Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. 2025/03/14 11:07:12 ignoring optional flag "sandboxArg"="0" 2025/03/14 11:07:14 parsed 1 programs [ 300.818005][ T5858] cgroup: Unknown subsys name 'net' [ 300.979995][ T5858] cgroup: Unknown subsys name 'cpuset' [ 300.988646][ T5858] cgroup: Unknown subsys name 'rlimit' [ 302.699746][ T5858] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 306.105288][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 306.663938][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 306.734621][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.743921][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.752345][ T5880] bridge_slave_0: entered allmulticast mode [ 306.759799][ T5880] bridge_slave_0: entered promiscuous mode [ 306.770937][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.780173][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.788314][ T5880] bridge_slave_1: entered allmulticast mode [ 306.795203][ T5880] bridge_slave_1: entered promiscuous mode [ 306.826717][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.840237][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.869041][ T5880] team0: Port device team_slave_0 added [ 306.879175][ T5880] team0: Port device team_slave_1 added [ 306.900219][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.907311][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.934290][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.947659][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.954773][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.981656][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.019592][ T5880] hsr_slave_0: entered promiscuous mode [ 307.026727][ T5880] hsr_slave_1: entered promiscuous mode [ 307.132794][ T5880] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.143530][ T5880] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.155197][ T5880] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.166818][ T5880] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.197770][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.204996][ T5880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.213250][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.220734][ T5880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.275271][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.298043][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.307937][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.327557][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.344494][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.352286][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.368283][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.376042][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.521818][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.562165][ T5880] veth0_vlan: entered promiscuous mode [ 307.573668][ T5880] veth1_vlan: entered promiscuous mode [ 307.599962][ T5880] veth0_macvtap: entered promiscuous mode [ 307.610065][ T5880] veth1_macvtap: entered promiscuous mode [ 307.628379][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.644320][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.660350][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.670281][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.679751][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.688782][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.847090][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.935212][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.002557][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.061158][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.132568][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.143087][ T5933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.153360][ T5933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.162954][ T5933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.177166][ T5933] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 309.186058][ T5933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.442931][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.456006][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.488741][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.498180][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/03/14 11:07:26 executed programs: 0 [ 310.434713][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.444226][ T5933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.453303][ T5933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.463421][ T5933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.471632][ T5933] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 310.479815][ T5933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.598134][ T5963] chnl_net:caif_netlink_parms(): no params data found [ 310.650856][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.658393][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.666450][ T5963] bridge_slave_0: entered allmulticast mode [ 310.673233][ T5963] bridge_slave_0: entered promiscuous mode [ 310.681235][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.689082][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.696561][ T5963] bridge_slave_1: entered allmulticast mode [ 310.703432][ T5963] bridge_slave_1: entered promiscuous mode [ 