[ 86.682766][ T10] cfg80211: failed to load regulatory.db
Warning: Permanently added '[localhost]:43624' (ED25519) to the list of known hosts.
2025/05/05 17:24:13 ignoring optional flag "sandboxArg"="0"
2025/05/05 17:24:15 parsed 1 programs
[ 367.103038][ T5339] cgroup: Unknown subsys name 'net'
[ 367.172836][ T5339] cgroup: Unknown subsys name 'cpuset'
[ 367.178517][ T5339] cgroup: Unknown subsys name 'rlimit'
[ 368.663926][ T5339] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 372.336827][ T5350] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 373.285903][ T5370] chnl_net:caif_netlink_parms(): no params data found
[ 373.350326][ T5370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 373.353854][ T5370] bridge0: port 1(bridge_slave_0) entered disabled state
[ 373.356926][ T5370] bridge_slave_0: entered allmulticast mode
[ 373.361156][ T5370] bridge_slave_0: entered promiscuous mode
[ 373.366439][ T5370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 373.370316][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state
[ 373.373449][ T5370] bridge_slave_1: entered allmulticast mode
[ 373.377270][ T5370] bridge_slave_1: entered promiscuous mode
[ 373.403069][ T5370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 373.410284][ T5370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 373.436606][ T5370] team0: Port device team_slave_0 added
[ 373.441906][ T5370] team0: Port device team_slave_1 added
[ 373.464389][ T5370] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 373.467514][ T5370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 373.479559][ T5370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 373.486140][ T5370] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 373.489572][ T5370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 373.500532][ T5370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 373.535106][ T5370] hsr_slave_0: entered promiscuous mode
[ 373.538318][ T5370] hsr_slave_1: entered promiscuous mode
[ 373.677829][ T5370] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 373.688394][ T5370] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 373.694970][ T5370] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 373.702970][ T5370] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 373.728763][ T5370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 373.732048][ T5370] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 373.735969][ T5370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 373.739184][ T5370] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 373.802734][ T5370] 8021q: adding VLAN 0 to HW filter on device bond0
[ 373.816779][ T31] bridge0: port 1(bridge_slave_0) entered disabled state
[ 373.821844][ T31] bridge0: port 2(bridge_slave_1) entered disabled state
[ 373.832019][ T5370] 8021q: adding VLAN 0 to HW filter on device team0
[ 373.842082][ T73] bridge0: port 1(bridge_slave_0) entered blocking state
[ 373.845122][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 373.855090][ T73] bridge0: port 2(bridge_slave_1) entered blocking state
[ 373.858174][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 374.014728][ T5370] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 374.050984][ T5370] veth0_vlan: entered promiscuous mode
[ 374.058639][ T5370] veth1_vlan: entered promiscuous mode
[ 374.086149][ T5370] veth0_macvtap: entered promiscuous mode
[ 374.092324][ T5370] veth1_macvtap: entered promiscuous mode
[ 374.107639][ T5370] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 374.130592][ T5370] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 374.138251][ T5370] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 374.143684][ T5370] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 374.147462][ T5370] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 374.154501][ T5370] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 374.304014][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 374.341462][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 374.378612][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 374.421226][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 374.457040][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 374.461076][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 374.493695][ T5389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 374.496965][ T5389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 375.475168][ T5410] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 375.478867][ T5410] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 375.483138][ T5410] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 375.487008][ T5410] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 375.492119][ T5410] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 377.228539][ T31] bridge_slave_1: left allmulticast mode
[ 377.246622][ T31] bridge_slave_1: left promiscuous mode
[ 377.260229][ T31] bridge0: port 2(bridge_slave_1) entered disabled state
[ 377.281962][ T31] bridge_slave_0: left allmulticast mode
[ 377.284340][ T31] bridge_slave_0: left promiscuous mode
[ 377.301032][ T31] bridge0: port 1(bridge_slave_0) entered disabled state
[ 377.856971][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
2025/05/05 17:24:28 executed programs: 0
