Warning: Permanently added '10.128.0.8' (ECDSA) to the list of known hosts. gin: [ 93.047244][ T9583] IPVS: ftp: loaded support on port[0] = 21 [ 93.105614][ T9583] chnl_net:caif_netlink_parms(): no params data found [ 93.155296][ T9583] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.163033][ T9583] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.171604][ T9583] device bridge_slave_0 entered promiscuous mode [ 93.179819][ T9583] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.187282][ T9583] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.195105][ T9583] device bridge_slave_1 entered promiscuous mode [ 93.211818][ T9583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.223799][ T9583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.242473][ T9583] team0: Port device team_slave_0 added [ 93.250933][ T9583] team0: Port device team_slave_1 added [ 93.265482][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.272553][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.299096][ T9583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.312054][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.319148][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.345579][ T9583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.401907][ T9583] device hsr_slave_0 entered promiscuous mode [ 93.460627][ T9583] device hsr_slave_1 entered promiscuous mode [ 93.591357][ T9583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.623141][ T9583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.683130][ T9583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.752576][ T9583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.834664][ T9583] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.842018][ T9583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.849811][ T9583] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.856953][ T9583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.898305][ T9583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.913903][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.924834][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.933060][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.942327][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 93.954208][ T9583] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.965581][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.975343][ T3209] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.982572][ T3209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.993956][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.003267][ T2682] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.010485][ T2682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.028560][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.038010][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.049098][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.062072][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.075619][ T9583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.088418][ T9583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.097711][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.120754][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.128456][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.138313][ T9583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.156547][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.165707][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.185581][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.195096][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.206965][ T9583] device veth0_vlan entered promiscuous mode [ 94.213957][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.221941][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.234772][ T9583] device veth1_vlan entered promiscuous mode [ 94.255573][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.263657][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.273238][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.282369][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.293624][ T9583] device veth0_macvtap entered promiscuous mode [ 94.304513][ T9583] device veth1_macvtap entered promiscuous mode [ 94.321464][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.329113][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.339257][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.347710][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.357246][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.369288][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.377436][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.386225][ T3209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 94.739215][ T9588] [ 94.741707][ T9588] ====================================================== [ 94.748716][ T9588] WARNING: possible circular locking dependency detected [ 94.756027][ T9588] 5.6.0-rc1-syzkaller #0 Not tainted [ 94.761294][ T9588] ------------------------------------------------------ [ 94.768387][ T9588] syz-executor932/9588 is trying to acquire lock: [ 94.775053][ T9588] ffff88809e94b2e0 (&htab->buckets[i].lock){....