Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. 2025/04/25 23:23:02 ignoring optional flag "sandboxArg"="0" 2025/04/25 23:23:04 parsed 1 programs [ 293.783421][ T5851] cgroup: Unknown subsys name 'net' [ 293.917711][ T5851] cgroup: Unknown subsys name 'cpuset' [ 293.926649][ T5851] cgroup: Unknown subsys name 'rlimit' [ 295.379719][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 297.886344][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 298.147799][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 298.220059][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.227485][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.234731][ T5865] bridge_slave_0: entered allmulticast mode [ 298.241710][ T5865] bridge_slave_0: entered promiscuous mode [ 298.251016][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.258278][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.265788][ T5865] bridge_slave_1: entered allmulticast mode [ 298.272725][ T5865] bridge_slave_1: entered promiscuous mode [ 298.307394][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.320185][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.352642][ T5865] team0: Port device team_slave_0 added [ 298.360426][ T5865] team0: Port device team_slave_1 added [ 298.386324][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.393299][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.419258][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.432218][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.439229][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.465160][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.508259][ T5865] hsr_slave_0: entered promiscuous mode [ 298.514973][ T5865] hsr_slave_1: entered promiscuous mode [ 298.640852][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 298.652234][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 298.662487][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 298.673416][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 298.699103][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.706286][ T5865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.714010][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.721132][ T5865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.775071][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.791144][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.799633][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.815867][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.829218][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.836328][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.851286][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.858425][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.000393][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.040341][ T5865] veth0_vlan: entered promiscuous mode [ 299.052688][ T5865] veth1_vlan: entered promiscuous mode [ 299.078740][ T5865] veth0_macvtap: entered promiscuous mode [ 299.088586][ T5865] veth1_macvtap: entered promiscuous mode [ 299.106936][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.120819][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.132487][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.141316][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.151284][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.160292][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.310618][ T1325] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.385838][ T1325] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.424898][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.432813][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.458428][ T1325] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.489377][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.498552][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.515097][ T1325] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.580406][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.588908][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.596939][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.606137][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.613858][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.144952][ T1325] bridge_slave_1: left allmulticast mode [ 302.150767][ T1325] bridge_slave_1: left promiscuous mode [ 302.160126][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.178598][ T1325] bridge_slave_0: left allmulticast mode [ 302.185747][ T1325] bridge_slave_0: left promiscuous mode [ 302.191694][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.497234][ T1325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.507776][ T1325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.517867][ T1325] bond0 (unregistering): Released all slaves [ 302.664408][ T1325] hsr_slave_0: left promiscuous mode [ 302.671488][ T1325] hsr_slave_1: left promiscuous mode [ 302.685599][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.693043][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.729209][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.745074][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.780614][ T1325] veth1_macvtap: left promiscuous mode [ 302.794463][ T1325] veth0_macvtap: left promiscuous mode [ 302.810366][ T1325] veth1_vlan: left