Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. 1970/01/01 00:04:25 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:04:26 parsed 1 programs [ 269.618078][ T6515] cgroup: Unknown subsys name 'net' [ 269.855098][ T6515] cgroup: Unknown subsys name 'cpuset' [ 269.858704][ T6515] cgroup: Unknown subsys name 'rlimit' [ 270.177735][ T6515] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 288.078720][ T6521] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 288.398510][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.398608][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.416940][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.416992][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.757221][ T6542] chnl_net:caif_netlink_parms(): no params data found [ 288.861620][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.861732][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.861870][ T6542] bridge_slave_0: entered allmulticast mode [ 288.868183][ T6542] bridge_slave_0: entered promiscuous mode [ 288.872080][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.877595][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.879650][ T6542] bridge_slave_1: entered allmulticast mode [ 288.882136][ T6542] bridge_slave_1: entered promiscuous mode [ 288.909077][ T6542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.913657][ T6542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.931976][ T6542] team0: Port device team_slave_0 added [ 288.937268][ T6542] team0: Port device team_slave_1 added [ 288.953340][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.955306][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.962086][ T6542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.966873][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.968837][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.976259][ T6542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.156863][ T6542] hsr_slave_0: entered promiscuous mode [ 289.158997][ T6542] hsr_slave_1: entered promiscuous mode [ 289.440487][ T6542] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 289.445389][ T6542] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 289.448844][ T6542] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 289.458616][ T6542] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 289.559223][ T6542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.567243][ T6542] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.570246][ T565] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.570379][ T565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.581227][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.581296][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.684299][ T6542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.760202][ T6542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.784276][ T6542] veth0_vlan: entered promiscuous mode [ 289.788909][ T6542] veth1_vlan: entered promiscuous mode [ 289.804116][ T6542] veth0_macvtap: entered promiscuous mode [ 289.807643][ T6542] veth1_macvtap: entered promiscuous mode [ 289.814555][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.816386][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.818182][ T6542] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.818237][ T6542] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.818268][ T6542] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.818298][ T6542] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.274751][ T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.336698][ T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.398424][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.399390][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.399941][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.400597][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.401007][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.405428][ T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.495162][ T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:04:51 executed programs: 0 [ 291.838382][ T6058] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.840131][ T6058] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.840596][ T6058] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.841429][ T6058] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.841946][ T6058] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.935909][ T6607] chnl_net:caif_netlink_parms(): no params data found [ 291.974652][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.976674][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.976856][ T6607] bridge_slave_0: entered allmulticast mode [ 291.977733][ T6607] bridge_slave_0: entered promiscuous mode [ 291.979118][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.979164][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.979313][ T6607] bridge_slave_1: entered allmulticast mode [ 291.980199][ T6607] bridge_slave_1: entered promiscuous mode [ 291.998581][ T6607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.001571][ T6607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.016591][ T6607] team0: Port device team_slave_0 added [ 292.018350][ T6607] team0: Port device team_slave_1 added [ 292.033815][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.033868][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.034309][ T6607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.035433][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.035458][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.035486][ T6607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.066552][ T6607] hsr_slave_0: entered promiscuous mode [ 292.067158][ T6607] hsr_slave_1: entered promiscuous mode [ 292.067591][ T6607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.067709][ T6607] Cannot create hsr debugfs directory [ 292.992395][ T14] bridge_slave_1: left allmulticast mode [ 292.992483][ T14] bridge_slave_1: left promiscuous mode [ 292.992923][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.999966][ T14] bridge_slave_0: left allmulticast mode [ 293.001238][ T14] bridge_slave_0: left promiscuous mode [ 293.001359][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.923067][ T6058] Bluetooth: hci0: command tx timeout [ 294.514777][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.554925][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.593824][ T14] bond0 (unregistering): Released all slaves [ 294.671654][ T14] hsr_slave_0: left promiscuous mode [ 294.673503][ T14] hsr_slave_1: left promiscuous mode [ 294.674037][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.674086][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.681827][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.684760][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.698465][ T14] veth1_macvtap: left promiscuous mode [ 294.700174][ T14] veth0_macvtap: left promiscuous mode [ 294.701776][ T14] veth1_vlan: left promiscuous mode [ 294.703419][ T14] veth0_vlan: left promiscuous mode [ 296.003211][ T6058] Bluetooth: hci0: command tx timeout [ 296.694423][ T14] team0 (unregistering): Port device team_slave_1 removed [ 296.904036][ T14] team0 (unregistering): Port device team_slave_0 removed [ 298.082371][ T6058] Bluetooth: hci0: command tx timeout [ 299.909068][ T6607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 299.919602][ T6607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 299.925878][ T6607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 299.929668][ T6607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 300.163613][ T6058] Bluetooth: hci0: command tx timeout [ 300.275110][ T6607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.286546][ T6607] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.292470][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.292547][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.300679][ T2189] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.300758][ T2189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.417771][ T6607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.886697][ T6607] veth0_vlan: entered promiscuous mode [ 300.889664][ T6607] veth1_vlan: entered promiscuous mode [ 300.909956][ T6607] veth0_macvtap: entered promiscuous mode [ 300.912159][ T6607] veth1_macvtap: entered promiscuous mode [ 300.920093][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.925456][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.937397][ T6607] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.941068][ T6607] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.944313][ T6607] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.946813][ T6607] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.984627][ T2189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.984686][ T2189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.004765][ T2189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.004830][ T2189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:05:00 executed programs: 2 [ 301.080460][ T6678] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 301.169379][ T6678] team0: Port device wlan1 added [ 301.181019][ T6679] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 301.236418][ T6680] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 301.264032][ T6681] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 301.286822][ T6682] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 301.306534][ T6683] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 301.324261][ T6684] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 301.344598][ T6685] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 301.359780][ T6686] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 301.374372][ T6687] netlink: 'syz.0.25': attribute type 10 has an invalid length. 