Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. 2025/01/07 02:56:55 ignoring optional flag "sandboxArg"="0" 2025/01/07 02:56:56 parsed 1 programs [ 300.281544][ T5855] cgroup: Unknown subsys name 'net' [ 300.390406][ T5855] cgroup: Unknown subsys name 'cpuset' [ 300.398821][ T5855] cgroup: Unknown subsys name 'rlimit' [ 301.966083][ T5855] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 304.535317][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 304.666829][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.675587][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.687986][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.698212][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.706321][ T5873] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 304.713814][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.004370][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.012463][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.060534][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.069604][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.428295][ T5921] chnl_net:caif_netlink_parms(): no params data found [ 307.500431][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.508455][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.515735][ T5921] bridge_slave_0: entered allmulticast mode [ 307.525032][ T5921] bridge_slave_0: entered promiscuous mode [ 307.539940][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.547526][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.554762][ T5921] bridge_slave_1: entered allmulticast mode [ 307.562570][ T5921] bridge_slave_1: entered promiscuous mode [ 307.590878][ T5921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.603069][ T5921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.634077][ T5921] team0: Port device team_slave_0 added [ 307.642035][ T5921] team0: Port device team_slave_1 added [ 307.665332][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.672832][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.698898][ T5921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.712098][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.719355][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.745444][ T5921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.783212][ T5921] hsr_slave_0: entered promiscuous mode [ 307.789988][ T5921] hsr_slave_1: entered promiscuous mode [ 307.903051][ T5921] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.914346][ T5921] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.924671][ T5921] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.941559][ T5921] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.968630][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.975933][ T5921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.983956][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.991181][ T5921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.047300][ T5921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.063617][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.074198][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.092194][ T5921] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.105326][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.112537][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.129918][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.137332][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.299009][ T5921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.335157][ T5921] veth0_vlan: entered promiscuous mode [ 308.345740][ T5921] veth1_vlan: entered promiscuous mode [ 308.377738][ T5921] veth0_macvtap: entered promiscuous mode [ 308.388512][ T5921] veth1_macvtap: entered promiscuous mode [ 308.409547][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.422454][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.435507][ T5921] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.445362][ T5921] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.454989][ T5921] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.464590][ T5921] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.633931][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.718674][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.793802][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.864999][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/01/07 02:57:09 executed programs: 0 [ 309.875303][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.885307][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.896755][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.905045][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.913514][ T5143] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 309.921146][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.062800][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 310.121176][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.128659][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.136351][ T5950] bridge_slave_0: entered allmulticast mode [ 310.143217][ T5950] bridge_slave_0: entered promiscuous mode [ 310.151470][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.158986][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.166566][ T5950] bridge_slave_1: entered allmulticast mode [ 310.173667][ T5950] bridge_slave_1: entered promiscuous mode [ 310.201653][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.213327][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.248245][ T5950] team0: Port device team_slave_0 added [ 310.256844][ T5950] team0: Port device team_slave_1 added [ 310.280295][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.287733][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.313935][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.328704][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.335680][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.362422][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.403587][ T5950] hsr_slave_0: entered promiscuous mode [ 310.410120][ T5950] hsr_slave_1: entered promiscuous mode [ 310.418213][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.426132][ T5950] Cannot create hsr debugfs directory [ 311.465149][ T12] bridge_slave_1: left allmulticast mode [ 311.472955][ T12] bridge_slave_1: left promiscuous mode [ 311.481714][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.499427][ T12] bridge_slave_0: left allmulticast mode [ 311.505154][ T12] bridge_slave_0: left promiscuous mode [ 311.514895][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.888672][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.900071][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.910955][ T12] bond0 (unregistering): Released all slaves [ 311.970402][ T5143] Bluetooth: hci0: command tx timeout [ 312.019541][ T12] hsr_slave_0: left promiscuous mode [ 312.027361][ T12] hsr_slave_1: left promiscuous mode [ 312.035034][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.047717][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.057288][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.064759][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.090676][ T12] veth1_macvtap: left promiscuous mode [ 312.097929][ T12] veth0_macvtap: left promiscuous mode [ 312.103963][ T12] veth1_vlan: left promiscuous mode [ 312.109923][ T12] veth0_vlan: left promiscuous mode [ 312.647096][ T12] team0 (unregistering): Port device team_slave_1 removed [ 312.698171][ T12] team0 (unregistering): Port device team_slave_0 removed [ 313.374031][ T5950] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 313.402724][ T5950] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 313.413049][ T5950] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 313.423787][ T5950] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 313.541869][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.671681][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.691356][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.698631][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.742837][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.750072][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.037103][ T5143] Bluetooth: hci0: command tx timeout [ 314.062187][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.105258][ T5950] veth0_vlan: entered promiscuous mode [ 314.118691][ T5950] veth1_vlan: entered promiscuous mode [ 314.165411][ T5950] veth0_macvtap: entered promiscuous mode [ 314.178615][ T5950] veth1_macvtap: entered promiscuous mode [ 314.202153][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.214458][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.226490][ T5950] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.235242][ T5950] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.244939][ T5950] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.254439][ T5950] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.322464][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.341538][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.372687][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.382909][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.445442][ T6025] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 314.482147][ T6025] team0: Port device wlan1 added [ 314.513595][ T6028] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 314.580076][ T6030] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 314.635316][ T6034] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 314.686987][ T6036] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 314.719543][ T6038] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 314.757529][ T6040] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 314.785147][ T6041] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 314.813834][ T6042] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 314.855389][ T6043] netlink: 'syz.0.25': attribute type 10 has an invalid length. 2025/01/07 02:57:14 executed programs: 12 [ 316.116079][ T5143] Bluetooth: hci0: command tx timeout [ 317.479806][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.486600][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.197097][ T5143] Bluetooth: hci0: command tx timeout [ 319.473030][ T6272] validate_nla: 228 callbacks suppressed [ 319.473047][ T6272] netlink: 'syz.0.254': attribute type 10 has an invalid length. [ 319.501367][ T6273] netlink: 'syz.0.255': attribute type 10 has an invalid length. [ 319.522394][ T6274] netlink: 'syz.0.256': attribute type 10 has an invalid length. [ 319.543899][ T6275] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 319.567601][ T6276] netlink: 'syz.0.258': attribute type 10 has an invalid length. [ 319.589649][ T6277] netlink: 'syz.0.259': attribute type 10 has an invalid length. [ 319.610957][ T6278] netlink: 'syz.0.260': attribute type 10 has an invalid length. [ 319.632463][ T6279] netlink: 'syz.0.261': attribute type 10 has an invalid length. [ 319.654125][ T6280] netlink: 'syz.0.262': attribute type 10 has an invalid length. [ 319.674993][ T6281] netlink: 'syz.0.263': attribute type 10 has an invalid length. 