promiscuous mode [ 302.820575][ T1325] veth0_vlan: left promiscuous mode 2025/04/25 23:23:15 executed programs: 0 [ 303.321115][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.338169][ T1325] team0 (unregistering): Port device team_slave_1 removed [ 303.343053][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.357503][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.365617][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.373386][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.386097][ T1325] team0 (unregistering): Port device team_slave_0 removed [ 303.866944][ T5977] chnl_net:caif_netlink_parms(): no params data found [ 304.030157][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.039203][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.047073][ T5977] bridge_slave_0: entered allmulticast mode [ 304.055681][ T5977] bridge_slave_0: entered promiscuous mode [ 304.068935][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.079198][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.087119][ T5977] bridge_slave_1: entered allmulticast mode [ 304.094838][ T5977] bridge_slave_1: entered promiscuous mode [ 304.153247][ T5977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.506078][ T5977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.552230][ T5977] team0: Port device team_slave_0 added [ 304.561423][ T5977] team0: Port device team_slave_1 added [ 304.620674][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.627745][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.653852][ T5977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.666348][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.673848][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.701412][ T5977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.804973][ T5977] hsr_slave_0: entered promiscuous mode [ 304.811190][ T5977] hsr_slave_1: entered promiscuous mode [ 305.394814][ T55] Bluetooth: hci0: command tx timeout [ 305.575854][ T5977] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 305.592382][ T5977] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 305.609563][ T5977] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 305.620371][ T5977] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 305.715467][ T5977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.743065][ T5977] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.759625][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.766870][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.785470][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.792918][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.005857][ T5977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.061655][ T5977] veth0_vlan: entered promiscuous mode [ 306.077589][ T5977] veth1_vlan: entered promiscuous mode [ 306.119003][ T5977] veth0_macvtap: entered promiscuous mode [ 306.132358][ T5977] veth1_macvtap: entered promiscuous mode [ 306.156763][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.173336][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.188776][ T5977] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.199824][ T5977] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.209611][ T5977] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.218486][ T5977] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.315125][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.323005][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.363138][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.371566][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.462808][ T6052] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 306.492249][ T6052] team0: Port device wlan1 added [ 306.526909][ T6054] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 306.588291][ T6057] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 306.639648][ T6060] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 306.682059][ T6062] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 306.738737][ T6064] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 306.778126][ T6065] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 306.812931][ T6066] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 306.840208][ T6067] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 306.867316][ T6068] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 307.484490][ T55] Bluetooth: hci0: command tx timeout 2025/04/25 23:23:20 executed programs: 87 [ 309.554137][ T55] Bluetooth: hci0: command tx timeout [ 311.469655][ T6323] validate_nla: 254 callbacks suppressed [ 311.469669][ T6323] netlink: 'syz.0.280': attribute type 10 has an invalid length. [ 311.498138][ T6324] netlink: 'syz.0.281': attribute type 10 has an invalid length. [ 311.516832][ T6325] netlink: 'syz.0.282': attribute type 10 has an invalid length. [ 311.539368][ T6326] netlink: 'syz.0.283': attribute type 10 has an invalid length. [ 311.558568][ T6327] netlink: 'syz.0.284': attribute type 10 has an invalid length. [ 311.579417][ T6328] netlink: 'syz.0.285': attribute type 10 has an invalid length. [ 311.601160][ T6329] netlink: 'syz.0.286': attribute type 10 has an invalid length. [ 311.619169][ T6330] netlink: 'syz.0.287': attribute type 10 has an invalid length. [ 311.634098][ T55] Bluetooth: hci0: command tx timeout [ 311.640947][ T6331] netlink: 'syz.0.288': attribute type 10 has an invalid length. [ 311.660536][ T6332] netlink: 'syz.0.289': attribute type 10 has an invalid length. 