Warning: Permanently added '10.128.0.44' (ED25519) to the list of known hosts. syzkaller login: [ 52.416561][ T3542] chnl_net:caif_netlink_parms(): no params data found [ 52.459634][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.467264][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.476177][ T3542] device bridge_slave_0 entered promiscuous mode [ 52.485269][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.492717][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.500938][ T3542] device bridge_slave_1 entered promiscuous mode [ 52.521829][ T3542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.534287][ T3542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.556612][ T3542] team0: Port device team_slave_0 added [ 52.563965][ T3542] team0: Port device team_slave_1 added [ 52.581710][ T3542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.588869][ T3542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.614869][ T3542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.627725][ T3542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.635647][ T3542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.662420][ T3542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.692540][ T3542] device hsr_slave_0 entered promiscuous mode [ 52.700236][ T3542] device hsr_slave_1 entered promiscuous mode [ 52.791352][ T3542] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.802968][ T3542] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.811913][ T3542] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.820801][ T3542] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.841112][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.848317][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.856366][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.863611][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.907658][ T3542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.920554][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.930594][ T3333] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.939961][ T3333] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.948597][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 52.961062][ T3542] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.971188][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.980280][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.987447][ T3333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.999177][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.007628][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.014692][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.037786][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.046793][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.055056][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.063865][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.076393][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.087322][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.107174][ T3542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.117402][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.124847][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.141591][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.159810][ T3542] device veth0_vlan entered promiscuous mode [ 53.167616][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.176706][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.184399][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.198052][ T3542] device veth1_vlan entered promiscuous mode [ 53.205666][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.224569][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.233286][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.243992][ T3542] device veth0_macvtap entered promiscuous mode [ 53.253795][ T3542] device veth1_macvtap entered promiscuous mode [ 53.269475][ T3542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.277305][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.287881][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.299668][ T3542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.307848][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 53.318756][ T3542] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.328552][ T3542] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.337631][ T3542] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.347375][ T3542] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.380439][ T3542] netlink: 'syz-executor358': attribute type 10 has an invalid length. [ 53.403678][ T3542] team0: Port device vlan0 added [ 53.410974][ T3542] netlink: 'syz-executor358': attribute type 10 has an invalid length. [ 53.447105][ T3542] device veth0_vlan left promiscuous mode [ 53.457028][ T3542] device veth0_vlan entered promiscuous mode [ 53.466686][ T3542] [ 53.469036][ T3542] ============================================ [ 53.475163][ T3542] WARNING: possible recursive locking detected [ 53.481638][ T3542] 6.1.83-syzkaller #0 Not tainted [ 53.486648][ T3542] -------------------------------------------- [ 53.492792][ T3542] syz-executor358/3542 is trying to acquire lock: [ 53.499186][ T3542] ffff888077ddcd00 (team->team_lock_key){+.+.}-{3:3}, at: team_port_change_check+0x51/0x1e0 [ 53.509292][ T3542] [ 53.509292][ T3542] but task is already holding lock: [ 53.516733][ T3542] ffff888077ddcd00 (team->team_lock_key){+.+.}-{3:3}, at: team_add_slave+0xab/0x2760 [ 53.526223][ T3542] [ 53.526223][ T3542] other info that might help us debug this: [ 53.534268][ T3542] Possible unsafe locking scenario: [ 53.534268][ T3542] [ 53.541695][ T3542] CPU0 [ 53.546626][ T3542] ---- [ 53.549883][ T3542] lock(team->team_lock_key); [ 53.554638][ T3542] lock(team->team_lock_key); [ 53.559382][ T3542] [ 53.559382][ T3542] *** DEADLOCK *** [ 53.559382][ T3542] [ 53.568120][ T3542] May be due to missing lock nesting notation [ 53.568120][ T3542] [ 53.576433][ T3542] 2 locks held by syz-executor358/3542: [ 53.581983][ T3542] #0: ffffffff8e2991e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 53.591375][ T3542] #1: ffff888077ddcd00 (team->team_lock_key){+.+.}-{3:3}, at: team_add_slave+0xab/0x2760 [ 53.601417][ T3542] [ 53.601417][ T3542] stack backtrace: [ 53.607302][ T3542] CPU: 0 PID: 3542 Comm: syz-executor358 Not tainted 6.1.83-syzkaller #0 [ 53.615791][ T3542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 53.626032][ T3542] Call Trace: [ 53.629305][ T3542] [ 53.632232][ T3542] dump_stack_lvl+0x1e3/0x2cb [ 53.636982][ T3542] ? nf_tcp_handle_invalid+0x642/0x642 [ 53.642478][ T3542] ? panic+0x75d/0x75d [ 53.646535][ T3542] validate_chain+0x4711/0x5950 [ 53.651379][ T3542] ? __lock_acquire+0x1f80/0x1f80 [ 53.656405][ T3542] ? arp_hash+0x90/0x90 [ 53.660549][ T3542] ? reacquire_held_locks+0x660/0x660 [ 53.665905][ T3542] ? neigh_lookup+0x413/0x500 [ 53.670560][ T3542] ? neigh_lookup+0xad/0x500 [ 53.675145][ T3542] ? neigh_ifdown+0x30/0x30 [ 53.679633][ T3542] ? arp_invalidate+0x136/0x300 [ 53.684644][ T3542] ? mark_lock+0x9a/0x340 [ 53.688960][ T3542] __lock_acquire+0x125b/0x1f80 [ 53.694757][ T3542] lock_acquire+0x1f8/0x5a0 [ 53.699240][ T3542] ? team_port_change_check+0x51/0x1e0 [ 53.704680][ T3542] ? read_lock_is_recursive+0x10/0x10 [ 53.710046][ T3542] ? __might_sleep+0xb0/0xb0 [ 53.714718][ T3542] ? cfg80211_unhold_bss+0xb0/0xb0 [ 53.719827][ T3542] __mutex_lock+0x132/0xd80 [ 53.724325][ T3542] ? team_port_change_check+0x51/0x1e0 [ 53.729777][ T3542] ? __local_bh_enable_ip+0x164/0x1f0 [ 53.735220][ T3542] ? igmp_group_added+0x1fa/0x800 [ 53.740228][ T3542] ? __local_bh_enable_ip+0x164/0x1f0 [ 53.745600][ T3542] ? igmpv3_del_delrec+0x710/0x710 [ 53.750710][ T3542] ? ip_mc_up+0x1d1/0x2f0 [ 53.755061][ T3542] ? team_port_change_check+0x51/0x1e0 [ 53.760521][ T3542] ? _local_bh_enable+0xa0/0xa0 [ 53.765362][ T3542] ? mutex_lock_nested+0x10/0x10 [ 53.770661][ T3542] ? dev_get_flags+0x141/0x1c0 [ 53.775423][ T3542] ? bond_ipsec_offload_ok+0x400/0x400 [ 53.780915][ T3542] ? memset+0x1f/0x40 [ 53.784978][ T3542] team_port_change_check+0x51/0x1e0 [ 53.790268][ T3542] team_device_event+0x4ac/0x570 [ 53.795199][ T3542] raw_notifier_call_chain+0xd0/0x170 [ 53.800558][ T3542] __dev_notify_flags+0x304/0x610 [ 53.805598][ T3542] ? __dev_change_flags+0x6e0/0x6e0 [ 53.810775][ T3542] ? __dev_change_flags+0x505/0x6e0 [ 53.815954][ T3542] ? dev_get_flags+0x1c0/0x1c0 [ 53.820698][ T3542] ? dsa_slave_netdevice_event+0x718/0x2a90 [ 53.826621][ T3542] dev_change_flags+0xe7/0x190 [ 53.831389][ T3542] vlan_device_event+0x429/0x1d10 [ 53.836409][ T3542] ? br_device_event+0x145/0x960 [ 53.841594][ T3542] ? phonet_exit_net+0x80/0x80 [ 53.846513][ T3542] ? register_vlan_dev+0x800/0x800 [ 53.851604][ T3542] ? raw_notifier+0x99/0x730 [ 53.856279][ T3542] ? isotp_notifier+0xa0/0x690 [ 53.861029][ T3542] ? cgw_notifier+0xcc/0x3a0 [ 53.865617][ T3542] ? packet_notifier+0x6d/0xa30 [ 53.870485][ T3542] ? j1939_netdev_notify+0xfd/0x2e0 [ 53.875680][ T3542] raw_notifier_call_chain+0xd0/0x170 [ 