Warning: Permanently added '10.128.15.195' (ED25519) to the list of known hosts. 2025/05/12 20:30:44 ignoring optional flag "sandboxArg"="0" 2025/05/12 20:30:45 parsed 1 programs [ 347.349103][ T5875] cgroup: Unknown subsys name 'net' [ 347.467385][ T5875] cgroup: Unknown subsys name 'cpuset' [ 347.477199][ T5875] cgroup: Unknown subsys name 'rlimit' [ 349.094307][ T5875] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 351.860695][ T5881] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 352.594625][ T5900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 352.602679][ T5900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 352.611875][ T5900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 352.623870][ T5900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 352.633540][ T5900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.722523][ T5924] chnl_net:caif_netlink_parms(): no params data found [ 353.837601][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.848162][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.856475][ T5924] bridge_slave_0: entered allmulticast mode [ 353.864827][ T5924] bridge_slave_0: entered promiscuous mode [ 353.881422][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.888756][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.896085][ T5924] bridge_slave_1: entered allmulticast mode [ 353.903424][ T5924] bridge_slave_1: entered promiscuous mode [ 353.941024][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.954000][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.992128][ T5924] team0: Port device team_slave_0 added [ 354.001342][ T5924] team0: Port device team_slave_1 added [ 354.034717][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.041731][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.067981][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.081343][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.089221][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.115276][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.160385][ T5924] hsr_slave_0: entered promiscuous mode [ 354.167102][ T5924] hsr_slave_1: entered promiscuous mode [ 354.320385][ T5924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 354.332445][ T5924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 354.342862][ T5924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 354.353777][ T5924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 354.382989][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.390222][ T5924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.398308][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.405459][ T5924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.464722][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.482658][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.492020][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.509154][ T5924] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.522889][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.530042][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.546629][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.553821][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.742738][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.785691][ T5924] veth0_vlan: entered promiscuous mode [ 354.798929][ T5924] veth1_vlan: entered promiscuous mode [ 354.827904][ T5924] veth0_macvtap: entered promiscuous mode [ 354.840846][ T5924] veth1_macvtap: entered promiscuous mode [ 354.859711][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.874850][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.888047][ T5924] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.898274][ T5924] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.907057][ T5924] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.915901][ T5924] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.081577][ T54] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.146735][ T54] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.207994][ T54] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.278506][ T54] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.696696][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.709465][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.742601][ T5892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.751281][ T5892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/05/12 20:30:58 executed programs: 0 [ 357.237594][ T5900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 357.246795][ T5900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 357.255646][ T5900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 357.264323][ T5900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 357.272636][ T5900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 357.447676][ T5971] chnl_net:caif_netlink_parms(): no params data found [ 357.532137][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.539375][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.547025][ T5971] bridge_slave_0: entered allmulticast mode [ 357.555147][ T5971] bridge_slave_0: entered promiscuous mode [ 357.564444][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.571619][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.580148][ T5971] bridge_slave_1: entered allmulticast mode [ 357.587587][ T5971] bridge_slave_1: entered promiscuous mode [ 357.620676][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.632662][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.671829][ T5971] team0: Port device team_slave_0 added [ 357.681898][ T5971] team0: Port device team_slave_1 added [ 357.716950][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.724143][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.750331][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.763285][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.770253][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.797014][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.848405][ T5971] hsr_slave_0: entered promiscuous mode [ 357.855075][ T5971] hsr_slave_1: entered promiscuous mode [ 357.861277][ T5971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.869128][ T5971] Cannot create hsr debugfs directory [ 358.058502][ T54] bridge_slave_1: left allmulticast mode [ 358.066263][ T54] bridge_slave_1: left promiscuous mode [ 358.074990][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.092586][ T54] bridge_slave_0: left allmulticast mode [ 358.099813][ T54] bridge_slave_0: left promiscuous mode [ 358.108005][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.452617][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.466029][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.476700][ T54] bond0 (unregistering): Released all slaves [ 358.589097][ T54] hsr_slave_0: left promiscuous mode [ 358.595547][ T54] hsr_slave_1: left promiscuous mode [ 358.601711][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.618483][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.627317][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.637203][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.659135][ T54] veth1_macvtap: left promiscuous mode [ 358.664908][ T54] veth0_macvtap: left promiscuous mode [ 358.670486][ T54] veth1_vlan: left promiscuous mode [ 358.676124][ T54] veth0_vlan: left promiscuous mode [ 359.093144][ T54] team0 (unregistering): Port device team_slave_1 removed [ 359.129889][ T54] team0 (unregistering): Port device team_slave_0 removed [ 359.324617][ T5140] Bluetooth: hci0: command tx timeout [ 359.646418][ T5971] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 359.662093][ T5971] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 359.679900][ T5971] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 359.691818][ T5971] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 359.817850][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.162646][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.178022][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.185218][ T5932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.219036][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.226222][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.541525][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.601450][ T5971] veth0_vlan: entered promiscuous mode [ 360.618389][ T5971] veth1_vlan: entered promiscuous mode [ 360.646935][ T5971] veth0_macvtap: entered promiscuous mode [ 360.659925][ T5971] veth1_macvtap: entered promiscuous mode [ 360.679910][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.694221][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.708227][ T5971] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.717836][ T5971] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.727054][ T5971] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.736206][ T5971] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.797570][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.806894][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.834969][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.842850][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.889857][ T6013] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 360.911694][ T6013] team0: Port device wlan1 added [ 360.938881][ T6014] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 360.981878][ T6015] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 361.011317][ T6016] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 361.039992][ T6017] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 361.066315][ T6018] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 361.100035][ T6019] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 361.125669][ T6020] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 361.156625][ T6021] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 361.188028][ T6022] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 361.394673][ T5140] Bluetooth: hci0: command tx timeout 2025/05/12 20:31:03 executed programs: 53 [ 363.473441][ T5140] Bluetooth: hci0: command tx timeout [ 365.554550][ T5140] Bluetooth: hci0: command tx timeout [ 365.898858][ T6226] validate_nla: 203 callbacks suppressed [ 365.898877][ T6226] netlink: 'syz.0.229': attribute type 10 has an invalid length. [ 365.934446][ T6227] netlink: 'syz.0.230': attribute type 10 has an invalid length. [ 365.960628][ T6228] netlink: 'syz.0.231': attribute type 10 has an invalid length. [ 366.002545][ T6229] netlink: 'syz.0.232': attribute type 10 has an invalid length. [ 366.026969][ T6230] netlink: 'syz.0.233': attribute type 10 has an invalid length. [ 366.056418][ T6231] netlink: 'syz.0.234': attribute type 10 has an invalid length. [ 366.082288][ T6232] netlink: 'syz.0.235': attribute type 10 has an invalid length. [ 366.112841][ T6233] netlink: 'syz.0.236': attribute type 10 has an invalid length. [ 366.142052][ T6234] netlink: 'syz.0.237': attribute type 10 has an invalid length. [ 366.170808][ T6235] netlink: 'syz.0.238': attribute type 10 has an invalid length. 