Warning: Permanently added '10.128.1.216' (ED25519) to the list of known hosts. 2025/07/21 22:30:54 ignoring optional flag "sandboxArg"="0" 2025/07/21 22:30:55 parsed 1 programs [ 91.435706][ T5850] cgroup: Unknown subsys name 'net' [ 91.572589][ T5850] cgroup: Unknown subsys name 'cpuset' [ 91.582005][ T5850] cgroup: Unknown subsys name 'rlimit' [ 92.040717][ T978] cfg80211: failed to load regulatory.db [ 93.374178][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.234570][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.251263][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.300080][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.308337][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.395400][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.322368][ T5896] chnl_net:caif_netlink_parms(): no params data found [ 98.424491][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.433763][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.441646][ T5896] bridge_slave_0: entered allmulticast mode [ 98.449367][ T5896] bridge_slave_0: entered promiscuous mode [ 98.462383][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.469683][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.476827][ T5896] bridge_slave_1: entered allmulticast mode [ 98.484299][ T5896] bridge_slave_1: entered promiscuous mode [ 98.519804][ T5896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.531776][ T5896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.567306][ T5896] team0: Port device team_slave_0 added [ 98.575725][ T5896] team0: Port device team_slave_1 added [ 98.606692][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.613742][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.639858][ T5896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.654280][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.661328][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.687352][ T5896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.734204][ T5896] hsr_slave_0: entered promiscuous mode [ 98.740861][ T5896] hsr_slave_1: entered promiscuous mode [ 98.891409][ T5896] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.904070][ T5896] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.914071][ T5896] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.924562][ T5896] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.956358][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.963589][ T5896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.971572][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.978724][ T5896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.043845][ T5896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.061624][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.072380][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.089768][ T5896] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.104929][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.112095][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.126208][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.133388][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.329660][ T5896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.374682][ T5896] veth0_vlan: entered promiscuous mode [ 99.387342][ T5896] veth1_vlan: entered promiscuous mode [ 99.422454][ T5896] veth0_macvtap: entered promiscuous mode [ 99.433423][ T5896] veth1_macvtap: entered promiscuous mode [ 99.452531][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.466737][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.480274][ T5896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.489524][ T5896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.498261][ T5896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.507090][ T5896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.658943][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.685843][ T5919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.694169][ T5919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.702425][ T5919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.713570][ T5919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.724759][ T5919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.749132][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.814859][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.901793][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/07/21 22:31:09 executed programs: 0 [ 101.797721][ T5919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.807426][ T5919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.815535][ T5919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.824287][ T5919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.833623][ T5919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.048124][ T12] bridge_slave_1: left allmulticast mode [ 102.055852][ T12] bridge_slave_1: left promiscuous mode [ 102.064248][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.076845][ T12] bridge_slave_0: left allmulticast mode [ 102.083493][ T12] bridge_slave_0: left promiscuous mode [ 102.089719][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.341011][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.353286][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.365662][ T12] bond0 (unregistering): Released all slaves [ 102.385356][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 