2025/04/25 23:23:25 executed programs: 369 [ 316.480877][ T6609] validate_nla: 276 callbacks suppressed [ 316.480888][ T6609] netlink: 'syz.0.566': attribute type 10 has an invalid length. [ 316.519354][ T6610] netlink: 'syz.0.567': attribute type 10 has an invalid length. [ 316.538021][ T6611] netlink: 'syz.0.568': attribute type 10 has an invalid length. [ 316.557009][ T6612] netlink: 'syz.0.569': attribute type 10 has an invalid length. [ 316.579825][ T6613] netlink: 'syz.0.570': attribute type 10 has an invalid length. [ 316.598644][ T6614] netlink: 'syz.0.571': attribute type 10 has an invalid length. [ 316.617932][ T6615] netlink: 'syz.0.572': attribute type 10 has an invalid length. [ 316.639485][ T6616] netlink: 'syz.0.573': attribute type 10 has an invalid length. [ 316.657141][ T6617] netlink: 'syz.0.574': attribute type 10 has an invalid length. [ 316.677504][ T6618] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 317.077847][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.084484][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.428050][ T5141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.439653][ T5141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.450192][ T5141] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.458660][ T5141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.466821][ T5141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.597694][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.636999][ T6660] chnl_net:caif_netlink_parms(): no params data found [ 317.657293][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.737189][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.751101][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.758789][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.766030][ T6660] bridge_slave_0: entered allmulticast mode [ 317.772907][ T6660] bridge_slave_0: entered promiscuous mode [ 317.789386][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.803186][ T6660] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.810714][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.818146][ T6660] bridge_slave_1: entered allmulticast mode [ 317.826023][ T6660] bridge_slave_1: entered promiscuous mode [ 317.859638][ T6660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.872399][ T6660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.909369][ T6660] team0: Port device team_slave_0 added [ 317.929505][ T6660] team0: Port device team_slave_1 added [ 317.981249][ T6660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.989346][ T6660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.015656][ T6660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.035935][ T6660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.042903][ T6660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.070424][ T6660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.087622][ T53] bridge_slave_1: left allmulticast mode [ 318.093286][ T53] bridge_slave_1: left promiscuous mode [ 318.099449][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.109124][ T53] bridge_slave_0: left allmulticast mode [ 318.115229][ T53] bridge_slave_0: left promiscuous mode [ 318.120915][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.329989][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.340791][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.352191][ T53] bond0 (unregistering): Released all slaves [ 318.400333][ T6660] hsr_slave_0: entered promiscuous mode [ 318.406543][ T6660] hsr_slave_1: entered promiscuous mode [ 318.412477][ T6660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.420664][ T6660] Cannot create hsr debugfs directory [ 318.471216][ T53] [ 318.473554][ T53] ====================================================== [ 318.480549][ T53] WARNING: possible circular locking dependency detected [ 318.487561][ T53] 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 Not tainted [ 318.494647][ T53] ------------------------------------------------------ [ 318.501636][ T53] kworker/u8:3/53 is trying to acquire lock: [ 318.507591][ T53] ffff888029de4e00 (team->team_lock_key){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 318.516989][ T53] [ 318.516989][ T53] but task is already holding lock: [ 318.524334][ T53] ffff888011260768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 318.534664][ T53] [ 318.534664][ T53] which lock already depends on the new lock. [ 318.534664][ T53] [ 318.545046][ T53] [ 318.545046][ T53] the existing dependency chain (in reverse order) is: [ 318.554037][ T53] [ 318.554037][ T53] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 318.561750][ T53] lock_acquire+0x120/0x360 [ 318.566764][ T53] __mutex_lock+0x182/0xe80 [ 318.571770][ T53] ieee80211_open+0xed/0x1f0 [ 318.576873][ T53] __dev_open+0x46d/0x880 [ 318.581707][ T53] netif_open+0xaa/0x170 [ 318.586458][ T53] dev_open+0x125/0x260 [ 318.591112][ T53] team_add_slave+0xb36/0x2840 [ 318.596385][ T53] do_set_master+0x530/0x6d0 [ 318.601476][ T53] do_setlink+0xd47/0x40d0 [ 318.606394][ T53] rtnl_newlink+0x160b/0x1c70 [ 318.611578][ T53] rtnetlink_rcv_msg+0x7cc/0xb70 [ 318.617024][ T53] netlink_rcv_skb+0x219/0x490 [ 318.622299][ T53] netlink_unicast+0x758/0x8d0 [ 