Warning: Permanently added '10.128.10.31' (ED25519) to the list of known hosts. 2025/05/25 02:28:53 ignoring optional flag "sandboxArg"="0" 2025/05/25 02:28:55 parsed 1 programs [ 133.365659][ T5856] cgroup: Unknown subsys name 'net' [ 133.489668][ T5856] cgroup: Unknown subsys name 'cpuset' [ 133.498789][ T5856] cgroup: Unknown subsys name 'rlimit' [ 135.242035][ T5856] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 138.023793][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 139.013069][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.023558][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.031595][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.039939][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.050408][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.158235][ T5907] chnl_net:caif_netlink_parms(): no params data found [ 140.283280][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.290639][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.298424][ T5907] bridge_slave_0: entered allmulticast mode [ 140.305944][ T5907] bridge_slave_0: entered promiscuous mode [ 140.315822][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.322999][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.330294][ T5907] bridge_slave_1: entered allmulticast mode [ 140.337785][ T5907] bridge_slave_1: entered promiscuous mode [ 140.373001][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.384900][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.421808][ T5907] team0: Port device team_slave_0 added [ 140.430104][ T5907] team0: Port device team_slave_1 added [ 140.461732][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.469561][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.495542][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.508712][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.516166][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.542219][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.592090][ T5907] hsr_slave_0: entered promiscuous mode [ 140.598650][ T5907] hsr_slave_1: entered promiscuous mode [ 140.762597][ T5907] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.775753][ T5907] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.787973][ T5907] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.799298][ T5907] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.831599][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.838862][ T5907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.846939][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.854066][ T5907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.916968][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.938802][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.948469][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.967269][ T5907] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.982152][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.989484][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.004293][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.011507][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.209898][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.256656][ T5907] veth0_vlan: entered promiscuous mode [ 141.268810][ T5907] veth1_vlan: entered promiscuous mode [ 141.300287][ T5907] veth0_macvtap: entered promiscuous mode [ 141.310391][ T5907] veth1_macvtap: entered promiscuous mode [ 141.330732][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.346470][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.359480][ T5907] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.369553][ T5907] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.378590][ T5907] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.388829][ T5907] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.533995][ T5907] syz-executor (5907) used greatest stack depth: 19464 bytes left [ 141.544784][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.610385][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.671163][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.780434][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.851610][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.864921][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.911599][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.920060][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/05/25 02:29:08 executed programs: 0 [ 143.407343][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.415783][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.423435][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.433267][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.442338][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.619713][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 143.702589][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.709958][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.717317][ T5948] bridge_slave_0: entered allmulticast mode [ 143.724610][ T5948] bridge_slave_0: entered promiscuous mode [ 143.732890][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.740494][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.747946][ T5948] bridge_slave_1: entered allmulticast mode [ 143.756302][ T5948] bridge_slave_1: entered promiscuous mode [ 