Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. 2025/06/09 11:00:40 ignoring optional flag "sandboxArg"="0" 2025/06/09 11:00:41 parsed 1 programs [ 310.040274][ T5872] cgroup: Unknown subsys name 'net' [ 310.213543][ T5872] cgroup: Unknown subsys name 'cpuset' [ 310.222855][ T5872] cgroup: Unknown subsys name 'rlimit' [ 311.922241][ T5872] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 314.734831][ T5880] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 315.428534][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.440480][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.448091][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.457638][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.465466][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.036767][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.049248][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.091749][ T4436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.099812][ T4436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.173588][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.183929][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.934821][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 318.017334][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.024821][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.032157][ T5940] bridge_slave_0: entered allmulticast mode [ 318.039509][ T5940] bridge_slave_0: entered promiscuous mode [ 318.049601][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.056797][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.064099][ T5940] bridge_slave_1: entered allmulticast mode [ 318.071877][ T5940] bridge_slave_1: entered promiscuous mode [ 318.110388][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.124728][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.165757][ T5940] team0: Port device team_slave_0 added [ 318.173785][ T5940] team0: Port device team_slave_1 added [ 318.204997][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.212124][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.238403][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.251371][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.258345][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.284313][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.334030][ T5940] hsr_slave_0: entered promiscuous mode [ 318.340849][ T5940] hsr_slave_1: entered promiscuous mode [ 318.505931][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 318.518440][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 318.529208][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 318.539388][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 318.623642][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.653083][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.667501][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.674882][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.691631][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.698805][ T4436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.898476][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.944951][ T5940] veth0_vlan: entered promiscuous mode [ 318.957879][ T5940] veth1_vlan: entered promiscuous mode [ 318.991669][ T5940] veth0_macvtap: entered promiscuous mode [ 319.001930][ T5940] veth1_macvtap: entered promiscuous mode [ 319.025677][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.041560][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.055676][ T5940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.064583][ T5940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.074385][ T5940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.083208][ T5940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.208664][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.275719][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.355940][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.466857][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/06/09 11:00:54 executed programs: 0 [ 319.979575][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.987611][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.996951][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.005328][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.014276][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.207784][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 320.298618][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.307185][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.314643][ T5976] bridge_slave_0: entered allmulticast mode [ 320.322643][ T5976] bridge_slave_0: entered promiscuous mode [ 320.330942][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.338139][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.345879][ T5976] bridge_slave_1: entered allmulticast mode [ 320.354351][ T5976] bridge_slave_1: entered promiscuous mode [ 320.397002][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.409851][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.450546][ T5976] team0: Port device team_slave_0 added [ 320.462569][ T5976] team0: Port device team_slave_1 added [ 