102.498019][ T12] hsr_slave_0: left promiscuous mode [ 102.505818][ T12] hsr_slave_1: left promiscuous mode [ 102.517854][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.525450][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.535728][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.543291][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.564518][ T12] veth1_macvtap: left promiscuous mode [ 102.570463][ T12] veth0_macvtap: left promiscuous mode [ 102.576402][ T12] veth1_vlan: left promiscuous mode [ 102.582029][ T12] veth0_vlan: left promiscuous mode [ 103.064031][ T12] team0 (unregistering): Port device team_slave_1 removed [ 103.111836][ T12] team0 (unregistering): Port device team_slave_0 removed [ 103.361141][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.368349][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.375771][ T5955] bridge_slave_0: entered allmulticast mode [ 103.383786][ T5955] bridge_slave_0: entered promiscuous mode [ 103.426201][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.433960][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.441401][ T5955] bridge_slave_1: entered allmulticast mode [ 103.449802][ T5955] bridge_slave_1: entered promiscuous mode [ 103.495094][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.511800][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.559045][ T5955] team0: Port device team_slave_0 added [ 103.569294][ T5955] team0: Port device team_slave_1 added [ 103.615144][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.622742][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.650562][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.663691][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.672403][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.704069][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.847751][ T5955] hsr_slave_0: entered promiscuous mode [ 103.862970][ T5955] hsr_slave_1: entered promiscuous mode [ 103.870444][ T5167] Bluetooth: hci0: command tx timeout [ 105.157284][ T5955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.183566][ T5955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.195132][ T5955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.216838][ T5955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.331791][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.359602][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.373995][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.381191][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.398699][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.405978][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.686451][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.748713][ T5955] veth0_vlan: entered promiscuous mode [ 105.762566][ T5955] veth1_vlan: entered promiscuous mode [ 105.804420][ T5955] veth0_macvtap: entered promiscuous mode [ 105.820805][ T5955] veth1_macvtap: entered promiscuous mode [ 105.845458][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.864503][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.880914][ T5955] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.891249][ T5955] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.902947][ T5955] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.912842][ T5955] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.948631][ T5167] Bluetooth: hci0: command tx timeout [ 106.022107][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.051886][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.090364][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.098312][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.187661][ T6032] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 106.249251][ T6032] team0: Port device wlan1 added [ 106.297014][ T6036] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 106.357329][ T6039] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 106.413705][ T6040] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 106.451110][ T6041] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 106.482558][ T6043] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 106.523797][ T6046] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 106.571861][ T6047] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 106.614918][ T6048] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 106.678011][ T6050] netlink: 'syz.0.25': attribute type 10 has an invalid length. 2025/07/21 22:31:14 executed programs: 14 [ 108.031425][ T5167] Bluetooth: hci0: command tx timeout [ 110.109330][ T5167] Bluetooth: hci0: command tx timeout [ 111.216508][ T6246] validate_nla: 166 callbacks suppressed [ 111.216523][ T6246] netlink: 'syz.0.192': attribute type 10 has an invalid length. [ 111.249974][ T6247] netlink: 'syz.0.193': attribute type 10 has an invalid length. [ 111.271137][ T6248] netlink: 'syz.0.194': attribute type 10 has an invalid length. [ 111.294500][ T6249] netlink: 'syz.0.195': attribute type 10 has an invalid length. [ 111.320897][ T6250] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 111.345444][ T6251] netlink: 'syz.0.197': attribute type 10 has an invalid length. [ 111.367067][ T6252] netlink: 'syz.0.198': attribute type 10 has an invalid length. [ 111.390541][ T6253] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 111.416763][ T6254] netlink: 'syz.0.200': attribute type 10 has an invalid length. [ 111.439525][ T6255] netlink: 'syz.0.201': attribute type 10 has an invalid length. 