Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. 2025/05/26 08:49:02 ignoring optional flag "sandboxArg"="0" 2025/05/26 08:49:03 parsed 1 programs [ 193.003122][ T5861] cgroup: Unknown subsys name 'net' [ 193.182297][ T5861] cgroup: Unknown subsys name 'cpuset' [ 193.192079][ T5861] cgroup: Unknown subsys name 'rlimit' [ 194.361770][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.368974][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.872598][ T5861] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 197.932288][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 198.263479][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.271927][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.279787][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.291187][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.299796][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.590675][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.599770][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.631786][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.643877][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.300737][ T5902] chnl_net:caif_netlink_parms(): no params data found [ 199.421278][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.429326][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.436502][ T5902] bridge_slave_0: entered allmulticast mode [ 199.444073][ T5902] bridge_slave_0: entered promiscuous mode [ 199.453282][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.460607][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.468493][ T5902] bridge_slave_1: entered allmulticast mode [ 199.475730][ T5902] bridge_slave_1: entered promiscuous mode [ 199.519514][ T5902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.533306][ T5902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.573035][ T5902] team0: Port device team_slave_0 added [ 199.581301][ T5902] team0: Port device team_slave_1 added [ 199.615291][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.622404][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.649041][ T5902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.691800][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.698942][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.726056][ T5902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.780007][ T5902] hsr_slave_0: entered promiscuous mode [ 199.786716][ T5902] hsr_slave_1: entered promiscuous mode [ 199.963864][ T5902] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.976558][ T5902] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.988207][ T5902] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.999821][ T5902] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.030520][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.037959][ T5902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.045834][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.053271][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.116046][ T5902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.134719][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.144561][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.163478][ T5902] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.178920][ T3063] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.186080][ T3063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.201454][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.208799][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.396953][ T5902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.444657][ T5902] veth0_vlan: entered promiscuous mode [ 200.456206][ T5902] veth1_vlan: entered promiscuous mode [ 200.488929][ T5902] veth0_macvtap: entered promiscuous mode [ 200.499397][ T5902] veth1_macvtap: entered promiscuous mode [ 200.520646][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.535251][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.550742][ T5902] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.560556][ T5902] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.570664][ T5902] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.579519][ T5902] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.731249][ T3528] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.822440][ T3528] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.902029][ T3528] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.985547][ T3528] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/05/26 08:49:17 executed programs: 0 [ 203.311514][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.319748][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.327477][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.338305][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.349081][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.581773][ T3528] bridge_slave_1: left allmulticast mode [ 203.587681][ T3528] bridge_slave_1: left promiscuous mode [ 203.594919][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.609670][ T3528] bridge_slave_0: left allmulticast mode [ 203.615342][ T3528] bridge_slave_0: left promiscuous mode [ 203.621175][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.865625][ T3528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.879894][ T3528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.889959][ T3528] bond0 (unregistering): Released all slaves [ 