[ 424.305898][ T6790] device hsr_slave_0 left promiscuous mode [ 424.314499][ T6790] device hsr_slave_1 left promiscuous mode [ 424.320954][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.328887][ T6790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.338017][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.346742][ T6790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.355788][ T6790] device bridge_slave_1 left promiscuous mode [ 424.362486][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.370595][ T6790] device bridge_slave_0 left promiscuous mode [ 424.376856][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.387447][ T6790] device veth1_macvtap left promiscuous mode [ 424.393799][ T6790] device veth0_macvtap left promiscuous mode [ 424.399848][ T6790] device veth1_vlan left promiscuous mode [ 424.405902][ T6790] device veth0_vlan left promiscuous mode [ 424.508736][ T6790] team0 (unregistering): Port device team_slave_1 removed [ 424.520200][ T6790] team0 (unregistering): Port device team_slave_0 removed [ 424.530818][ T6790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.543181][ T6790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.586872][ T6790] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. [ 429.086482][ T847] chnl_net:caif_netlink_parms(): no params data found [ 429.121161][ T847] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.128562][ T847] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.136446][ T847] device bridge_slave_0 entered promiscuous mode [ 429.144286][ T847] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.151361][ T847] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.159450][ T847] device bridge_slave_1 entered promiscuous mode [ 429.177960][ T847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.188705][ T847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.209737][ T847] team0: Port device team_slave_0 added [ 429.216825][ T847] team0: Port device team_slave_1 added [ 429.232846][ T847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.239802][ T847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.266050][ T847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.278431][ T847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.285634][ T847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.311778][ T847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.337975][ T847] device hsr_slave_0 entered promiscuous mode [ 429.344756][ T847] device hsr_slave_1 entered promiscuous mode [ 429.724259][ T847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 429.734139][ T847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 429.744037][ T847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 429.754237][ T847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 429.781447][ T847] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.788569][ T847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.796045][ T847] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.803141][ T847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.851431][ T847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.866079][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 429.875639][ T591] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.883956][ T591] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.892427][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 429.906709][ T847] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.917956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 429.926491][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.933596][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.945524][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 429.954156][ T591] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.961227][ T591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.983859][ T6790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 429.993751][ T6790] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 430.005985][ T6790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 430.022477][ T6790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 430.034051][ T847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.046341][ T847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 430.055422][ T6790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.074490][ T6790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 430.082907][ T6790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 430.095891][ T847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.115554][ T6790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 430.126807][ T6790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 430.146686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 430.155304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 430.164060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 430.172391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 430.181401][ T847] device veth0_vlan entered promiscuous mode [ 430.194450][ T847] device veth1_vlan entered promiscuous mode [ 430.218575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 430.227415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 430.235983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 430.246552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 