10/0x10 [ 348.814630][ T3009] ? print_lock_name+0xde/0x100 [ 348.814647][ T3009] print_circular_bug+0x2ee/0x310 [ 348.814666][ T3009] check_noncircular+0x134/0x160 [ 348.814684][ T3009] validate_chain+0xb9b/0x2140 [ 348.814703][ T3009] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.814733][ T3009] __lock_acquire+0xab9/0xd20 [ 348.814759][ T3009] ? team_del_slave+0x32/0x1c0 [ 348.814776][ T3009] lock_acquire+0x120/0x360 [ 348.814798][ T3009] ? team_del_slave+0x32/0x1c0 [ 348.814815][ T3009] ? __mutex_trylock_common+0x153/0x260 [ 348.814833][ T3009] __mutex_lock+0x182/0xe80 [ 348.814848][ T3009] ? team_del_slave+0x32/0x1c0 [ 348.814863][ T3009] ? rcu_is_watching+0x15/0xb0 [ 348.814881][ T3009] ? team_del_slave+0x32/0x1c0 [ 348.814896][ T3009] ? __pfx___mutex_lock+0x10/0x10 [ 348.814911][ T3009] ? bond_netdev_event+0xd9/0xe80 [ 348.814930][ T3009] ? __pfx___mutex_lock+0x10/0x10 [ 348.814945][ T3009] ? __pfx_bond_netdev_event+0x10/0x10 [ 348.814965][ T3009] team_del_slave+0x32/0x1c0 [ 348.814982][ T3009] team_device_event+0x285/0xa20 [ 348.815009][ T3009] notifier_call_chain+0x1b3/0x3e0 [ 348.815027][ T3009] unregister_netdevice_many_notify+0x15d8/0x2320 [ 348.815066][ T3009] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 348.815091][ T3009] ? call_rcu+0x6dd/0x990 [ 348.815106][ T3009] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.815140][ T3009] unregister_netdevice_queue+0x33c/0x380 [ 348.815165][ T3009] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 348.815192][ T3009] _cfg80211_unregister_wdev+0x165/0x590 [ 348.815214][ T3009] ieee80211_remove_interfaces+0x49a/0x6d0 [ 348.815232][ T3009] ? __pfx_synchronize_rcu+0x10/0x10 [ 348.815248][ T3009] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 348.815265][ T3009] ? rcu_is_watching+0x15/0xb0 [ 348.815281][ T3009] ieee80211_unregister_hw+0x5d/0x2c0 [ 348.815306][ T3009] mac80211_hwsim_del_radio+0x275/0x460 [ 348.815327][ T3009] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 348.815349][ T3009] hwsim_exit_net+0x584/0x640 [ 348.815364][ T3009] ? __pfx_hwsim_exit_net+0x10/0x10 [ 348.815379][ T3009] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 348.815402][ T3009] ops_undo_list+0x497/0x990 [ 348.815423][ T3009] ? __pfx_ops_undo_list+0x10/0x10 [ 348.815445][ T3009] cleanup_net+0x4c5/0x800 [ 348.815464][ T3009] ? __pfx_cleanup_net+0x10/0x10 [ 348.815483][ T3009] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.815505][ T3009] ? process_scheduled_works+0x9ef/0x17b0 [ 348.815530][ T3009] ? process_scheduled_works+0x9ef/0x17b0 [ 348.815555][ T3009] process_scheduled_works+0xae1/0x17b0 [ 348.815590][ T3009] ? __pfx_process_scheduled_works+0x10/0x10 [ 348.815620][ T3009] worker_thread+0x8a0/0xda0 [ 348.815643][ T3009] kthread+0x70e/0x8a0 [ 348.815662][ T3009] ? __pfx_worker_thread+0x10/0x10 [ 348.815676][ T3009] ? __pfx_kthread+0x10/0x10 [ 348.815694][ T3009] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.815716][ T3009] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.815739][ T3009] ? __pfx_kthread+0x10/0x10 [ 348.815759][ T3009] ret_from_fork+0x3f9/0x770 [ 348.815783][ T3009] ? __pfx_ret_from_fork+0x10/0x10 [ 348.815807][ T3009] ? __switch_to_asm+0x39/0x70 [ 348.815823][ T3009] ? __switch_to_asm+0x33/0x70 [ 348.815838][ T3009] ? __pfx_kthread+0x10/0x10 [ 348.815856][ T3009] ret_from_fork_asm+0x1a/0x30 [ 348.815878][ T3009] [ 349.177438][ T3009] team0: Port device wlan1 removed [ 349.351071][ T5156] Bluetooth: hci0: command tx timeout [ 349.385560][ T3009] hsr_slave_0: left promiscuous mode [ 349.391938][ T3009] hsr_slave_1: left promiscuous mode [ 349.397961][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.407674][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.415819][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.423294][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.434623][ T3009] veth1_macvtap: left promiscuous mode [ 349.440187][ T3009] veth0_macvtap: left promiscuous mode [ 349.445873][ T3009] veth1_vlan: left promiscuous mode [ 349.451709][ T3009] veth0_vlan: left promiscuous mode [ 349.630211][ T3009] team0 (unregistering): Port device team_slave_1 removed [ 349.653798][ T3009] team0 (unregistering): Port device team_slave_0 removed [ 349.936817][ T6685] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 349.947496][ T6685] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 349.957617][ T6685] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 349.982138][ T6685] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 350.085785][ T6685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.105447][ T6685] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.116811][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.124026][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.148934][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.156160][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.298688][ T6685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.327462][ T6685] veth0_vlan: entered promiscuous mode [ 350.337153][ T6685] veth1_vlan: entered promiscuous mode [ 350.358743][ T6685] veth0_macvtap: entered promiscuous mode [ 350.366976][ T6685] veth1_macvtap: entered promiscuous mode [ 350.380723][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.394923][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.405367][ T6685] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.414557][ T6685] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.423709][ T6685] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.432713][ T6685] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.459134][ T6685] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 350.479726][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.481628][ T6685] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 350.493160][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/06/09 17:52:47 executed programs: 602 [ 350.512949][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.520958][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.567786][ T6733] validate_nla: 190 callbacks suppressed [ 350.567802][ T6733] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 350.587708][ T6733] team0: Port device wlan1 added [ 350.602858][ T6734] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 350.624263][ T6735] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 350.647265][ T6736] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 350.666526][ T6737] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 350.684894][ T6738] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 350.705694][ T6739] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 350.724417][ T6740] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 350.741228][ T6741] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 350.766089][ T6742] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 351.434213][ T5156] Bluetooth: hci0: command tx timeout [ 353.511582][ T5156] Bluetooth: hci0: command tx timeout 2025/06/09 17:52:52 executed programs: 894 [ 355.591470][ T5156] Bluetooth: hci0: command tx timeout [ 355.596091][ T7028] validate_nla: 285 callbacks suppressed [ 355.596117][ T7028] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 355.621580][ T7029] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 355.638345][ T7030] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 355.666888][ T7031] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 355.685148][ T7032] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 355.701836][ T7033] netlink: 'syz.0.916': attribute type 10 has an invalid length. [ 355.725585][ T7034] netlink: 'syz.0.917': attribute type 10 has an invalid length. [ 355.742894][ T7035] netlink: 'syz.0.918': attribute type 10 has an invalid length. [ 355.763104][ T7036] netlink: 'syz.0.919': attribute type 10 has an invalid length. [ 355.785732][ T7037] netlink: 'syz.0.920': attribute type 10 has an invalid length.