203.915662][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 204.044006][ T3528] hsr_slave_0: left promiscuous mode [ 204.053659][ T3528] hsr_slave_1: left promiscuous mode [ 204.060879][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.069992][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.079529][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.087063][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.116438][ T3528] veth1_macvtap: left promiscuous mode [ 204.123999][ T3528] veth0_macvtap: left promiscuous mode [ 204.130433][ T3528] veth1_vlan: left promiscuous mode [ 204.135931][ T3528] veth0_vlan: left promiscuous mode [ 204.710995][ T3528] team0 (unregistering): Port device team_slave_1 removed [ 204.755578][ T3528] team0 (unregistering): Port device team_slave_0 removed [ 205.064512][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.072087][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.080033][ T5954] bridge_slave_0: entered allmulticast mode [ 205.088133][ T5954] bridge_slave_0: entered promiscuous mode [ 205.096928][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.104624][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.112788][ T5954] bridge_slave_1: entered allmulticast mode [ 205.121755][ T5954] bridge_slave_1: entered promiscuous mode [ 205.167723][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.183788][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.236395][ T5954] team0: Port device team_slave_0 added [ 205.247159][ T5954] team0: Port device team_slave_1 added [ 205.289557][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.297502][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.324671][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.342497][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.349703][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.376696][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.398777][ T55] Bluetooth: hci0: command tx timeout [ 205.472818][ T5954] hsr_slave_0: entered promiscuous mode [ 205.480860][ T5954] hsr_slave_1: entered promiscuous mode [ 206.649366][ T5954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.661595][ T5954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.682108][ T5954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.693605][ T5954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.797100][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.823107][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.836927][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.844286][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.864434][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.871778][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.166999][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.230736][ T5954] veth0_vlan: entered promiscuous mode [ 207.247185][ T5954] veth1_vlan: entered promiscuous mode [ 207.290413][ T5954] veth0_macvtap: entered promiscuous mode [ 207.304733][ T5954] veth1_macvtap: entered promiscuous mode [ 207.328757][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.350826][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.366852][ T5954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.377102][ T5954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.386056][ T5954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.401714][ T5954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.478918][ T55] Bluetooth: hci0: command tx timeout [ 207.494023][ T3063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.509749][ T3063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.554207][ T3063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.563801][ T3063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.651182][ T6028] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 207.684565][ T6028] team0: Port device wlan1 added [ 207.736508][ T6031] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 207.803237][ T6034] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 207.836992][ T6036] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 207.866763][ T6037] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 207.905411][ T6038] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 207.935239][ T6041] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 207.973027][ T6042] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 208.006075][ T6044] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 208.034269][ T6045] netlink: 'syz.0.25': attribute type 10 has an invalid length. 2025/05/26 08:49:22 executed programs: 21 [ 209.568068][ T55] Bluetooth: hci0: command tx timeout [ 211.648139][ T55] Bluetooth: hci0: command tx timeout [ 212.671575][ T6289] validate_nla: 216 callbacks suppressed [ 212.671599][ T6289] netlink: 'syz.0.242': attribute type 10 has an invalid length. [ 212.703163][ T6290] netlink: 'syz.0.243': attribute type 10 has an invalid length. [ 212.725658][ T6291] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 212.745877][ T6292] netlink: 'syz.0.245': attribute type 10 has an invalid length. [ 212.771405][ T6293] netlink: 'syz.0.246': attribute type 10 has an invalid length. [ 212.795125][ T6294] netlink: 'syz.0.247': attribute type 10 has an invalid length. [ 212.819503][ T6295] netlink: 'syz.0.248': attribute type 10 has an invalid length. [ 212.841366][ T6296] netlink: 'syz.0.249': attribute type 10 has an invalid length. [ 212.864713][ T6297] netlink: 'syz.0.250': attribute type 10 has an invalid length. [ 212.886836][ T6298] netlink: 'syz.0.251': attribute type 10 has an invalid length. 