310.732287][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.744206][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.773747][ T5963] team0: Port device team_slave_0 added [ 310.783914][ T5963] team0: Port device team_slave_1 added [ 310.807661][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.814681][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.841770][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.855833][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.862859][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.889052][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.929085][ T5963] hsr_slave_0: entered promiscuous mode [ 310.936061][ T5963] hsr_slave_1: entered promiscuous mode [ 310.942308][ T5963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.953483][ T5963] Cannot create hsr debugfs directory [ 311.198188][ T11] bridge_slave_1: left allmulticast mode [ 311.216529][ T11] bridge_slave_1: left promiscuous mode [ 311.223573][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.257456][ T11] bridge_slave_0: left allmulticast mode [ 311.263296][ T11] bridge_slave_0: left promiscuous mode [ 311.269526][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.555291][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.570848][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.581272][ T11] bond0 (unregistering): Released all slaves [ 311.736873][ T11] hsr_slave_0: left promiscuous mode [ 311.744166][ T11] hsr_slave_1: left promiscuous mode [ 311.759739][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.770140][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.779693][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.790638][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.813044][ T11] veth1_macvtap: left promiscuous mode [ 311.820504][ T11] veth0_macvtap: left promiscuous mode [ 311.829370][ T11] veth1_vlan: left promiscuous mode [ 311.835016][ T11] veth0_vlan: left promiscuous mode [ 312.277853][ T11] team0 (unregistering): Port device team_slave_1 removed [ 312.319047][ T11] team0 (unregistering): Port device team_slave_0 removed [ 312.506990][ T5146] Bluetooth: hci0: command tx timeout [ 312.918836][ T5963] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 312.941899][ T5963] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 312.966558][ T5963] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.982289][ T5963] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 313.108252][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.137693][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.395854][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.403048][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.447872][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.455324][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.989369][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.088456][ T5963] veth0_vlan: entered promiscuous mode [ 314.100877][ T5963] veth1_vlan: entered promiscuous mode [ 314.137185][ T5963] veth0_macvtap: entered promiscuous mode [ 314.147820][ T5963] veth1_macvtap: entered promiscuous mode [ 314.172365][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.196583][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.209332][ T5963] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.219338][ T5963] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.230138][ T5963] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.239811][ T5963] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.317503][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.325407][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.381681][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.391032][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.458220][ T6022] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 314.481776][ T6022] team0: Port device wlan1 added [ 314.502270][ T6023] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 314.530367][ T6024] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 314.553642][ T6025] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 314.574476][ T6026] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 314.585786][ T5146] Bluetooth: hci0: command tx timeout [ 314.603772][ T6027] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 314.628045][ T6028] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 314.650176][ T6029] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 314.673137][ T6030] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 314.694738][ T6031] netlink: 'syz.0.25': attribute type 10 has an invalid length. 2025/03/14 11:07:31 executed programs: 47 [ 316.665716][ T5146] Bluetooth: hci0: command tx timeout [ 317.948126][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.954713][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.756119][ T5146] Bluetooth: hci0: command tx timeout [ 319.480584][ T6265] validate_nla: 233 callbacks suppressed [ 319.480605][ T6265] netlink: 'syz.0.259': attribute type 10 has an invalid length. [ 319.513014][ T6266] netlink: 'syz.0.260': attribute type 10 has an invalid length. [ 319.534651][ T6267] netlink: 'syz.0.261': attribute type 10 has an invalid length. [ 319.557461][ T6268] netlink: 'syz.0.262': attribute type 10 has an invalid length. [ 319.583291][ T6269] netlink: 'syz.0.263': attribute type 10 has an invalid length. [ 319.603925][ T6270] netlink: 'syz.0.264': attribute type 10 has an invalid length. [ 319.624869][ T6271] netlink: 'syz.0.265': attribute type 10 has an invalid length. [ 319.649878][ T6272] netlink: 'syz.0.266': attribute type 10 has an invalid length. [ 319.671983][ T6273] netlink: 'syz.0.267': attribute type 10 has an invalid length. [ 319.692408][ T6274] netlink: 'syz.0.268': attribute type 10 has an invalid length. 