1970/01/01 00:05:05 executed programs: 280 [ 306.107945][ T6958] validate_nla: 270 callbacks suppressed [ 306.108016][ T6958] netlink: 'syz.0.296': attribute type 10 has an invalid length. [ 306.118865][ T6959] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 306.130174][ T6960] netlink: 'syz.0.298': attribute type 10 has an invalid length. [ 306.168833][ T6961] netlink: 'syz.0.299': attribute type 10 has an invalid length. [ 306.179361][ T6962] netlink: 'syz.0.300': attribute type 10 has an invalid length. [ 306.191044][ T6963] netlink: 'syz.0.301': attribute type 10 has an invalid length. [ 306.227695][ T6964] netlink: 'syz.0.302': attribute type 10 has an invalid length. [ 306.237857][ T6965] netlink: 'syz.0.303': attribute type 10 has an invalid length. [ 306.250787][ T6966] netlink: 'syz.0.304': attribute type 10 has an invalid length. [ 306.288897][ T6967] netlink: 'syz.0.305': attribute type 10 has an invalid length. [ 310.485288][ T2392] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.485410][ T2392] ieee802154 phy1 wpan1: encryption failed: -22 1970/01/01 00:05:10 executed programs: 568 [ 311.138058][ T7246] validate_nla: 278 callbacks suppressed [ 311.138124][ T7246] netlink: 'syz.0.584': attribute type 10 has an invalid length. [ 311.149105][ T7247] netlink: 'syz.0.585': attribute type 10 has an invalid length. [ 311.161944][ T7248] netlink: 'syz.0.586': attribute type 10 has an invalid length. [ 311.197449][ T7249] netlink: 'syz.0.587': attribute type 10 has an invalid length. [ 311.207579][ T7250] netlink: 'syz.0.588': attribute type 10 has an invalid length. [ 311.218170][ T7251] netlink: 'syz.0.589': attribute type 10 has an invalid length. [ 311.247973][ T7252] netlink: 'syz.0.590': attribute type 10 has an invalid length. [ 311.257852][ T7253] netlink: 'syz.0.591': attribute type 10 has an invalid length. [ 311.270011][ T7254] netlink: 'syz.0.592': attribute type 10 has an invalid length. [ 311.297403][ T7255] netlink: 'syz.0.593': attribute type 10 has an invalid length. [ 311.681687][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.690110][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.690811][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.691447][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.692049][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 311.789551][ T7279] chnl_net:caif_netlink_parms(): no params data found [ 311.825914][ T7279] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.826024][ T7279] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.826121][ T7279] bridge_slave_0: entered allmulticast mode [ 311.826940][ T7279] bridge_slave_0: entered promiscuous mode [ 311.828882][ T7279] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.828953][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.829047][ T7279] bridge_slave_1: entered allmulticast mode [ 311.829877][ T7279] bridge_slave_1: entered promiscuous mode [ 311.888900][ T7279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.890484][ T7279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.906923][ T7279] team0: Port device team_slave_0 added [ 311.908566][ T7279] team0: Port device team_slave_1 added [ 311.922765][ T7279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.922822][ T7279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.922851][ T7279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.923833][ T7279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.923857][ T7279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.923884][ T7279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.954260][ T7279] hsr_slave_0: entered promiscuous mode [ 311.954753][ T7279] hsr_slave_1: entered promiscuous mode [ 312.035011][ T7279] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.364271][ T7279] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.474004][ T7279] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.555263][ T7279] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.697086][ T14] bridge_slave_1: left allmulticast mode [ 312.697164][ T14] bridge_slave_1: left promiscuous mode [ 312.697296][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.702042][ T14] bridge_slave_0: left allmulticast mode [ 312.702081][ T14] bridge_slave_0: left promiscuous mode [ 312.702286][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.772883][ T6058] Bluetooth: hci1: command tx timeout [ 314.294687][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.336079][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.393992][ T14] bond0 (unregistering): Released all slaves [ 314.426492][ T7279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 314.428266][ T7279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.430149][ T7279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 314.435274][ T7279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 314.475929][ T7279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.485868][ T7279] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.489821][ T2189] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.489902][ T2189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.497681][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.497764][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.594248][ T14] [ 314.594876][ T14] ====================================================== [ 314.596647][ T14] WARNING: possible circular locking dependency detected [ 314.598397][ T14] 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 Not tainted [ 314.600105][ T14] ------------------------------------------------------ [ 314.601892][ T14] kworker/u8:1/14 is trying to acquire lock: [ 314.603410][ T14] ffff0000d2130e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x30/0x180 [ 314.605914][ T14] [ 314.605914][ T14] but task is already holding lock: [ 314.607814][ T14] ffff0000c4de8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x128/0x570 [ 314.610551][ T14] [ 314.610551][ T14] which lock already depends on the new lock. [ 314.610551][ T14] [ 314.613237][ T14] [ 314.613237][ T14] the existing dependency chain (in reverse order) is: [ 314.615551][ T14] [ 314.615551][ T14] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 314.617549][ T14] __mutex_lock_common+0x1d0/0x2190 [ 314.619004][ T14] mutex_lock_nested+0x2c/0x38 [ 314.620345][ T14] ieee80211_open+0xe4/0x1cc [ 314.621688][ T14] __dev_open+0x42c/0x830 [ 314.622942][ T14] netif_open+0xa8/0x220 [ 314.624162][ T14] dev_open+0x104/0x1fc [ 314.625386][ T14] team_add_slave+0x85c/0x20a4 [ 314.626852][ T14] do_set_master+0x410/0x594 [ 314.628156][ T14] do_setlink+0xb2c/0x3860 [ 314.629404][ T14] rtnl_newlink+0x10f8/0x15dc [ 314.630730][ T14] rtnetlink_rcv_msg+0x664/0x97c [ 314.632144][ T14] netlink_rcv_skb+0x230/0x414 [ 314.633491][ T14] rtnetlink_rcv+0x28/0x38 [ 314.634773][ T14] netlink_unicast+0x60c/0x824 [ 314.635995][ T14] netlink_sendmsg+0x648/0x930 [ 314.637210][ T14] ____sys_sendmsg+0x490/0x7b8 [ 314.638487][ T14] ___sys_sendmsg+0x204/0x278 [ 314.639813][ T14] __arm64_sys_sendmsg+0x184/0x238 [ 314.641304][ T14] invoke_syscall+0x98/0x2b8 [ 314.642553][ T14] el0_svc_common+0x130/0x23c [ 314.643854][ T14] do_el0_svc+0x48/0x58 [ 314.645008][ T14] el0_svc+0x58/0x150 [ 314.646224][ T14] el0t_64_sync_handler+0x78/0x108 [ 314.647613][ T14] el0t_64_sync+0x198/0x19c [ 314.648770][ T14] [ 314.648770][ T14] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 314.650726][ T14] __lock_acquire+0x1728/0x3058 [ 314.651966][ T14] lock_acquire+0x14c/0x2e0 [ 314.653199][ T14] __mutex_lock_common+0x1d0/0x2190 [ 314.654534][ T14] mutex_lock_nested+0x2c/0x38 [ 314.655749][ T14] team_del_slave+0x30/0x180 [ 314.657033][ T14] team_device_event+0x274/0x950 [ 314.658500][ T14] notifier_call_chain+0x1b8/0x4e4 [ 314.659856][ T14] raw_notifier_call_chain+0x3c/0x50 [ 314.661280][ T14] unregister_netdevice_many_notify+0x1250/0x1fbc [ 314.662986][ T14] unregister_netdevice_queue+0x2b4/0x300 [ 314.664567][ T14] _cfg80211_unregister_wdev+0x154/0x52c [ 314.666183][ T14] cfg80211_unregister_wdev+0x24/0x34 [ 314.667618][ T14] ieee80211_remove_interfaces+0x3a0/0x570 [ 314.669160][ T14] ieee80211_unregister_hw+0x60/0x29c [ 314.670666][ T14] mac80211_hwsim_del_radio+0x214/0x3b4 [ 314.672097][ T14] hwsim_exit_net+0x49c/0x558 [ 314.673405][ T14] cleanup_net+0x5d0/0x9c0 [ 314.674674][ T14] process_one_work+0x7e8/0x156c [ 314.676110][ T14] worker_thread+0x958/0xed8 [ 314.677350][ T14] kthread+0x5fc/0x75c [ 314.678395][ T14] ret_from_fork+0x10/0x20 [ 314.679517][ T14] [ 314.679517][ T14] other info that might help us debug this: [ 314.679517][ T14] [ 314.681965][ T14] Possible unsafe locking scenario: [ 314.681965][ T14] [ 314.683694][ T14] CPU0 CPU1 [ 314.684996][ T14] ---- ---- [ 314.686347][ T14] lock(&rdev->wiphy.mtx); [ 314.687514][ T14] lock(team->team_lock_key#2); [ 314.689356][ T14] lock(&rdev->wiphy.mtx); [ 314.690981][ T14] lock(team->team_lock_key#2); [ 314.692236][ T14] [ 314.692236][ T14] *** DEADLOCK *** [ 314.692236][ T14] [ 314.694152][ T14] 5 locks held by kworker/u8:1/14: [ 314.695448][ T14] #0: ffff0000c183a148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x658/0x156c [ 314.697896][ T14] #1: ffff800097657bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c [ 314.700306][ T14] #2: ffff80009245b710 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x138/0x9c0 [ 314.702465][ T14] #3: ffff8000924681e8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 314.704609][ T14] #4: ffff0000c4de8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x128/0x570 [ 314.707292][ T14] [ 314.707292][ T14] stack backtrace: [ 314.708817][ T14] CPU: 0 UID: 0 PID: 14 Comm: kworker/u8:1 Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT [ 314.711399][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 314.713992][ T14] Workqueue: netns cleanup_net [ 314.715200][ T14] Call trace: [ 314.716066][ T14] show_stack+0x2c/0x3c (C) [ 314.717123][ T14] __dump_stack+0x30/0x40 [ 