[ 377.892706][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 377.904776][ T31] bond0 (unregistering): Released all slaves
[ 377.925879][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 377.939442][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 377.943328][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 377.947519][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 377.959490][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 378.035417][ T31] hsr_slave_0: left promiscuous mode
[ 378.038313][ T31] hsr_slave_1: left promiscuous mode
[ 378.042437][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 378.045702][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 378.050839][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 378.053872][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 378.064455][ T31] veth1_macvtap: left promiscuous mode
[ 378.066839][ T31] veth0_macvtap: left promiscuous mode
[ 378.070818][ T31] veth1_vlan: left promiscuous mode
[ 378.072997][ T31] veth0_vlan: left promiscuous mode
[ 378.343535][ T31] team0 (unregistering): Port device team_slave_1 removed
[ 378.366021][ T31] team0 (unregistering): Port device team_slave_0 removed
[ 379.245589][ T5448] chnl_net:caif_netlink_parms(): no params data found
[ 379.511842][ T5448] bridge0: port 1(bridge_slave_0) entered blocking state
[ 379.519976][ T5448] bridge0: port 1(bridge_slave_0) entered disabled state
[ 379.523111][ T5448] bridge_slave_0: entered allmulticast mode
[ 379.539879][ T5448] bridge_slave_0: entered promiscuous mode
[ 379.557142][ T5448] bridge0: port 2(bridge_slave_1) entered blocking state
[ 379.571569][ T5448] bridge0: port 2(bridge_slave_1) entered disabled state
[ 379.574759][ T5448] bridge_slave_1: entered allmulticast mode
[ 379.599281][ T5448] bridge_slave_1: entered promiscuous mode
[ 379.730907][ T5448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 379.736866][ T5448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 379.871320][ T5448] team0: Port device team_slave_0 added
[ 379.889213][ T5448] team0: Port device team_slave_1 added
[ 379.949175][ T5448] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 379.952002][ T5448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 379.989267][ T5448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 380.009672][ T5448] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 380.012556][ T5448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 380.031093][ T5410] Bluetooth: hci0: command tx timeout
[ 380.040271][ T5448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 380.150568][ T5448] hsr_slave_0: entered promiscuous mode
[ 380.166571][ T5448] hsr_slave_1: entered promiscuous mode
[ 380.767803][ T5448] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 380.787065][ T5448] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 380.807171][ T5448] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 380.814938][ T5448] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 380.949910][ T5448] 8021q: adding VLAN 0 to HW filter on device bond0
[ 380.980534][ T5448] 8021q: adding VLAN 0 to HW filter on device team0
[ 380.991841][ T31] bridge0: port 1(bridge_slave_0) entered blocking state
[ 380.994678][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 381.006960][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state
[ 381.009988][ T4033] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 381.083094][ T5448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 381.331840][ T5448] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 381.401607][ T5448] veth0_vlan: entered promiscuous mode
[ 381.421560][ T5448] veth1_vlan: entered promiscuous mode
[ 381.468388][ T5448] veth0_macvtap: entered promiscuous mode
[ 381.491785][ T5448] veth1_macvtap: entered promiscuous mode
[ 381.523983][ T5448] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 381.542930][ T5448] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 381.561843][ T5448] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 381.565480][ T5448] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 381.581441][ T5448] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 381.585102][ T5448] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 381.711155][ T4033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 381.714389][ T4033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 381.797823][ T4033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 381.805075][ T4033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 381.903670][ T5503] netlink: 'syz.0.16': attribute type 10 has an invalid length.
[ 381.957625][ T5503] team0: Port device wlan1 added
[ 382.002581][ T5505] netlink: 'syz.0.17': attribute type 10 has an invalid length.
[ 382.071429][ T5508] netlink: 'syz.0.18': attribute type 10 has an invalid length.
[ 382.114253][ T5410] Bluetooth: hci0: command tx timeout
[ 382.134160][ T5509] netlink: 'syz.0.19': attribute type 10 has an invalid length.
[ 382.191381][ T5511] netlink: 'syz.0.20': attribute type 10 has an invalid length.
[ 382.246021][ T5512] netlink: 'syz.0.21': attribute type 10 has an invalid length.
[ 382.308885][ T5514] netlink: 'syz.0.22': attribute type 10 has an invalid length.
[ 382.372992][ T5516] netlink: 'syz.0.23': attribute type 10 has an invalid length.
[ 382.456488][ T5519] netlink: 'syz.0.24': attribute type 10 has an invalid length.
