Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. 1970/01/01 00:00:59 ignoring optional flag "type"="gce" 1970/01/01 00:01:00 parsed 1 programs [ 61.493822][ T4406] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 64.312041][ T4473] chnl_net:caif_netlink_parms(): no params data found [ 64.328158][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.329448][ T4473] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.330963][ T4473] device bridge_slave_0 entered promiscuous mode [ 64.332849][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.334425][ T4473] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.335954][ T4473] device bridge_slave_1 entered promiscuous mode [ 64.343571][ T4473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.346206][ T4473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.353267][ T4473] team0: Port device team_slave_0 added [ 64.355334][ T4473] team0: Port device team_slave_1 added [ 64.361850][ T4473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.362983][ T4473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.367462][ T4473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.369667][ T4473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.370769][ T4473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.375142][ T4473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.414971][ T4473] device hsr_slave_0 entered promiscuous mode [ 64.474135][ T4473] device hsr_slave_1 entered promiscuous mode [ 65.048707][ T4473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.085232][ T4473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.115108][ T4473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.145010][ T4473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.191064][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.192303][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.193569][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.194800][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.210877][ T4473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.214650][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.216801][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.218328][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.220152][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 65.223851][ T4473] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.230865][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.232376][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.233488][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.235383][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.236733][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.237874][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.243076][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.245241][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.251332][ T4473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.253011][ T4473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.257142][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.258776][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.260358][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.261903][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.306859][ T4473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.316076][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.317358][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.318651][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.322683][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.324519][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.327318][ T4473] device veth0_vlan entered promiscuous mode [ 65.328699][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.330120][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.333502][ T4473] device veth1_vlan entered promiscuous mode [ 65.341270][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.342697][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.345288][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.346920][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.349564][ T4473] device veth0_macvtap entered promiscuous mode [ 65.351869][ T4473] device veth1_macvtap entered promiscuous mode [ 65.358882][ T4473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.360161][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.361666][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.363074][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.370368][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.373527][ T4473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.376261][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.377783][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.380515][ T4473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.381876][ T4473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.383232][ T4473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.385298][ T4473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.687756][ T368] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.711590][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.712992][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.715162][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.725975][ T1606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.727272][ T1606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.728832][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.666771][ T368] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.605361][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.605868][ T1969] cfg80211: failed to load regulatory.db [ 69.606450][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.136762][ T368] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.177215][ T368] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:11 executed programs: 0 [ 71.613689][ T4910] chnl_net:caif_netlink_parms(): no params data found [ 71.647640][ T4910] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.648997][ T4910] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.650958][ T4910] device bridge_slave_0 entered promiscuous mode [ 71.652991][ T4910] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.655815][ T4910] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.657383][ T4910] device bridge_slave_1 entered promiscuous mode [ 71.665417][ T4910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.669548][ T4910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.680393][ T4910] team0: Port device team_slave_0 added [ 71.682288][ T4910] team0: Port device team_slave_1 added [ 71.689391][ T4910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.690578][ T4910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.696194][ T4910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.698559][ T4910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.699689][ T4910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.703519][ T4910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.736466][ T4910] device hsr_slave_0 entered promiscuous mode [ 71.784240][ T4910] device hsr_slave_1 entered promiscuous mode [ 71.824087][ T4910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.825285][ T4910] Cannot create hsr debugfs directory [ 72.282452][ T4910] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.299585][ T4910] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.375525][ T4910] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.435602][ T4910] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.477805][ T4910] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.479024][ T4910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.480275][ T4910] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.481446][ T4910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.496236][ T368] device hsr_slave_0 left promiscuous mode [ 72.544233][ T368] device hsr_slave_1 left promiscuous mode [ 72.604048][ T368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.605281][ T368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.606904][ T368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.608105][ T368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.609467][ T368] device bridge_slave_1 left promiscuous mode [ 72.610432][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.654552][ T368] device bridge_slave_0 left promiscuous mode [ 72.655564][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.824111][ T368] device veth1_macvtap left promiscuous mode [ 72.825200][ T368] device veth0_macvtap left promiscuous mode [ 72.826169][ T368] device veth1_vlan left promiscuous mode [ 72.827107][ T368] device veth0_vlan left promiscuous mode [ 72.910326][ T368] team0 (unregistering): Port device team_slave_1 removed [ 72.915003][ T368] team0 (unregistering): Port device team_slave_0 removed [ 72.918740][ T368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.947110][ T368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.037468][ T368] bond0 (unregistering): Released all slaves [ 73.116417][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.117907][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.127440][ T4910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.131425][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.132923][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.136513][ T4910] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.141484][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.143111][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.146298][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.147512][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.153617][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.156028][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.157495][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.158637][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.160064][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.164321][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.168189][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.170226][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.171962][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.178061][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.179786][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.187197][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.188751][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.190419][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.193075][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.196462][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.239069][ T4910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.246563][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.247771][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.248958][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.250419][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.257071][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.258680][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.260387][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.262045][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.265582][ T4910] device veth0_vlan entered promiscuous mode [ 73.269102][ T4910] device veth1_vlan entered promiscuous mode [ 73.277833][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.279274][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.280741][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.282276][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.286583][ T4910] device veth0_macvtap entered promiscuous mode [ 73.288967][ T4910] device veth1_macvtap entered promiscuous mode [ 73.294925][ T4910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.296224][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.297588][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.299021][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.300556][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.305396][ T4910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.306669][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.308097][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.310764][ T4910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.312126][ T4910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.313381][ T4910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.315205][ T4910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.340198][ T417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.341587][ T417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.346846][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.350295][ T5030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.351583][ T5030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.353144][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.367554][ T5062] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15'. [ 73.405741][ T5062] device wlan1 entered promiscuous mode [ 73.412042][ T5062] team0: Port device wlan1 added [ 73.475810][ T5062] [ 73.476200][ T5062] ====================================================== [ 