Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts. [ 81.608342][ T2858] cfg80211: failed to load regulatory.db 2026/10/05 18:53:59 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 86.172925][ T4537] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 87.821147][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.837550][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.855839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.880921][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.891685][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.900578][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.683407][ T4610] chnl_net:caif_netlink_parms(): no params data found [ 88.804659][ T4610] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.825568][ T4610] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.834046][ T4610] device bridge_slave_0 entered promiscuous mode [ 88.844494][ T4610] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.852577][ T4610] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.861108][ T4610] device bridge_slave_1 entered promiscuous mode [ 88.884540][ T4610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.909050][ T4610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.953842][ T4610] team0: Port device team_slave_0 added [ 88.979912][ T4610] team0: Port device team_slave_1 added [ 89.019350][ T4610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.026511][ T4610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.086761][ T4610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.118472][ T4610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.125933][ T4610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.163389][ T4610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.201398][ T4610] device hsr_slave_0 entered promiscuous mode [ 89.209760][ T4610] device hsr_slave_1 entered promiscuous mode [ 89.862484][ T4610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.873039][ T4610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.883050][ T4610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.894554][ T4610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.959440][ T4610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.993073][ T4610] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.001991][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.010607][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.027154][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.035972][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.046593][ T1404] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.053748][ T1404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.064823][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.074208][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.084093][ T1404] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.091352][ T1404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.101029][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.113438][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.121749][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.158784][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.171567][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.181064][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.191182][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.226919][ T4610] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.238815][ T4610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.251809][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.261079][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.270990][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.281098][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.291394][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.325058][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.416026][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.424465][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.459974][ T4610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.480217][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.489824][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.527485][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.537980][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.548445][ T4610] device veth0_vlan entered promiscuous mode [ 90.559191][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.567306][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.593013][ T4610] device veth1_vlan entered promiscuous mode [ 90.615867][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.626170][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.635439][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.645351][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.658117][ T4610] device veth0_macvtap entered promiscuous mode [ 90.681395][ T4610] device veth1_macvtap entered promiscuous mode [ 90.699742][ T4610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.709730][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.718699][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.727390][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.736033][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.752038][ T4610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.769549][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.781683][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.793474][ T4610] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.803067][ T4610] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.813268][ T4610] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.822328][ T4610] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.078687][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/10/05 18:54:08 executed programs: 0 [ 93.324103][ T4810] chnl_net:caif_netlink_parms(): no params data found [ 93.383486][ T4810] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.390742][ T4810] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.401173][ T4810] device bridge_slave_0 entered promiscuous mode [ 93.409954][ T4810] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.422368][ T4810] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.430637][ T4810] device bridge_slave_1 entered promiscuous mode [ 93.456577][ T4810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.470642][ T4810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.498510][ T4810] team0: Port device team_slave_0 added [ 93.509634][ T4810] team0: Port device team_slave_1 added [ 93.531680][ T4810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.538992][ T4810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.567777][ T4810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.581478][ T4810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.589760][ T4810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.618263][ T4810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.656021][ T4810] device hsr_slave_0 entered promiscuous mode [ 93.663072][ T4810] device hsr_slave_1 entered promiscuous mode [ 93.672221][ T4810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.681105][ T4810] Cannot create hsr debugfs directory [ 95.296883][ T2858] Bluetooth: hci0: command 0x0409 tx timeout [ 95.375661][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.422840][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.484303][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.322351][ T4810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.331614][ T4810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.344755][ T4810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.354198][ T4810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.409223][ T4810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.423692][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.432651][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.443726][ T4810] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.468198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.477269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.485739][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.492859][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.508692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.516578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.525845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.534625][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.542079][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.551462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.560937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.593916][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.603545][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.612580][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.623784][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.636802][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.644906][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.653602][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.680915][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.690034][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.700188][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.772539][ T9] device hsr_slave_0 left promiscuous mode [ 96.780241][ T9] device hsr_slave_1 left promiscuous mode [ 96.787278][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.794781][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.802932][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.810936][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.819068][ T9] device bridge_slave_1 left promiscuous mode [ 96.825473][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.834338][ T9] device bridge_slave_0 left promiscuous mode [ 96.840728][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.851962][ T9] device veth1_macvtap left promiscuous mode [ 96.858323][ T9] device veth0_macvtap left promiscuous mode [ 96.864386][ T9] device veth1_vlan left promiscuous mode [ 96.870268][ T9] device veth0_vlan left promiscuous mode [ 96.996635][ T9] team0 (unregistering): Port device team_slave_1 removed [ 97.014316][ T9] team0 (unregistering): Port device team_slave_0 removed [ 97.026211][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.041267][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.092327][ T9] bond0 (unregistering): Released all slaves [ 97.110405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.117928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.130767][ T4810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.149669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.161530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.182288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.190775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.200025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.209576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.219529][ T4810] device veth0_vlan entered promiscuous mode [ 97.239226][ T4810] device veth1_vlan entered promiscuous mode [ 97.255764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.263993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.273160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.281830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.293055][ T4810] device veth0_macvtap entered promiscuous mode [ 97.305716][ T4810] device veth1_macvtap entered promiscuous mode [ 97.321070][ T4810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.330463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.338834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.347278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.356244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.366203][ T4810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.373972][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 97.376561][ T4810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.389529][ T4810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.398543][ T4810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.407593][ T4810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.421358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.430098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.480598][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.489531][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.498842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.520097][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.530438][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.539537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.603556][ T5038] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17'. [ 97.620998][ T5038] device wlan1 entered promiscuous mode [ 97.641225][ T5038] team0: Port device wlan1 added [ 97.665160][ T5038] [ 97.667533][ T5038] ====================================================== [ 97.674724][ T5038] WARNING: possible circular locking dependency detected [ 97.681742][ T5038] syzkaller #0 Not tainted [ 97.686155][ T5038] ------------------------------------------------------ [ 97.693699][ T5038] syz.0.17/5038 is trying to acquire lock: [ 97.699508][ T5038] ffff888076e4cd00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x2d/0x1d0 [ 97.709106][ T5038] [ 97.709106][ T5038] but task is already holding lock: [ 97.716485][ T5038] ffff88807b010688 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x11c/0x350 [ 97.726509][ T5038] [ 97.726509][ T5038] which lock already depends on the new lock. [ 97.726509][ T5038] [ 97.736941][ T5038] [ 97.736941][ T5038] the existing dependency chain (in reverse order) is: [ 97.745961][ T5038] [ 97.745961][ T5038] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 97.753708][ T5038] __mutex_lock_common+0x1e5/0x2400 [ 97.759456][ T5038] mutex_lock_nested+0x17/0x20 [ 97.764923][ T5038] ieee80211_open+0x140/0x200 [ 97.770208][ T5038] __dev_open+0x2bf/0x430 [ 97.775061][ T5038] dev_open+0xa7/0x180 [ 97.779655][ T5038] team_add_slave+0x656/0x2840 [ 97.784951][ T5038] do_setlink+0xe79/0x29d0 [ 97.789904][ T5038] rtnl_newlink+0x15bb/0x1920 [ 97.795208][ T5038] rtnetlink_rcv_msg+0x7f1/0xf10 [ 97.800706][ T5038] netlink_rcv_skb+0x1e9/0x430 [ 97.805993][ T5038] netlink_unicast+0x78f/0x940 [ 97.811283][ T5038] netlink_sendmsg+0x8ba/0xbe0 [ 97.816683][ T5038] ____sys_sendmsg+0x5be/0x8f0 [ 97.822049][ T5038] ___sys_sendmsg+0x236/0x2e0 [ 97.827330][ T5038] __se_sys_sendmsg+0x1b7/0x2a0 [ 97.832788][ T5038] do_syscall_64+0x4c/0xa0 [ 97.837723][ T5038] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.844149][ T5038] [ 97.844149][ T5038] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 97.852321][ T5038] __lock_acquire+0x38f7/0x7d40 [ 97.857717][ T5038] lock_acquire+0x19f/0x400 [ 97.862728][ T5038] __mutex_lock_common+0x1e5/0x2400 [ 97.868430][ T5038] mutex_lock_nested+0x17/0x20 [ 97.873787][ T5038] team_del_slave+0x2d/0x1d0 [ 97.878878][ T5038] team_device_event+0x38e/0x9e0 [ 97.884322][ T5038] raw_notifier_call_chain+0xcb/0x160 [ 97.890420][ T5038] unregister_netdevice_many+0x109b/0x1a40 [ 97.896888][ T5038] unregister_netdevice_queue+0x2e1/0x320 [ 97.903133][ T5038] _cfg80211_unregister_wdev+0x181/0x500 [ 97.909278][ T5038] ieee80211_if_remove+0x1ad/0x2a0 [ 97.915335][ T5038] ieee80211_del_iface+0x15/0x20 [ 97.920874][ T5038] nl80211_del_interface+0x1ea/0x350 [ 97.926762][ T5038] genl_rcv_msg+0xd0b/0xfa0 [ 97.931844][ T5038] netlink_rcv_skb+0x1e9/0x430 [ 97.937115][ T5038] genl_rcv+0x24/0x40 [ 97.941695][ T5038] netlink_unicast+0x78f/0x940 [ 97.947223][ T5038] netlink_sendmsg+0x8ba/0xbe0 [ 97.952505][ T5038] ____sys_sendmsg+0x5be/0x8f0 [ 97.957853][ T5038] ___sys_sendmsg+0x236/0x2e0 [ 97.963163][ T5038] __se_sys_sendmsg+0x1b7/0x2a0 [ 97.968638][ T5038] do_syscall_64+0x4c/0xa0 [ 97.973563][ T5038] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.980049][ T5038] [ 97.980049][ T5038] other info that might help us debug this: [ 97.980049][ T5038] [ 97.990449][ T5038] Possible unsafe locking scenario: [ 97.990449][ T5038] [ 97.997897][ T5038] CPU0 CPU1 [ 98.003277][ T5038] ---- ---- [ 98.008800][ T5038] lock(&rdev->wiphy.mtx); [ 98.013306][ T5038] lock(team->team_lock_key#2); [ 98.020872][ T5038] lock(&rdev->wiphy.mtx); [ 98.028352][ T5038] lock(team->team_lock_key#2); [ 