[ 382.518505][ T5520] netlink: 'syz.0.25': attribute type 10 has an invalid length.
2025/05/05 17:24:33 executed programs: 18
[ 383.633020][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[ 383.636200][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 384.190939][ T5410] Bluetooth: hci0: command tx timeout
[ 386.269433][ T5410] Bluetooth: hci0: command tx timeout
[ 386.925568][ T5726] validate_nla: 198 callbacks suppressed
[ 386.925582][ T5726] netlink: 'syz.0.224': attribute type 10 has an invalid length.
[ 386.943948][ T5727] netlink: 'syz.0.225': attribute type 10 has an invalid length.
[ 386.958841][ T5728] netlink: 'syz.0.226': attribute type 10 has an invalid length.
[ 386.987004][ T5729] netlink: 'syz.0.227': attribute type 10 has an invalid length.
[ 387.002516][ T5730] netlink: 'syz.0.228': attribute type 10 has an invalid length.
[ 387.027942][ T5731] netlink: 'syz.0.229': attribute type 10 has an invalid length.
[ 387.047550][ T5732] netlink: 'syz.0.230': attribute type 10 has an invalid length.
[ 387.063737][ T5733] netlink: 'syz.0.231': attribute type 10 has an invalid length.
[ 387.082651][ T5734] netlink: 'syz.0.232': attribute type 10 has an invalid length.
[ 387.106816][ T5735] netlink: 'syz.0.233': attribute type 10 has an invalid length.
2025/05/05 17:24:38 executed programs: 259
[ 391.939942][ T5974] validate_nla: 238 callbacks suppressed
[ 391.939955][ T5974] netlink: 'syz.0.472': attribute type 10 has an invalid length.
[ 391.957282][ T5975] netlink: 'syz.0.473': attribute type 10 has an invalid length.
[ 391.971736][ T5976] netlink: 'syz.0.474': attribute type 10 has an invalid length.
[ 391.995930][ T5977] netlink: 'syz.0.475': attribute type 10 has an invalid length.
[ 392.009327][ T5978] netlink: 'syz.0.476': attribute type 10 has an invalid length.
[ 392.022914][ T5979] netlink: 'syz.0.477': attribute type 10 has an invalid length.
[ 392.055133][ T5980] netlink: 'syz.0.478': attribute type 10 has an invalid length.
[ 392.068116][ T5981] netlink: 'syz.0.479': attribute type 10 has an invalid length.
[ 392.082061][ T5982] netlink: 'syz.0.480': attribute type 10 has an invalid length.
[ 392.113649][ T5983] netlink: 'syz.0.481': attribute type 10 has an invalid length.
2025/05/05 17:24:43 executed programs: 507
[ 395.000169][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 395.004273][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 395.007738][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 395.013991][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 395.017320][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 395.165580][ T73] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 395.205028][ T6120] chnl_net:caif_netlink_parms(): no params data found
[ 395.222232][ T73] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 395.256955][ T73] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 395.298180][ T73] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 395.317106][ T6120] bridge0: port 1(bridge_slave_0) entered blocking state
[ 395.323054][ T6120] bridge0: port 1(bridge_slave_0) entered disabled state
[ 395.326273][ T6120] bridge_slave_0: entered allmulticast mode
[ 395.331573][ T6120] bridge_slave_0: entered promiscuous mode
[ 395.339883][ T6120] bridge0: port 2(bridge_slave_1) entered blocking state
[ 395.345968][ T6120] bridge0: port 2(bridge_slave_1) entered disabled state
[ 395.353081][ T6120] bridge_slave_1: entered allmulticast mode
[ 395.357308][ T6120] bridge_slave_1: entered promiscuous mode
[ 395.415475][ T6120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 395.441677][ T6120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 395.502905][ T6120] team0: Port device team_slave_0 added
[ 395.508041][ T6120] team0: Port device team_slave_1 added
[ 395.520072][ T73] bridge_slave_1: left allmulticast mode
[ 395.522615][ T73] bridge_slave_1: left promiscuous mode
[ 395.525029][ T73] bridge0: port 2(bridge_slave_1) entered disabled state
[ 395.536929][ T73] bridge_slave_0: left allmulticast mode
[ 395.541681][ T73] bridge_slave_0: left promiscuous mode
[ 395.544138][ T73] bridge0: port 1(bridge_slave_0) entered disabled state
[ 395.887179][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 395.893352][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 395.897771][ T73] bond0 (unregistering): Released all slaves
[ 395.977730][ T6120] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 395.984262][ T6120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 395.996850][ T6120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 396.013316][ T73]
[ 396.014431][ T73] ======================================================
[ 396.017431][ T73] WARNING: possible circular locking dependency detected
[ 396.020344][ T73] 6.15.0-rc5-syzkaller #0 Not tainted
[ 396.023752][ T73] ------------------------------------------------------
[ 396.026565][ T73] kworker/u4:4/73 is trying to acquire lock:
[ 396.029025][ T73] ffff88804d6e0e00 (team->team_lock_key){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0
[ 396.032977][ T73]
[ 396.032977][ T73] but task is already holding lock:
[ 396.035877][ T73] ffff8880359b0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[ 396.040061][ T73]
[ 396.040061][ T73] which lock already depends on the new lock.