73.477373][ T5062] WARNING: possible circular locking dependency detected [ 73.478548][ T5062] syzkaller #0 Not tainted [ 73.479217][ T5062] ------------------------------------------------------ [ 73.480333][ T5062] syz.0.15/5062 is trying to acquire lock: [ 73.481255][ T5062] ffff0000ce48cd00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x30/0x194 [ 73.482769][ T5062] [ 73.482769][ T5062] but task is already holding lock: [ 73.484031][ T5062] ffff0000d9598628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x100/0x5d8 [ 73.485709][ T5062] [ 73.485709][ T5062] which lock already depends on the new lock. [ 73.485709][ T5062] [ 73.487423][ T5062] [ 73.487423][ T5062] the existing dependency chain (in reverse order) is: [ 73.488908][ T5062] [ 73.488908][ T5062] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 73.490153][ T5062] __mutex_lock_common+0x194/0x1edc [ 73.491077][ T5062] mutex_lock_nested+0xac/0x11c [ 73.491949][ T5062] ieee80211_open+0x13c/0x1e0 [ 73.492822][ T5062] __dev_open+0x2f4/0x4e8 [ 73.493635][ T5062] dev_open+0xa8/0x218 [ 73.494429][ T5062] team_add_slave+0x778/0x1f4c [ 73.495352][ T5062] do_setlink+0xb78/0x3088 [ 73.496186][ T5062] rtnl_newlink+0x10d0/0x1404 [ 73.497083][ T5062] rtnetlink_rcv_msg+0x9d4/0xd04 [ 73.497958][ T5062] netlink_rcv_skb+0x208/0x3c4 [ 73.498853][ T5062] rtnetlink_rcv+0x28/0x38 [ 73.499712][ T5062] netlink_unicast+0x624/0x8b0 [ 73.500553][ T5062] netlink_sendmsg+0x6e8/0x9cc [ 73.501399][ T5062] ____sys_sendmsg+0x61c/0x920 [ 73.502125][ T5062] ___sys_sendmsg+0x1d0/0x240 [ 73.502874][ T5062] __arm64_sys_sendmsg+0x1a8/0x254 [ 73.503863][ T5062] invoke_syscall+0x98/0x2b8 [ 73.504690][ T5062] el0_svc_common+0x138/0x258 [ 73.505528][ T5062] do_el0_svc+0x58/0x14c [ 73.506361][ T5062] el0_svc+0x78/0x1e0 [ 73.507145][ T5062] el0t_64_sync_handler+0xcc/0xe4 [ 73.508101][ T5062] el0t_64_sync+0x1a0/0x1a4 [ 73.508951][ T5062] [ 73.508951][ T5062] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 73.510319][ T5062] __lock_acquire+0x2928/0x651c [ 73.511270][ T5062] lock_acquire+0x1f4/0x620 [ 73.512119][ T5062] __mutex_lock_common+0x194/0x1edc [ 73.512962][ T5062] mutex_lock_nested+0xac/0x11c [ 73.513893][ T5062] team_del_slave+0x30/0x194 [ 73.514788][ T5062] team_device_event+0x270/0x970 [ 73.515712][ T5062] raw_notifier_call_chain+0xd4/0x164 [ 73.516724][ T5062] unregister_netdevice_many+0xe10/0x17d0 [ 73.517836][ T5062] unregister_netdevice_queue+0x2ac/0x2f8 [ 73.518880][ T5062] _cfg80211_unregister_wdev+0x160/0x4a0 [ 73.519840][ T5062] cfg80211_unregister_wdev+0x24/0x34 [ 73.520832][ T5062] ieee80211_if_remove+0x1a4/0x294 [ 73.521799][ T5062] ieee80211_del_iface+0x20/0x34 [ 73.522662][ T5062] nl80211_del_interface+0x1d8/0x5d8 [ 73.523681][ T5062] genl_rcv_msg+0x8b4/0xb6c [ 73.524574][ T5062] netlink_rcv_skb+0x208/0x3c4 [ 73.525445][ T5062] genl_rcv+0x38/0x50 [ 73.526169][ T5062] netlink_unicast+0x624/0x8b0 [ 73.527003][ T5062] netlink_sendmsg+0x6e8/0x9cc [ 73.527803][ T5062] ____sys_sendmsg+0x61c/0x920 [ 73.528611][ T5062] ___sys_sendmsg+0x1d0/0x240 [ 73.529483][ T5062] __arm64_sys_sendmsg+0x1a8/0x254 [ 73.530467][ T5062] invoke_syscall+0x98/0x2b8 [ 73.531320][ T5062] el0_svc_common+0x138/0x258 [ 73.532152][ T5062] do_el0_svc+0x58/0x14c [ 73.532836][ T5062] el0_svc+0x78/0x1e0 [ 73.533616][ T5062] el0t_64_sync_handler+0xcc/0xe4 [ 73.534607][ T5062] el0t_64_sync+0x1a0/0x1a4 [ 73.535435][ T5062] [ 73.535435][ T5062] other info that might help us debug this: [ 73.535435][ T5062] [ 73.537015][ T5062] Possible unsafe locking scenario: [ 73.537015][ T5062] [ 73.538192][ T5062] CPU0 CPU1 [ 73.539063][ T5062] ---- ---- [ 73.539922][ T5062] lock(&rdev->wiphy.mtx); [ 73.540581][ T5062] lock(team->team_lock_key#2); [ 73.541708][ T5062] lock(&rdev->wiphy.mtx); [ 73.542955][ T5062] lock(team->team_lock_key#2); [ 73.543790][ T5062] [ 73.543790][ T5062] *** DEADLOCK *** [ 73.543790][ T5062] [ 73.545181][ T5062] 3 locks held by syz.0.15/5062: [ 73.546032][ T5062] #0: ffff800016309a30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 73.547433][ T5062] #1: ffff8000162ae5a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 73.548813][ T5062] #2: ffff0000d9598628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x100/0x5d8 [ 73.550432][ T5062] [ 73.550432][ T5062] stack backtrace: [ 73.551492][ T5062] CPU: 0 PID: 5062 Comm: syz.0.15 Not tainted syzkaller #0 [ 73.552548][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 73.554154][ T5062] Call trace: [ 73.554654][ T5062] dump_backtrace+0x0/0x43c [ 73.555377][ T5062] show_stack+0x2c/0x3c [ 73.556038][ T5062] __dump_stack+0x30/0x40 [ 73.556769][ T5062] dump_stack_lvl+0xf8/0x160 [ 73.557554][ T5062] dump_stack+0x1c/0x5c [ 73.558190][ T5062] print_circular_bug+0x148/0x1b0 [ 73.559034][ T5062] check_noncircular+0x240/0x2d4 [ 73.559889][ T5062] __lock_acquire+0x2928/0x651c [ 73.560689][ T5062] lock_acquire+0x1f4/0x620 [ 73.561462][ T5062] __mutex_lock_common+0x194/0x1edc [ 73.562339][ T5062] mutex_lock_nested+0xac/0x11c [ 73.563163][ T5062] team_del_slave+0x30/0x194 [ 73.563949][ T5062] team_device_event+0x270/0x970 [ 73.564802][ T5062] raw_notifier_call_chain+0xd4/0x164 [ 73.565733][ T5062] unregister_netdevice_many+0xe10/0x17d0 [ 73.566652][ T5062] unregister_netdevice_queue+0x2ac/0x2f8 [ 73.567621][ T5062] _cfg80211_unregister_wdev+0x160/0x4a0 [ 73.568587][ T5062] cfg80211_unregister_wdev+0x24/0x34 [ 73.569447][ T5062] ieee80211_if_remove+0x1a4/0x294 [ 73.570287][ T5062] ieee80211_del_iface+0x20/0x34 [ 73.571068][ T5062] nl80211_del_interface+0x1d8/0x5d8 [ 73.571902][ T5062] genl_rcv_msg+0x8b4/0xb6c [ 73.572652][ T5062] netlink_rcv_skb+0x208/0x3c4 [ 73.573424][ T5062] genl_rcv+0x38/0x50 [ 73.574077][ T5062] netlink_unicast+0x624/0x8b0 [ 73.574899][ T5062] netlink_sendmsg+0x6e8/0x9cc [ 73.575669][ T5062] ____sys_sendmsg+0x61c/0x920 [ 73.576453][ T5062] ___sys_sendmsg+0x1d0/0x240 [ 73.577230][ T5062] __arm64_sys_sendmsg+0x1a8/0x254 [ 73.578078][ T5062] invoke_syscall+0x98/0x2b8 [ 73.578821][ T5062] el0_svc_common+0x138/0x258 [ 73.579605][ T5062] do_el0_svc+0x58/0x14c [ 73.580295][ T5062] el0_svc+0x78/0x1e0 [ 73.580903][ T5062] el0t_64_sync_handler+0xcc/0xe4 [ 73.581710][ T5062] el0t_64_sync+0x1a0/0x1a4 [ 73.583472][ T5062] team0: Port device wlan1 removed [ 73.604058][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 75.684168][ T1969] Bluetooth: hci0: command 0x041b tx timeout 1970/01/01 00:01:16 executed programs: 106 [ 77.764189][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 79.844042][ T1969] Bluetooth: hci0: command 0x0419 tx timeout 1970/01/01 00:01:21 executed programs: 268