320.497045][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.504886][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.532189][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.545667][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.552824][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.578811][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.637715][ T5976] hsr_slave_0: entered promiscuous mode [ 320.644862][ T5976] hsr_slave_1: entered promiscuous mode [ 320.651639][ T5976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.659394][ T5976] Cannot create hsr debugfs directory [ 322.050335][ T51] Bluetooth: hci0: command tx timeout [ 322.395314][ T12] bridge_slave_1: left allmulticast mode [ 322.402592][ T12] bridge_slave_1: left promiscuous mode [ 322.408618][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.420191][ T12] bridge_slave_0: left allmulticast mode [ 322.425958][ T12] bridge_slave_0: left promiscuous mode [ 322.432931][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.677377][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.688837][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.699019][ T12] bond0 (unregistering): Released all slaves [ 322.827178][ T12] hsr_slave_0: left promiscuous mode [ 322.834006][ T12] hsr_slave_1: left promiscuous mode [ 322.842915][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.852302][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.863385][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.871030][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.894336][ T12] veth1_macvtap: left promiscuous mode [ 322.906267][ T12] veth0_macvtap: left promiscuous mode [ 322.912534][ T12] veth1_vlan: left promiscuous mode [ 322.917975][ T12] veth0_vlan: left promiscuous mode [ 323.397561][ T12] team0 (unregistering): Port device team_slave_1 removed [ 323.426747][ T12] team0 (unregistering): Port device team_slave_0 removed [ 323.892488][ T5976] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.911641][ T5976] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.928610][ T5976] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.950979][ T5976] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 324.130640][ T51] Bluetooth: hci0: command tx timeout [ 324.288739][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.353474][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.378140][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.385332][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.400269][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.407593][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.469504][ T5976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.620930][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.663210][ T5976] veth0_vlan: entered promiscuous mode [ 324.674547][ T5976] veth1_vlan: entered promiscuous mode [ 324.706550][ T5976] veth0_macvtap: entered promiscuous mode [ 324.716184][ T5976] veth1_macvtap: entered promiscuous mode [ 324.734586][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.751087][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.763825][ T5976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.774496][ T5976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.784516][ T5976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.794209][ T5976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.853895][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.866544][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.895329][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.904844][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.951469][ T6021] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 324.972015][ T6021] team0: Port device wlan1 added [ 324.994150][ T6022] netlink: 'syz.0.17': attribute type 10 has an invalid length. 2025/06/09 11:00:59 executed programs: 3 [ 325.024886][ T6023] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 325.047775][ T6024] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 325.076210][ T6025] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 325.102275][ T6026] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 325.125721][ T6027] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 325.147448][ T6028] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 325.169264][ T6029] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 325.197104][ T6030] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 326.213213][ T51] Bluetooth: hci0: command tx timeout [ 328.289739][ T51] Bluetooth: hci0: command tx timeout [ 329.977559][ T6266] validate_nla: 235 callbacks suppressed [ 329.977573][ T6266] netlink: 'syz.0.261': attribute type 10 has an invalid length. [ 330.007041][ T6267] netlink: 'syz.0.262': attribute type 10 has an invalid length. 