[ 396.040061][ T73]
[ 396.044348][ T73]
[ 396.044348][ T73] the existing dependency chain (in reverse order) is:
[ 396.048211][ T73]
[ 396.048211][ T73] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[ 396.051233][ T73] lock_acquire+0x120/0x360
[ 396.053319][ T73] __mutex_lock+0x182/0xe80
[ 396.055262][ T73] ieee80211_open+0xed/0x1f0
[ 396.057205][ T73] __dev_open+0x46d/0x880
[ 396.059232][ T73] netif_open+0xaa/0x170
[ 396.061385][ T73] dev_open+0x125/0x260
[ 396.063499][ T73] team_add_slave+0xb36/0x2840
[ 396.065891][ T73] do_set_master+0x530/0x6d0
[ 396.068116][ T73] do_setlink+0xd47/0x40d0
[ 396.070166][ T73] rtnl_newlink+0x160b/0x1c70
[ 396.072301][ T73] rtnetlink_rcv_msg+0x7cc/0xb70
[ 396.074966][ T73] netlink_rcv_skb+0x219/0x490
[ 396.077715][ T73] netlink_unicast+0x758/0x8d0
[ 396.080332][ T73] netlink_sendmsg+0x805/0xb30
[ 396.082605][ T73] __sock_sendmsg+0x219/0x270
[ 396.084899][ T73] ____sys_sendmsg+0x505/0x830
[ 396.087267][ T73] ___sys_sendmsg+0x21f/0x2a0
[ 396.089419][ T73] __x64_sys_sendmsg+0x19b/0x260
[ 396.091821][ T73] do_syscall_64+0xf6/0x210
[ 396.093960][ T73] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 396.096869][ T73]
[ 396.096869][ T73] -> #0 (team->team_lock_key){+.+.}-{4:4}:
[ 396.100377][ T73] validate_chain+0xb9b/0x2140
[ 396.102636][ T73] __lock_acquire+0xaac/0xd20
[ 396.104896][ T73] lock_acquire+0x120/0x360
[ 396.107147][ T73] __mutex_lock+0x182/0xe80
[ 396.109392][ T73] team_del_slave+0x32/0x1c0
[ 396.111652][ T73] team_device_event+0x285/0xa20
[ 396.113991][ T73] notifier_call_chain+0x1b3/0x3e0
[ 396.116539][ T73] unregister_netdevice_many_notify+0x15d4/0x2330
[ 396.119343][ T73] unregister_netdevice_queue+0x33c/0x380
[ 396.121951][ T73] _cfg80211_unregister_wdev+0x165/0x590
[ 396.124447][ T73] ieee80211_remove_interfaces+0x49a/0x6d0
[ 396.127034][ T73] ieee80211_unregister_hw+0x5d/0x2c0
[ 396.129415][ T73] mac80211_hwsim_del_radio+0x275/0x460
[ 396.131799][ T73] hwsim_exit_net+0x584/0x640
[ 396.133793][ T73] cleanup_net+0x717/0xbd0
[ 396.135808][ T73] process_scheduled_works+0xadb/0x17a0
[ 396.138210][ T73] worker_thread+0x8a0/0xda0
[ 396.140262][ T73] kthread+0x70e/0x8a0
[ 396.142147][ T73] ret_from_fork+0x4b/0x80
[ 396.144115][ T73] ret_from_fork_asm+0x1a/0x30
[ 396.146168][ T73]
[ 396.146168][ T73] other info that might help us debug this:
[ 396.146168][ T73]
[ 396.150147][ T73] Possible unsafe locking scenario:
[ 396.150147][ T73]
[ 396.153359][ T73] CPU0 CPU1
[ 396.155883][ T73] ---- ----
[ 396.158128][ T73] lock(&rdev->wiphy.mtx);
[ 396.160197][ T73] lock(team->team_lock_key);
[ 396.163189][ T73] lock(&rdev->wiphy.mtx);
[ 396.165917][ T73] lock(team->team_lock_key);
[ 396.168031][ T73]
[ 396.168031][ T73] *** DEADLOCK ***
[ 396.168031][ T73]
[ 396.171137][ T73] 5 locks held by kworker/u4:4/73:
[ 396.173357][ T73] #0: ffff88801b29b948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[ 396.177831][ T73] #1: ffffc900012cfc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[ 396.182166][ T73] #2: ffffffff8f2e7cd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0
[ 396.186190][ T73] #3: ffffffff8f2f4808 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0
[ 396.190250][ T73] #4: ffff8880359b0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[ 396.194816][ T73]
[ 396.194816][ T73] stack backtrace:
[ 396.197262][ T73] CPU: 0 UID: 0 PID: 73 Comm: kworker/u4:4 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full)