430.258310][ T847] device veth0_macvtap entered promiscuous mode [ 430.270588][ T847] device veth1_macvtap entered promiscuous mode [ 430.288466][ T847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.297102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 430.307126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 430.315851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 430.326282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 430.344103][ T847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.353048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 430.362810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 430.374737][ T847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.384600][ T847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.393670][ T847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.402661][ T847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.470575][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.484524][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.500265][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 430.517307][ T591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.525774][ T591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.537121][ T6790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 430.554903][ T921] netlink: 60 bytes leftover after parsing attributes in process `syz-executor250'. [ 430.576496][ T921] device wlan1 entered promiscuous mode [ 430.598125][ T921] team0: Port device wlan1 added [ 430.620161][ T921] [ 430.622510][ T921] ====================================================== [ 430.629518][ T921] WARNING: possible circular locking dependency detected [ 430.636538][ T921] syzkaller #0 Not tainted [ 430.640946][ T921] ------------------------------------------------------ [ 430.647952][ T921] syz-executor250/921 is trying to acquire lock: [ 430.654268][ T921] ffff888079e24d00 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x2e/0x1e0 [ 430.663684][ T921] [ 430.663684][ T921] but task is already holding lock: [ 430.671510][ T921] ffff888074680628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x11c/0x350 [ 430.681341][ T921] [ 430.681341][ T921] which lock already depends on the new lock. [ 430.681341][ T921] [ 430.691730][ T921] [ 430.691730][ T921] the existing dependency chain (in reverse order) is: [ 430.700717][ T921] [ 430.700717][ T921] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 430.708418][ T921] __mutex_lock_common+0x1eb/0x2390 [ 430.714128][ T921] mutex_lock_nested+0x17/0x20 [ 430.719393][ T921] ieee80211_open+0x140/0x200 [ 430.724593][ T921] __dev_open+0x2b0/0x420 [ 430.729449][ T921] dev_open+0xa7/0x170 [ 430.734026][ T921] team_add_slave+0xa27/0x2660 [ 430.739291][ T921] do_setlink+0xd84/0x3980 [ 430.744230][ T921] rtnl_newlink+0x1419/0x17d0 [ 430.749403][ T921] rtnetlink_rcv_msg+0x9b9/0xe60 [ 430.754834][ T921] netlink_rcv_skb+0x1e0/0x430 [ 430.760094][ T921] netlink_unicast+0x774/0x920 [ 430.765349][ T921] netlink_sendmsg+0x8ab/0xbc0 [ 430.770628][ T921] ____sys_sendmsg+0x5a2/0x8c0 [ 430.775912][ T921] ___sys_sendmsg+0x1f0/0x260 [ 430.781265][ T921] __se_sys_sendmsg+0x190/0x250 [ 430.786717][ T921] do_syscall_64+0x4c/0xa0 [ 430.791640][ T921] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 430.798041][ T921] [ 430.798041][ T921] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 430.806000][ T921] __lock_acquire+0x2c33/0x7c60 [ 430.811354][ T921] lock_acquire+0x197/0x3f0 [ 430.816356][ T921] __mutex_lock_common+0x1eb/0x2390 [ 430.822051][ T921] mutex_lock_nested+0x17/0x20 [ 430.827321][ T921] team_del_slave+0x2e/0x1e0 [ 430.832410][ T921] team_device_event+0x38f/0x9e0 [ 430.837842][ T921] raw_notifier_call_chain+0xcb/0x160 [ 430.843719][ T921] unregister_netdevice_many+0xf57/0x18f0 [ 430.849947][ T921] unregister_netdevice_queue+0x31c/0x360 [ 430.856155][ T921] _cfg80211_unregister_wdev+0x186/0x500 [ 430.862283][ T921] ieee80211_if_remove+0x1bd/0x2b0 [ 430.867888][ T921] ieee80211_del_iface+0x15/0x20 [ 430.873319][ T921] nl80211_del_interface+0x1ea/0x350 [ 430.879099][ T921] genl_rcv_msg+0xbc6/0xf40 [ 430.884092][ T921] netlink_rcv_skb+0x1e0/0x430 [ 430.889372][ T921] genl_rcv+0x24/0x40 [ 430.893847][ T921] netlink_unicast+0x774/0x920 [ 430.899106][ T921] netlink_sendmsg+0x8ab/0xbc0 [ 430.904368][ T921] ____sys_sendmsg+0x5a2/0x8c0 [ 430.909636][ T921] ___sys_sendmsg+0x1f0/0x260 [ 430.914815][ T921] __se_sys_sendmsg+0x190/0x250 [ 430.920182][ T921] do_syscall_64+0x4c/0xa0 [ 430.925118][ T921] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 430.931520][ T921] [ 430.931520][ T921] other info that might help us debug this: [ 430.931520][ T921] [ 430.941746][ T921] Possible unsafe locking scenario: [ 430.941746][ T921] [ 430.949173][ T921] CPU0 CPU1 [ 430.954526][ T921] ---- ---- [ 430.959865][ T921] lock(&rdev->wiphy.mtx); [ 430.964342][ T921] lock(team->team_lock_key); [ 430.971600][ T921] lock(&rdev->wiphy.mtx); [ 430.978604][ T921] lock(team->team_lock_key); [ 430.983353][ T921] [ 430.983353][ T921] *** DEADLOCK *** [ 430.983353][ T921] [ 430.991554][ T921] 3 locks held by syz-executor250/921: [ 430.996983][ T921] #0: ffffffff8d292ad0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 431.005130][ T921] #1: ffffffff8d235f08 