2025/03/14 11:07:36 executed programs: 292 [ 324.492498][ T6512] validate_nla: 237 callbacks suppressed [ 324.492514][ T6512] netlink: 'syz.0.506': attribute type 10 has an invalid length. [ 324.519800][ T6513] netlink: 'syz.0.507': attribute type 10 has an invalid length. [ 324.540351][ T6514] netlink: 'syz.0.508': attribute type 10 has an invalid length. [ 324.573285][ T6515] netlink: 'syz.0.509': attribute type 10 has an invalid length. [ 324.593593][ T6516] netlink: 'syz.0.510': attribute type 10 has an invalid length. [ 324.612766][ T6517] netlink: 'syz.0.511': attribute type 10 has an invalid length. [ 324.635164][ T6518] netlink: 'syz.0.512': attribute type 10 has an invalid length. [ 324.656287][ T6519] netlink: 'syz.0.513': attribute type 10 has an invalid length. [ 324.677270][ T6520] netlink: 'syz.0.514': attribute type 10 has an invalid length. [ 324.703675][ T6521] netlink: 'syz.0.515': attribute type 10 has an invalid length. 2025/03/14 11:07:41 executed programs: 541 [ 326.701206][ T5933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.717645][ T5933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.731986][ T5933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.743062][ T5933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.752836][ T5933] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 326.761622][ T5933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.870992][ T6624] chnl_net:caif_netlink_parms(): no params data found [ 326.932582][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.966790][ T6624] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.974026][ T6624] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.981806][ T6624] bridge_slave_0: entered allmulticast mode [ 326.989584][ T6624] bridge_slave_0: entered promiscuous mode [ 327.008149][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.021680][ T6624] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.029622][ T6624] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.037119][ T6624] bridge_slave_1: entered allmulticast mode [ 327.043796][ T6624] bridge_slave_1: entered promiscuous mode [ 327.069806][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.093571][ T6624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.104831][ T6624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.143782][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.161525][ T6624] team0: Port device team_slave_0 added [ 327.169188][ T6624] team0: Port device team_slave_1 added [ 327.192828][ T6624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.199989][ T6624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.226270][ T6624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.239144][ T6624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.246279][ T6624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.272469][ T6624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.348761][ T6624] hsr_slave_0: entered promiscuous mode [ 327.355903][ T6624] hsr_slave_1: entered promiscuous mode [ 327.373183][ T11] bridge_slave_1: left allmulticast mode [ 327.379758][ T11] bridge_slave_1: left promiscuous mode [ 327.386052][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.398112][ T11] bridge_slave_0: left allmulticast mode [ 327.403918][ T11] bridge_slave_0: left promiscuous mode [ 327.409906][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.720639][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.733265][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.743622][ T11] bond0 (unregistering): Released all slaves [ 327.849787][ T11] [ 327.852246][ T11] ====================================================== [ 327.859297][ T11] WARNING: possible circular locking dependency detected [ 327.866356][ T11] 6.14.0-rc3-syzkaller-g6ccf6adb05d0 #0 Not tainted [ 327.872987][ T11] ------------------------------------------------------ [ 327.880041][ T11] kworker/u8:0/11 is trying to acquire lock: [ 327.886068][ T11] ffff888061a30e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1d0 [ 327.895963][ T11] [ 327.895963][ T11] but task is already holding lock: [ 327.903363][ T11] ffff88807a308768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 327.913967][ T11] [ 327.913967][ T11] which lock already depends on the new lock. [ 327.913967][ T11] [ 327.924498][ T11] [ 327.924498][ T11] the existing dependency chain (in reverse order) is: [ 327.933642][ T11] [ 327.933642][ T11] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 327.941443][ T11] lock_acquire+0x1ed/0x550 [ 327.946609][ T11] __mutex_lock+0x19c/0x1010 [ 327.951765][ T11] ieee80211_open+0xe9/0x1e0 [ 327.957011][ T11] __dev_open+0x2d3/0x4a0 [ 327.961925][ T11] dev_open+0xae/0x1b0 [ 327.966554][ T11] team_add_slave+0xabe/0x28a0 [ 327.971878][ T11] do_setlink+0xe7f/0x4300 [ 327.976958][ T11] rtnl_newlink+0x1704/0x1d30 [ 327.982393][ T11] rtnetlink_rcv_msg+0x791/0xcf0 [ 327.987903][ T11] netlink_rcv_skb+0x206/0x480 [ 327.993398][ T11] netlink_unicast+0x7f6/0x990 [ 327.998819][ T11] netlink_sendmsg+0x8de/0xcb0 [ 328.004158][ T11] __sock_sendmsg+0x221/0x270 [ 328.009406][ T11] ____sys_sendmsg+0x53a/0x860 [ 328.014739][ T11] __sys_sendmsg+0x269/0x350 [ 328.019899][ T11] do_syscall_64+0xf3/0x230 [ 328.024974][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.031693][ T11] [ 328.031693][ T11] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 328.040015][ T11] validate_chain+0x18ef/0x5920 [ 328.045432][ T11] __lock_acquire+0x1397/0x2100 [ 328.050847][ T11] lock_acquire+0x1ed/0x550 [ 328.055990][ T11] __mutex_lock+0x19c/0x1010 [ 328.061250][ T11] team_del_slave+0x32/0x1d0 [ 328.066386][ T11] team_device_event+0x200/0x5b0 [ 328.071920][ T11] notifier_call_chain+0x1a5/0x3f0 [ 328.077599][ T11] unregister_netdevice_many_notify+0x102f/0x1f10 [ 328.084557][ T11] unregister_netdevice_queue+0x303/0x370 [ 328.090817][ T11] _cfg80211_unregister_wdev+0x163/0x590 [ 328.097003][ T11] ieee80211_remove_interfaces+0x4ef/0x700 [ 328.103342][ T11] ieee80211_unregister_hw+0x5d/0x2c0 [ 328.109244][ T11] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 328.115495][ T11] hwsim_exit_net+0x5c1/0x670 [ 328.120687][ T11] cleanup_net+0x812/0xd60 [ 328.125622][ T11] process_scheduled_works+0xabe/0x18e0 [ 328.131685][ T11] worker_thread+0x870/0xd30 [ 328.136795][ T11] kthread+0x7a9/0x920 [ 328.141474][ T11] ret_from_fork+0x4b/0x80 [ 328.146467][ T11] ret_from_fork_asm+0x1a/0x30 [ 328.151871][ T11] [ 328.151871][ T11] other info that might help us debug this: [ 328.151871][ T11] [ 328.162181][ T11] Possible unsafe locking scenario: [ 328.162181][ T11] [ 328.170157][ T11] CPU0 CPU1 [ 328.175618][ T11] ---- ---- [ 328.181010][ T11] lock(&rdev->wiphy.mtx); [ 328.185574][ T11] lock(team->team_lock_key#2); [ 328.193081][ T11] lock(&rdev->wiphy.mtx); [ 328.200116][ T11] lock(team->team_lock_key#2); [ 328.205136][ T11] [ 328.205136][ T11] *** DEADLOCK *** [ 328.205136][ T11] [ 328.213412][ T11] 5 locks held by kworker/u8:0/11: [ 328.218542][ T11] #0: ffff88801bef5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 328.229548][ T11] #1: ffffc90000107c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 328.240352][ T11] #2: ffffffff8fec8690 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 328.249876][ T11] #3: ffffffff8fed4e48 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 328.259735][ T11] #4: ffff88807a308768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 328.270555][ T11] [ 328.270555][ T11] stack backtrace: [ 328.276711][ T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.14.0-rc3-syzkaller-g6ccf6adb05d0 #0 [ 328.276727][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 328.276736][ T11] Workqueue: netns cleanup_net [ 328.276760][ T11] Call Trace: [ 328.276768][ T11] [ 328.276774][ T11] dump_stack_lvl+0x241/0x360 [ 328.276791][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.276802][ T11] ? __pfx__printk+0x10/0x10 [ 328.276815][ T11] print_circular_bug+0x13a/0x1b0 [ 328.276830][ T11] check_noncircular+0x36a/0x4a0 [ 328.276843][ T11] ? __pfx_check_noncircular+0x10/0x10 [ 328.276855][ T11] ? lockdep_lock+0x123/0x2b0 [ 328.276871][ T11] ? __pfx_validate_chain+0x10/0x10 [ 328.276883][ T11] validate_chain+0x18ef/0x5920 [ 328.276899][ T11] ? __pfx_validate_chain+0x10/0x10 [ 328.276910][ T11] ? __lock_acquire+0x1397/0x2100 [ 328.276925][ T11] ? __pfx_validate_chain+0x10/0x10 [ 328.276941][ T11] ? mark_lock+0x9a/0x360 [ 328.276951][ T11] ? mark_lock+0x9a/0x360 [ 328.276961][ T11] __lock_acquire+0x1397/0x2100 [ 328.276980][ T11] lock_acquire+0x1ed/0x550 [ 328.276996][ T11] ? team_del_slave+0x32/0x1d0 [ 328.277010][ T11] ? __pfx_lock_acquire+0x10/0x10 [ 328.277025][ T11] ? __pfx___might_resched+0x10/0x10 [ 328.277042][ T11] __mutex_lock+0x19c/0x1010 [ 328.277058][ T11] ? team_del_slave+0x32/0x1d0 [ 328.277069][ T11] ? trace_contention_end+0x3c/0x120 [ 328.277080][ T11] ? __mutex_lock+0x397/0x1010 [ 328.277094][ T11] ? team_del_slave+0x32/0x1d0 [ 328.277104][ T11] ? bond_netdev_event+0xdd/0xf20 [ 328.277118][ T11] ? __pfx___mutex_lock+0x10/0x10 [ 328.277133][ T11] ? __asan_memset+0x23/0x50 [ 328.277146][ T11] team_del_slave+0x32/0x1d0 [ 328.277158][ T11] team_device_event+0x200/0x5b0 [ 328.277171][ T11] ? notifier_call_chain+0x15a/0x3f0 [ 328.277187][ T11] notifier_call_chain+0x1a5/0x3f0 [ 328.277203][ T11] unregister_netdevice_many_notify+0x102f/0x1f10 [ 328.277219][ T11] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 328.277230][ T11] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 328.277247][ T11] ? __pfx_lock_release+0x10/0x10 [ 328.277266][ T11] unregister_netdevice_queue+0x303/0x370 [ 328.277283][ T11] ? __pfx_up_write+0x10/0x10 [ 328.277295][ T11] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 328.277312][ T11] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 328.277329][ T11] _cfg80211_unregister_wdev+0x163/0x590 [ 328.277347][ T11] ieee80211_remove_interfaces+0x4ef/0x700 [ 328.277363][ T11] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 328.277377][ T11] ? rcu_is_watching+0x15/0xb0 [ 328.277399][ T11] ieee80211_unregister_hw+0x5d/0x2c0 [ 328.277413][ T11] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 328.277428][ T11] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 328.277443][ T11] hwsim_exit_net+0x5c1/0x670 [ 328.277454][ T11] ? __pfx_hwsim_exit_net+0x10/0x10 [ 328.277465][ T11] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 328.277483][ T11] cleanup_net+0x812/0xd60 [ 328.277498][ T11] ? __pfx_cleanup_net+0x10/0x10 [ 328.277513][ T11] ? process_scheduled_works+0x9c6/0x18e0 [ 328.277527][ T11] process_scheduled_works+0xabe/0x18e0 [ 328.277546][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.277561][ T11] ? assign_work+0x364/0x3d0 [ 328.277575][ T11] worker_thread+0x870/0xd30 [ 328.277591][ T11] ? __kthread_parkme+0x169/0x1d0 [ 328.277606][ T11] ? __pfx_worker_thread+0x10/0x10 [ 328.277620][ T11] kthread+0x7a9/0x920 [ 328.277635][ T11] ? __pfx_kthread+0x10/0x10 [ 328.277651][ T11] ? __pfx_worker_thread+0x10/0x10 [ 328.277664][ T11] ? __pfx_kthread+0x10/0x10 [ 328.277679][ T11] ? __pfx_kthread+0x10/0x10 [ 328.277695][ T11] ? __pfx_kthread+0x10/0x10 [ 328.277710][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.277721][ T11] ? lockdep_hardirqs_on+0x99/0x150 [ 328.277734][ T11] ? __pfx_kthread+0x10/0x10 [ 328.277749][ T11] ret_from_fork+0x4b/0x80 [ 328.277764][ T11] ? __pfx_kthread+0x10/0x10 [ 328.277779][ T11] ret_from_fork_asm+0x1a/0x30 [ 328.277795][ T11] [ 328.680604][ T11] team0: Port device wlan1 removed [ 328.793528][ T11] hsr_slave_0: left promiscuous mode [ 328.801432][ T11] hsr_slave_1: left promiscuous mode [ 328.808227][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.818457][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.826561][ T5933] Bluetooth: hci1: command tx timeout [ 328.833213][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.844916][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.866550][ T11] veth1_macvtap: left promiscuous mode [ 328.872247][ T11] veth0_macvtap: left promiscuous mode [ 328.879246][ T11] veth1_vlan: left promiscuous mode [ 328.884596][ T11] veth0_vlan: left promiscuous mode [ 329.063344][ T11] team0 (unregistering): Port device team_slave_1 removed [ 329.086442][ T11] team0 (unregistering): Port device team_slave_0 removed [ 329.447794][ T6624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 329.473741][ T6624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 329.497206][ T6624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 329.508040][ T6624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 329.582110][ T6624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.599685][ T6624] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.611130][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.618424][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.642758][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.650000][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.781144][ T6624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.818741][ T6624] veth0_vlan: entered promiscuous mode [ 329.832353][ T6624] veth1_vlan: entered promiscuous mode [ 329.858094][ T6624] veth0_macvtap: entered promiscuous mode [ 329.868042][ T6624] veth1_macvtap: entered promiscuous mode [ 329.884890][ T6624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.898767][ T6624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.914052][ T6624] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.926033][ T6624] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.935577][ T6624] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.944412][ T6624] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.988252][ T6624] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 330.013084][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.022862][ T6624] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 330.035539][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.060742][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.069545][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.132000][ T6709] validate_nla: 100 callbacks suppressed [ 330.132026][ T6709] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 330.163033][ T6709] team0: Port device wlan1 added [ 330.184296][ T6712] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 330.211921][ T6715] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 330.238777][ T6717] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 330.260906][ T6720] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 330.284188][ T6723] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 330.305933][ T6725] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 330.326656][ T6727] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 330.346976][ T6729] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 330.375158][ T6731] netlink: 'syz.0.625': attribute type 10 has an invalid length. 2025/03/14 11:07:46 executed programs: 618 [ 330.905698][ T5933] Bluetooth: hci1: command tx timeout [ 332.986140][ T5933] Bluetooth: hci1: command tx timeout [ 335.066663][ T5933] Bluetooth: hci1: command tx timeout [ 335.140852][ T7014] validate_nla: 281 callbacks suppressed [ 335.140871][ T7014] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 335.166383][ T7015] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 335.182328][ T7016] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 335.211104][ T7017] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 335.229820][ T7018] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 335.246300][ T7019] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 335.271006][ T7020] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 335.287335][ T7021] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 335.303374][ T7022] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 335.330631][ T7023] netlink: 'syz.0.916': attribute type 10 has an invalid length. 2025/03/14 11:07:51 executed programs: 915