2025/06/09 11:01:04 executed programs: 248 [ 330.030449][ T6268] netlink: 'syz.0.263': attribute type 10 has an invalid length. [ 330.054317][ T6269] netlink: 'syz.0.264': attribute type 10 has an invalid length. [ 330.080979][ T6270] netlink: 'syz.0.265': attribute type 10 has an invalid length. [ 330.103894][ T6271] netlink: 'syz.0.266': attribute type 10 has an invalid length. [ 330.124960][ T6272] netlink: 'syz.0.267': attribute type 10 has an invalid length. [ 330.153726][ T6273] netlink: 'syz.0.268': attribute type 10 has an invalid length. [ 330.177207][ T6274] netlink: 'syz.0.269': attribute type 10 has an invalid length. [ 330.200343][ T6275] netlink: 'syz.0.270': attribute type 10 has an invalid length. [ 334.991405][ T6520] validate_nla: 244 callbacks suppressed [ 334.991421][ T6520] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 335.017625][ T6521] netlink: 'syz.0.516': attribute type 10 has an invalid length. [ 335.042491][ T6522] netlink: 'syz.0.517': attribute type 10 has an invalid length. [ 335.065332][ T6523] netlink: 'syz.0.518': attribute type 10 has an invalid length. 2025/06/09 11:01:09 executed programs: 504 [ 335.086703][ T6524] netlink: 'syz.0.519': attribute type 10 has an invalid length. [ 335.111159][ T6525] netlink: 'syz.0.520': attribute type 10 has an invalid length. [ 335.132286][ T6526] netlink: 'syz.0.521': attribute type 10 has an invalid length. [ 335.154827][ T6527] netlink: 'syz.0.522': attribute type 10 has an invalid length. [ 335.181485][ T6528] netlink: 'syz.0.523': attribute type 10 has an invalid length. [ 335.205505][ T6529] netlink: 'syz.0.524': attribute type 10 has an invalid length. [ 337.063715][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.072490][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.081656][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.091062][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.098932][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.255183][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.282125][ T6622] chnl_net:caif_netlink_parms(): no params data found [ 337.347217][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.396172][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.403861][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.412223][ T6622] bridge_slave_0: entered allmulticast mode [ 337.419964][ T6622] bridge_slave_0: entered promiscuous mode [ 337.428282][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.435939][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.444573][ T6622] bridge_slave_1: entered allmulticast mode [ 337.451928][ T6622] bridge_slave_1: entered promiscuous mode [ 337.493520][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.511907][ T6622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.523700][ T6622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.568046][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.585030][ T6622] team0: Port device team_slave_0 added [ 337.595788][ T6622] team0: Port device team_slave_1 added [ 337.627222][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.634516][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.662592][ T6622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.680865][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.687913][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.714438][ T6622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.776495][ T6622] hsr_slave_0: entered promiscuous mode [ 337.784248][ T6622] hsr_slave_1: entered promiscuous mode [ 337.868705][ T49] bridge_slave_1: left allmulticast mode [ 337.875148][ T49] bridge_slave_1: left promiscuous mode [ 337.881165][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.892497][ T49] bridge_slave_0: left allmulticast mode [ 337.898258][ T49] bridge_slave_0: left promiscuous mode [ 337.905338][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.128255][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.141120][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.151939][ T49] bond0 (unregistering): Released all slaves [ 338.276553][ T49] [ 338.278948][ T49] ====================================================== [ 338.285994][ T49] WARNING: possible circular locking dependency detected [ 338.293050][ T49] 6.15.0-syzkaller-12425-g82cbd06f327f #0 Not tainted [ 338.299845][ T49] ------------------------------------------------------ [ 338.306879][ T49] kworker/u8:3/49 is trying to acquire lock: [ 338.312877][ T49] ffff88807838ce00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 338.322538][ T49] [ 338.322538][ T49] but task is already holding lock: [ 338.329927][ T49] ffff88807b430768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 338.340366][ T49] [ 338.340366][ T49] which lock already depends on the new lock. [ 338.340366][ T49] [ 338.350835][ T49] [ 338.350835][ T49] the existing dependency chain (in reverse order) is: [ 338.359870][ T49] [ 338.359870][ T49] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 338.367635][ T49] lock_acquire+0x120/0x360 [ 338.372682][ T49] __mutex_lock+0x182/0xe80 [ 338.377728][ T49] ieee80211_open+0xed/0x1f0 [ 338.382859][ T49] __dev_open+0x46d/0x880 [ 338.387741][ T49] netif_open+0xaa/0x170 [ 338.392524][ T49] dev_open+0x125/0x260 [ 338.397206][ T49] team_add_slave+0xb36/0x2840 [ 338.402494][ T49] do_set_master+0x533/0x6d0 [ 338.407629][ T49] do_setlink+0xcf0/0x41c0 [ 338.412576][ T49] rtnl_newlink+0x160b/0x1c70 [ 338.417791][ T49] rtnetlink_rcv_msg+0x7cf/0xb70 [ 338.423269][ T49] netlink_rcv_skb+0x205/0x470 [ 338.428555][ T49] netlink_unicast+0x758/0x8d0 [ 338.433864][ T49] netlink_sendmsg+0x805/0xb30 [ 338.439156][ T49] __sock_sendmsg+0x21c/0x270 [ 338.444378][ T49] ____sys_sendmsg+0x505/0x830 [ 338.449672][ T49] ___sys_sendmsg+0x21f/0x2a0 [ 338.454877][ T49] __x64_sys_sendmsg+0x19b/0x260 [ 338.460433][ T49] do_syscall_64+0xfa/0x3b0 [ 338.465473][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.471892][ T49] [ 338.471892][ T49] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 338.480086][ T49] validate_chain+0xb9b/0x2140 [ 338.485377][ T49] __lock_acquire+0xab9/0xd20 [ 338.490589][ T49] lock_acquire+0x120/0x360 [ 338.495648][ T49] __mutex_lock+0x182/0xe80 [ 338.500686][ T49] team_del_slave+0x32/0x1c0 [ 338.505802][ T49] team_device_event+0x285/0xa20 [ 338.511275][ T49] notifier_call_chain+0x1b3/0x3e0 [ 338.516914][ T49] unregister_netdevice_many_notify+0x15d8/0x2320 [ 338.523881][ T49] unregister_netdevice_queue+0x33c/0x380 [ 338.530130][ T49] _cfg80211_unregister_wdev+0x165/0x590 [ 338.536299][ T49] ieee80211_remove_interfaces+0x49a/0x6d0 [ 338.542638][ T49] ieee80211_unregister_hw+0x5d/0x2c0 [ 338.548541][ T49] mac80211_hwsim_del_radio+0x275/0x460 [ 338.554615][ T49] hwsim_exit_net+0x584/0x640 [ 338.559813][ T49] ops_undo_list+0x497/0x990 [ 338.564927][ T49] cleanup_net+0x4c5/0x800 [ 338.569867][ T49] process_scheduled_works+0xae1/0x17b0 [ 338.575953][ T49] worker_thread+0x8a0/0xda0 [ 338.581073][ T49] kthread+0x70e/0x8a0 [ 338.585669][ T49] ret_from_fork+0x3f9/0x770 [ 338.590793][ T49] ret_from_fork_asm+0x1a/0x30 [ 338.596090][ T49] [ 338.596090][ T49] other info that might help us debug this: [ 338.596090][ T49] [ 338.606316][ T49] Possible unsafe locking scenario: [ 338.606316][ T49] [ 338.613772][ T49] CPU0 CPU1 [ 338.619142][ T49] ---- ---- [ 338.624508][ T49] lock(&rdev->wiphy.mtx); [ 338.629027][ T49] lock(team->team_lock_key#2); [ 338.636506][ T49] lock(&rdev->wiphy.mtx); [ 338.643543][ T49] lock(team->team_lock_key#2); [ 338.648501][ T49] [ 338.648501][ T49] *** DEADLOCK *** [ 338.648501][ T49] [ 338.656657][ T49] 5 locks held by kworker/u8:3/49: [ 338.661777][ T49] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 338.672683][ T49] #1: ffffc90000ba7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 338.683237][ T49] #2: ffffffff8f502a50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 338.692558][ T49] #3: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 338.702410][ T49] #4: ffff88807b430768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 338.713302][ T49] [ 338.713302][ T49] stack backtrace: [ 338.719222][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) [ 338.719242][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.719253][ T49] Workqueue: netns cleanup_net [ 338.719274][ T49] Call Trace: [ 338.719281][ T49] [ 338.719288][ T49] dump_stack_lvl+0x189/0x250 [ 338.719316][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.719341][ T49] ? __pfx__printk+0x10/0x10 [ 338.719358][ T49] ? print_lock_name+0xde/0x100 [ 338.719375][ T49] print_circular_bug+0x2ee/0x310 [ 338.719394][ T49] check_noncircular+0x134/0x160 [ 338.719412][ T49] validate_chain+0xb9b/0x2140 [ 338.719431][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.719456][ T49] __lock_acquire+0xab9/0xd20 [ 338.719481][ T49] ? team_del_slave+0x32/0x1c0 [ 338.719495][ T49] lock_acquire+0x120/0x360 [ 338.719516][ T49] ? team_del_slave+0x32/0x1c0 [ 338.719533][ T49] ? __mutex_trylock_common+0x153/0x260 [ 338.719552][ T49] __mutex_lock+0x182/0xe80 [ 338.719573][ T49] ? team_del_slave+0x32/0x1c0 [ 338.719588][ T49] ? rcu_is_watching+0x15/0xb0 [ 338.719604][ T49] ? team_del_slave+0x32/0x1c0 [ 338.719622][ T49] ? __pfx___mutex_lock+0x10/0x10 [ 338.719647][ T49] ? bond_netdev_event+0xd9/0xe80 [ 338.719665][ T49] ? __pfx___mutex_lock+0x10/0x10 [ 338.719687][ T49] ? __pfx_bond_netdev_event+0x10/0x10 [ 338.719707][ T49] team_del_slave+0x32/0x1c0 [ 338.719724][ T49] team_device_event+0x285/0xa20 [ 338.719745][ T49] notifier_call_chain+0x1b3/0x3e0 [ 338.719763][ T49] unregister_netdevice_many_notify+0x15d8/0x2320 [ 338.719790][ T49] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 338.719812][ T49] ? call_rcu+0x6dd/0x990 [ 338.719826][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.719856][ T49] unregister_netdevice_queue+0x33c/0x380 [ 338.719876][ T49] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 338.719899][ T49] _cfg80211_unregister_wdev+0x165/0x590 [ 338.719917][ T49] ieee80211_remove_interfaces+0x49a/0x6d0 [ 338.719940][ T49] ? __pfx_synchronize_rcu+0x10/0x10 [ 338.719956][ T49] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 338.719979][ T49] ? rcu_is_watching+0x15/0xb0 [ 338.719995][ T49] ieee80211_unregister_hw+0x5d/0x2c0 [ 338.720016][ T49] mac80211_hwsim_del_radio+0x275/0x460 [ 338.720036][ T49] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 338.720063][ T49] hwsim_exit_net+0x584/0x640 [ 338.720079][ T49] ? __pfx_hwsim_exit_net+0x10/0x10 [ 338.720105][ T49] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 338.720122][ T49] ops_undo_list+0x497/0x990 [ 338.720139][ T49] ? __pfx_ops_undo_list+0x10/0x10 [ 338.720157][ T49] cleanup_net+0x4c5/0x800 [ 338.720172][ T49] ? __pfx_cleanup_net+0x10/0x10 [ 338.720187][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.720204][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 338.720229][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 338.720253][ T49] process_scheduled_works+0xae1/0x17b0 [ 338.720287][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 