[ 396.197274][ T73] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 396.197283][ T73] Workqueue: netns cleanup_net
[ 396.197297][ T73] Call Trace:
[ 396.197305][ T73] <TASK>
[ 396.197310][ T73] dump_stack_lvl+0x189/0x250
[ 396.197327][ T73] ? __pfx_dump_stack_lvl+0x10/0x10
[ 396.197341][ T73] ? __pfx__printk+0x10/0x10
[ 396.197351][ T73] ? print_lock_name+0xde/0x100
[ 396.197365][ T73] print_circular_bug+0x2ee/0x310
[ 396.197377][ T73] check_noncircular+0x134/0x160
[ 396.197388][ T73] validate_chain+0xb9b/0x2140
[ 396.197397][ T73] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 396.197408][ T73] ? lockdep_hardirqs_on+0x9c/0x150
[ 396.197420][ T73] __lock_acquire+0xaac/0xd20
[ 396.197434][ T73] ? team_del_slave+0x32/0x1c0
[ 396.197447][ T73] lock_acquire+0x120/0x360
[ 396.197459][ T73] ? team_del_slave+0x32/0x1c0
[ 396.197471][ T73] ? __mutex_trylock_common+0x153/0x260
[ 396.197481][ T73] __mutex_lock+0x182/0xe80
[ 396.197490][ T73] ? team_del_slave+0x32/0x1c0
[ 396.197504][ T73] ? rcu_is_watching+0x15/0xb0
[ 396.197519][ T73] ? team_del_slave+0x32/0x1c0
[ 396.197531][ T73] ? __pfx___mutex_lock+0x10/0x10
[ 396.197541][ T73] ? bond_netdev_event+0xd9/0xe80
[ 396.197552][ T73] ? __pfx___mutex_lock+0x10/0x10
[ 396.197562][ T73] ? __pfx_bond_netdev_event+0x10/0x10
[ 396.197573][ T73] team_del_slave+0x32/0x1c0
[ 396.197586][ T73] team_device_event+0x285/0xa20
[ 396.197597][ T73] notifier_call_chain+0x1b3/0x3e0
[ 396.197609][ T73] unregister_netdevice_many_notify+0x15d4/0x2330
[ 396.197627][ T73] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 396.197641][ T73] ? call_rcu+0x6dd/0x990
[ 396.197649][ T73] ? lockdep_hardirqs_on+0x9c/0x150
[ 396.197664][ T73] unregister_netdevice_queue+0x33c/0x380
[ 396.197678][ T73] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 396.197692][ T73] _cfg80211_unregister_wdev+0x165/0x590
[ 396.197707][ T73] ieee80211_remove_interfaces+0x49a/0x6d0
[ 396.197728][ T73] ? __pfx_synchronize_rcu+0x10/0x10
[ 396.197738][ T73] ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[ 396.197749][ T73] ? rcu_is_watching+0x15/0xb0
[ 396.197764][ T73] ieee80211_unregister_hw+0x5d/0x2c0
[ 396.197776][ T73] mac80211_hwsim_del_radio+0x275/0x460
[ 396.197792][ T73] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[ 396.197808][ T73] hwsim_exit_net+0x584/0x640
[ 396.197821][ T73] ? __pfx_hwsim_exit_net+0x10/0x10
[ 396.197833][ T73] ? __ip_vs_dev_cleanup_batch+0x238/0x260
[ 396.197844][ T73] cleanup_net+0x717/0xbd0
[ 396.197855][ T73] ? __pfx_cleanup_net+0x10/0x10
[ 396.197867][ T73] ? _raw_spin_unlock_irq+0x23/0x50
[ 396.197875][ T73] ? process_scheduled_works+0x9ec/0x17a0
[ 396.197889][ T73] ? process_scheduled_works+0x9ec/0x17a0
[ 396.197902][ T73] process_scheduled_works+0xadb/0x17a0
[ 396.197921][ T73] ? __pfx_process_scheduled_works+0x10/0x10
[ 396.197938][ T73] worker_thread+0x8a0/0xda0
[ 396.197947][ T73] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 396.197958][ T73] ? __kthread_parkme+0x7b/0x200
[ 396.197969][ T73] kthread+0x70e/0x8a0
[ 396.197976][ T73] ? __pfx_worker_thread+0x10/0x10
[ 396.197982][ T73] ? __pfx_kthread+0x10/0x10
[ 396.197988][ T73] ? __pfx_kthread+0x10/0x10
[ 396.197995][ T73] ? _raw_spin_unlock_irq+0x23/0x50
[ 396.198003][ T73] ? lockdep_hardirqs_on+0x9c/0x150
[ 396.198012][ T73] ? __pfx_kthread+0x10/0x10