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x28/0x540 [ 431.014321][ T921] #2: ffff888074680628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x11c/0x350 [ 431.024550][ T921] [ 431.024550][ T921] stack backtrace: [ 431.030416][ T921] CPU: 0 PID: 921 Comm: syz-executor250 Not tainted syzkaller #0 [ 431.038112][ T921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 431.048147][ T921] Call Trace: [ 431.051404][ T921] [ 431.054315][ T921] dump_stack_lvl+0x168/0x230 [ 431.058968][ T921] ? load_image+0x3b0/0x3b0 [ 431.063455][ T921] ? show_regs_print_info+0x20/0x20 [ 431.068634][ T921] ? print_circular_bug+0x12b/0x1a0 [ 431.073805][ T921] check_noncircular+0x274/0x310 [ 431.078718][ T921] ? add_chain_block+0x940/0x940 [ 431.083625][ T921] ? lockdep_lock+0xdc/0x1e0 [ 431.088192][ T921] ? lockdep_unlock+0x134/0x2d0 [ 431.093013][ T921] ? mark_lock+0x94/0x320 [ 431.097322][ T921] __lock_acquire+0x2c33/0x7c60 [ 431.102161][ T921] ? verify_lock_unused+0x140/0x140 [ 431.107341][ T921] ? verify_lock_unused+0x140/0x140 [ 431.112539][ T921] lock_acquire+0x197/0x3f0 [ 431.117019][ T921] ? team_del_slave+0x2e/0x1e0 [ 431.121795][ T921] ? __might_sleep+0xf0/0xf0 [ 431.126548][ T921] ? read_lock_is_recursive+0x10/0x10 [ 431.131891][ T921] ? __mutex_trylock_common+0x14f/0x250 [ 431.137408][ T921] ? team_del_slave+0x2e/0x1e0 [ 431.142144][ T921] __mutex_lock_common+0x1eb/0x2390 [ 431.147314][ T921] ? team_del_slave+0x2e/0x1e0 [ 431.152054][ T921] ? xsk_notifier+0x85/0x380 [ 431.156623][ T921] ? __lock_acquire+0x7c60/0x7c60 [ 431.161624][ T921] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 431.167589][ T921] ? mutex_lock_io_nested+0x60/0x60 [ 431.172763][ T921] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 431.178372][ T921] ? bond_ipsec_offload_ok+0x3f0/0x3f0 [ 431.183812][ T921] ? do_raw_spin_unlock+0x11d/0x230 [ 431.188980][ T921] ? macvlan_device_event+0x10b/0x930 [ 431.194326][ T921] mutex_lock_nested+0x17/0x20 [ 431.199064][ T921] team_del_slave+0x2e/0x1e0 [ 431.203634][ T921] team_device_event+0x38f/0x9e0 [ 431.208543][ T921] raw_notifier_call_chain+0xcb/0x160 [ 431.213896][ T921] unregister_netdevice_many+0xf57/0x18f0 [ 431.219594][ T921] ? alloc_netdev_mqs+0xc40/0xc40 [ 431.224592][ T921] ? kernfs_remove_by_name_ns+0xd0/0x100 [ 431.230201][ T921] ? __lock_acquire+0x7c60/0x7c60 [ 431.235201][ T921] unregister_netdevice_queue+0x31c/0x360 [ 431.240894][ T921] ? list_netdevice+0x450/0x450 [ 431.245719][ T921] _cfg80211_unregister_wdev+0x186/0x500 [ 431.251326][ T921] ieee80211_if_remove+0x1bd/0x2b0 [ 431.256409][ T921] ieee80211_del_iface+0x15/0x20 [ 431.261319][ T921] nl80211_del_interface+0x1ea/0x350 [ 431.266578][ T921] genl_rcv_msg+0xbc6/0xf40 [ 431.271053][ T921] ? genl_bind+0x370/0x370 [ 431.275443][ T921] ? verify_lock_unused+0x140/0x140 [ 431.280709][ T921] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 431.285897][ T921] ? dev_queue_xmit+0x20/0x20 [ 431.290557][ T921] ? nl80211_new_interface+0xe30/0xe30 [ 431.296005][ T921] netlink_rcv_skb+0x1e0/0x430 [ 431.300754][ T921] ? genl_bind+0x370/0x370 [ 431.305145][ T921] ? netlink_ack+0xb60/0xb60 [ 431.309721][ T921] ? __lock_acquire+0x7c60/0x7c60 [ 431.314721][ T921] ? preempt_count_add+0x8d/0x190 [ 431.319723][ T921] ? down_read+0x1aa/0x2e0 [ 431.324118][ T921] genl_rcv+0x24/0x40 [ 431.328083][ T921] netlink_unicast+0x774/0x920 [ 431.332836][ T921] netlink_sendmsg+0x8ab/0xbc0 [ 431.337585][ T921] ? netlink_getsockopt+0x560/0x560 [ 431.342764][ T921] ? aa_sock_msg_perm+0x94/0x150 [ 431.347685][ T921] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 431.353048][ T921] ? security_socket_sendmsg+0x7c/0xa0 [ 431.358487][ T921] ? netlink_getsockopt+0x560/0x560 [ 431.363679][ T921] ____sys_sendmsg+0x5a2/0x8c0 [ 431.368470][ T921] ? memset+0x1e/0x40 [ 431.372434][ T921] ? __sys_sendmsg_sock+0x30/0x30 [ 431.377440][ T921] ? import_iovec+0x6f/0xa0 [ 431.381919][ T921] ___sys_sendmsg+0x1f0/0x260 [ 431.386575][ T921] ? __sys_sendmsg+0x250/0x250 [ 431.391316][ T921] ? __context_tracking_exit+0x4c/0x80 [ 431.396852][ T921] ? __fdget+0x150/0x210 [ 431.401262][ T921] __se_sys_sendmsg+0x190/0x250 [ 431.406146][ T921] ? __x64_sys_sendmsg+0x80/0x80 [ 431.411062][ T921] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 431.417026][ T921] ? lockdep_hardirqs_on+0x94/0x140 [ 431.422293][ T921] do_syscall_64+0x4c/0xa0 [ 431.426700][ T921] ? clear_bhb_loop+0x30/0x80 [ 431.431367][ T921] ? clear_bhb_loop+0x30/0x80 [ 431.436032][ T921] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 431.441912][ T921] RIP: 0033:0x7f1872df5469 [ 431.446305][ T921] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 431.466074][ T921] RSP: 002b:00007ffd8cfe2ac8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.474468][ T921] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f1872df5469 [ 431.482503][ T921] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000007 [ 431.490538][ T921] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd8cfe2b50 [ 431.498501][ T921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000031 [ 431.506453][ T921] R13: 0000000000000047 R14: 0000000000050012 R15: 0000000000000003 [ 431.514406][ T921] [ 431.525914][ T921] team0: Port device wlan1 removed [ 439.853117][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.859466][ T1420] ieee802154 phy1 wpan1: encryption failed: -22