2025/01/07 02:57:19 executed programs: 261 [ 324.503106][ T6520] validate_nla: 238 callbacks suppressed [ 324.503126][ T6520] netlink: 'syz.0.502': attribute type 10 has an invalid length. [ 324.531566][ T6521] netlink: 'syz.0.503': attribute type 10 has an invalid length. [ 324.551950][ T6522] netlink: 'syz.0.504': attribute type 10 has an invalid length. [ 324.574361][ T6523] netlink: 'syz.0.505': attribute type 10 has an invalid length. [ 324.596584][ T6524] netlink: 'syz.0.506': attribute type 10 has an invalid length. [ 324.617509][ T6525] netlink: 'syz.0.507': attribute type 10 has an invalid length. [ 324.644123][ T6526] netlink: 'syz.0.508': attribute type 10 has an invalid length. [ 324.666407][ T6527] netlink: 'syz.0.509': attribute type 10 has an invalid length. [ 324.688996][ T6528] netlink: 'syz.0.510': attribute type 10 has an invalid length. [ 324.712080][ T6529] netlink: 'syz.0.511': attribute type 10 has an invalid length. 2025/01/07 02:57:24 executed programs: 509 [ 326.835225][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.845657][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.855601][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.870926][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.880406][ T5873] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 326.887957][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.001783][ T6636] chnl_net:caif_netlink_parms(): no params data found [ 327.052314][ T3508] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.096649][ T6636] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.103813][ T6636] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.112386][ T6636] bridge_slave_0: entered allmulticast mode [ 327.119513][ T6636] bridge_slave_0: entered promiscuous mode [ 327.138927][ T3508] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.152489][ T6636] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.159950][ T6636] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.169354][ T6636] bridge_slave_1: entered allmulticast mode [ 327.176707][ T6636] bridge_slave_1: entered promiscuous mode [ 327.210398][ T3508] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.227692][ T6636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.244320][ T6636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.283208][ T3508] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.301922][ T6636] team0: Port device team_slave_0 added [ 327.310380][ T6636] team0: Port device team_slave_1 added [ 327.333768][ T6636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.340951][ T6636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.367412][ T6636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.380294][ T6636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.388006][ T6636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.414323][ T6636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.509181][ T6636] hsr_slave_0: entered promiscuous mode [ 327.517561][ T6636] hsr_slave_1: entered promiscuous mode [ 327.524109][ T3508] bridge_slave_1: left allmulticast mode [ 327.530893][ T3508] bridge_slave_1: left promiscuous mode [ 327.537135][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.545734][ T3508] bridge_slave_0: left allmulticast mode [ 327.551693][ T3508] bridge_slave_0: left promiscuous mode [ 327.557800][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.800351][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.811376][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.821620][ T3508] bond0 (unregistering): Released all slaves [ 327.921179][ T3508] [ 327.923541][ T3508] ====================================================== [ 327.930557][ T3508] WARNING: possible circular locking dependency detected [ 327.937575][ T3508] 6.13.0-rc3-syzkaller-g8c21f88407d2 #0 Not tainted [ 327.944152][ T3508] ------------------------------------------------------ [ 327.951180][ T3508] kworker/u8:9/3508 is trying to acquire lock: [ 327.957340][ T3508] ffff888060630e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1d0 [ 327.966987][ T3508] [ 327.966987][ T3508] but task is already holding lock: [ 327.974375][ T3508] ffff888032f48768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x12b/0x700 [ 327.984799][ T3508] [ 327.984799][ T3508] which lock already depends on the new lock. [ 327.984799][ T3508] [ 327.995210][ T3508] [ 327.995210][ T3508] the existing dependency chain (in reverse order) is: [ 328.004225][ T3508] [ 328.004225][ T3508] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 328.011974][ T3508] lock_acquire+0x1ed/0x550 [ 328.017032][ T3508] __mutex_lock+0x1ac/0xee0 [ 328.022073][ T3508] ieee80211_open+0xe7/0x200 [ 328.027283][ T3508] __dev_open+0x2d3/0x450 [ 328.032145][ T3508] dev_open+0xae/0x1b0 [ 328.036747][ T3508] team_add_slave+0x9c8/0x2760 [ 328.042050][ T3508] do_setlink+0xe40/0x4210 [ 328.047003][ T3508] rtnl_newlink+0x1519/0x2150 [ 328.052219][ T3508] rtnetlink_rcv_msg+0x791/0xcf0 [ 328.057778][ T3508] netlink_rcv_skb+0x1e3/0x430 [ 328.063153][ T3508] netlink_unicast+0x7f6/0x990 [ 328.068461][ T3508] netlink_sendmsg+0x8e4/0xcb0 [ 328.073752][ T3508] __sock_sendmsg+0x221/0x270 [ 328.078965][ T3508] ____sys_sendmsg+0x52a/0x7e0 [ 328.084256][ T3508] __sys_sendmsg+0x269/0x350 [ 328.089384][ T3508] do_syscall_64+0xf3/0x230 [ 