Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. [ 420.504377][ T945] chnl_net:caif_netlink_parms(): no params data found [ 420.539171][ T945] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.546367][ T945] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.554113][ T945] device bridge_slave_0 entered promiscuous mode [ 420.562043][ T945] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.569271][ T945] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.577011][ T945] device bridge_slave_1 entered promiscuous mode [ 420.596094][ T945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.606933][ T945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.627993][ T945] team0: Port device team_slave_0 added [ 420.635605][ T945] team0: Port device team_slave_1 added [ 420.652147][ T945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.659403][ T945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.685737][ T945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.698010][ T945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.705217][ T945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.731590][ T945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.758157][ T945] device hsr_slave_0 entered promiscuous mode [ 420.764858][ T945] device hsr_slave_1 entered promiscuous mode [ 421.228828][ T945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 421.240583][ T945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 421.251024][ T945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 421.262056][ T945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 421.286099][ T945] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.293221][ T945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.300584][ T945] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.307995][ T945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.358639][ T945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.374130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 421.384500][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.393883][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.404076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 421.418279][ T945] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.431076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 421.440791][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.447914][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.468499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 421.477305][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.484421][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.497016][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 421.507039][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 421.516548][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 421.534157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 421.544239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 421.560738][ T945] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 421.574178][ T945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.586361][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 421.597063][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 421.606054][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 421.616245][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.625291][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 421.647195][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 421.656293][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 421.669709][ T945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.691316][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 421.702135][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 421.725752][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 421.735042][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 421.744995][ T945] device veth0_vlan entered promiscuous mode [ 421.751902][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 421.761372][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 421.775724][ T945] device veth1_vlan entered promiscuous mode [ 421.800535][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 421.810523][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 421.819027][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 421.830068][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 421.841468][ T945] device veth0_macvtap entered promiscuous mode [ 421.853409][ T945] device veth1_macvtap entered promiscuous mode [ 421.871077][ T945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.883392][ T945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.890771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 421.900458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 421.908927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 421.919169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 