314.718150][ T14] dump_stack_lvl+0xd8/0x12c [ 314.719314][ T14] dump_stack+0x1c/0x28 [ 314.720329][ T14] print_circular_bug+0x324/0x32c [ 314.721539][ T14] check_noncircular+0x154/0x174 [ 314.722730][ T14] __lock_acquire+0x1728/0x3058 [ 314.723766][ T14] lock_acquire+0x14c/0x2e0 [ 314.724791][ T14] __mutex_lock_common+0x1d0/0x2190 [ 314.725950][ T14] mutex_lock_nested+0x2c/0x38 [ 314.727033][ T14] team_del_slave+0x30/0x180 [ 314.728075][ T14] team_device_event+0x274/0x950 [ 314.729233][ T14] notifier_call_chain+0x1b8/0x4e4 [ 314.730560][ T14] raw_notifier_call_chain+0x3c/0x50 [ 314.731938][ T14] unregister_netdevice_many_notify+0x1250/0x1fbc [ 314.733490][ T14] unregister_netdevice_queue+0x2b4/0x300 [ 314.734780][ T14] _cfg80211_unregister_wdev+0x154/0x52c [ 314.736109][ T14] cfg80211_unregister_wdev+0x24/0x34 [ 314.737497][ T14] ieee80211_remove_interfaces+0x3a0/0x570 [ 314.738847][ T14] ieee80211_unregister_hw+0x60/0x29c [ 314.740202][ T14] mac80211_hwsim_del_radio+0x214/0x3b4 [ 314.741481][ T14] hwsim_exit_net+0x49c/0x558 [ 314.742507][ T14] cleanup_net+0x5d0/0x9c0 [ 314.743591][ T14] process_one_work+0x7e8/0x156c [ 314.744738][ T14] worker_thread+0x958/0xed8 [ 314.745853][ T14] kthread+0x5fc/0x75c [ 314.746901][ T14] ret_from_fork+0x10/0x20 [ 314.750327][ T14] team0: Port device wlan1 removed [ 314.850985][ T7279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.865214][ T7279] veth0_vlan: entered promiscuous mode [ 314.867580][ T7279] veth1_vlan: entered promiscuous mode [ 314.876712][ T7279] veth0_macvtap: entered promiscuous mode [ 314.878140][ T7279] veth1_macvtap: entered promiscuous mode [ 314.883230][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.883275][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.883750][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.884783][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.884809][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.885188][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.886300][ T7279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.886335][ T7279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.886363][ T7279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.886391][ T7279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.044626][ T7279] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 315.051091][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.051904][ T7279] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 315.053856][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.059481][ T738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.059546][ T738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.265334][ T7293] team0: Port device wlan1 added [ 315.270280][ T14] hsr_slave_0: left promiscuous mode [ 315.272027][ T14] hsr_slave_1: left promiscuous mode [ 315.274316][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.274475][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.276810][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.276844][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.282894][ T14] veth1_macvtap: left promiscuous mode [ 315.282966][ T14] veth0_macvtap: left promiscuous mode [ 315.283041][ T14] veth1_vlan: left promiscuous mode [ 315.283108][ T14] veth0_vlan: left promiscuous mode [ 315.842416][ T6058] Bluetooth: hci1: command tx timeout [ 317.053056][ T14] team0 (unregistering): Port device team_slave_1 removed [ 317.223032][ T14] team0 (unregistering): Port device team_slave_0 removed [ 317.922306][ T6058] Bluetooth: hci1: command tx timeout [ 319.516974][ T7296] validate_nla: 24 callbacks suppressed [ 319.518602][ T7296] netlink: 'syz.0.618': attribute type 10 has an invalid length. 1970/01/01 00:05:19 executed programs: 604 [ 319.528280][ T7297] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 319.566990][ T7298] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 319.574584][ T7299] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 319.581520][ T7300] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 319.626626][ T7301] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 319.634650][ T7302] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 319.643057][ T7303] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 319.677958][ T7304] netlink: 'syz.0.626': attribute type 10 has an invalid length. [ 319.692018][ T7305] netlink: 'syz.0.627': attribute type 10 has an invalid length. [ 320.012313][ T6058] Bluetooth: hci1: command tx timeout 1970/01/01 00:05:24 executed programs: 897 [ 324.525012][ T7588] validate_nla: 281 callbacks suppressed [ 324.525193][ T7588] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 324.533094][ T7589] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 324.566417][ T7590] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 324.574346][ T7591] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 324.581422][ T7592] netlink: 'syz.0.913': attribute type 10 has an invalid length.