143.796039][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.838121][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.889664][ T5948] team0: Port device team_slave_0 added [ 143.903184][ T5948] team0: Port device team_slave_1 added [ 143.933303][ T62] bridge_slave_1: left allmulticast mode [ 143.939515][ T62] bridge_slave_1: left promiscuous mode [ 143.946238][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.968203][ T62] bridge_slave_0: left allmulticast mode [ 143.973898][ T62] bridge_slave_0: left promiscuous mode [ 143.980412][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.239482][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.250835][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.261113][ T62] bond0 (unregistering): Released all slaves [ 144.292395][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.299606][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.327972][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.346997][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.354045][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.380838][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.408530][ T62] hsr_slave_0: left promiscuous mode [ 144.414581][ T62] hsr_slave_1: left promiscuous mode [ 144.420761][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.428320][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.436862][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.444397][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.462282][ T62] veth1_macvtap: left promiscuous mode [ 144.468322][ T62] veth0_macvtap: left promiscuous mode [ 144.473966][ T62] veth1_vlan: left promiscuous mode [ 144.479640][ T62] veth0_vlan: left promiscuous mode [ 144.790266][ T62] team0 (unregistering): Port device team_slave_1 removed [ 144.819735][ T62] team0 (unregistering): Port device team_slave_0 removed [ 145.119290][ T5948] hsr_slave_0: entered promiscuous mode [ 145.127851][ T5948] hsr_slave_1: entered promiscuous mode [ 145.505951][ T55] Bluetooth: hci0: command tx timeout [ 146.000357][ T5948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.063271][ T5948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.078749][ T5948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.101790][ T5948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.321950][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.382555][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.403116][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.410356][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.437783][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.445055][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.705948][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.750836][ T5948] veth0_vlan: entered promiscuous mode [ 146.762639][ T5948] veth1_vlan: entered promiscuous mode [ 146.793348][ T5948] veth0_macvtap: entered promiscuous mode [ 146.803857][ T5948] veth1_macvtap: entered promiscuous mode [ 146.825213][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.839947][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.853129][ T5948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.861916][ T5948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.871129][ T5948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.880148][ T5948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.941313][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.954556][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.983502][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.992580][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.042288][ T5990] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 147.073854][ T5990] team0: Port device wlan1 added [ 147.100938][ T5991] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 147.143844][ T5992] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 147.171735][ T5993] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 147.204087][ T5994] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 147.233556][ T5995] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 147.267352][ T5996] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 147.296961][ T5997] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 147.331065][ T5998] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 147.364132][ T5999] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 147.585252][ T55] Bluetooth: hci0: command tx timeout 2025/05/25 02:29:13 executed programs: 53 [ 149.665072][ T55] Bluetooth: hci0: command tx timeout [ 151.746319][ T55] Bluetooth: hci0: command tx timeout [ 152.057266][ T6218] validate_nla: 218 callbacks suppressed [ 152.057280][ T6218] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 152.084866][ T6219] netlink: 'syz.0.245': attribute type 10 has an invalid length. [ 152.114338][ T6220] netlink: 'syz.0.246': attribute type 10 has an invalid length. [ 152.137089][ T6221] netlink: 'syz.0.247': attribute type 10 has an invalid length. [ 152.160076][ T6222] netlink: 'syz.0.248': attribute type 10 has an invalid length. [ 152.182407][ T6223] netlink: 'syz.0.249': attribute type 10 has an invalid length. [ 152.204482][ T6224] netlink: 'syz.0.250': attribute type 10 has an invalid length. [ 152.228017][ T6225] netlink: 'syz.0.251': attribute type 10 has an invalid length. [ 152.250974][ T6226] netlink: 'syz.0.252': attribute type 10 has an invalid length. [ 152.272118][ T6227] netlink: 'syz.0.253': attribute type 10 has an invalid length. 