421.928839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 421.938024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 421.951728][ T945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.961598][ T945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.971621][ T945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.981907][ T945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.065820][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.084397][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.102112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 422.116081][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.125382][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.134332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 422.153971][ T1022] netlink: 60 bytes leftover after parsing attributes in process `syz-executor371'. [ 422.177073][ T1022] device wlan1 entered promiscuous mode [ 422.197463][ T1022] team0: Port device wlan1 added [ 422.221849][ T1022] [ 422.224218][ T1022] ====================================================== [ 422.231311][ T1022] WARNING: possible circular locking dependency detected [ 422.238328][ T1022] syzkaller #0 Not tainted [ 422.242745][ T1022] ------------------------------------------------------ [ 422.249859][ T1022] syz-executor371/1022 is trying to acquire lock: [ 422.256279][ T1022] ffff88801f674d00 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x2d/0x1d0 [ 422.265858][ T1022] [ 422.265858][ T1022] but task is already holding lock: [ 422.273248][ T1022] ffff88801fc90688 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x11c/0x350 [ 422.283185][ T1022] [ 422.283185][ T1022] which lock already depends on the new lock. [ 422.283185][ T1022] [ 422.293773][ T1022] [ 422.293773][ T1022] the existing dependency chain (in reverse order) is: [ 422.303060][ T1022] [ 422.303060][ T1022] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 422.311011][ T1022] __mutex_lock_common+0x1e5/0x2400 [ 422.316869][ T1022] mutex_lock_nested+0x17/0x20 [ 422.322161][ T1022] ieee80211_open+0x140/0x200 [ 422.327461][ T1022] __dev_open+0x2bf/0x430 [ 422.332392][ T1022] dev_open+0xa7/0x180 [ 422.336980][ T1022] team_add_slave+0x656/0x2840 [ 422.342253][ T1022] do_setlink+0xe79/0x29d0 [ 422.347256][ T1022] rtnl_newlink+0x15bb/0x1920 [ 422.352605][ T1022] rtnetlink_rcv_msg+0x82c/0xf00 [ 422.358053][ T1022] netlink_rcv_skb+0x1e9/0x430 [ 422.363575][ T1022] netlink_unicast+0x78f/0x940 [ 422.368840][ T1022] netlink_sendmsg+0x8ba/0xbe0 [ 422.374101][ T1022] ____sys_sendmsg+0x5be/0x8f0 [ 422.379408][ T1022] ___sys_sendmsg+0x236/0x2e0 [ 422.384685][ T1022] __se_sys_sendmsg+0x1b7/0x2a0 [ 422.390301][ T1022] do_syscall_64+0x4c/0xa0 [ 422.395272][ T1022] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 422.401669][ T1022] [ 422.401669][ T1022] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 422.409640][ T1022] __lock_acquire+0x2c66/0x7b50 [ 422.415084][ T1022] lock_acquire+0x19e/0x400 [ 422.420099][ T1022] __mutex_lock_common+0x1e5/0x2400 [ 422.425798][ T1022] mutex_lock_nested+0x17/0x20 [ 422.431071][ T1022] team_del_slave+0x2d/0x1d0 [ 422.436164][ T1022] team_device_event+0x38e/0x9e0 [ 422.441810][ T1022] raw_notifier_call_chain+0xcb/0x160 [ 422.447930][ T1022] unregister_netdevice_many+0x109b/0x1a40 [ 422.454350][ T1022] unregister_netdevice_queue+0x2e1/0x320 [ 422.460566][ T1022] _cfg80211_unregister_wdev+0x181/0x500 [ 422.467891][ T1022] ieee80211_if_remove+0x1ad/0x2a0 [ 422.473644][ T1022] ieee80211_del_iface+0x15/0x20 [ 422.479206][ T1022] nl80211_del_interface+0x1ea/0x350 [ 422.485011][ T1022] genl_rcv_msg+0xd0b/0xfa0 [ 422.490025][ T1022] netlink_rcv_skb+0x1e9/0x430 [ 422.495287][ T1022] genl_rcv+0x24/0x40 [ 422.499800][ T1022] netlink_unicast+0x78f/0x940 [ 422.505327][ T1022] netlink_sendmsg+0x8ba/0xbe0 [ 422.510623][ T1022] ____sys_sendmsg+0x5be/0x8f0 [ 422.516105][ T1022] ___sys_sendmsg+0x236/0x2e0 [ 422.521279][ T1022] __se_sys_sendmsg+0x1b7/0x2a0 [ 422.526659][ T1022] do_syscall_64+0x4c/0xa0 [ 422.531673][ T1022] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 422.538194][ T1022] [ 422.538194][ T1022] other info that might help us debug this: [ 422.538194][ T1022] [ 422.548426][ T1022] Possible unsafe locking scenario: [ 422.548426][ T1022] [ 422.555858][ T1022] CPU0 CPU1 [ 422.561220][ T1022] ---- ---- [ 422.566566][ T1022] lock(&rdev->wiphy.mtx); [ 422.571047][ T1022] lock(team->team_lock_key); [ 422.578388][ T1022] lock(&rdev->wiphy.mtx); [ 422.585381][ T1022] lock(team->team_lock_key); [ 422.590116][ T1022] [ 422.590116][ T1022] *** DEADLOCK *** [ 422.590116][ T1022] [ 422.598345][ T1022] 3 locks held by syz-executor371/1022: [ 422.603899][ T1022] #0: ffffffff8d4a7d70 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 422.612086][ T1022] #1: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x28/0x540 [ 422.621381][ T1022] #2: ffff88801fc90688 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x11c/0x350 [ 422.631740][ T1022] [ 422.631740][ T1022] stack backtrace: [ 422.637637][ T1022] CPU: 0 PID: 1022 Comm: syz-executor371 Not tainted syzkaller #0 [ 422.645422][ T1022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 422.655477][ T1022] Call Trace: [ 422.658809][ T1022] [ 422.661761][ T1022] dump_stack_lvl+0x188/0x250 [ 422.666469][ T1022] ? load_image+0x410/0x410 [ 422.671003][ T1022] ? show_regs_print_info+0x20/0x20 [ 422.676189][ T1022] ? print_circular_bug+0x12b/0x1a0 [ 422.681366][ T1022] check_noncircular+0x296/0x330 [ 422.686307][ T1022] ? add_chain_block+0x9b0/0x9b0 [ 422.691306][ T1022] ? lockdep_lock+0xf1/0x1f0 [ 422.695891][ T1022] ? mark_lock+0x94/0x320 [ 422.700302][ T1022] ? _find_first_zero_bit+0xd1/0xf0 [ 422.705532][ T1022] __lock_acquire+0x2c66/0x7b50 [ 422.710373][ T1022] ? verify_lock_unused+0x140/0x140 [ 422.715579][ T1022] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 422.721543][ T1022] ? verify_lock_unused+0x140/0x140 [ 422.726728][ T1022] lock_acquire+0x19e/0x400 [ 422.731216][ T1022] ? team_del_slave+0x2d/0x1d0 [ 422.735962][ T1022] ? __might_sleep+0xf0/0xf0 [ 422.740760][ T1022] ? read_lock_is_recursive+0x10/0x10 [ 422.746127][ T1022] __mutex_lock_common+0x1e5/0x2400 [ 422.751400][ T1022] ? team_del_slave+0x2d/0x1d0 [ 422.756416][ T1022] ? __lock_acquire+0x7b50/0x7b50 [ 422.761546][ T1022] ? __mutex_lock_common+0x435/0x2400 [ 422.766907][ T1022] ? team_del_slave+0x2d/0x1d0 [ 422.771780][ T1022] ? __local_bh_enable_ip+0x136/0x1c0 [ 422.777198][ T1022] ? mutex_lock_io_nested+0x60/0x60 [ 422.782393][ T1022] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 422.788009][ T1022] ? memset+0x1e/0x40 [ 422.792099][ T1022] mutex_lock_nested+0x17/0x20 [ 422.796847][ T1022] team_del_slave+0x2d/0x1d0 [ 422.801420][ T1022] team_device_event+0x38e/0x9e0 [ 422.806432][ T1022] ? ipmr_device_event+0x1e1/0x200 [ 422.811701][ T1022] raw_notifier_call_chain+0xcb/0x160 [ 422.817318][ T1022] unregister_netdevice_many+0x109b/0x1a40 [ 422.823106][ T1022] ? alloc_netdev_mqs+0xc40/0xc40 [ 422.828125][ T1022] ? kernfs_remove_by_name_ns+0xd0/0x100 [ 422.833801][ T1022] ? __lock_acquire+0x7b50/0x7b50 [ 422.838805][ T1022] unregister_netdevice_queue+0x2e1/0x320 [ 422.844741][ T1022] ? list_netdevice+0x460/0x460 [ 422.849584][ T1022] ? up_write+0x1b6/0x410 [ 422.853902][ T1022] _cfg80211_unregister_wdev+0x181/0x500 [ 422.859517][ T1022] ieee80211_if_remove+0x1ad/0x2a0 [ 422.864604][ T1022] ieee80211_del_iface+0x15/0x20 [ 422.869520][ T1022] nl80211_del_interface+0x1ea/0x350 [ 422.874801][ T1022] genl_rcv_msg+0xd0b/0xfa0 [ 422.879282][ T1022] ? genl_bind+0x370/0x370 [ 422.883676][ T1022] ? __dev_queue_xmit+0x1b64/0x2e50 [ 422.888851][ T1022] ? verify_lock_unused+0x140/0x140 [ 422.894029][ T1022] ? dev_queue_xmit+0x20/0x20 [ 422.898683][ T1022] ? nl80211_new_interface+0xe90/0xe90 [ 422.904143][ T1022] netlink_rcv_skb+0x1e9/0x430 [ 422.908899][ T1022] ? genl_bind+0x370/0x370 [ 422.913300][ T1022] ? netlink_ack+0xb10/0xb10 [ 422.917957][ T1022] ? down_read+0x1aa/0x2e0 [ 422.922352][ T1022] genl_rcv+0x24/0x40 [ 422.926314][ T1022] netlink_unicast+0x78f/0x940 [ 422.931051][ T1022] netlink_sendmsg+0x8ba/0xbe0 [ 422.935789][ T1022] ? netlink_getsockopt+0x570/0x570 [ 422.940962][ T1022] ? __lock_acquire+0x13dc/0x7b50 [ 422.945965][ T1022] ? aa_sock_msg_perm+0x94/0x150 [ 422.950952][ T1022] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 422.956253][ T1022] ? security_socket_sendmsg+0x7c/0xa0 [ 422.961744][ T1022] ? netlink_getsockopt+0x570/0x570 [ 422.966937][ T1022] ____sys_sendmsg+0x5be/0x8f0 [ 422.971688][ T1022] ? __sys_sendmsg_sock+0x30/0x30 [ 422.976687][ T1022] ? import_iovec+0x6f/0xa0 [ 422.981257][ T1022] ___sys_sendmsg+0x236/0x2e0 [ 422.985912][ T1022] ? __sys_sendmsg+0x290/0x290 [ 422.990655][ T1022] __se_sys_sendmsg+0x1b7/0x2a0 [ 422.995493][ T1022] ? __x64_sys_sendmsg+0x80/0x80 [ 423.000405][ T1022] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 423.006366][ T1022] ? lockdep_hardirqs_on+0x94/0x140 [ 423.011601][ T1022] do_syscall_64+0x4c/0xa0 [ 423.016014][ T1022] ? clear_bhb_loop+0x30/0x80 [ 423.020809][ T1022] ? clear_bhb_loop+0x30/0x80 [ 423.025459][ T1022] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 423.031337][ T1022] RIP: 0033:0x7f6accf35d19 [ 423.035775][ T1022] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 423.055401][ T1022] RSP: 002b:00007ffcfbf8bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.063795][ T1022] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6accf35d19 [ 423.071745][ T1022] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000007 [ 423.079803][ T1022] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffcfbf8bd00 [ 423.087775][ T1022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000031 [ 423.095742][ T1022] R13: 0000000000000047 R14: 0000000000050012 R15: 0000000000000003 [ 423.103706][ T1022] [ 423.113983][ T1022] team0: Port device wlan1 removed