98.033280][ T5038] [ 98.033280][ T5038] *** DEADLOCK *** [ 98.033280][ T5038] [ 98.041686][ T5038] 3 locks held by syz.0.17/5038: [ 98.046624][ T5038] #0: ffffffff8d4aa890 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 98.054961][ T5038] #1: ffffffff8d44d808 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x28/0x540 [ 98.064182][ T5038] #2: ffff88807b010688 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x11c/0x350 [ 98.074512][ T5038] [ 98.074512][ T5038] stack backtrace: [ 98.080488][ T5038] CPU: 1 PID: 5038 Comm: syz.0.17 Not tainted syzkaller #0 [ 98.087769][ T5038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.097921][ T5038] Call Trace: [ 98.101286][ T5038] [ 98.104295][ T5038] dump_stack_lvl+0x188/0x250 [ 98.109059][ T5038] ? load_image+0x410/0x410 [ 98.113542][ T5038] ? show_regs_print_info+0x20/0x20 [ 98.118721][ T5038] ? print_circular_bug+0x12b/0x1a0 [ 98.123975][ T5038] check_noncircular+0x2f8/0x400 [ 98.128906][ T5038] ? print_deadlock_bug+0x5d0/0x5d0 [ 98.134173][ T5038] ? lockdep_lock+0xf1/0x1f0 [ 98.138935][ T5038] ? mark_lock+0x94/0x320 [ 98.143339][ T5038] ? _find_first_zero_bit+0xd1/0xf0 [ 98.148523][ T5038] __lock_acquire+0x38f7/0x7d40 [ 98.153379][ T5038] ? verify_lock_unused+0x140/0x140 [ 98.158574][ T5038] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 98.164554][ T5038] ? verify_lock_unused+0x140/0x140 [ 98.170005][ T5038] lock_acquire+0x19f/0x400 [ 98.174535][ T5038] ? team_del_slave+0x2d/0x1d0 [ 98.179379][ T5038] ? __might_sleep+0xf0/0xf0 [ 98.184138][ T5038] ? read_lock_is_recursive+0x10/0x10 [ 98.189514][ T5038] __mutex_lock_common+0x1e5/0x2400 [ 98.194710][ T5038] ? team_del_slave+0x2d/0x1d0 [ 98.199476][ T5038] ? __lock_acquire+0x7d40/0x7d40 [ 98.204490][ T5038] ? __mutex_lock_common+0x435/0x2400 [ 98.209853][ T5038] ? team_del_slave+0x2d/0x1d0 [ 98.214707][ T5038] ? __local_bh_enable_ip+0x136/0x1c0 [ 98.220077][ T5038] ? mutex_lock_io_nested+0x60/0x60 [ 98.225403][ T5038] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 98.231038][ T5038] ? memset+0x1e/0x40 [ 98.235032][ T5038] mutex_lock_nested+0x17/0x20 [ 98.239788][ T5038] team_del_slave+0x2d/0x1d0 [ 98.244665][ T5038] team_device_event+0x38e/0x9e0 [ 98.249684][ T5038] ? ipmr_device_event+0x1e1/0x200 [ 98.254926][ T5038] raw_notifier_call_chain+0xcb/0x160 [ 98.260579][ T5038] unregister_netdevice_many+0x109b/0x1a40 [ 98.266600][ T5038] ? alloc_netdev_mqs+0xc40/0xc40 [ 98.271892][ T5038] ? kernfs_remove_by_name_ns+0xd0/0x100 [ 98.277637][ T5038] ? __lock_acquire+0x7d40/0x7d40 [ 98.282683][ T5038] unregister_netdevice_queue+0x2e1/0x320 [ 98.288507][ T5038] ? list_netdevice+0x460/0x460 [ 98.293633][ T5038] ? up_write+0x1b6/0x410 [ 98.298091][ T5038] _cfg80211_unregister_wdev+0x181/0x500 [ 98.303747][ T5038] ieee80211_if_remove+0x1ad/0x2a0 [ 98.308957][ T5038] ieee80211_del_iface+0x15/0x20 [ 98.313904][ T5038] nl80211_del_interface+0x1ea/0x350 [ 98.319188][ T5038] genl_rcv_msg+0xd0b/0xfa0 [ 98.323833][ T5038] ? genl_bind+0x370/0x370 [ 98.328268][ T5038] ? __dev_queue_xmit+0x1b64/0x2e50 [ 98.333455][ T5038] ? verify_lock_unused+0x140/0x140 [ 98.338656][ T5038] ? dev_queue_xmit+0x20/0x20 [ 98.343432][ T5038] ? nl80211_new_interface+0xe90/0xe90 [ 98.348924][ T5038] netlink_rcv_skb+0x1e9/0x430 [ 98.353695][ T5038] ? genl_bind+0x370/0x370 [ 98.358179][ T5038] ? netlink_ack+0xb10/0xb10 [ 98.362762][ T5038] ? down_read+0x1aa/0x2e0 [ 98.367285][ T5038] genl_rcv+0x24/0x40 [ 98.371480][ T5038] netlink_unicast+0x78f/0x940 [ 98.376233][ T5038] netlink_sendmsg+0x8ba/0xbe0 [ 98.381067][ T5038] ? netlink_getsockopt+0x570/0x570 [ 98.386616][ T5038] ? aa_sock_msg_perm+0x94/0x150 [ 98.391562][ T5038] ? apparmor_socket_sendmsg+0x88/0x230 [ 98.397098][ T5038] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 98.402714][ T5038] ? security_socket_sendmsg+0x7c/0xa0 [ 98.408183][ T5038] ? netlink_getsockopt+0x570/0x570 [ 98.413374][ T5038] ____sys_sendmsg+0x5be/0x8f0 [ 98.418129][ T5038] ? __sys_sendmsg_sock+0x30/0x30 [ 98.423153][ T5038] ? import_iovec+0x6f/0xa0 [ 98.427808][ T5038] ___sys_sendmsg+0x236/0x2e0 [ 98.432800][ T5038] ? __sys_sendmsg+0x290/0x290 [ 98.437664][ T5038] __se_sys_sendmsg+0x1b7/0x2a0 [ 98.442501][ T5038] ? __x64_sys_sendmsg+0x80/0x80 [ 98.447441][ T5038] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 98.453421][ T5038] ? lockdep_hardirqs_on+0x94/0x140 [ 98.458708][ T5038] do_syscall_64+0x4c/0xa0 [ 98.463113][ T5038] ? clear_bhb_loop+0x30/0x80 [ 98.467777][ T5038] ? clear_bhb_loop+0x30/0x80 [ 98.472453][ T5038] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.478359][ T5038] RIP: 0033:0x7f26a52d6dd9 [ 98.482767][ T5038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.502355][ T5038] RSP: 002b:00007f26a4938028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.510759][ T5038] RAX: ffffffffffffffda RBX: 00007f26a554ffa0 RCX: 00007f26a52d6dd9 [ 98.518730][ T5038] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 98.526686][ T5038] RBP: 00007f26a536cd69 R08: 0000000000000000 R09: 0000000000000000 [ 98.534678][ T5038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.542729][ T5038] R13: 00007f26a5550038 R14: 00007f26a554ffa0 R15: 00007ffd1d6c9708 [ 98.550702][ T5038] [ 98.558965][ T5038] team0: Port device wlan1 removed 2026/10/05 18:54:14 executed programs: 3 [ 99.446956][ T4328] Bluetooth: hci0: command 0x040f tx timeout [ 101.526798][ T23] Bluetooth: hci0: command 0x0419 tx timeout 2026/10/05 18:54:19 executed programs: 111