2025/07/21 22:31:19 executed programs: 206 [ 116.238324][ T6490] validate_nla: 233 callbacks suppressed [ 116.238338][ T6490] netlink: 'syz.0.435': attribute type 10 has an invalid length. [ 116.267520][ T6491] netlink: 'syz.0.436': attribute type 10 has an invalid length. [ 116.289463][ T6492] netlink: 'syz.0.437': attribute type 10 has an invalid length. [ 116.311724][ T6493] netlink: 'syz.0.438': attribute type 10 has an invalid length. [ 116.333521][ T6494] netlink: 'syz.0.439': attribute type 10 has an invalid length. [ 116.362628][ T6495] netlink: 'syz.0.440': attribute type 10 has an invalid length. [ 116.386883][ T6496] netlink: 'syz.0.441': attribute type 10 has an invalid length. [ 116.407927][ T6497] netlink: 'syz.0.442': attribute type 10 has an invalid length. [ 116.432853][ T6498] netlink: 'syz.0.443': attribute type 10 has an invalid length. [ 116.457168][ T6499] netlink: 'syz.0.444': attribute type 10 has an invalid length. 2025/07/21 22:31:24 executed programs: 450 [ 119.980838][ T5919] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.999639][ T5919] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.007851][ T5919] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.017659][ T5919] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.027118][ T5919] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.185497][ T748] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.217052][ T6673] chnl_net:caif_netlink_parms(): no params data found [ 120.256340][ T748] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.332292][ T748] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.347809][ T6673] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.356628][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.364446][ T6673] bridge_slave_0: entered allmulticast mode [ 120.372508][ T6673] bridge_slave_0: entered promiscuous mode [ 120.381382][ T6673] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.389852][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.397078][ T6673] bridge_slave_1: entered allmulticast mode [ 120.404465][ T6673] bridge_slave_1: entered promiscuous mode [ 120.421111][ T748] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.464432][ T6673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.478870][ T6673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.519704][ T6673] team0: Port device team_slave_0 added [ 120.529661][ T6673] team0: Port device team_slave_1 added [ 120.565852][ T6673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.573061][ T6673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.599514][ T6673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.613205][ T6673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.620258][ T6673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.646484][ T6673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.752602][ T6673] hsr_slave_0: entered promiscuous mode [ 120.759185][ T6673] hsr_slave_1: entered promiscuous mode [ 120.765298][ T6673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.773127][ T6673] Cannot create hsr debugfs directory [ 120.780586][ T748] bridge_slave_1: left allmulticast mode [ 120.786278][ T748] bridge_slave_1: left promiscuous mode [ 120.793505][ T748] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.802864][ T748] bridge_slave_0: left allmulticast mode [ 120.809000][ T748] bridge_slave_0: left promiscuous mode [ 120.814767][ T748] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.043304][ T748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.054483][ T748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.065649][ T748] bond0 (unregistering): Released all slaves [ 121.177117][ T748] [ 121.179498][ T748] ====================================================== [ 121.186511][ T748] WARNING: possible circular locking dependency detected [ 121.193542][ T748] 6.16.0-rc7-syzkaller #0 Not tainted [ 121.198908][ T748] ------------------------------------------------------ [ 121.205918][ T748] kworker/u8:5/748 is trying to acquire lock: [ 121.211981][ T748] ffff8880290b4e00 (team->team_lock_key){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 121.221410][ T748] [ 121.221410][ T748] but task is already holding lock: [ 121.228780][ T748] ffff88807c8f0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 121.239145][ T748] [ 121.239145][ T748] which lock already depends on the new lock. [ 121.239145][ T748] [ 121.249544][ T748] [ 121.249544][ T748] the existing dependency chain (in reverse order) is: [ 121.258553][ T748] [ 121.258553][ T748] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 121.266286][ T748] lock_acquire+0x120/0x360 [ 121.271315][ T748] __mutex_lock+0x182/0xe80 [ 121.276346][ T748] ieee80211_open+0xed/0x1f0 [ 121.281461][ T748] __dev_open+0x46d/0x880 [ 121.286323][ T748] netif_open+0xaa/0x170 [ 121.291090][ T748] dev_open+0x125/0x260 [ 121.295841][ T748] team_add_slave+0xb36/0x2840 [ 121.301157][ T748] do_set_master+0x533/0x6d0 [ 121.306284][ T748] do_setlink+0xcf0/0x41c0 [ 121.311227][ T748] rtnl_newlink+0x160b/0x1c70 [ 121.316426][ T748] rtnetlink_rcv_msg+0x7cf/0xb70 [ 121.321896][ T748] netlink_rcv_skb+0x208/0x470 [ 121.327203][ T748] netlink_unicast+0x759/0x8e0 [ 121.332509][ T748] netlink_sendmsg+0x805/0xb30 [ 121.337811][ T748] __sock_sendmsg+0x21c/0x270 [ 121.343022][ T748] ____sys_sendmsg+0x505/0x830 [ 121.348323][ T748] ___sys_sendmsg+0x21f/0x2a0 [ 121.353539][ T748] __x64_sys_sendmsg+0x19b/0x260 [ 121.359028][ T748] do_syscall_64+0xfa/0x3b0 [ 121.364089][ T748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.370527][ T748] [ 121.370527][ T748] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 121.378981][ T748] validate_chain+0xb9b/0x2140 [ 121.384280][ T748] __lock_acquire+0xab9/0xd20 [ 121.389486][ T748] lock_acquire+0x120/0x360 [ 121.394537][ T748] __mutex_lock+0x182/0xe80 [ 121.399587][ T748] team_del_slave+0x32/0x1c0 [ 121.404722][ T748] team_device_event+0x285/0xa20 [ 121.410197][ T748] notifier_call_chain+0x1b3/0x3e0 [ 121.415854][ T748] unregister_netdevice_many_notify+0x15d8/0x2320 [ 121.422810][ T748] unregister_netdevice_queue+0x33c/0x380 [ 121.429063][ T748] _cfg80211_unregister_wdev+0x165/0x590 [ 121.435230][ T748] ieee80211_remove_interfaces+0x49a/0x6d0 [ 121.441567][ T748] ieee80211_unregister_hw+0x5d/0x2c0 [ 121.447466][ T748] mac80211_hwsim_del_radio+0x275/0x460 [ 121.453563][ T748] hwsim_exit_net+0x584/0x640 [ 121.458771][ T748] ops_undo_list+0x497/0x990 [ 121.463922][ T748] cleanup_net+0x4c5/0x800 [ 121.468878][ T748] process_scheduled_works+0xae1/0x17b0 [ 121.474957][ T748] worker_thread+0x8a0/0xda0 [ 121.480080][ T748] kthread+0x70e/0x8a0 [ 121.484702][ T748] ret_from_fork+0x3fc/0x770 [ 121.489841][ T748] ret_from_fork_asm+0x1a/0x30 [ 121.495158][ T748] [ 121.495158][ T748] other info that might help us debug this: [ 121.495158][ T748] [ 121.505395][ T748] Possible unsafe locking scenario: [ 121.505395][ T748] [ 121.512850][ T748] CPU0 CPU1 [ 121.518220][ T748] ---- ---- [ 121.523593][ T748] lock(&rdev->wiphy.mtx); [ 121.528113][ T748] lock(team->team_lock_key); [ 121.535409][ T748] lock(&rdev->wiphy.mtx); [ 121.542444][ T748] lock(team->team_lock_key); [ 121.547305][ T748] [ 121.547305][ T748] *** DEADLOCK *** [ 121.547305][ T748] [ 121.555451][ T748] 5 locks held by kworker/u8:5/748: [ 121.560649][ T748] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 121.571651][ T748] #1: ffffc90003437bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 121.582229][ T748] #2: ffffffff8f50f510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 121.591587][ T748] #3: ffffffff8f51c108 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 121.601446][ T748] #4: ffff88807c8f0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 121.612262][ T748] [ 121.612262][ T748] stack backtrace: [ 121.618182][ T748] CPU: 0 UID: 0 PID: 748 Comm: kworker/u8:5 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 121.618201][ T748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.618213][ T748] Workqueue: netns cleanup_net [ 121.618248][ T748] Call Trace: [ 121.618255][ T748] [ 121.618262][ T748] dump_stack_lvl+0x189/0x250 [ 121.618285][ T748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.618303][ T748] ? __pfx__printk+0x10/0x10 [ 121.618326][ T748] ? print_lock_name+0xde/0x100 [ 121.618347][ T748] print_circular_bug+0x2ee/0x310 [ 121.618370][ T748] check_noncircular+0x134/0x160 [ 121.618395][ T748] validate_chain+0xb9b/0x2140 [ 121.618422][ T748] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.618448][ T748] __lock_acquire+0xab9/0xd20 [ 121.618468][ T748] ? team_del_slave+0x32/0x1c0 [ 121.618490][ T748] lock_acquire+0x120/0x360 [ 121.618505][ T748] ? team_del_slave+0x32/0x1c0 [ 121.618528][ T748] ? __mutex_trylock_common+0x153/0x260 [ 121.618551][ T748] __mutex_lock+0x182/0xe80 [ 121.618569][ T748] ? team_del_slave+0x32/0x1c0 [ 121.618590][ T748] ? rcu_is_watching+0x15/0xb0 [ 121.618611][ T748] ? team_del_slave+0x32/0x1c0 [ 121.618633][ T748] ? __pfx___mutex_lock+0x10/0x10 [ 121.618651][ T748] ? bond_netdev_event+0xd9/0xe80 [ 121.618676][ T748] ? __pfx___mutex_lock+0x10/0x10 [ 121.618693][ T748] ? __pfx_bond_netdev_event+0x10/0x10 [ 121.618720][ T748] team_del_slave+0x32/0x1c0 [ 121.618742][ T748] team_device_event+0x285/0xa20 [ 121.618759][ T748] notifier_call_chain+0x1b3/0x3e0 [ 121.618782][ T748] unregister_netdevice_many_notify+0x15d8/0x2320 [ 121.618807][ T748] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 121.618827][ T748] ? __lock_acquire+0xab9/0xd20 [ 121.618851][ T748] unregister_netdevice_queue+0x33c/0x380 [ 121.618869][ T748] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 121.618890][ T748] _cfg80211_unregister_wdev+0x165/0x590 [ 121.618915][ T748] ieee80211_remove_interfaces+0x49a/0x6d0 [ 121.618934][ T748] ? __pfx_synchronize_rcu+0x10/0x10 [ 121.618955][ T748] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 121.618974][ T748] ? rcu_is_watching+0x15/0xb0 [ 121.618994][ T748] ieee80211_unregister_hw+0x5d/0x2c0 [ 121.619011][ T748] mac80211_hwsim_del_radio+0x275/0x460 [ 121.619037][ T748] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 121.619065][ T748] hwsim_exit_net+0x584/0x640 [ 121.619087][ T748] ? __pfx_hwsim_exit_net+0x10/0x10 [ 121.619108][ T748] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 121.619133][ T748] ops_undo_list+0x497/0x990 [ 121.619163][ T748] ? __pfx_ops_undo_list+0x10/0x10 [ 121.619189][ T748] cleanup_net+0x4c5/0x800 [ 121.619211][ T748] ? __pfx_cleanup_net+0x10/0x10 [ 121.619234][ T748] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.619248][ T748] ? process_scheduled_works+0x9ef/0x17b0 [ 121.619265][ T748] ? process_scheduled_works+0x9ef/0x17b0 [ 121.619283][ T748] process_scheduled_works+0xae1/0x17b0 [ 121.619311][ T748] ? __pfx_process_scheduled_works+0x10/0x10 [ 121.619335][ T748] worker_thread+0x8a0/0xda0 [ 121.619354][ T748] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 121.619373][ T748] ? __kthread_parkme+0x7b/0x200 [ 121.619395][ T748] kthread+0x70e/0x8a0 [ 121.619417][ T748] ? __pfx_worker_thread+0x10/0x10 [ 121.619435][ T748] ? __pfx_kthread+0x10/0x10 [ 121.619457][ T748] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.619471][ T748] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.619486][ T748] ? __pfx_kthread+0x10/0x10 [ 121.619507][ T748] ret_from_fork+0x3fc/0x770 [ 121.619525][ T748] ? __pfx_ret_from_fork+0x10/0x10 [ 121.619543][ T748] ? __switch_to_asm+0x39/0x70 [ 121.619563][ T748] ? __switch_to_asm+0x33/0x70 [ 121.619583][ T748] ? __pfx_kthread+0x10/0x10 [ 121.619604][ T748] ret_from_fork_asm+0x1a/0x30 [ 121.619631][ T748] [ 121.986020][ T748] team0: Port device wlan1 removed [ 122.108639][ T5167] Bluetooth: hci1: command tx timeout [ 122.138479][ T748] hsr_slave_0: left promiscuous mode [ 122.144583][ T748] hsr_slave_1: left promiscuous mode [ 122.151014][ T748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.163022][ T748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.171174][ T748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.181006][ T748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.194368][ T748] veth1_macvtap: left promiscuous mode [ 122.200051][ T748] veth0_macvtap: left promiscuous mode [ 122.205678][ T748] veth1_vlan: left promiscuous mode [ 122.221195][ T748] veth0_vlan: left promiscuous mode [ 122.411473][ T748] team0 (unregistering): Port device team_slave_1 removed [ 122.432944][ T748] team0 (unregistering): Port device team_slave_0 removed [ 122.654604][ T6673] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.664597][ T6673] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.678600][ T6673] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.691301][ T6673] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.757839][ T6673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.778052][ T6673] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.815366][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.822645][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.832250][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.839413][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.026632][ T6673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.069974][ T6673] veth0_vlan: entered promiscuous mode [ 123.085449][ T6673] veth1_vlan: entered promiscuous mode [ 123.112801][ T6673] veth0_macvtap: entered promiscuous mode [ 123.123084][ T6673] veth1_macvtap: entered promiscuous mode [ 123.140838][ T6673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.152727][ T6673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.164589][ T6673] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.175228][ T6673] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.185360][ T6673] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.195049][ T6673] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.235627][ T6673] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 123.261908][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.272590][ T6673] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 123.283744][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/21 22:31:31 executed programs: 602 [ 123.312466][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.322311][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.365331][ T6733] validate_nla: 171 callbacks suppressed [ 123.365350][ T6733] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 123.387915][ T6733] team0: Port device wlan1 added [ 123.407553][ T6735] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 123.434636][ T6737] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 123.458267][ T6738] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 123.476480][ T6739] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 123.497525][ T6740] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 123.515700][ T6741] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 123.533053][ T6742] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 123.554432][ T6743] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 123.572475][ T6744] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 124.189200][ T5167] Bluetooth: hci1: command tx timeout [ 126.268834][ T5167] Bluetooth: hci1: command tx timeout 2025/07/21 22:31:36 executed programs: 890 [ 128.349012][ T5167] Bluetooth: hci1: command tx timeout [ 128.375394][ T7031] validate_nla: 281 callbacks suppressed [ 128.375409][ T7031] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 128.397840][ T7032] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 128.415922][ T7033] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 128.434160][ T7034] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 128.453715][ T7035] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 128.472994][ T7036] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 128.489726][ T7037] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 128.507246][ T7038] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 128.534095][ T7039] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 128.551065][ T7040] netlink: 'syz.0.916': attribute type 10 has an invalid length.