Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts. 2026/04/27 06:33:21 parsed 1 programs [ 66.737595][ T4188] cgroup: Unknown subsys name 'net' [ 66.841057][ T4188] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.348727][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.566550][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.573445][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.624810][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.644993][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.669416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.687467][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.696332][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.705397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.437698][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 72.498474][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.506847][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.515381][ T4278] device bridge_slave_0 entered promiscuous mode [ 72.525494][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.532877][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.541060][ T4278] device bridge_slave_1 entered promiscuous mode [ 72.580607][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.591902][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.613142][ T4278] team0: Port device team_slave_0 added [ 72.620618][ T4278] team0: Port device team_slave_1 added [ 72.636499][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.644149][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.670573][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.704530][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.712180][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.739448][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.785935][ T4278] device hsr_slave_0 entered promiscuous mode [ 72.793044][ T4278] device hsr_slave_1 entered promiscuous mode [ 72.922647][ T4278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.934130][ T4278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.944685][ T4278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.956031][ T4278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.037141][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.051819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.061125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.074958][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.103735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.112766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.123002][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.130560][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.141783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.163808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.175819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.184936][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.192151][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.201033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.224367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.235070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.245103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.255137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.280629][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.290544][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.300223][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.309454][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.341142][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.469210][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.478359][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.503211][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.528352][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.550601][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.561723][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.570409][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.582873][ T4278] device veth0_vlan entered promiscuous mode [ 73.595979][ T4278] device veth1_vlan entered promiscuous mode [ 73.621503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.630296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.640845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.653850][ T4278] device veth0_macvtap entered promiscuous mode [ 73.664760][ T4278] device veth1_macvtap entered promiscuous mode [ 73.684994][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.697799][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.706820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.717359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.726977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.745007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.755841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.769936][ T4278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.781008][ T4278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.790201][ T4278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.799372][ T4278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/27 06:33:31 executed