338.720318][ T49] worker_thread+0x8a0/0xda0 [ 338.720341][ T49] kthread+0x70e/0x8a0 [ 338.720359][ T49] ? __pfx_worker_thread+0x10/0x10 [ 338.720373][ T49] ? __pfx_kthread+0x10/0x10 [ 338.720391][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.720408][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.720427][ T49] ? __pfx_kthread+0x10/0x10 [ 338.720445][ T49] ret_from_fork+0x3f9/0x770 [ 338.720469][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 338.720493][ T49] ? __switch_to_asm+0x39/0x70 [ 338.720508][ T49] ? __switch_to_asm+0x33/0x70 [ 338.720523][ T49] ? __pfx_kthread+0x10/0x10 [ 338.720541][ T49] ret_from_fork_asm+0x1a/0x30 [ 338.720563][ T49] [ 339.094983][ T49] team0: Port device wlan1 removed [ 339.171859][ T51] Bluetooth: hci0: command tx timeout [ 339.199531][ T49] hsr_slave_0: left promiscuous mode [ 339.206117][ T49] hsr_slave_1: left promiscuous mode [ 339.211943][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.219369][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.227561][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.235047][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.248723][ T49] veth1_macvtap: left promiscuous mode [ 339.254335][ T49] veth0_macvtap: left promiscuous mode [ 339.259968][ T49] veth1_vlan: left promiscuous mode [ 339.265270][ T49] veth0_vlan: left promiscuous mode [ 339.426431][ T49] team0 (unregistering): Port device team_slave_1 removed [ 339.447219][ T49] team0 (unregistering): Port device team_slave_0 removed [ 339.819590][ T6622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 339.829029][ T6622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 339.838394][ T6622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 339.847663][ T6622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 339.928760][ T6622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.944835][ T6622] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.956266][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.963415][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.973931][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.981085][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.016326][ T6622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.166688][ T6622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.209185][ T6622] veth0_vlan: entered promiscuous mode [ 340.223132][ T6622] veth1_vlan: entered promiscuous mode [ 340.250324][ T6622] veth0_macvtap: entered promiscuous mode [ 340.259052][ T6622] veth1_macvtap: entered promiscuous mode [ 340.277225][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.292238][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.303931][ T6622] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.314066][ T6622] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.324988][ T6622] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.335072][ T6622] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.377410][ T6622] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 340.403876][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.415640][ T6622] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 340.425261][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/06/09 11:01:15 executed programs: 602 [ 340.450716][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.458759][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.491715][ T6687] validate_nla: 91 callbacks suppressed [ 340.491733][ T6687] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 340.512396][ T6687] team0: Port device wlan1 added [ 340.532817][ T6690] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 340.562175][ T6692] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 340.587395][ T6694] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 340.613543][ T6695] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 340.638762][ T6699] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 340.664313][ T6700] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 340.687265][ T6702] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 340.710842][ T6704] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 340.734464][ T6706] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 341.259811][ T51] Bluetooth: hci0: command tx timeout [ 343.329821][ T51] Bluetooth: hci0: command tx timeout [ 345.409797][ T51] Bluetooth: hci0: command tx timeout 2025/06/09 11:01:20 executed programs: 889 [ 345.524907][ T7000] validate_nla: 279 callbacks suppressed [ 345.524922][ T7000] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 345.549103][ T7001] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 345.565181][ T7002] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 345.594401][ T7003] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 345.611995][ T7004] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 345.627909][ T7005] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 345.655521][ T7006] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 345.674642][ T7007] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 345.691210][ T7008] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 345.714260][ T7009] netlink: 'syz.0.914': attribute type 10 has an invalid length.