2025/05/25 02:29:18 executed programs: 295 [ 157.065952][ T6466] validate_nla: 238 callbacks suppressed [ 157.065967][ T6466] netlink: 'syz.0.492': attribute type 10 has an invalid length. [ 157.092702][ T6467] netlink: 'syz.0.493': attribute type 10 has an invalid length. [ 157.118012][ T6468] netlink: 'syz.0.494': attribute type 10 has an invalid length. [ 157.140972][ T6469] netlink: 'syz.0.495': attribute type 10 has an invalid length. [ 157.163502][ T6470] netlink: 'syz.0.496': attribute type 10 has an invalid length. [ 157.188286][ T6471] netlink: 'syz.0.497': attribute type 10 has an invalid length. [ 157.210722][ T6472] netlink: 'syz.0.498': attribute type 10 has an invalid length. [ 157.232617][ T6473] netlink: 'syz.0.499': attribute type 10 has an invalid length. [ 157.258398][ T6474] netlink: 'syz.0.500': attribute type 10 has an invalid length. [ 157.280698][ T6475] netlink: 'syz.0.501': attribute type 10 has an invalid length. 2025/05/25 02:29:23 executed programs: 543 [ 159.674535][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.683266][ T5140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.691685][ T5140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.700423][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.709204][ T5140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.854121][ T82] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.907169][ T6593] chnl_net:caif_netlink_parms(): no params data found [ 159.929661][ T82] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.979452][ T82] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.050078][ T82] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.066101][ T6593] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.073402][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.081308][ T6593] bridge_slave_0: entered allmulticast mode [ 160.089194][ T6593] bridge_slave_0: entered promiscuous mode [ 160.097950][ T6593] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.105896][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.113110][ T6593] bridge_slave_1: entered allmulticast mode [ 160.121216][ T6593] bridge_slave_1: entered promiscuous mode [ 160.160943][ T6593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.173598][ T6593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.242068][ T6593] team0: Port device team_slave_0 added [ 160.262044][ T6593] team0: Port device team_slave_1 added [ 160.299228][ T82] bridge_slave_1: left allmulticast mode [ 160.305463][ T82] bridge_slave_1: left promiscuous mode [ 160.311653][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.322124][ T82] bridge_slave_0: left allmulticast mode [ 160.328727][ T82] bridge_slave_0: left promiscuous mode [ 160.334536][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.591000][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.603384][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.613537][ T82] bond0 (unregistering): Released all slaves [ 160.645289][ T6593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.652429][ T6593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.678638][ T6593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.692227][ T6593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.699581][ T6593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.725710][ T6593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.784395][ T82] [ 160.786824][ T82] ====================================================== [ 160.793839][ T82] WARNING: possible circular locking dependency detected [ 160.800860][ T82] 6.15.0-rc7-syzkaller-01658-gea15e046263b #0 Not tainted [ 160.807962][ T82] ------------------------------------------------------ [ 160.814982][ T82] kworker/u8:5/82 is trying to acquire lock: [ 160.820954][ T82] ffff888079eece00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 160.830737][ T82] [ 160.830737][ T82] but task is already holding lock: [ 160.838120][ T82] ffff88807e758768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 160.848608][ T82] [ 160.848608][ T82] which lock already depends on the new lock. [ 160.848608][ T82] [ 160.859030][ T82] [ 160.859030][ T82] the existing dependency chain (in reverse order) is: [ 160.868051][ T82] [ 160.868051][ T82] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 160.875805][ T82] lock_acquire+0x120/0x360 [ 160.880845][ T82] __mutex_lock+0x182/0xe80 [ 160.885876][ T82] ieee80211_open+0xed/0x1f0 [ 160.891023][ T82] __dev_open+0x470/0x880 [ 160.895894][ T82] netif_open+0xaa/0x170 [ 160.900715][ T82] dev_open+0x125/0x260 [ 160.905508][ T82] team_add_slave+0xb36/0x2840 [ 160.910811][ T82] do_set_master+0x530/0x6d0 [ 160.915935][ T82] do_setlink+0xd47/0x40d0 [ 160.920901][ T82] rtnl_newlink+0x160b/0x1c70 [ 160.926134][ T82] rtnetlink_rcv_msg+0x7cf/0xb70 [ 160.931630][ T82] netlink_rcv_skb+0x208/0x470 [ 160.936926][ T82] netlink_unicast+0x75b/0x8d0 [ 160.942215][ T82] netlink_sendmsg+0x805/0xb30 [ 160.947505][ T82] __sock_sendmsg+0x21c/0x270 [ 160.952793][ T82] ____sys_sendmsg+0x505/0x830 [ 160.958087][ T82] ___sys_sendmsg+0x21f/0x2a0 [ 160.963295][ T82] __x64_sys_sendmsg+0x19b/0x260 [ 160.968768][ T82] do_syscall_64+0xf6/0x210 [ 160.973794][ T82] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.980211][ T82] [ 160.980211][ T82] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 160.988570][ T82] validate_chain+0xb9b/0x2140 [ 160.993950][ T82] __lock_acquire+0xaac/0xd20 [ 160.999161][ T82] lock_acquire+0x120/0x360 [ 161.004203][ T82] __mutex_lock+0x182/0xe80 [ 161.009230][ T82] team_del_slave+0x32/0x1c0 [ 161.014342][ T82] team_device_event+0x285/0xa20 [ 161.019822][ T82] notifier_call_chain+0x1b6/0x3e0 [ 161.025470][ T82] unregister_netdevice_many_notify+0x15d8/0x2320 [ 161.032435][ T82] unregister_netdevice_queue+0x33c/0x380 [ 161.038734][ T82] _cfg80211_unregister_wdev+0x165/0x590 [ 161.045079][ T82] ieee80211_remove_interfaces+0x49a/0x6d0 [ 161.051424][ T82] ieee80211_unregister_hw+0x5d/0x2c0 [ 161.057332][ T82] mac80211_hwsim_del_radio+0x275/0x460 [ 161.063404][ T82] hwsim_exit_net+0x584/0x640 [ 161.068709][ T82] ops_undo_list+0x497/0x990 [ 161.073833][ T82] cleanup_net+0x4c5/0x8a0 [ 161.078867][ T82] process_scheduled_works+0xadb/0x17a0 [ 161.084937][ T82] worker_thread+0x8a0/0xda0 [ 161.090075][ T82] kthread+0x70e/0x8a0 [ 161.094721][ T82] ret_from_fork+0x4b/0x80 [ 161.099668][ T82] ret_from_fork_asm+0x1a/0x30 [ 161.104962][ T82] [ 161.104962][ T82] other info that might help us debug this: [ 161.104962][ T82] [ 161.115190][ T82] Possible unsafe locking scenario: [ 161.115190][ T82] [ 161.122858][ T82] CPU0 CPU1 [ 161.128224][ T82] ---- ---- [ 161.133615][ T82] lock(&rdev->wiphy.mtx); [ 161.138137][ T82] lock(team->team_lock_key#2); [ 161.145612][ T82] lock(&rdev->wiphy.mtx); [ 161.152648][ T82] lock(team->team_lock_key#2); [ 161.157611][ T82] [ 161.157611][ T82] *** DEADLOCK *** [ 161.157611][ T82] [ 161.165752][ T82] 5 locks held by kworker/u8:5/82: [ 161.170888][ T82] #0: ffff88801aefe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 161.181778][ T82] #1: ffffc900015efc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 161.192318][ T82] #2: ffffffff8f2edf50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x8a0 [ 161.201654][ T82] #3: ffffffff8f2fab48 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 161.211525][ T82] #4: ffff88807e758768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 161.222341][ T82] [ 161.222341][ T82] stack backtrace: [ 161.228257][ T82] CPU: 0 UID: 0 PID: 82 Comm: kworker/u8:5 Not tainted 6.15.0-rc7-syzkaller-01658-gea15e046263b #0 PREEMPT(full) [ 161.228278][ T82] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.228289][ T82] Workqueue: netns cleanup_net [ 161.228324][ T82] Call Trace: [ 161.228333][ T82] [ 161.228340][ T82] dump_stack_lvl+0x189/0x250 [ 161.228367][ T82] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.228390][ T82] ? __pfx__printk+0x10/0x10 [ 161.228411][ T82] ? print_lock_name+0xde/0x100 [ 161.228427][ T82] print_circular_bug+0x2ee/0x310 [ 161.228446][ T82] check_noncircular+0x134/0x160 [ 161.228465][ T82] validate_chain+0xb9b/0x2140 [ 161.228483][ T82] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 161.228508][ T82] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.228528][ T82] __lock_acquire+0xaac/0xd20 [ 161.228552][ T82] ? team_del_slave+0x32/0x1c0 [ 161.228567][ T82] lock_acquire+0x120/0x360 [ 161.228588][ T82] ? team_del_slave+0x32/0x1c0 [ 161.228604][ T82] ? __mutex_trylock_common+0x153/0x260 [ 161.228623][ T82] __mutex_lock+0x182/0xe80 [ 161.228639][ T82] ? team_del_slave+0x32/0x1c0 [ 161.228655][ T82] ? rcu_is_watching+0x15/0xb0 [ 161.228672][ T82] ? team_del_slave+0x32/0x1c0 [ 161.228687][ T82] ? __pfx___mutex_lock+0x10/0x10 [ 161.228703][ T82] ? bond_netdev_event+0xd9/0xe80 [ 161.228722][ T82] ? __pfx___mutex_lock+0x10/0x10 [ 161.228737][ T82] ? __pfx_bond_netdev_event+0x10/0x10 [ 161.228758][ T82] team_del_slave+0x32/0x1c0 [ 161.228774][ T82] team_device_event+0x285/0xa20 [ 161.228795][ T82] notifier_call_chain+0x1b6/0x3e0 [ 161.228814][ T82] unregister_netdevice_many_notify+0x15d8/0x2320 [ 161.228838][ T82] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 161.228855][ T82] ? call_rcu+0x6dd/0x990 [ 161.228869][ T82] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.228894][ T82] unregister_netdevice_queue+0x33c/0x380 [ 161.228911][ T82] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 161.228930][ T82] _cfg80211_unregister_wdev+0x165/0x590 [ 161.228953][ T82] ieee80211_remove_interfaces+0x49a/0x6d0 [ 161.228972][ T82] ? __pfx_synchronize_rcu+0x10/0x10 [ 161.228988][ T82] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 161.229007][ T82] ? rcu_is_watching+0x15/0xb0 [ 161.229023][ T82] ieee80211_unregister_hw+0x5d/0x2c0 [ 161.229050][ T82] mac80211_hwsim_del_radio+0x275/0x460 [ 161.229070][ T82] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 161.229091][ T82] hwsim_exit_net+0x584/0x640 [ 161.229116][ T82] ? __pfx_hwsim_exit_net+0x10/0x10 [ 161.229140][ T82] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 161.229163][ T82] ops_undo_list+0x497/0x990 [ 161.229186][ T82] ? __pfx_ops_undo_list+0x10/0x10 [ 161.229211][ T82] cleanup_net+0x4c5/0x8a0 [ 161.229233][ T82] ? __pfx_cleanup_net+0x10/0x10 [ 161.229254][ T82] ? _raw_spin_unlock_irq+0x23/0x50 [ 161.229277][ T82] ? process_scheduled_works+0x9ec/0x17a0 [ 161.229292][ T82] ? process_scheduled_works+0x9ec/0x17a0 [ 161.229307][ T82] process_scheduled_works+0xadb/0x17a0 [ 161.229332][ T82] ? __pfx_process_scheduled_works+0x10/0x10 [ 161.229353][ T82] worker_thread+0x8a0/0xda0 [ 161.229370][ T82] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 161.229406][ T82] ? __kthread_parkme+0x7b/0x200 [ 161.229426][ T82] kthread+0x70e/0x8a0 [ 161.229446][ T82] ? __pfx_worker_thread+0x10/0x10 [ 161.229461][ T82] ? __pfx_kthread+0x10/0x10 [ 161.229480][ T82] ? __pfx_kthread+0x10/0x10 [ 161.229497][ T82] ? _raw_spin_unlock_irq+0x23/0x50 [ 161.229520][ T82] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.229535][ T82] ? __pfx_kthread+0x10/0x10 [ 161.229553][ T82] ret_from_fork+0x4b/0x80 [ 161.229569][ T82] ? __pfx_kthread+0x10/0x10 [ 161.229587][ T82] ret_from_fork_asm+0x1a/0x30 [ 161.229608][ T82] [ 161.600612][ T82] team0: Port device wlan1 removed [ 161.612524][ T6593] hsr_slave_0: entered promiscuous mode [ 161.619225][ T6593] hsr_slave_1: entered promiscuous mode [ 161.625321][ T6593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.632987][ T6593] Cannot create hsr debugfs directory [ 161.729536][ T82] hsr_slave_0: left promiscuous mode [ 161.736632][ T82] hsr_slave_1: left promiscuous mode [ 161.742500][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.745075][ T55] Bluetooth: hci0: command tx timeout [ 161.750675][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.763457][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.776823][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.787968][ T82] veth1_macvtap: left promiscuous mode [ 161.793542][ T82] veth0_macvtap: left promiscuous mode [ 161.799284][ T82] veth1_vlan: left promiscuous mode [ 161.804588][ T82] veth0_vlan: left promiscuous mode [ 161.988744][ T82] team0 (unregistering): Port device team_slave_1 removed [ 162.015002][ T82] team0 (unregistering): Port device team_slave_0 removed [ 162.479144][ T6593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.489337][ T6593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.498591][ T6593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.507593][ T6593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.570309][ T6593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.588461][ T6593] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.600288][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.607496][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.620503][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.627677][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.807547][ T6593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.847496][ T6593] veth0_vlan: entered promiscuous mode [ 162.860402][ T6593] veth1_vlan: entered promiscuous mode [ 162.889368][ T6593] veth0_macvtap: entered promiscuous mode [ 162.898393][ T6593] veth1_macvtap: entered promiscuous mode [ 162.917334][ T6593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.930692][ T6593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.943274][ T6593] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.953098][ T6593] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.962839][ T6593] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.973132][ T6593] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.009679][ T6593] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 163.034211][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.039667][ T6593] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 163.049949][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.072360][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.082638][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.118823][ T6652] validate_nla: 114 callbacks suppressed [ 163.118843][ T6652] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 163.143610][ T6652] team0: Port device wlan1 added [ 163.164524][ T6655] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 163.193728][ T6657] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 163.216139][ T6660] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 163.243457][ T6661] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 163.269277][ T6663] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 163.292626][ T6665] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 163.314301][ T6667] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 163.339982][ T6668] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 163.360192][ T6670] netlink: 'syz.0.625': attribute type 10 has an invalid length. 2025/05/25 02:29:28 executed programs: 616 [ 163.826191][ T55] Bluetooth: hci0: command tx timeout [ 165.906505][ T55] Bluetooth: hci0: command tx timeout [ 167.985185][ T55] Bluetooth: hci0: command tx timeout [ 168.127260][ T6961] validate_nla: 277 callbacks suppressed [ 168.127277][ T6961] netlink: 'syz.0.903': attribute type 10 has an invalid length. [ 168.150460][ T6962] netlink: 'syz.0.904': attribute type 10 has an invalid length. [ 168.167681][ T6963] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 168.184208][ T6964] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 168.209974][ T6965] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 168.227126][ T6966] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 168.244769][ T6967] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 168.280175][ T6968] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 168.297362][ T6969] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 168.314339][ T6970] netlink: 'syz.0.912': attribute type 10 has an invalid length. 2025/05/25 02:29:33 executed programs: 909