318.627569][ T53] netlink_sendmsg+0x805/0xb30 [ 318.632837][ T53] __sock_sendmsg+0x219/0x270 [ 318.638019][ T53] ____sys_sendmsg+0x505/0x830 [ 318.643290][ T53] ___sys_sendmsg+0x21f/0x2a0 [ 318.648469][ T53] __x64_sys_sendmsg+0x19b/0x260 [ 318.653908][ T53] do_syscall_64+0xf6/0x210 [ 318.658918][ T53] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.665313][ T53] [ 318.665313][ T53] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 318.673290][ T53] validate_chain+0xb9b/0x2140 [ 318.678557][ T53] __lock_acquire+0xaac/0xd20 [ 318.683740][ T53] lock_acquire+0x120/0x360 [ 318.688748][ T53] __mutex_lock+0x182/0xe80 [ 318.693757][ T53] team_del_slave+0x32/0x1c0 [ 318.698853][ T53] team_device_event+0x285/0xa20 [ 318.704306][ T53] notifier_call_chain+0x1b3/0x3e0 [ 318.709933][ T53] unregister_netdevice_many_notify+0x15d4/0x2330 [ 318.716873][ T53] unregister_netdevice_queue+0x33c/0x380 [ 318.723104][ T53] _cfg80211_unregister_wdev+0x165/0x590 [ 318.729260][ T53] ieee80211_remove_interfaces+0x49a/0x6d0 [ 318.735583][ T53] ieee80211_unregister_hw+0x5d/0x2c0 [ 318.741467][ T53] mac80211_hwsim_del_radio+0x275/0x460 [ 318.747525][ T53] hwsim_exit_net+0x584/0x640 [ 318.752712][ T53] cleanup_net+0x717/0xbd0 [ 318.757634][ T53] process_scheduled_works+0xadb/0x17a0 [ 318.763690][ T53] worker_thread+0x8a0/0xda0 [ 318.768783][ T53] kthread+0x70e/0x8a0 [ 318.773355][ T53] ret_from_fork+0x4b/0x80 [ 318.778271][ T53] ret_from_fork_asm+0x1a/0x30 [ 318.783538][ T53] [ 318.783538][ T53] other info that might help us debug this: [ 318.783538][ T53] [ 318.793747][ T53] Possible unsafe locking scenario: [ 318.793747][ T53] [ 318.801612][ T53] CPU0 CPU1 [ 318.806965][ T53] ---- ---- [ 318.812314][ T53] lock(&rdev->wiphy.mtx); [ 318.816803][ T53] lock(team->team_lock_key); [ 318.824082][ T53] lock(&rdev->wiphy.mtx); [ 318.831091][ T53] lock(team->team_lock_key); [ 318.835839][ T53] [ 318.835839][ T53] *** DEADLOCK *** [ 318.835839][ T53] [ 318.843969][ T53] 5 locks held by kworker/u8:3/53: [ 318.849056][ T53] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 318.859917][ T53] #1: ffffc90000be7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 318.870436][ T53] #2: ffffffff8f2e6310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 318.879811][ T53] #3: ffffffff8f2f2e48 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 318.889646][ T53] #4: ffff888011260768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 318.900435][ T53] [ 318.900435][ T53] stack backtrace: [ 318.906337][ T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 318.906354][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 318.906363][ T53] Workqueue: netns cleanup_net [ 318.906384][ T53] Call Trace: [ 318.906394][ T53] [ 318.906401][ T53] dump_stack_lvl+0x189/0x250 [ 318.906420][ T53] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.906436][ T53] ? __pfx__printk+0x10/0x10 [ 318.906448][ T53] ? print_lock_name+0xde/0x100 [ 318.906467][ T53] print_circular_bug+0x2ee/0x310 [ 318.906480][ T53] check_noncircular+0x134/0x160 [ 318.906493][ T53] validate_chain+0xb9b/0x2140 [ 318.906506][ T53] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 318.906522][ T53] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.906543][ T53] __lock_acquire+0xaac/0xd20 [ 318.906560][ T53] ? team_del_slave+0x32/0x1c0 [ 318.906576][ T53] lock_acquire+0x120/0x360 [ 318.906590][ T53] ? team_del_slave+0x32/0x1c0 [ 318.906606][ T53] ? __mutex_trylock_common+0x153/0x260 [ 318.906619][ T53] __mutex_lock+0x182/0xe80 [ 318.906630][ T53] ? team_del_slave+0x32/0x1c0 [ 318.906645][ T53] ? rcu_is_watching+0x15/0xb0 [ 318.906664][ T53] ? team_del_slave+0x32/0x1c0 [ 318.906679][ T53] ? __pfx___mutex_lock+0x10/0x10 [ 318.906690][ T53] ? bond_netdev_event+0xd9/0xe80 [ 318.906707][ T53] ? __pfx___mutex_lock+0x10/0x10 [ 318.906718][ T53] ? __pfx_bond_netdev_event+0x10/0x10 [ 318.906737][ T53] team_del_slave+0x32/0x1c0 [ 318.906753][ T53] team_device_event+0x285/0xa20 [ 318.906765][ T53] notifier_call_chain+0x1b3/0x3e0 [ 318.906779][ T53] unregister_netdevice_many_notify+0x15d4/0x2330 [ 318.906799][ T53] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 318.906813][ T53] ? call_rcu+0x6dd/0x990 [ 318.906823][ T53] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.906846][ T53] unregister_netdevice_queue+0x33c/0x380 [ 318.906861][ T53] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 318.906877][ T53] _cfg80211_unregister_wdev+0x165/0x590 [ 318.906893][ T53] ieee80211_remove_interfaces+0x49a/0x6d0 [ 318.906907][ T53] ? __pfx_synchronize_rcu+0x10/0x10 [ 318.906918][ T53] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 318.906930][ T53] ? rcu_is_watching+0x15/0xb0 [ 318.906949][ T53] ieee80211_unregister_hw+0x5d/0x2c0 [ 318.906967][ T53] mac80211_hwsim_del_radio+0x275/0x460 [ 318.906985][ T53] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 318.907004][ T53] hwsim_exit_net+0x584/0x640 [ 318.907019][ T53] ? __pfx_hwsim_exit_net+0x10/0x10 [ 318.907034][ T53] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 318.907052][ T53] cleanup_net+0x717/0xbd0 [ 318.907064][ T53] ? __pfx_cleanup_net+0x10/0x10 [ 318.907075][ T53] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.907090][ T53] ? process_scheduled_works+0x9ec/0x17a0 [ 318.907108][ T53] ? process_scheduled_works+0x9ec/0x17a0 [ 318.907125][ T53] process_scheduled_works+0xadb/0x17a0 [ 318.907150][ T53] ? __pfx_process_scheduled_works+0x10/0x10 [ 318.907171][ T53] worker_thread+0x8a0/0xda0 [ 318.907195][ T53] kthread+0x70e/0x8a0 [ 318.907209][ T53] ? __pfx_worker_thread+0x10/0x10 [ 318.907220][ T53] ? __pfx_kthread+0x10/0x10 [ 318.907233][ T53] ? __pfx_kthread+0x10/0x10 [ 318.907245][ T53] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.907260][ T53] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.907277][ T53] ? __pfx_kthread+0x10/0x10 [ 318.907289][ T53] ret_from_fork+0x4b/0x80 [ 318.907300][ T53] ? __pfx_kthread+0x10/0x10 [ 318.907313][ T53] ret_from_fork_asm+0x1a/0x30 [ 318.907328][ T53] [ 319.252550][ T53] team0: Port device wlan1 removed [ 319.375248][ T53] hsr_slave_0: left promiscuous mode [ 319.380994][ T53] hsr_slave_1: left promiscuous mode [ 319.389600][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.397243][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.405496][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.412894][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.423211][ T53] veth1_macvtap: left promiscuous mode [ 319.428837][ T53] veth0_macvtap: left promiscuous mode [ 319.434435][ T53] veth1_vlan: left promiscuous mode [ 319.439843][ T53] veth0_vlan: left promiscuous mode [ 319.555728][ T55] Bluetooth: hci0: command tx timeout [ 319.587836][ T53] team0 (unregistering): Port device team_slave_1 removed [ 319.607062][ T53] team0 (unregistering): Port device team_slave_0 removed [ 319.840314][ T6660] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.858073][ T6660] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.870188][ T6660] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.884329][ T6660] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.950519][ T6660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.966643][ T6660] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.976879][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.984003][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.999626][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.006748][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.091574][ T6660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.116854][ T6660] veth0_vlan: entered promiscuous mode [ 320.126346][ T6660] veth1_vlan: entered promiscuous mode [ 320.143581][ T6660] veth0_macvtap: entered promiscuous mode [ 320.151403][ T6660] veth1_macvtap: entered promiscuous mode [ 320.163357][ T6660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.175158][ T6660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.185092][ T6660] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.193768][ T6660] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.202503][ T6660] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.211494][ T6660] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.234154][ T6660] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' 2025/04/25 23:23:32 executed programs: 602 [ 320.251199][ T3444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.252438][ T6660] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 320.265053][ T3444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.285041][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.292889][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.330130][ T6704] team0: Port device wlan1 added [ 321.488169][ T6773] validate_nla: 109 callbacks suppressed [ 321.488181][ T6773] netlink: 'syz.0.685': attribute type 10 has an invalid length. [ 321.508724][ T6774] netlink: 'syz.0.686': attribute type 10 has an invalid length. [ 321.522325][ T6775] netlink: 'syz.0.687': attribute type 10 has an invalid length. [ 321.547533][ T6776] netlink: 'syz.0.688': attribute type 10 has an invalid length. [ 321.563513][ T6777] netlink: 'syz.0.689': attribute type 10 has an invalid length. [ 321.578162][ T6778] netlink: 'syz.0.690': attribute type 10 has an invalid length. [ 321.608506][ T6779] netlink: 'syz.0.691': attribute type 10 has an invalid length. [ 321.623160][ T6780] netlink: 'syz.0.692': attribute type 10 has an invalid length. [ 321.637743][ T6781] netlink: 'syz.0.693': attribute type 10 has an invalid length. [ 321.644145][ T55] Bluetooth: hci0: command tx timeout [ 321.677682][ T6782] netlink: 'syz.0.694': attribute type 10 has an invalid length. [ 323.714013][ T55] Bluetooth: hci0: command tx timeout 2025/04/25 23:23:37 executed programs: 897 [ 325.794244][ T55] Bluetooth: hci0: command tx timeout [ 326.508926][ T7070] validate_nla: 287 callbacks suppressed [ 326.508940][ T7070] netlink: 'syz.0.982': attribute type 10 has an invalid length. [ 326.529311][ T7071] netlink: 'syz.0.983': attribute type 10 has an invalid length. [ 326.543120][ T7072] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 326.577715][ T7073] netlink: 'syz.0.985': attribute type 10 has an invalid length. [ 326.592751][ T7074] netlink: 'syz.0.986': attribute type 10 has an invalid length. [ 326.606728][ T7075] netlink: 'syz.0.987': attribute type 10 has an invalid length. [ 326.637582][ T7076] netlink: 'syz.0.988': attribute type 10 has an invalid length. [ 326.652450][ T7077] netlink: 'syz.0.989': attribute type 10 has an invalid length. [ 326.667764][ T7078] netlink: 'syz.0.990': attribute type 10 has an invalid length. [ 326.698126][ T7079] netlink: 'syz.0.991': attribute type 10 has an invalid length.