2025/05/26 08:49:27 executed programs: 258 [ 217.684009][ T6538] validate_nla: 239 callbacks suppressed [ 217.684025][ T6538] netlink: 'syz.0.491': attribute type 10 has an invalid length. [ 217.710626][ T6539] netlink: 'syz.0.492': attribute type 10 has an invalid length. [ 217.734542][ T6540] netlink: 'syz.0.493': attribute type 10 has an invalid length. [ 217.759654][ T6541] netlink: 'syz.0.494': attribute type 10 has an invalid length. [ 217.782354][ T6542] netlink: 'syz.0.495': attribute type 10 has an invalid length. [ 217.804666][ T6543] netlink: 'syz.0.496': attribute type 10 has an invalid length. [ 217.830216][ T6544] netlink: 'syz.0.497': attribute type 10 has an invalid length. [ 217.851274][ T6545] netlink: 'syz.0.498': attribute type 10 has an invalid length. [ 217.872436][ T6546] netlink: 'syz.0.499': attribute type 10 has an invalid length. [ 217.897132][ T6547] netlink: 'syz.0.500': attribute type 10 has an invalid length. 2025/05/26 08:49:32 executed programs: 507 [ 220.262311][ T5139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.280578][ T5139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.294953][ T5139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.307968][ T5139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.317440][ T5139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.476110][ T3063] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.502675][ T6664] chnl_net:caif_netlink_parms(): no params data found [ 220.551885][ T3063] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.623733][ T3063] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.640130][ T6664] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.647916][ T6664] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.655104][ T6664] bridge_slave_0: entered allmulticast mode [ 220.663698][ T6664] bridge_slave_0: entered promiscuous mode [ 220.672901][ T6664] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.680328][ T6664] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.687581][ T6664] bridge_slave_1: entered allmulticast mode [ 220.695026][ T6664] bridge_slave_1: entered promiscuous mode [ 220.742592][ T3063] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.759908][ T6664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.772862][ T6664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.810620][ T6664] team0: Port device team_slave_0 added [ 220.820323][ T6664] team0: Port device team_slave_1 added [ 220.856938][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.864637][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.891327][ T6664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.931963][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.939759][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.966079][ T6664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.033517][ T6664] hsr_slave_0: entered promiscuous mode [ 221.040110][ T6664] hsr_slave_1: entered promiscuous mode [ 221.046321][ T6664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.055013][ T6664] Cannot create hsr debugfs directory [ 221.111209][ T3063] bridge_slave_1: left allmulticast mode [ 221.116919][ T3063] bridge_slave_1: left promiscuous mode [ 221.123686][ T3063] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.134861][ T3063] bridge_slave_0: left allmulticast mode [ 221.141270][ T3063] bridge_slave_0: left promiscuous mode [ 221.146985][ T3063] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.389240][ T3063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.400175][ T3063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.410892][ T3063] bond0 (unregistering): Released all slaves [ 221.512719][ T3063] [ 221.515185][ T3063] ====================================================== [ 221.522216][ T3063] WARNING: possible circular locking dependency detected [ 221.529339][ T3063] 6.15.0-rc4-syzkaller-gb4432656b36e #0 Not tainted [ 221.535933][ T3063] ------------------------------------------------------ [ 221.542963][ T3063] kworker/u8:6/3063 is trying to acquire lock: [ 221.549110][ T3063] ffff88805fa18e00 (team->team_lock_key){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 221.558556][ T3063] [ 221.558556][ T3063] but task is already holding lock: [ 221.565943][ T3063] ffff88807a5f0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 221.576478][ T3063] [ 221.576478][ T3063] which lock already depends on the new lock. [ 221.576478][ T3063] [ 221.586899][ T3063] [ 221.586899][ T3063] the existing dependency chain (in reverse order) is: [ 221.596577][ T3063] [ 221.596577][ T3063] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 221.604425][ T3063] lock_acquire+0x120/0x360 [ 221.609497][ T3063] __mutex_lock+0x182/0xe80 [ 221.614546][ T3063] ieee80211_open+0xed/0x1f0 [ 221.619667][ T3063] __dev_open+0x46d/0x880 [ 221.624514][ T3063] netif_open+0xaa/0x170 [ 221.629291][ T3063] dev_open+0x125/0x260 [ 221.634097][ T3063] team_add_slave+0xb36/0x2840 [ 221.639397][ T3063] do_set_master+0x530/0x6d0 [ 221.644598][ T3063] do_setlink+0xd47/0x40d0 [ 221.649565][ T3063] rtnl_newlink+0x160b/0x1c70 [ 221.654866][ T3063] rtnetlink_rcv_msg+0x7cc/0xb70 [ 221.660350][ T3063] netlink_rcv_skb+0x219/0x490 [ 221.665666][ T3063] netlink_unicast+0x758/0x8d0 [ 221.670970][ T3063] netlink_sendmsg+0x805/0xb30 [ 221.676261][ T3063] __sock_sendmsg+0x219/0x270 [ 221.681465][ T3063] ____sys_sendmsg+0x505/0x830 [ 221.686772][ T3063] ___sys_sendmsg+0x21f/0x2a0 [ 221.691966][ T3063] __x64_sys_sendmsg+0x19b/0x260 [ 221.697453][ T3063] do_syscall_64+0xf6/0x210 [ 221.702528][ T3063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.709059][ T3063] [ 221.709059][ T3063] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 221.717075][ T3063] validate_chain+0xb9b/0x2140 [ 221.722380][ T3063] __lock_acquire+0xaac/0xd20 [ 221.729100][ T3063] lock_acquire+0x120/0x360 [ 221.734151][ T3063] __mutex_lock+0x182/0xe80 [ 221.739190][ T3063] team_del_slave+0x32/0x1c0 [ 221.744329][ T3063] team_device_event+0x285/0xa20 [ 221.749821][ T3063] notifier_call_chain+0x1b3/0x3e0 [ 221.755516][ T3063] unregister_netdevice_many_notify+0x15d4/0x2330 [ 221.763023][ T3063] unregister_netdevice_queue+0x33c/0x380 [ 221.771337][ T3063] _cfg80211_unregister_wdev+0x165/0x590 [ 221.777692][ T3063] ieee80211_remove_interfaces+0x49a/0x6d0 [ 221.784032][ T3063] ieee80211_unregister_hw+0x5d/0x2c0 [ 221.790101][ T3063] mac80211_hwsim_del_radio+0x275/0x460 [ 221.796463][ T3063] hwsim_exit_net+0x584/0x640 [ 221.802217][ T3063] cleanup_net+0x717/0xbd0 [ 221.807553][ T3063] process_scheduled_works+0xadb/0x17a0 [ 221.814498][ T3063] worker_thread+0x8a0/0xda0 [ 221.819633][ T3063] kthread+0x70e/0x8a0 [ 221.824226][ T3063] ret_from_fork+0x4b/0x80 [ 221.829176][ T3063] ret_from_fork_asm+0x1a/0x30 [ 221.835044][ T3063] [ 221.835044][ T3063] other info that might help us debug this: [ 221.835044][ T3063] [ 221.847207][ T3063] Possible unsafe locking scenario: [ 221.847207][ T3063] [ 221.854669][ T3063] CPU0 CPU1 [ 221.860303][ T3063] ---- ---- [ 221.865768][ T3063] lock(&rdev->wiphy.mtx); [ 221.870281][ T3063] lock(team->team_lock_key); [ 221.877580][ T3063] lock(&rdev->wiphy.mtx); [ 221.884707][ T3063] lock(team->team_lock_key); [ 221.889504][ T3063] [ 221.889504][ T3063] *** DEADLOCK *** [ 221.889504][ T3063] [ 221.897763][ T3063] 5 locks held by kworker/u8:6/3063: [ 221.903099][ T3063] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 221.914408][ T3063] #1: ffffc9000c00fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 221.925308][ T3063] #2: ffffffff8f2e7750 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 221.934708][ T3063] #3: ffffffff8f2f4288 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 221.944642][ T3063] #4: ffff88807a5f0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 221.955478][ T3063] [ 221.955478][ T3063] stack backtrace: [ 221.961400][ T3063] CPU: 1 UID: 0 PID: 3063 Comm: kworker/u8:6 Not tainted 6.15.0-rc4-syzkaller-gb4432656b36e #0 PREEMPT(full) [ 221.961419][ T3063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.961430][ T3063] Workqueue: netns cleanup_net [ 221.961452][ T3063] Call Trace: [ 221.961461][ T3063] [ 221.961468][ T3063] dump_stack_lvl+0x189/0x250 [ 221.961491][ T3063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.961510][ T3063] ? __pfx__printk+0x10/0x10 [ 221.961526][ T3063] ? print_lock_name+0xde/0x100 [ 221.961548][ T3063] print_circular_bug+0x2ee/0x310 [ 221.961563][ T3063] check_noncircular+0x134/0x160 [ 221.961583][ T3063] validate_chain+0xb9b/0x2140 [ 221.961597][ T3063] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 221.961611][ T3063] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.961631][ T3063] __lock_acquire+0xaac/0xd20 [ 221.961651][ T3063] ? team_del_slave+0x32/0x1c0 [ 221.961670][ T3063] lock_acquire+0x120/0x360 [ 221.961687][ T3063] ? team_del_slave+0x32/0x1c0 [ 221.961708][ T3063] ? __mutex_trylock_common+0x153/0x260 [ 221.961723][ T3063] __mutex_lock+0x182/0xe80 [ 221.961738][ T3063] ? team_del_slave+0x32/0x1c0 [ 221.961757][ T3063] ? rcu_is_watching+0x15/0xb0 [ 221.961780][ T3063] ? team_del_slave+0x32/0x1c0 [ 221.961799][ T3063] ? __pfx___mutex_lock+0x10/0x10 [ 221.961814][ T3063] ? bond_netdev_event+0xd9/0xe80 [ 221.961830][ T3063] ? __pfx___mutex_lock+0x10/0x10 [ 221.961845][ T3063] ? __pfx_bond_netdev_event+0x10/0x10 [ 221.961860][ T3063] team_del_slave+0x32/0x1c0 [ 221.961880][ T3063] team_device_event+0x285/0xa20 [ 221.961896][ T3063] notifier_call_chain+0x1b3/0x3e0 [ 221.961913][ T3063] unregister_netdevice_many_notify+0x15d4/0x2330 [ 221.961939][ T3063] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 221.961959][ T3063] ? call_rcu+0x6dd/0x990 [ 221.961970][ T3063] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.961993][ T3063] unregister_netdevice_queue+0x33c/0x380 [ 221.962013][ T3063] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 221.962035][ T3063] _cfg80211_unregister_wdev+0x165/0x590 [ 221.962057][ T3063] ieee80211_remove_interfaces+0x49a/0x6d0 [ 221.962074][ T3063] ? __pfx_synchronize_rcu+0x10/0x10 [ 221.962088][ T3063] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 221.962105][ T3063] ? rcu_is_watching+0x15/0xb0 [ 221.962127][ T3063] ieee80211_unregister_hw+0x5d/0x2c0 [ 221.962142][ T3063] mac80211_hwsim_del_radio+0x275/0x460 [ 221.962164][ T3063] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 221.962188][ T3063] hwsim_exit_net+0x584/0x640 [ 221.962206][ T3063] ? __pfx_hwsim_exit_net+0x10/0x10 [ 221.962225][ T3063] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 221.962240][ T3063] cleanup_net+0x717/0xbd0 [ 221.962255][ T3063] ? __pfx_cleanup_net+0x10/0x10 [ 221.962271][ T3063] ? _raw_spin_unlock_irq+0x23/0x50 [ 221.962283][ T3063] ? process_scheduled_works+0x9ec/0x17a0 [ 221.962304][ T3063] ? process_scheduled_works+0x9ec/0x17a0 [ 221.962325][ T3063] process_scheduled_works+0xadb/0x17a0 [ 221.962355][ T3063] ? __pfx_process_scheduled_works+0x10/0x10 [ 221.962382][ T3063] worker_thread+0x8a0/0xda0 [ 221.962395][ T3063] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 221.962411][ T3063] ? __kthread_parkme+0x7b/0x200 [ 221.962427][ T3063] kthread+0x70e/0x8a0 [ 221.962443][ T3063] ? __pfx_worker_thread+0x10/0x10 [ 221.962455][ T3063] ? __pfx_kthread+0x10/0x10 [ 221.962470][ T3063] ? __pfx_kthread+0x10/0x10 [ 221.962485][ T3063] ? _raw_spin_unlock_irq+0x23/0x50 [ 221.962497][ T3063] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.962511][ T3063] ? __pfx_kthread+0x10/0x10 [ 221.962525][ T3063] ret_from_fork+0x4b/0x80 [ 221.962538][ T3063] ? __pfx_kthread+0x10/0x10 [ 221.962553][ T3063] ret_from_fork_asm+0x1a/0x30 [ 221.962576][ T3063] [ 222.330364][ T3063] team0: Port device wlan1 removed [ 222.358908][ T55] Bluetooth: hci1: command tx timeout [ 222.511193][ T3063] hsr_slave_0: left promiscuous mode [ 222.517155][ T3063] hsr_slave_1: left promiscuous mode [ 222.523429][ T3063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.531169][ T3063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.539535][ T3063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.548215][ T3063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.559194][ T3063] veth1_macvtap: left promiscuous mode [ 222.564883][ T3063] veth0_macvtap: left promiscuous mode [ 222.573872][ T3063] veth1_vlan: left promiscuous mode [ 222.579540][ T3063] veth0_vlan: left promiscuous mode [ 222.754962][ T3063] team0 (unregistering): Port device team_slave_1 removed [ 222.775007][ T3063] team0 (unregistering): Port device team_slave_0 removed [ 223.112148][ T6664] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.130526][ T6664] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.141803][ T6664] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.152330][ T6664] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.244525][ T6664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.263954][ T6664] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.277061][ T3063] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.284617][ T3063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.310551][ T3063] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.318403][ T3063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.481000][ T6664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.513104][ T6664] veth0_vlan: entered promiscuous mode [ 223.525916][ T6664] veth1_vlan: entered promiscuous mode [ 223.551914][ T6664] veth0_macvtap: entered promiscuous mode [ 223.561118][ T6664] veth1_macvtap: entered promiscuous mode [ 223.576886][ T6664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.591732][ T6664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.603971][ T6664] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.614361][ T6664] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.623556][ T6664] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.633389][ T6664] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.667625][ T6664] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 223.690919][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.694517][ T6664] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 223.707845][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/05/26 08:49:37 executed programs: 602 [ 223.733252][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.742880][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.785292][ T6722] validate_nla: 115 callbacks suppressed [ 223.785312][ T6722] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 223.808658][ T6722] team0: Port device wlan1 added [ 223.827209][ T6726] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 223.855558][ T6728] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 223.879441][ T6730] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 223.900158][ T6731] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 223.925544][ T6734] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 223.945962][ T6736] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 223.966271][ T6737] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 223.998872][ T6740] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 224.022832][ T6741] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 224.437890][ T55] Bluetooth: hci1: command tx timeout [ 226.519814][ T55] Bluetooth: hci1: command tx timeout [ 228.599361][ T55] Bluetooth: hci1: command tx timeout 2025/05/26 08:49:42 executed programs: 893 [ 228.813187][ T7027] validate_nla: 283 callbacks suppressed [ 228.813202][ T7027] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 228.839287][ T7028] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 228.856947][ T7029] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 228.883824][ T7030] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 228.901576][ T7031] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 228.918696][ T7032] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 228.942908][ T7033] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 228.963747][ T7034] netlink: 'syz.0.916': attribute type 10 has an invalid length. [ 228.983089][ T7035] netlink: 'syz.0.917': attribute type 10 has an invalid length. [ 229.004374][ T7036] netlink: 'syz.0.918': attribute type 10 has an invalid length.