2025/05/12 20:31:08 executed programs: 277 [ 370.921839][ T6473] validate_nla: 237 callbacks suppressed [ 370.921853][ T6473] netlink: 'syz.0.476': attribute type 10 has an invalid length. [ 370.948742][ T6474] netlink: 'syz.0.477': attribute type 10 has an invalid length. [ 370.969293][ T6475] netlink: 'syz.0.478': attribute type 10 has an invalid length. [ 370.992711][ T6476] netlink: 'syz.0.479': attribute type 10 has an invalid length. [ 371.016567][ T6477] netlink: 'syz.0.480': attribute type 10 has an invalid length. [ 371.038320][ T6478] netlink: 'syz.0.481': attribute type 10 has an invalid length. [ 371.070298][ T6479] netlink: 'syz.0.482': attribute type 10 has an invalid length. [ 371.092615][ T6480] netlink: 'syz.0.483': attribute type 10 has an invalid length. [ 371.113141][ T6481] netlink: 'syz.0.484': attribute type 10 has an invalid length. [ 371.135109][ T6482] netlink: 'syz.0.485': attribute type 10 has an invalid length. 2025/05/12 20:31:13 executed programs: 528 [ 373.787531][ T5900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 373.799964][ T5900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 373.808467][ T5900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 373.817791][ T5900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 373.826890][ T5900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.000952][ T54] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.018321][ T6615] chnl_net:caif_netlink_parms(): no params data found [ 374.100738][ T54] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.116183][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.123669][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.130825][ T6615] bridge_slave_0: entered allmulticast mode [ 374.138235][ T6615] bridge_slave_0: entered promiscuous mode [ 374.147184][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.155945][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.163974][ T6615] bridge_slave_1: entered allmulticast mode [ 374.171545][ T6615] bridge_slave_1: entered promiscuous mode [ 374.198036][ T54] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.227495][ T6615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.239584][ T6615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.271832][ T54] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.306868][ T6615] team0: Port device team_slave_0 added [ 374.314996][ T6615] team0: Port device team_slave_1 added [ 374.349858][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.356960][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.383351][ T6615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.396678][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.403772][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.429726][ T6615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.520855][ T6615] hsr_slave_0: entered promiscuous mode [ 374.528160][ T6615] hsr_slave_1: entered promiscuous mode [ 374.581054][ T54] bridge_slave_1: left allmulticast mode [ 374.587769][ T54] bridge_slave_1: left promiscuous mode [ 374.593984][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.604544][ T54] bridge_slave_0: left allmulticast mode [ 374.610224][ T54] bridge_slave_0: left promiscuous mode [ 374.616074][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.830117][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.840979][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.851130][ T54] bond0 (unregistering): Released all slaves [ 374.983507][ T54] [ 374.985889][ T54] ====================================================== [ 374.993004][ T54] WARNING: possible circular locking dependency detected [ 375.000061][ T54] 6.15.0-rc6-syzkaller #0 Not tainted [ 375.005419][ T54] ------------------------------------------------------ [ 375.012423][ T54] kworker/u8:3/54 is trying to acquire lock: [ 375.018400][ T54] ffff8880670c0e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 375.028011][ T54] [ 375.028011][ T54] but task is already holding lock: [ 375.035377][ T54] ffff888023cd0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 375.045740][ T54] [ 375.045740][ T54] which lock already depends on the new lock. [ 375.045740][ T54] [ 375.056132][ T54] [ 375.056132][ T54] the existing dependency chain (in reverse order) is: [ 375.065137][ T54] [ 375.065137][ T54] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 375.072881][ T54] lock_acquire+0x120/0x360 [ 375.077920][ T54] __mutex_lock+0x182/0xe80 [ 375.082956][ T54] ieee80211_open+0xed/0x1f0 [ 375.088091][ T54] __dev_open+0x46d/0x880 [ 375.092950][ T54] netif_open+0xaa/0x170 [ 375.097731][ T54] dev_open+0x125/0x260 [ 375.102407][ T54] team_add_slave+0xb36/0x2840 [ 375.107695][ T54] do_set_master+0x530/0x6d0 [ 375.112805][ T54] do_setlink+0xd47/0x40d0 [ 375.117738][ T54] rtnl_newlink+0x160b/0x1c70 [ 375.122947][ T54] rtnetlink_rcv_msg+0x7cc/0xb70 [ 375.128423][ T54] netlink_rcv_skb+0x219/0x490 [ 375.133711][ T54] netlink_unicast+0x758/0x8d0 [ 375.138996][ T54] netlink_sendmsg+0x805/0xb30 [ 375.144283][ T54] __sock_sendmsg+0x219/0x270 [ 375.149478][ T54] ____sys_sendmsg+0x505/0x830 [ 375.154761][ T54] ___sys_sendmsg+0x21f/0x2a0 [ 375.159960][ T54] __x64_sys_sendmsg+0x19b/0x260 [ 375.165418][ T54] do_syscall_64+0xf6/0x210 [ 375.170439][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.176849][ T54] [ 375.176849][ T54] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 375.185015][ T54] validate_chain+0xb9b/0x2140 [ 375.190292][ T54] __lock_acquire+0xaac/0xd20 [ 375.195490][ T54] lock_acquire+0x120/0x360 [ 375.200520][ T54] __mutex_lock+0x182/0xe80 [ 375.205539][ T54] team_del_slave+0x32/0x1c0 [ 375.210649][ T54] team_device_event+0x285/0xa20 [ 375.216109][ T54] notifier_call_chain+0x1b3/0x3e0 [ 375.221741][ T54] unregister_netdevice_many_notify+0x15d8/0x2330 [ 375.228675][ T54] unregister_netdevice_queue+0x33c/0x380 [ 375.234913][ T54] _cfg80211_unregister_wdev+0x165/0x590 [ 375.241066][ T54] ieee80211_remove_interfaces+0x49a/0x6d0 [ 375.247395][ T54] ieee80211_unregister_hw+0x5d/0x2c0 [ 375.253284][ T54] mac80211_hwsim_del_radio+0x275/0x460 [ 375.259365][ T54] hwsim_exit_net+0x584/0x640 [ 375.264560][ T54] cleanup_net+0x717/0xbd0 [ 375.269488][ T54] process_scheduled_works+0xadb/0x17a0 [ 375.275558][ T54] worker_thread+0x8a0/0xda0 [ 375.280657][ T54] kthread+0x70e/0x8a0 [ 375.285237][ T54] ret_from_fork+0x4b/0x80 [ 375.290254][ T54] ret_from_fork_asm+0x1a/0x30 [ 375.295531][ T54] [ 375.295531][ T54] other info that might help us debug this: [ 375.295531][ T54] [ 375.305748][ T54] Possible unsafe locking scenario: [ 375.305748][ T54] [ 375.313184][ T54] CPU0 CPU1 [ 375.318536][ T54] ---- ---- [ 375.323888][ T54] lock(&rdev->wiphy.mtx); [ 375.328395][ T54] lock(team->team_lock_key#2); [ 375.335855][ T54] lock(&rdev->wiphy.mtx); [ 375.342873][ T54] lock(team->team_lock_key#2); [ 375.347818][ T54] [ 375.347818][ T54] *** DEADLOCK *** [ 375.347818][ T54] [ 375.355951][ T54] 5 locks held by kworker/u8:3/54: [ 375.361048][ T54] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 375.371933][ T54] #1: ffffc9000120fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 375.382467][ T54] #2: ffffffff8f2ea1d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 375.391871][ T54] #3: ffffffff8f2f6d08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 375.401712][ T54] #4: ffff888023cd0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 375.412506][ T54] [ 375.412506][ T54] stack backtrace: [ 375.418401][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u8:3 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 375.418418][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 375.418428][ T54] Workqueue: netns cleanup_net [ 375.418452][ T54] Call Trace: [ 375.418461][ T54] [ 375.418469][ T54] dump_stack_lvl+0x189/0x250 [ 375.418497][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.418516][ T54] ? __pfx__printk+0x10/0x10 [ 375.418531][ T54] ? print_lock_name+0xde/0x100 [ 375.418554][ T54] print_circular_bug+0x2ee/0x310 [ 375.418569][ T54] check_noncircular+0x134/0x160 [ 375.418585][ T54] validate_chain+0xb9b/0x2140 [ 375.418600][ T54] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 375.418616][ T54] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.418636][ T54] __lock_acquire+0xaac/0xd20 [ 375.418657][ T54] ? team_del_slave+0x32/0x1c0 [ 375.418676][ T54] lock_acquire+0x120/0x360 [ 375.418694][ T54] ? team_del_slave+0x32/0x1c0 [ 375.418717][ T54] ? __mutex_trylock_common+0x153/0x260 [ 375.418734][ T54] __mutex_lock+0x182/0xe80 [ 375.418750][ T54] ? team_del_slave+0x32/0x1c0 [ 375.418770][ T54] ? rcu_is_watching+0x15/0xb0 [ 375.418793][ T54] ? team_del_slave+0x32/0x1c0 [ 375.418813][ T54] ? __pfx___mutex_lock+0x10/0x10 [ 375.418829][ T54] ? bond_netdev_event+0xd9/0xe80 [ 375.418844][ T54] ? __pfx___mutex_lock+0x10/0x10 [ 375.418860][ T54] ? __pfx_bond_netdev_event+0x10/0x10 [ 375.418876][ T54] team_del_slave+0x32/0x1c0 [ 375.418897][ T54] team_device_event+0x285/0xa20 [ 375.418913][ T54] notifier_call_chain+0x1b3/0x3e0 [ 375.418929][ T54] unregister_netdevice_many_notify+0x15d8/0x2330 [ 375.418956][ T54] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 375.418977][ T54] ? call_rcu+0x6dd/0x990 [ 375.418988][ T54] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.419012][ T54] unregister_netdevice_queue+0x33c/0x380 [ 375.419033][ T54] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 375.419056][ T54] _cfg80211_unregister_wdev+0x165/0x590 [ 375.419079][ T54] ieee80211_remove_interfaces+0x49a/0x6d0 [ 375.419098][ T54] ? __pfx_synchronize_rcu+0x10/0x10 [ 375.419111][ T54] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 375.419129][ T54] ? rcu_is_watching+0x15/0xb0 [ 375.419152][ T54] ieee80211_unregister_hw+0x5d/0x2c0 [ 375.419168][ T54] mac80211_hwsim_del_radio+0x275/0x460 [ 375.419192][ T54] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 375.419217][ T54] hwsim_exit_net+0x584/0x640 [ 375.419237][ T54] ? __pfx_hwsim_exit_net+0x10/0x10 [ 375.419256][ T54] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 375.419272][ T54] cleanup_net+0x717/0xbd0 [ 375.419288][ T54] ? __pfx_cleanup_net+0x10/0x10 [ 375.419305][ T54] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.419319][ T54] ? process_scheduled_works+0x9ec/0x17a0 [ 375.419340][ T54] ? process_scheduled_works+0x9ec/0x17a0 [ 375.419361][ T54] process_scheduled_works+0xadb/0x17a0 [ 