Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts. 1970/01/01 00:04:43 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:04:45 parsed 1 programs [ 288.499891][ T6534] cgroup: Unknown subsys name 'net' [ 288.699270][ T6534] cgroup: Unknown subsys name 'cpuset' [ 288.702947][ T6534] cgroup: Unknown subsys name 'rlimit' [ 289.028717][ T6534] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 307.591036][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.591822][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.592157][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.592771][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.593173][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.722528][ T6540] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 308.328171][ T6561] chnl_net:caif_netlink_parms(): no params data found [ 308.378074][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.378212][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.378344][ T6561] bridge_slave_0: entered allmulticast mode [ 308.379246][ T6561] bridge_slave_0: entered promiscuous mode [ 308.381236][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.381290][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.381394][ T6561] bridge_slave_1: entered allmulticast mode [ 308.382180][ T6561] bridge_slave_1: entered promiscuous mode [ 308.401418][ T6561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.403081][ T6561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.425798][ T6561] team0: Port device team_slave_0 added [ 308.428173][ T6561] team0: Port device team_slave_1 added [ 308.441194][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.441248][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.441297][ T6561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.442803][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.442831][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.442858][ T6561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.499697][ T6561] hsr_slave_0: entered promiscuous mode [ 308.500296][ T6561] hsr_slave_1: entered promiscuous mode [ 308.584313][ T6561] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 308.589048][ T6561] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 308.592774][ T6561] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 308.596852][ T6561] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 308.613385][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.613497][ T6561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.613821][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.613883][ T6561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.642486][ T6561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.651656][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.654763][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.662852][ T6561] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.668060][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.668156][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.678242][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.678347][ T6554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.769867][ T6561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.790544][ T6561] veth0_vlan: entered promiscuous mode [ 308.794151][ T6561] veth1_vlan: entered promiscuous mode [ 308.810696][ T6561] veth0_macvtap: entered promiscuous mode [ 308.812521][ T6561] veth1_macvtap: entered promiscuous mode [ 308.820772][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.822862][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.824586][ T6561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.824642][ T6561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.824672][ T6561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.824702][ T6561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.240680][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.329182][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.349009][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.349096][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.363097][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.363158][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.399246][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.482655][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.497851][ T2391] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.497965][ T2391] ieee802154 phy1 wpan1: encryption failed: -22 1970/01/01 00:05:10 executed programs: 0 [ 311.081336][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.083753][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.084422][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.085694][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.086238][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.182415][ T6631] chnl_net:caif_netlink_parms(): no params data found [ 311.236033][ T6631] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.236122][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.236273][ T6631] bridge_slave_0: entered allmulticast mode [ 311.237649][ T6631] bridge_slave_0: entered promiscuous mode [ 311.239258][ T6631] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.239353][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.239533][ T6631] bridge_slave_1: entered allmulticast mode [ 311.240385][ T6631] bridge_slave_1: entered promiscuous mode [ 311.261895][ T6631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.263678][ T6631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.279590][ T6631] team0: Port device team_slave_0 added [ 311.282082][ T6631] team0: Port device team_slave_1 added [ 311.295968][ T6631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.296024][ T6631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.296365][ T6631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.299946][ T6631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.299975][ T6631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.300002][ T6631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.333005][ T6631] hsr_slave_0: entered promiscuous mode [ 311.333565][ T6631] hsr_slave_1: entered promiscuous mode [ 311.333905][ T6631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.334016][ T6631] Cannot create hsr debugfs directory [ 312.543656][ T12] bridge_slave_1: left allmulticast mode [ 312.543812][ T12] bridge_slave_1: left promiscuous mode [ 312.544302][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.549978][ T12] bridge_slave_0: left allmulticast mode [ 312.550054][ T12] bridge_slave_0: left promiscuous mode [ 312.550200][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.137241][ T55] Bluetooth: hci0: command tx timeout [ 313.949465][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.009159][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.068358][ T12] bond0 (unregistering): Released all slaves [ 314.164367][ T12] hsr_slave_0: left promiscuous mode [ 314.166462][ T12] hsr_slave_1: left promiscuous mode [ 314.168898][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.172751][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.175910][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.181106][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.193425][ T12] veth1_macvtap: left promiscuous mode [ 314.195173][ T12] veth0_macvtap: left promiscuous mode [ 314.197370][ T12] veth1_vlan: left promiscuous mode [ 314.198977][ T12] veth0_vlan: left promiscuous mode [ 315.217271][ T55] Bluetooth: hci0: command tx timeout [ 316.318792][ T12] team0 (unregistering): Port device team_slave_1 removed [ 316.488427][ T12] team0 (unregistering): Port device team_slave_0 removed [ 317.296694][ T55] Bluetooth: hci0: command tx timeout [ 319.380399][ T55] Bluetooth: hci0: command tx timeout [ 319.380497][ T6631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.384137][ T6631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.391752][ T6631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.395720][ T6631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.445450][ T6631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.461495][ T6631] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.469553][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.469637][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.470495][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.470538][ T6554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.927008][ T6631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.945525][ T6631] veth0_vlan: entered promiscuous mode [ 320.101276][ T6631] veth1_vlan: entered promiscuous mode [ 320.114221][ T6631] veth0_macvtap: entered promiscuous mode [ 320.116029][ T6631] veth1_macvtap: entered promiscuous mode [ 320.122174][ T6631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.123928][ T6631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.125309][ T6631] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.125359][ T6631] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.125389][ T6631] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.125419][ T6631] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.214354][ T6554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.214417][ T6554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.233055][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.233114][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:05:20 executed programs: 2 [ 320.421733][ T6705] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 320.545568][ T6705] team0: Port device wlan1 added [ 320.560626][ T6706] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 320.646198][ T6707] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 320.719083][ T6708] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 320.778229][ T6709] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 320.889988][ T6710] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 320.940945][ T6711] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 321.011974][ T6712] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 321.053910][ T6713] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 321.074831][ T6714] netlink: 'syz.0.25': attribute type 10 has an invalid length. 