[ 396.198023][ T73] ret_from_fork+0x4b/0x80
[ 396.198032][ T73] ? __pfx_kthread+0x10/0x10
[ 396.198042][ T73] ret_from_fork_asm+0x1a/0x30
[ 396.198054][ T73] </TASK>
[ 396.357351][ T73] team0: Port device wlan1 removed
[ 396.362738][ T6120] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 396.365702][ T6120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 396.376945][ T6120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 396.444555][ T73] hsr_slave_0: left promiscuous mode
[ 396.451182][ T73] hsr_slave_1: left promiscuous mode
[ 396.460649][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 396.463719][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 396.476378][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 396.481769][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 396.492540][ T73] veth1_macvtap: left promiscuous mode
[ 396.494810][ T73] veth0_macvtap: left promiscuous mode
[ 396.497163][ T73] veth1_vlan: left promiscuous mode
[ 396.509640][ T73] veth0_vlan: left promiscuous mode
[ 396.627346][ T73] team0 (unregistering): Port device team_slave_1 removed
[ 396.637942][ T73] team0 (unregistering): Port device team_slave_0 removed
[ 396.749847][ T6120] hsr_slave_0: entered promiscuous mode
[ 396.759625][ T6120] hsr_slave_1: entered promiscuous mode
[ 397.062515][ T6120] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 397.068837][ T6120] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 397.072993][ T49] Bluetooth: hci0: command tx timeout
[ 397.091869][ T6120] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 397.096572][ T6120] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 397.180160][ T6120] 8021q: adding VLAN 0 to HW filter on device bond0
[ 397.198276][ T6120] 8021q: adding VLAN 0 to HW filter on device team0
[ 397.210475][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state
[ 397.213402][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 397.234634][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state
[ 397.237738][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 397.403751][ T6120] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 397.444113][ T6120] veth0_vlan: entered promiscuous mode
[ 397.461209][ T6120] veth1_vlan: entered promiscuous mode
[ 397.492000][ T6120] veth0_macvtap: entered promiscuous mode
[ 397.498337][ T6120] veth1_macvtap: entered promiscuous mode
[ 397.523487][ T6120] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 397.540112][ T6120] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 397.552061][ T6120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 397.555857][ T6120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 397.569687][ T6120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 397.573456][ T6120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 397.618119][ T6120] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht'
[ 397.651367][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 397.654593][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 397.660573][ T6120] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht'
[ 397.697372][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 397.702542][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 397.737238][ T6177] validate_nla: 134 callbacks suppressed
[ 397.737253][ T6177] netlink: 'syz.0.616': attribute type 10 has an invalid length.