328.094419][ T3508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.100940][ T3508] [ 328.100940][ T3508] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 328.109137][ T3508] validate_chain+0x18ef/0x5920 [ 328.114613][ T3508] __lock_acquire+0x1397/0x2100 [ 328.120004][ T3508] lock_acquire+0x1ed/0x550 [ 328.125077][ T3508] __mutex_lock+0x1ac/0xee0 [ 328.130112][ T3508] team_del_slave+0x32/0x1d0 [ 328.135244][ T3508] team_device_event+0x200/0x5b0 [ 328.140795][ T3508] notifier_call_chain+0x1a5/0x3f0 [ 328.146437][ T3508] unregister_netdevice_many_notify+0xedd/0x1da0 [ 328.153407][ T3508] unregister_netdevice_queue+0x303/0x370 [ 328.159798][ T3508] _cfg80211_unregister_wdev+0x163/0x590 [ 328.166140][ T3508] ieee80211_remove_interfaces+0x4db/0x700 [ 328.172532][ T3508] ieee80211_unregister_hw+0x5d/0x2c0 [ 328.178448][ T3508] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 328.184556][ T3508] hwsim_exit_net+0x5c1/0x670 [ 328.189769][ T3508] cleanup_net+0x802/0xd50 [ 328.194715][ T3508] process_scheduled_works+0xa66/0x1840 [ 328.200790][ T3508] worker_thread+0x870/0xd30 [ 328.205904][ T3508] kthread+0x2f0/0x390 [ 328.210515][ T3508] ret_from_fork+0x4b/0x80 [ 328.215460][ T3508] ret_from_fork_asm+0x1a/0x30 [ 328.220752][ T3508] [ 328.220752][ T3508] other info that might help us debug this: [ 328.220752][ T3508] [ 328.231089][ T3508] Possible unsafe locking scenario: [ 328.231089][ T3508] [ 328.238559][ T3508] CPU0 CPU1 [ 328.243925][ T3508] ---- ---- [ 328.249289][ T3508] lock(&rdev->wiphy.mtx); [ 328.253813][ T3508] lock(team->team_lock_key#2); [ 328.261293][ T3508] lock(&rdev->wiphy.mtx); [ 328.268335][ T3508] lock(team->team_lock_key#2); [ 328.273292][ T3508] [ 328.273292][ T3508] *** DEADLOCK *** [ 328.273292][ T3508] [ 328.281792][ T3508] 5 locks held by kworker/u8:9/3508: [ 328.287078][ T3508] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 328.298158][ T3508] #1: ffffc9000c2afd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 328.308707][ T3508] #2: ffffffff8fca6550 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50 [ 328.318145][ T3508] #3: ffffffff8fcb2a08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 328.328001][ T3508] #4: ffff888032f48768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x12b/0x700 [ 328.338918][ T3508] [ 328.338918][ T3508] stack backtrace: [ 328.344926][ T3508] CPU: 0 UID: 0 PID: 3508 Comm: kworker/u8:9 Not tainted 6.13.0-rc3-syzkaller-g8c21f88407d2 #0 [ 328.355272][ T3508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 328.365360][ T3508] Workqueue: netns cleanup_net [ 328.370164][ T3508] Call Trace: [ 328.373461][ T3508] [ 328.376405][ T3508] dump_stack_lvl+0x241/0x360 [ 328.381119][ T3508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.386361][ T3508] ? __pfx__printk+0x10/0x10 [ 328.390988][ T3508] print_circular_bug+0x13a/0x1b0 [ 328.396056][ T3508] check_noncircular+0x36a/0x4a0 [ 328.401027][ T3508] ? __pfx_check_noncircular+0x10/0x10 [ 328.406526][ T3508] ? lockdep_lock+0x123/0x2b0 [ 328.411309][ T3508] ? __pfx_validate_chain+0x10/0x10 [ 328.416539][ T3508] ? __pfx_validate_chain+0x10/0x10 [ 328.421765][ T3508] validate_chain+0x18ef/0x5920 [ 328.426726][ T3508] ? __pfx_validate_chain+0x10/0x10 [ 328.431965][ T3508] ? __lock_acquire+0x1397/0x2100 [ 328.437000][ T3508] ? __pfx_validate_chain+0x10/0x10 [ 328.442318][ T3508] ? mark_lock+0x9a/0x360 [ 328.446678][ T3508] ? mark_lock+0x9a/0x360 [ 328.451092][ T3508] __lock_acquire+0x1397/0x2100 [ 328.456005][ T3508] lock_acquire+0x1ed/0x550 [ 328.460528][ T3508] ? team_del_slave+0x32/0x1d0 [ 328.465316][ T3508] ? __pfx_lock_acquire+0x10/0x10 [ 328.470352][ T3508] ? __pfx___might_resched+0x10/0x10 [ 328.475659][ T3508] __mutex_lock+0x1ac/0xee0 [ 328.480179][ T3508] ? team_del_slave+0x32/0x1d0 [ 328.484962][ T3508] ? trace_contention_end+0x3c/0x120 [ 328.490437][ T3508] ? __mutex_lock+0x37f/0xee0 [ 328.495461][ T3508] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 328.501470][ T3508] ? team_del_slave+0x32/0x1d0 [ 328.506475][ T3508] ? __pfx___mutex_lock+0x10/0x10 [ 328.511520][ T3508] ? __mutex_unlock_slowpath+0x21e/0x790 [ 328.517173][ T3508] ? __asan_memset+0x23/0x50 [ 328.521771][ T3508] team_del_slave+0x32/0x1d0 [ 328.526418][ T3508] team_device_event+0x200/0x5b0 [ 328.531362][ T3508] ? notifier_call_chain+0x15a/0x3f0 [ 328.536742][ T3508] notifier_call_chain+0x1a5/0x3f0 [ 328.541878][ T3508] unregister_netdevice_many_notify+0xedd/0x1da0 [ 328.548223][ T3508] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 328.555004][ T3508] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 328.560742][ T3508] ? __pfx_lock_release+0x10/0x10 [ 328.565869][ T3508] unregister_netdevice_queue+0x303/0x370 [ 328.571620][ T3508] ? __pfx_up_write+0x10/0x10 [ 328.576321][ T3508] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 328.582676][ T3508] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 328.588499][ T3508] _cfg80211_unregister_wdev+0x163/0x590 [ 328.594436][ T3508] ieee80211_remove_interfaces+0x4db/0x700 [ 328.600258][ T3508] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 328.606600][ T3508] ? rcu_is_watching+0x15/0xb0 [ 328.611794][ T3508] ieee80211_unregister_hw+0x5d/0x2c0 [ 328.617270][ T3508] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 328.622921][ T3508] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 328.629005][ T3508] hwsim_exit_net+0x5c1/0x670 [ 328.633784][ T3508] ? __pfx_hwsim_exit_net+0x10/0x10 [ 328.638991][ T3508] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 328.644819][ T3508] cleanup_net+0x802/0xd50 [ 328.649269][ T3508] ? __pfx_cleanup_net+0x10/0x10 [ 328.654226][ T3508] ? process_scheduled_works+0x976/0x1840 [ 328.659950][ T3508] process_scheduled_works+0xa66/0x1840 [ 328.665510][ T3508] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.671527][ T3508] ? assign_work+0x364/0x3d0 [ 328.676126][ T3508] worker_thread+0x870/0xd30 [ 328.680728][ T3508] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 328.686666][ T3508] ? __kthread_parkme+0x169/0x1d0 [ 328.691698][ T3508] ? __pfx_worker_thread+0x10/0x10 [ 328.696837][ T3508] kthread+0x2f0/0x390 [ 328.700915][ T3508] ? __pfx_worker_thread+0x10/0x10 [ 328.706152][ T3508] ? __pfx_kthread+0x10/0x10 [ 328.710754][ T3508] ret_from_fork+0x4b/0x80 [ 328.715193][ T3508] ? __pfx_kthread+0x10/0x10 [ 328.719791][ T3508] ret_from_fork_asm+0x1a/0x30 [ 328.724580][ T3508] [ 328.731200][ T3508] team0: Port device wlan1 removed [ 328.885277][ T3508] hsr_slave_0: left promiscuous mode [ 328.892203][ T3508] hsr_slave_1: left promiscuous mode [ 328.898117][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.905603][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.914894][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.922772][ T5143] Bluetooth: hci1: command tx timeout [ 328.928272][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.938045][ T3508] veth1_macvtap: left promiscuous mode [ 328.943616][ T3508] veth0_macvtap: left promiscuous mode [ 328.949315][ T3508] veth1_vlan: left promiscuous mode [ 328.954624][ T3508] veth0_vlan: left promiscuous mode [ 329.066896][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 329.087617][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 329.354269][ T6636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 329.385509][ T6636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 329.410993][ T6636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 329.420259][ T6636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 329.492950][ T6636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.519912][ T6636] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.530262][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.537454][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.555684][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.562928][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.590655][ T6636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.604177][ T6636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.694638][ T6636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.719761][ T6636] veth0_vlan: entered promiscuous mode [ 329.731455][ T6636] veth1_vlan: entered promiscuous mode [ 329.750088][ T6636] veth0_macvtap: entered promiscuous mode [ 329.758674][ T6636] veth1_macvtap: entered promiscuous mode [ 329.772220][ T6636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.782581][ T6636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.793973][ T6636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.805104][ T6636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.813883][ T6636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.822688][ T6636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.846709][ T6636] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 329.865582][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.868198][ T6636] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 329.884227][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.901127][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.909063][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.935566][ T6678] validate_nla: 104 callbacks suppressed [ 329.935583][ T6678] netlink: 'syz.0.616': attribute type 10 has an invalid length. 2025/01/07 02:57:29 executed programs: 603 [ 329.954282][ T6678] team0: Port device wlan1 added [ 329.969349][ T6679] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 329.989659][ T6680] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 330.010917][ T6681] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 330.028094][ T6682] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 330.044675][ T6683] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 330.071696][ T6684] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 330.090445][ T6685] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 330.107436][ T6686] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 330.130390][ T6687] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 330.996213][ T5143] Bluetooth: hci1: command tx timeout [ 333.075942][ T5143] Bluetooth: hci1: command tx timeout [ 334.939980][ T6967] validate_nla: 279 callbacks suppressed [ 334.939997][ T6967] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 334.961376][ T6968] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 334.980150][ T6969] netlink: 'syz.0.907': attribute type 10 has an invalid length. 2025/01/07 02:57:34 executed programs: 894 [ 334.996807][ T6970] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 335.014173][ T6971] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 335.040736][ T6972] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 335.058092][ T6973] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 335.073966][ T6974] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 335.101712][ T6975] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 335.118961][ T6976] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 335.156055][ T5143] Bluetooth: hci1: command tx timeout