375.419392][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 375.419418][ T54] worker_thread+0x8a0/0xda0 [ 375.419439][ T54] kthread+0x70e/0x8a0 [ 375.419456][ T54] ? __pfx_worker_thread+0x10/0x10 [ 375.419468][ T54] ? __pfx_kthread+0x10/0x10 [ 375.419484][ T54] ? __pfx_kthread+0x10/0x10 [ 375.419506][ T54] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.419520][ T54] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.419535][ T54] ? __pfx_kthread+0x10/0x10 [ 375.419550][ T54] ret_from_fork+0x4b/0x80 [ 375.419564][ T54] ? __pfx_kthread+0x10/0x10 [ 375.419579][ T54] ret_from_fork_asm+0x1a/0x30 [ 375.419597][ T54] [ 375.763827][ T54] team0: Port device wlan1 removed [ 375.883255][ T5140] Bluetooth: hci0: command tx timeout [ 375.936329][ T54] hsr_slave_0: left promiscuous mode [ 375.942248][ T54] hsr_slave_1: left promiscuous mode [ 375.952289][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.962503][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.971151][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.979067][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.991175][ T54] veth1_macvtap: left promiscuous mode [ 375.996912][ T54] veth0_macvtap: left promiscuous mode [ 376.002508][ T54] veth1_vlan: left promiscuous mode [ 376.009626][ T54] veth0_vlan: left promiscuous mode [ 376.159124][ T54] team0 (unregistering): Port device team_slave_1 removed [ 376.180103][ T54] team0 (unregistering): Port device team_slave_0 removed [ 376.371897][ T6615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 376.388512][ T6615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 376.398203][ T6615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 376.407902][ T6615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 376.479618][ T6615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.505689][ T6615] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.525791][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.532982][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.556508][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.563677][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.594402][ T6615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.712214][ T6615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.745595][ T6615] veth0_vlan: entered promiscuous mode [ 376.755876][ T6615] veth1_vlan: entered promiscuous mode [ 376.776359][ T6615] veth0_macvtap: entered promiscuous mode [ 376.785108][ T6615] veth1_macvtap: entered promiscuous mode [ 376.797931][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.809377][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.819841][ T6615] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.828692][ T6615] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.837548][ T6615] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.847766][ T6615] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.873239][ T6615] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 376.894707][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.896419][ T6615] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 376.903020][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.928260][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.936883][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.962801][ T6655] validate_nla: 130 callbacks suppressed [ 376.962816][ T6655] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 376.981536][ T6655] team0: Port device wlan1 added [ 376.996911][ T6656] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 377.017031][ T6657] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 377.037840][ T6658] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 377.054173][ T6659] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 377.072258][ T6660] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 377.098076][ T6661] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 377.114744][ T6662] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 377.131380][ T6663] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 377.159488][ T6664] netlink: 'syz.0.625': attribute type 10 has an invalid length. 2025/05/12 20:31:18 executed programs: 620 [ 377.953203][ T5140] Bluetooth: hci0: command tx timeout [ 378.755264][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.761681][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.033090][ T5140] Bluetooth: hci0: command tx timeout [ 382.003294][ T6950] validate_nla: 285 callbacks suppressed [ 382.003310][ T6950] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 382.026280][ T6951] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 382.044096][ T6952] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 382.067432][ T6953] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 382.084409][ T6954] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 382.100173][ T6955] netlink: 'syz.0.916': attribute type 10 has an invalid length. [ 382.113949][ T5140] Bluetooth: hci0: command tx timeout [ 382.128757][ T6956] netlink: 'syz.0.917': attribute type 10 has an invalid length. [ 382.145567][ T6957] netlink: 'syz.0.918': attribute type 10 has an invalid length. [ 382.161226][ T6958] netlink: 'syz.0.919': attribute type 10 has an invalid length. [ 382.188560][ T6959] netlink: 'syz.0.920': attribute type 10 has an invalid length. 2025/05/12 20:31:23 executed programs: 913