53.881050][ T3542] dev_open+0x1c1/0x260 [ 53.885286][ T3542] ? netdev_notify_peers+0x20/0x20 [ 53.890375][ T3542] ? rcu_is_watching+0x11/0xb0 [ 53.895133][ T3542] ? team_add_slave+0x860/0x2760 [ 53.900115][ T3542] team_add_slave+0x96e/0x2760 [ 53.904984][ T3542] ? __dev_change_flags+0x6e0/0x6e0 [ 53.910193][ T3542] ? team_netpoll_cleanup+0xf0/0xf0 [ 53.915470][ T3542] ? dev_get_flags+0x1c0/0x1c0 [ 53.920217][ T3542] ? irq_work_queue+0xc6/0x150 [ 53.925045][ T3542] ? _printk+0xd1/0x111 [ 53.929183][ T3542] ? mutex_is_locked+0xe/0x40 [ 53.933840][ T3542] do_setlink+0xe99/0x3e30 [ 53.938243][ T3542] ? _printk+0xd1/0x111 [ 53.942438][ T3542] ? __nla_validate_parse+0x4f0/0x2b70 [ 53.947896][ T3542] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 53.954047][ T3542] ? __stack_depot_save+0x36/0x470 [ 53.959158][ T3542] ? __nla_validate_parse+0x2132/0x2b70 [ 53.964699][ T3542] ? kasan_set_track+0x4b/0x70 [ 53.969468][ T3542] ? __kasan_kmalloc+0x97/0xb0 [ 53.974255][ T3542] ? rtnl_newlink+0xe6/0x2050 [ 53.979006][ T3542] ? __nla_validate+0x50/0x50 [ 53.983782][ T3542] ? validate_linkmsg+0x3db/0x4c0 [ 53.988819][ T3542] rtnl_newlink+0x172c/0x2050 [ 53.993512][ T3542] ? rtnl_newlink+0x4f1/0x2050 [ 53.998375][ T3542] ? __mutex_lock+0x9bb/0xd80 [ 54.003059][ T3542] ? rtnl_setlink+0x560/0x560 [ 54.007739][ T3542] ? do_raw_spin_unlock+0x137/0x8a0 [ 54.012939][ T3542] ? rcu_is_watching+0x11/0xb0 [ 54.018215][ T3542] ? __mutex_lock+0x9c5/0xd80 [ 54.022879][ T3542] ? __mutex_lock+0x53c/0xd80 [ 54.027562][ T3542] ? rtnl_setlink+0x560/0x560 [ 54.032237][ T3542] rtnetlink_rcv_msg+0x818/0xff0 [ 54.037182][ T3542] ? rtnetlink_bind+0x80/0x80 [ 54.041860][ T3542] ? __local_bh_enable_ip+0x164/0x1f0 [ 54.047255][ T3542] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 54.052357][ T3542] ? _local_bh_enable+0xa0/0xa0 [ 54.057293][ T3542] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 54.062395][ T3542] ? __dev_queue_xmit+0x1790/0x3cf0 [ 54.067763][ T3542] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 54.072953][ T3542] ? netdev_core_pick_tx+0x320/0x320 [ 54.078314][ T3542] ? ref_tracker_free+0x638/0x7d0 [ 54.083321][ T3542] ? memcpy+0x3c/0x60 [ 54.087304][ T3542] ? refcount_inc+0x80/0x80 [ 54.091790][ T3542] ? __copy_skb_header+0x47b/0x600 [ 54.096888][ T3542] netlink_rcv_skb+0x1cd/0x410 [ 54.101637][ T3542] ? rtnetlink_bind+0x80/0x80 [ 54.106666][ T3542] ? netlink_ack+0x1290/0x1290 [ 54.111450][ T3542] ? __netlink_deliver_tap+0x73e/0x770 [ 54.116992][ T3542] ? netlink_deliver_tap+0x2e/0x1b0 [ 54.122263][ T3542] netlink_unicast+0x7d8/0x970 [ 54.127452][ T3542] ? netlink_detachskb+0x90/0x90 [ 54.132374][ T3542] ? __virt_addr_valid+0x44a/0x520 [ 54.137556][ T3542] ? __phys_addr_symbol+0x2b/0x70 [ 54.142563][ T3542] ? __check_object_size+0x4dd/0xa30 [ 54.147837][ T3542] ? bpf_lsm_netlink_send+0x5/0x10 [ 54.152937][ T3542] netlink_sendmsg+0xa26/0xd60 [ 54.157959][ T3542] ? netlink_getsockopt+0x580/0x580 [ 54.163165][ T3542] ? aa_sock_msg_perm+0x91/0x150 [ 54.168087][ T3542] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 54.173361][ T3542] ? security_socket_sendmsg+0x7d/0xa0 [ 54.178974][ T3542] ? netlink_getsockopt+0x580/0x580 [ 54.184170][ T3542] ____sys_sendmsg+0x5a5/0x8f0 [ 54.189100][ T3542] ? __sys_sendmsg_sock+0x30/0x30 [ 54.194562][ T3542] ? __lock_acquire+0x125b/0x1f80 [ 54.199656][ T3542] __sys_sendmsg+0x2a9/0x390 [ 54.204520][ T3542] ? ____sys_sendmsg+0x8f0/0x8f0 [ 54.209520][ T3542] ? rcu_read_lock_sched_held+0x89/0x130 [ 54.215509][ T3542] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 54.221490][ T3542] ? syscall_enter_from_user_mode+0x2e/0x220 [ 54.227813][ T3542] ? lockdep_hardirqs_on+0x94/0x130 [ 54.232998][ T3542] ? syscall_enter_from_user_mode+0x2e/0x220 [ 54.239050][ T3542] do_syscall_64+0x3d/0xb0 [ 54.243479][ T3542] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.249355][ T3542] RIP: 0033:0x7f16cab86b09 [ 54.253756][ T3542] Code: 48 83 c4 28 c3 e8 d7 19 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 54.273355][ T3542] RSP: 002b:00007ffd3aef4d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.281760][ T3542] RAX: ffffffffffffffda RBX: 00007f16cabd43d3 RCX: 00007f16cab86b09 [ 54.289731][ T3542] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000004 [ 54.297716][ T3542] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 54.305702][ T3542] R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffd3aef4da0 [ 54.313659][ T3542] R13: 00007f16cabd4004 R14: 00007ffd3aef4d8c R15: 0000000000000003 [ 54.321632][ T3542]