programs: 0 [ 74.742619][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 74.809655][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.817361][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.828596][ T4295] device bridge_slave_0 entered promiscuous mode [ 74.838817][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.850309][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.858744][ T4295] device bridge_slave_1 entered promiscuous mode [ 74.882022][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.898581][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.925251][ T4295] team0: Port device team_slave_0 added [ 74.933947][ T4295] team0: Port device team_slave_1 added [ 74.956567][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.964654][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.992205][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.007908][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.015505][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.043008][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.075475][ T4295] device hsr_slave_0 entered promiscuous mode [ 75.082884][ T4295] device hsr_slave_1 entered promiscuous mode [ 75.089626][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.098199][ T4295] Cannot create hsr debugfs directory [ 75.180394][ T4295] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.603468][ T4203] Bluetooth: hci0: command 0x0409 tx timeout [ 78.018896][ T4295] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.598534][ T4295] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.659596][ T4295] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.682465][ T4203] Bluetooth: hci0: command 0x041b tx timeout [ 78.885827][ T4295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.897601][ T4295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.907819][ T4295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.932361][ T4295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.995904][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.011967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.021143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.032197][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.053167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.062118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.072485][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.080304][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.089845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.101433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.111212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.120428][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.127692][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.144628][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.155114][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.167018][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.177748][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.187945][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.202772][ T155] device hsr_slave_0 left promiscuous mode [ 79.210310][ T155] device hsr_slave_1 left promiscuous mode [ 79.218140][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.226517][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.236081][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.245179][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.255166][ T155] device bridge_slave_1 left promiscuous mode [ 79.263469][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.277819][ T155] device bridge_slave_0 left promiscuous mode [ 79.284545][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.303980][ T155] device veth1_macvtap left promiscuous mode [ 79.311017][ T155] device veth0_macvtap left promiscuous mode [ 79.317986][ T155] device veth1_vlan left promiscuous mode [ 79.324767][ T155] device veth0_vlan left promiscuous mode [ 79.475472][ T155] team0 (unregistering): Port device team_slave_1 removed [ 79.491379][ T155] team0 (unregistering): Port device team_slave_0 removed [ 79.509749][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.525217][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.580415][ T155] bond0 (unregistering): Released all slaves [ 79.657843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.667215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.680288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.689793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.704049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.714614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.728229][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.842031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.851762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.866109][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.896483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.908614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.925301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.934260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.945049][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.954379][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.966954][ T4295] device veth0_vlan entered promiscuous mode [ 79.978499][ T4295] device veth1_vlan entered promiscuous mode [ 79.997476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.006374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.016124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.026046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.037491][ T4295] device veth0_macvtap entered promiscuous mode [ 80.050260][ T4295] device veth1_macvtap entered promiscuous mode [ 80.070922][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.080005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.091912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.105427][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.115074][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.125500][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.137982][ T4295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.148385][ T4295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.158390][ T4295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.169172][ T4295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.243371][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.256300][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.265834][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.291670][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.303423][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.312127][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.363952][ T4307] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17'. [ 80.385280][ T4307] device wlan1 entered promiscuous mode [ 80.413205][ T4307] team0: Port device wlan1 added [ 80.437943][ T4307] [ 80.440770][ T4307] ====================================================== [ 80.448421][ T4307] WARNING: possible circular locking dependency detected [ 80.455913][ T4307] syzkaller #0 Not tainted [ 80.460347][ T4307] ------------------------------------------------------ [ 80.467387][ T4307] syz.0.17/4307 is trying to acquire lock: [ 80.473579][ T4307] ffff8880278bcd00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x2e/0x1e0 [ 80.483547][ T4307] [ 80.483547][ T4307] but task is already holding lock: [ 80.491344][ T4307] ffff88807dc28688 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x11c/0x350 [ 80.502051][ T4307] [ 80.502051][ T4307] which lock already depends on the new lock. [ 80.502051][ T4307] [ 80.512906][ T4307] [ 80.512906][ T4307] the existing dependency chain (in reverse order) is: [ 80.522563][ T4307] [ 80.522563][ T4307] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 80.530505][ T4307] __mutex_lock_common+0x1e3/0x2400 [ 80.536874][ T4307] mutex_lock_nested+0x17/0x20 [ 80.542531][ T4307] ieee80211_open+0x140/0x200 [ 80.548047][ T4307] __dev_open+0x2bf/0x430 [ 80.553450][ T4307] dev_open+0xa7/0x180 [ 80.558516][ T4307] team_add_slave+0x692/0x2780 [ 80.564094][ T4307] do_setlink+0xe90/0x3d60 [ 80.569541][ T4307] rtnl_newlink+0x1658/0x1a50 [ 80.575147][ T4307] rtnetlink_rcv_msg+0x844/0xf30 [ 80.580721][ T4307] netlink_rcv_skb+0x1f5/0x440 [ 80.586130][ T4307] netlink_unicast+0x774/0x920 [ 80.592222][ T4307] netlink_sendmsg+0x8ba/0xbe0 [ 80.597673][ T4307] ____sys_sendmsg+0x5b7/0x8f0 [ 80.603056][ T4307] ___sys_sendmsg+0x236/0x2e0 [ 80.608479][ T4307] __se_sys_sendmsg+0x1af/0x290 [ 80.614042][ T4307] do_syscall_64+0x4c/0xa0 [ 80.619431][ T4307] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.626466][ T4307] [ 80.626466][ T4307] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 80.635413][ T4307] __lock_acquire+0x2c42/0x7d10 [ 80.640978][ T4307] lock_acquire+0x19e/0x400 [ 80.646160][ T4307] __mutex_lock_common+0x1e3/0x2400 [ 80.652332][ T4307] mutex_lock_nested+0x17/0x20 [ 80.657940][ T4307] team_del_slave+0x2e/0x1e0 [ 80.663407][ T4307] team_device_event+0x38f/0x9e0 [ 80.669599][ T4307] raw_notifier_call_chain+0xcb/0x160 [ 80.675672][ T4307] unregister_netdevice_many+0x1049/0x19f0 [ 80.683110][ T4307] unregister_netdevice_queue+0x324/0x370 [ 80.689567][ T4307] _cfg80211_unregister_wdev+0x186/0x500 [ 80.695945][ T4307] ieee80211_if_remove+0x1bd/0x2b0 [ 80.701596][ T4307] ieee80211_del_iface+0x15/0x20 [ 80.707266][ T4307] nl80211_del_interface+0x1ea/0x350 [ 80.713168][ T4307] genl_rcv_msg+0xcea/0xf90 [ 80.718383][ T4307] netlink_rcv_skb+0x1f5/0x440 [ 80.723851][ T4307] genl_rcv+0x24/0x40 [ 80.728768][ T4307] netlink_unicast+0x774/0x920 [ 80.734584][ T4307] netlink_sendmsg+0x8ba/0xbe0 [ 80.740260][ T4307] ____sys_sendmsg+0x5b7/0x8f0 [ 80.746071][ T4307] ___sys_sendmsg+0x236/0x2e0 [ 80.751782][ T4307] __se_sys_sendmsg+0x1af/0x290 [ 80.757533][ T4307] do_syscall_64+0x4c/0xa0 [ 80.762796][ T4307] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.769779][ T4307] [ 80.769779][ T4307] other info that might help us debug this: [ 80.769779][ T4307] [ 80.780991][ T4307] Possible unsafe locking scenario: [ 80.780991][ T4307] [ 80.788618][ T4307] CPU0 CPU1 [ 80.794481][ T4307] ---- ---- [ 80.800046][ T4307] lock(&rdev->wiphy.mtx); [ 80.804899][ T4307] lock(team->team_lock_key#2); [ 80.812679][ T4307] lock(&rdev->wiphy.mtx); [ 80.820650][ T4307] lock(team->team_lock_key#2); [ 80.826232][ T4307] [ 