1970/01/01 00:05:25 executed programs: 255 [ 325.435122][ T6961] validate_nla: 246 callbacks suppressed [ 325.435431][ T6961] netlink: 'syz.0.272': attribute type 10 has an invalid length. [ 325.447570][ T6962] netlink: 'syz.0.273': attribute type 10 has an invalid length. [ 325.482640][ T6963] netlink: 'syz.0.274': attribute type 10 has an invalid length. [ 325.493447][ T6964] netlink: 'syz.0.275': attribute type 10 has an invalid length. [ 325.504773][ T6965] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 325.533474][ T6966] netlink: 'syz.0.277': attribute type 10 has an invalid length. [ 325.545392][ T6967] netlink: 'syz.0.278': attribute type 10 has an invalid length. [ 325.556299][ T6968] netlink: 'syz.0.279': attribute type 10 has an invalid length. [ 325.581690][ T6969] netlink: 'syz.0.280': attribute type 10 has an invalid length. [ 325.594676][ T6970] netlink: 'syz.0.281': attribute type 10 has an invalid length. 1970/01/01 00:05:30 executed programs: 552 [ 330.444402][ T7258] validate_nla: 287 callbacks suppressed [ 330.444467][ T7258] netlink: 'syz.0.569': attribute type 10 has an invalid length. [ 330.455129][ T7259] netlink: 'syz.0.570': attribute type 10 has an invalid length. [ 330.482543][ T7260] netlink: 'syz.0.571': attribute type 10 has an invalid length. [ 330.492445][ T7261] netlink: 'syz.0.572': attribute type 10 has an invalid length. [ 330.502268][ T7262] netlink: 'syz.0.573': attribute type 10 has an invalid length. [ 330.532223][ T7263] netlink: 'syz.0.574': attribute type 10 has an invalid length. [ 330.543547][ T7264] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 330.553756][ T7265] netlink: 'syz.0.576': attribute type 10 has an invalid length. [ 330.581909][ T7266] netlink: 'syz.0.577': attribute type 10 has an invalid length. [ 330.594871][ T7267] netlink: 'syz.0.578': attribute type 10 has an invalid length. [ 331.251762][ T6056] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.255473][ T6056] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 331.258474][ T6056] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 331.262977][ T6056] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 331.263670][ T6056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 331.351555][ T7306] chnl_net:caif_netlink_parms(): no params data found [ 331.392046][ T7306] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.392151][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.392256][ T7306] bridge_slave_0: entered allmulticast mode [ 331.393070][ T7306] bridge_slave_0: entered promiscuous mode [ 331.394494][ T7306] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.394564][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.394666][ T7306] bridge_slave_1: entered allmulticast mode [ 331.395467][ T7306] bridge_slave_1: entered promiscuous mode [ 331.481745][ T7306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.483362][ T7306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.498254][ T7306] team0: Port device team_slave_0 added [ 331.500299][ T7306] team0: Port device team_slave_1 added [ 331.515663][ T7306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.515721][ T7306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.515749][ T7306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.517252][ T7306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.517278][ T7306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.517304][ T7306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.549613][ T7306] hsr_slave_0: entered promiscuous mode [ 331.551091][ T7306] hsr_slave_1: entered promiscuous mode [ 331.649212][ T7306] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.969023][ T7306] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.048773][ T7306] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.160173][ T7306] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.281273][ T12] bridge_slave_1: left allmulticast mode [ 332.281344][ T12] bridge_slave_1: left promiscuous mode [ 332.281485][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.290051][ T12] bridge_slave_0: left allmulticast mode [ 332.290112][ T12] bridge_slave_0: left promiscuous mode [ 332.290280][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.296689][ T55] Bluetooth: hci1: command tx timeout [ 333.988946][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.028750][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.068615][ T12] bond0 (unregistering): Released all slaves [ 334.104019][ T7306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 334.107852][ T7306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 334.111470][ T7306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 334.115273][ T7306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 334.162139][ T7306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.169920][ T7306] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.173131][ T6568] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.173210][ T6568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.181385][ T6568] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.181452][ T6568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.195615][ T7306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.195674][ T7306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.248726][ T12] [ 334.249364][ T12] ====================================================== [ 334.251219][ T12] WARNING: possible circular locking dependency detected [ 334.253089][ T12] 6.15.0-rc5-syzkaller-gc32f8dc5aaf9 #0 Not tainted [ 334.254794][ T12] ------------------------------------------------------ [ 334.256720][ T12] kworker/u8:0/12 is trying to acquire lock: [ 334.258381][ T12] ffff0000d4eb8e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x30/0x180 [ 334.260984][ T12] [ 334.260984][ T12] but task is already holding lock: [ 334.263125][ T12] ffff0000d7dc0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x128/0x570 [ 334.266060][ T12] [ 334.266060][ T12] which lock already depends on the new lock. [ 334.266060][ T12] [ 334.268901][ T12] [ 334.268901][ T12] the existing dependency chain (in reverse order) is: [ 334.271427][ T12] [ 334.271427][ T12] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 334.273595][ T12] __mutex_lock_common+0x1d0/0x2190 [ 334.275195][ T12] mutex_lock_nested+0x2c/0x38 [ 334.276691][ T12] ieee80211_open+0xe4/0x1cc [ 334.278138][ T12] __dev_open+0x42c/0x830 [ 334.279486][ T12] netif_open+0xa8/0x220 [ 334.280801][ T12] dev_open+0x104/0x1fc [ 334.282044][ T12] team_add_slave+0x85c/0x20a4 [ 334.283346][ T12] do_set_master+0x410/0x594 [ 334.284672][ T12] do_setlink+0xb2c/0x3860 [ 334.285980][ T12] rtnl_newlink+0x10f8/0x15dc [ 334.287441][ T12] rtnetlink_rcv_msg+0x664/0x97c [ 334.289010][ T12] netlink_rcv_skb+0x230/0x414 [ 334.290406][ T12] rtnetlink_rcv+0x28/0x38 [ 334.291780][ T12] netlink_unicast+0x60c/0x824 [ 334.293221][ T12] netlink_sendmsg+0x648/0x930 [ 334.294707][ T12] ____sys_sendmsg+0x490/0x7b8 [ 334.296108][ T12] ___sys_sendmsg+0x204/0x278 [ 334.297460][ T12] __arm64_sys_sendmsg+0x184/0x238 [ 334.299146][ T12] invoke_syscall+0x98/0x2b8 [ 334.300733][ T12] el0_svc_common+0x130/0x23c [ 334.302180][ T12] do_el0_svc+0x48/0x58 [ 334.303504][ T12] el0_svc+0x58/0x17c [ 334.304784][ T12] el0t_64_sync_handler+0x78/0x108 [ 334.306413][ T12] el0t_64_sync+0x198/0x19c [ 334.307868][ T12] [ 334.307868][ T12] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 334.310227][ T12] __lock_acquire+0x1728/0x3058 [ 334.311828][ T12] lock_acquire+0x14c/0x2e0 [ 334.313271][ T12] __mutex_lock_common+0x1d0/0x2190 [ 334.315051][ T12] mutex_lock_nested+0x2c/0x38 [ 334.316523][ T12] team_del_slave+0x30/0x180 [ 334.317956][ T12] team_device_event+0x274/0x950 [ 334.319573][ T12] notifier_call_chain+0x1b8/0x4e4 [ 334.321141][ T12] raw_notifier_call_chain+0x3c/0x50 [ 334.322680][ T12] unregister_netdevice_many_notify+0x1250/0x1fbc [ 334.324628][ T12] unregister_netdevice_queue+0x2b4/0x300 [ 334.326374][ T12] _cfg80211_unregister_wdev+0x154/0x52c [ 334.328047][ T12] cfg80211_unregister_wdev+0x24/0x34 [ 334.329709][ T12] ieee80211_remove_interfaces+0x3a0/0x570 [ 334.331464][ T12] ieee80211_unregister_hw+0x60/0x29c [ 334.333089][ T12] mac80211_hwsim_del_radio+0x214/0x3b4 [ 334.334825][ T12] hwsim_exit_net+0x49c/0x558 [ 334.336292][ T12] cleanup_net+0x5d0/0x9c0 [ 334.337629][ T12] process_one_work+0x7e8/0x156c [ 334.339160][ T12] worker_thread+0x958/0xed8 [ 334.340516][ T12] kthread+0x5fc/0x75c [ 334.341811][ T12] ret_from_fork+0x10/0x20 [ 334.343284][ T12] [ 334.343284][ T12] other info that might help us debug this: [ 334.343284][ T12] [ 334.346069][ T12] Possible unsafe locking scenario: [ 334.346069][ T12] [ 334.348127][ T12] CPU0 CPU1 [ 334.349651][ T12] ---- ---- [ 334.351136][ T12] lock(&rdev->wiphy.mtx); [ 334.352772][ T12] lock(team->team_lock_key#2); [ 334.354959][ T12] lock(&rdev->wiphy.mtx); [ 334.356888][ T12] lock(team->team_lock_key#2); [ 334.358243][ T12] [ 334.358243][ T12] *** DEADLOCK *** [ 334.358243][ T12] [ 334.360438][ T12] 5 locks held by kworker/u8:0/12: [ 334.361832][ T12] #0: ffff0000c183a148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x658/0x156c [ 334.365016][ T12] #1: ffff800097647bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c [ 334.367758][ T12] #2: ffff80009246e210 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x138/0x9c0 [ 334.370374][ T12] #3: ffff80009247ace8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 334.372798][ T12] #4: ffff0000d7dc0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x128/0x570 [ 334.375899][ T12] [ 334.375899][ T12] stack backtrace: [ 334.377641][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc5-syzkaller-gc32f8dc5aaf9 #0 PREEMPT [ 334.380703][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 334.383531][ T12] Workqueue: netns cleanup_net [ 334.384867][ T12] Call trace: [ 334.385759][ T12] show_stack+0x2c/0x3c (C) [ 334.387015][ T12] __dump_stack+0x30/0x40 [ 334.388211][ T12] dump_stack_lvl+0xd8/0x12c [ 334.389477][ T12] dump_stack+0x1c/0x28 [ 334.390591][ T12] print_circular_bug+0x324/0x32c [ 334.391972][ T12] check_noncircular+0x154/0x174 [ 334.393363][ T12] __lock_acquire+0x1728/0x3058 [ 334.394695][ T12] lock_acquire+0x14c/0x2e0 [ 334.395901][ T12] __mutex_lock_common+0x1d0/0x2190 [ 334.397307][ T12] mutex_lock_nested+0x2c/0x38 [ 334.398621][ T12] team_del_slave+0x30/0x180 [ 334.399931][ T12] team_device_event+0x274/0x950 [ 334.401251][ T12] notifier_call_chain+0x1b8/0x4e4 [ 334.402701][ T12] raw_notifier_call_chain+0x3c/0x50 [ 334.404142][ T12] unregister_netdevice_many_notify+0x1250/0x1fbc [ 334.405905][ T12] unregister_netdevice_queue+0x2b4/0x300 [ 334.407493][ T12] _cfg80211_unregister_wdev+0x154/0x52c [ 334.409085][ T12] cfg80211_unregister_wdev+0x24/0x34 [ 334.410587][ T12] ieee80211_remove_interfaces+0x3a0/0x570 [ 334.412142][ T12] ieee80211_unregister_hw+0x60/0x29c [ 334.413628][ T12] mac80211_hwsim_del_radio+0x214/0x3b4 [ 334.415085][ T12] hwsim_exit_net+0x49c/0x558 [ 334.416367][ T12] cleanup_net+0x5d0/0x9c0 [ 334.417618][ T12] process_one_work+0x7e8/0x156c [ 334.418951][ T12] worker_thread+0x958/0xed8 [ 334.420186][ T12] kthread+0x5fc/0x75c [ 334.421237][ T12] ret_from_fork+0x10/0x20 [ 334.427071][ T12] team0: Port device wlan1 removed [ 334.480795][ T7306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.538552][ T7306] veth0_vlan: entered promiscuous mode [ 334.543227][ T7306] veth1_vlan: entered promiscuous mode [ 334.552510][ T7306] veth0_macvtap: entered promiscuous mode [ 334.553891][ T7306] veth1_macvtap: entered promiscuous mode [ 334.558027][ T7306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.558071][ T7306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.558624][ T7306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.560646][ T7306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.560671][ T7306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.561048][ T7306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.562194][ T7306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.562229][ T7306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.562256][ T7306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.562282][ T7306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.689630][ T7306] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 334.699670][ T701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.699719][ T701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.704767][ T7306] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 334.713908][ T701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.713957][ T701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.750762][ T12] hsr_slave_0: left promiscuous mode [ 334.752696][ T12] hsr_slave_1: left promiscuous mode [ 334.753001][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.753035][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.754654][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.754681][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.761198][ T12] veth1_macvtap: left promiscuous mode [ 334.761246][ T12] veth0_macvtap: left promiscuous mode [ 334.761327][ T12] veth1_vlan: left promiscuous mode [ 334.761383][ T12] veth0_vlan: left promiscuous mode [ 335.376667][ T55] Bluetooth: hci1: command tx timeout [ 336.547249][ T12] team0 (unregistering): Port device team_slave_1 removed [ 336.757353][ T12] team0 (unregistering): Port device team_slave_0 removed [ 337.456638][ T55] Bluetooth: hci1: command tx timeout 1970/01/01 00:05:38 executed programs: 602 [ 339.118498][ T7326] validate_nla: 37 callbacks suppressed [ 339.118555][ T7326] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 339.229768][ T7326] team0: Port device wlan1 added [ 339.238155][ T7327] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 339.287355][ T7328] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 339.294312][ T7329] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 339.330965][ T7330] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 339.338312][ T7331] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 339.345125][ T7332] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 339.380219][ T7333] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 339.387233][ T7334] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 339.425651][ T7335] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 339.536611][ T55] Bluetooth: hci1: command tx timeout 1970/01/01 00:05:43 executed programs: 888 [ 344.142306][ T7615] validate_nla: 278 callbacks suppressed [ 344.142530][ T7615] netlink: 'syz.0.904': attribute type 10 has an invalid length. [ 344.149589][ T7616] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 344.156963][ T7617] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 344.191504][ T7618] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 344.199137][ T7619] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 344.206880][ T7620] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 344.240579][ T7621] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 344.248533][ T7622] netlink: 'syz.0.911': attribute type 10 has an invalid length.