[ 397.752192][ T6177] team0: Port device wlan1 added
[ 397.774184][ T6180] netlink: 'syz.0.617': attribute type 10 has an invalid length.
[ 397.803890][ T6182] netlink: 'syz.0.618': attribute type 10 has an invalid length.
[ 397.826330][ T6183] netlink: 'syz.0.619': attribute type 10 has an invalid length.
[ 397.853201][ T6185] netlink: 'syz.0.620': attribute type 10 has an invalid length.
[ 397.886477][ T6187] netlink: 'syz.0.621': attribute type 10 has an invalid length.
[ 397.912900][ T6190] netlink: 'syz.0.622': attribute type 10 has an invalid length.
[ 397.942758][ T6192] netlink: 'syz.0.623': attribute type 10 has an invalid length.
[ 397.975326][ T6194] netlink: 'syz.0.624': attribute type 10 has an invalid length.
[ 397.994738][ T6195] netlink: 'syz.0.625': attribute type 10 has an invalid length.
2025/05/05 17:24:48 executed programs: 611
[ 399.149087][ T49] Bluetooth: hci0: command tx timeout
[ 401.229776][ T49] Bluetooth: hci0: command tx timeout
[ 402.744407][ T6448] validate_nla: 252 callbacks suppressed
[ 402.744422][ T6448] netlink: 'syz.0.878': attribute type 10 has an invalid length.
[ 402.758157][ T6449] netlink: 'syz.0.879': attribute type 10 has an invalid length.
[ 402.768349][ T6450] netlink: 'syz.0.880': attribute type 10 has an invalid length.
[ 402.804820][ T6451] netlink: 'syz.0.881': attribute type 10 has an invalid length.
[ 402.815115][ T6452] netlink: 'syz.0.882': attribute type 10 has an invalid length.
[ 402.824947][ T6453] netlink: 'syz.0.883': attribute type 10 has an invalid length.
[ 402.864223][ T6454] netlink: 'syz.0.884': attribute type 10 has an invalid length.
[ 402.874755][ T6455] netlink: 'syz.0.885': attribute type 10 has an invalid length.
[ 402.884115][ T6456] netlink: 'syz.0.886': attribute type 10 has an invalid length.
[ 402.924243][ T6457] netlink: 'syz.0.887': attribute type 10 has an invalid length.
2025/05/05 17:24:53 executed programs: 880
[ 403.309197][ T49] Bluetooth: hci0: command tx timeout
VM DIAGNOSIS:
17:24:46 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900012ce8d0
R8 =ffff8880009a8237 R9 =1ffff11000135046 R10=dffffc0000000000 R11=ffffffff853dbab0
R12=dffffc0000000000 R13=ffffffff99847c5f R14=ffffffff99b4cbc0 R15=0000000000000000
RIP=ffffffff853dbb2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88808d6cb000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000055f0e2cf8038 CR3=000000004156f000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000020000000 Opmask01=000000000000000f Opmask02=000000000180030f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000188dc154 0000000000000024
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf71a3f00 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6970726100656c 69666f7270000920
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000c0fe
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200000000000000 00000000000002ff
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200000000000000 00000000000002ff
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6972622f73252f74 656e2f7373616c63 2f7379732f007367 616c665f6e75742f
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c57470a56000a51 404b0a5656444946 0a565c560a005642 4449435f4b50510a
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000b 0000000000000000 00000000331c070c 6c5f218df00221ad
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000065676173 73656d5f70636864
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000060021 0000000000000000 000000004f1c928b 383f6d5e70626827
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a80ebc44ca7f05ab 726125e5fafd7f7f 656761737f7dffff 7c7f6ddff0636dff
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020