80.826232][ T4307] *** DEADLOCK *** [ 80.826232][ T4307] [ 80.835381][ T4307] 3 locks held by syz.0.17/4307: [ 80.840718][ T4307] #0: ffffffff8d499e30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 80.849976][ T4307] #1: ffffffff8d43d408 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x28/0x540 [ 80.859471][ T4307] #2: ffff88807dc28688 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x11c/0x350 [ 80.870717][ T4307] [ 80.870717][ T4307] stack backtrace: [ 80.877077][ T4307] CPU: 1 PID: 4307 Comm: syz.0.17 Not tainted syzkaller #0 [ 80.884860][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.895589][ T4307] Call Trace: [ 80.899022][ T4307] [ 80.902072][ T4307] dump_stack_lvl+0x188/0x250 [ 80.906888][ T4307] ? load_image+0x400/0x400 [ 80.911920][ T4307] ? show_regs_print_info+0x20/0x20 [ 80.917277][ T4307] ? print_circular_bug+0x12b/0x1a0 [ 80.922714][ T4307] check_noncircular+0x296/0x330 [ 80.927941][ T4307] ? stack_trace_snprint+0xf0/0xf0 [ 80.933370][ T4307] ? add_chain_block+0x940/0x940 [ 80.938790][ T4307] ? lockdep_lock+0xf1/0x1f0 [ 80.943948][ T4307] ? mark_lock+0x94/0x320 [ 80.948740][ T4307] __lock_acquire+0x2c42/0x7d10 [ 80.954449][ T4307] ? mark_lock+0x94/0x320 [ 80.958884][ T4307] ? verify_lock_unused+0x140/0x140 [ 80.964622][ T4307] ? verify_lock_unused+0x140/0x140 [ 80.970196][ T4307] lock_acquire+0x19e/0x400 [ 80.975439][ T4307] ? team_del_slave+0x2e/0x1e0 [ 80.980438][ T4307] ? __might_sleep+0xf0/0xf0 [ 80.985745][ T4307] ? read_lock_is_recursive+0x10/0x10 [ 80.991263][ T4307] ? __mutex_trylock_common+0x155/0x260 [ 80.997009][ T4307] ? team_del_slave+0x2e/0x1e0 [ 81.002372][ T4307] __mutex_lock_common+0x1e3/0x2400 [ 81.007609][ T4307] ? team_del_slave+0x2e/0x1e0 [ 81.012563][ T4307] ? __lock_acquire+0x7d10/0x7d10 [ 81.017808][ T4307] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 81.024065][ T4307] ? bond_netdev_event+0xe1/0xee0 [ 81.029231][ T4307] ? mutex_lock_io_nested+0x60/0x60 [ 81.034460][ T4307] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 81.040188][ T4307] ? memset+0x1e/0x40 [ 81.044405][ T4307] mutex_lock_nested+0x17/0x20 [ 81.049418][ T4307] team_del_slave+0x2e/0x1e0 [ 81.054151][ T4307] team_device_event+0x38f/0x9e0 [ 81.059442][ T4307] raw_notifier_call_chain+0xcb/0x160 [ 81.064840][ T4307] unregister_netdevice_many+0x1049/0x19f0 [ 81.070928][ T4307] ? alloc_netdev_mqs+0xc40/0xc40 [ 81.076290][ T4307] ? kernfs_remove_by_name_ns+0xd0/0x100 [ 81.082038][ T4307] ? __lock_acquire+0x7d10/0x7d10 [ 81.087928][ T4307] unregister_netdevice_queue+0x324/0x370 [ 81.093966][ T4307] ? list_netdevice+0x450/0x450 [ 81.099088][ T4307] _cfg80211_unregister_wdev+0x186/0x500 [ 81.104974][ T4307] ieee80211_if_remove+0x1bd/0x2b0 [ 81.110279][ T4307] ieee80211_del_iface+0x15/0x20 [ 81.115246][ T4307] nl80211_del_interface+0x1ea/0x350 [ 81.121300][ T4307] genl_rcv_msg+0xcea/0xf90 [ 81.126130][ T4307] ? genl_bind+0x380/0x380 [ 81.131009][ T4307] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 81.136473][ T4307] ? verify_lock_unused+0x140/0x140 [ 81.142008][ T4307] ? dev_queue_xmit+0x20/0x20 [ 81.147427][ T4307] ? nl80211_new_interface+0xe40/0xe40 [ 81.153469][ T4307] netlink_rcv_skb+0x1f5/0x440 [ 81.158370][ T4307] ? genl_bind+0x380/0x380 [ 81.163627][ T4307] ? netlink_ack+0xb50/0xb50 [ 81.168782][ T4307] ? __lock_acquire+0x7d10/0x7d10 [ 81.174007][ T4307] ? down_read+0x1aa/0x2e0 [ 81.178434][ T4307] genl_rcv+0x24/0x40 [ 81.182767][ T4307] netlink_unicast+0x774/0x920 [ 81.187830][ T4307] netlink_sendmsg+0x8ba/0xbe0 [ 81.193098][ T4307] ? netlink_getsockopt+0x570/0x570 [ 81.198987][ T4307] ? aa_sock_msg_perm+0x94/0x150 [ 81.204261][ T4307] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 81.209565][ T4307] ? security_socket_sendmsg+0x7c/0xa0 [ 81.215508][ T4307] ? netlink_getsockopt+0x570/0x570 [ 81.220991][ T4307] ____sys_sendmsg+0x5b7/0x8f0 [ 81.225835][ T4307] ? __sys_sendmsg_sock+0x30/0x30 [ 81.231383][ T4307] ? import_iovec+0x6f/0xa0 [ 81.236580][ T4307] ___sys_sendmsg+0x236/0x2e0 [ 81.241785][ T4307] ? __sys_sendmsg+0x2a0/0x2a0 [ 81.246747][ T4307] __se_sys_sendmsg+0x1af/0x290 [ 81.251692][ T4307] ? __x64_sys_sendmsg+0x80/0x80 [ 81.256947][ T4307] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 81.263630][ T4307] ? lockdep_hardirqs_on+0x94/0x140 [ 81.269095][ T4307] do_syscall_64+0x4c/0xa0 [ 81.273876][ T4307] ? clear_bhb_loop+0x30/0x80 [ 81.278827][ T4307] ? clear_bhb_loop+0x30/0x80 [ 81.283777][ T4307] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.290657][ T4307] RIP: 0033:0x7f4c38689dd9 [ 81.295275][ T4307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.315620][ T4307] RSP: 002b:00007fff77825e68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.324601][ T4307] RAX: ffffffffffffffda RBX: 00007f4c38902fa0 RCX: 00007f4c38689dd9 [ 81.333174][ T4307] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 81.341697][ T4307] RBP: 00007f4c3871fd69 R08: 0000000000000000 R09: 0000000000000000 [ 81.349855][ T4307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.358337][ T4307] R13: 00007f4c38902fac R14: 00007f4c38902fa0 R15: 00007f4c38902fa0 [ 81.367325][ T4307] [ 81.373442][ T4204] Bluetooth: hci0: command 0x040f tx timeout [ 81.383649][ T4307] team0: Port device wlan1 removed