}, at: htab_lru_map_delete_node+0xce/0x2f0 [ 94.785144][ T9588] [ 94.785144][ T9588] but task is already holding lock: [ 94.792667][ T9588] ffff88809e94ba18 (&l->lock){....}, at: bpf_lru_pop_free+0x67f/0x1670 [ 94.801208][ T9588] [ 94.801208][ T9588] which lock already depends on the new lock. [ 94.801208][ T9588] [ 94.811600][ T9588] [ 94.811600][ T9588] the existing dependency chain (in reverse order) is: [ 94.820729][ T9588] [ 94.820729][ T9588] -> #2 (&l->lock){....}: [ 94.827242][ T9588] _raw_spin_lock+0x2f/0x40 [ 94.832261][ T9588] bpf_lru_pop_free+0x67f/0x1670 [ 94.837704][ T9588] prealloc_lru_pop+0x2c/0xa0 [ 94.843002][ T9588] __htab_lru_percpu_map_update_elem+0x67e/0xa90 [ 94.849845][ T9588] bpf_percpu_hash_update+0x16e/0x210 [ 94.855844][ T9588] bpf_map_update_value.isra.0+0x2d7/0x8e0 [ 94.862162][ T9588] generic_map_update_batch+0x41f/0x610 [ 94.868211][ T9588] bpf_map_do_batch+0x3f5/0x510 [ 94.873572][ T9588] __do_sys_bpf+0x9b7/0x41e0 [ 94.878715][ T9588] __x64_sys_bpf+0x73/0xb0 [ 94.883637][ T9588] do_syscall_64+0xfa/0x790 [ 94.888642][ T9588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 94.895037][ T9588] [ 94.895037][ T9588] -> #1 (&loc_l->lock){....}: [ 94.901881][ T9588] _raw_spin_lock_irqsave+0x95/0xcd [ 94.907582][ T9588] bpf_lru_push_free+0x250/0x5b0 [ 94.913087][ T9588] __htab_map_lookup_and_delete_batch+0x8d4/0x1540 [ 94.920128][ T9588] htab_lru_map_lookup_and_delete_batch+0x34/0x40 [ 94.927077][ T9588] bpf_map_do_batch+0x3f5/0x510 [ 94.932453][ T9588] __do_sys_bpf+0x1f7d/0x41e0 [ 94.937640][ T9588] __x64_sys_bpf+0x73/0xb0 [ 94.942566][ T9588] do_syscall_64+0xfa/0x790 [ 94.947570][ T9588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 94.953963][ T9588] [ 94.953963][ T9588] -> #0 (&htab->buckets[i].lock){....}: [ 94.961716][ T9588] __lock_acquire+0x2596/0x4a00 [ 94.967061][ T9588] lock_acquire+0x190/0x410 [ 94.972069][ T9588] _raw_spin_lock_irqsave+0x95/0xcd [ 94.977778][ T9588] htab_lru_map_delete_node+0xce/0x2f0 [ 94.983742][ T9588] __bpf_lru_list_shrink+0xf9/0x470 [ 94.989451][ T9588] bpf_lru_pop_free+0x87c/0x1670 [ 94.994897][ T9588] prealloc_lru_pop+0x2c/0xa0 [ 95.000083][ T9588] __htab_lru_percpu_map_update_elem+0x67e/0xa90 [ 95.006924][ T9588] bpf_percpu_hash_update+0x16e/0x210 [ 95.012795][ T9588] bpf_map_update_value.isra.0+0x2d7/0x8e0 [ 95.019096][ T9588] generic_map_update_batch+0x41f/0x610 [ 95.025152][ T9588] bpf_map_do_batch+0x3f5/0x510 [ 95.030502][ T9588] __do_sys_bpf+0x9b7/0x41e0 [ 95.035657][ T9588] __x64_sys_bpf+0x73/0xb0 [ 95.040576][ T9588] do_syscall_64+0xfa/0x790 [ 95.045587][ T9588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 95.051990][ T9588] [ 95.051990][ T9588] other info that might help us debug this: [ 95.051990][ T9588] [ 95.062201][ T9588] Chain exists of: [ 95.062201][ T9588] &htab->buckets[i].lock --> &loc_l->lock --> &l->lock [ 95.062201][ T9588] [ 95.074937][ T9588] Possible unsafe locking scenario: [ 95.074937][ T9588] [ 95.082367][ T9588] CPU0 CPU1 [ 95.087759][ T9588] ---- ---- [ 95.093100][ T9588] lock(&l->lock); [ 95.096890][ T9588] lock(&loc_l->lock); [ 95.103540][ T9588] lock(&l->lock); [ 95.109848][ T9588] lock(&htab->buckets[i].lock); [ 95.114912][ T9588] [ 95.114912][ T9588] *** DEADLOCK *** [ 95.114912][ T9588] [ 95.123071][ T9588] 3 locks held by syz-executor932/9588: [ 95.128590][ T9588] #0: ffffffff89bac240 (rcu_read_lock){....}, at: bpf_percpu_hash_update+0x0/0x210 [ 95.138013][ T9588] #1: ffffe8ffffd784e0 (&loc_l->lock){....}, at: bpf_lru_pop_free+0x32b/0x1670 [ 95.147647][ T9588] #2: ffff88809e94ba18 (&l->lock){....}, at: bpf_lru_pop_free+0x67f/0x1670 [ 95.156320][ T9588] [ 95.156320][ T9588] stack backtrace: [ 95.162198][ T9588] CPU: 1 PID: 9588 Comm: syz-executor932 Not tainted 5.6.0-rc1-syzkaller #0 [ 95.170850][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.180885][ T9588] Call Trace: [ 95.184166][ T9588] dump_stack+0x197/0x210 [ 95.188488][ T9588] print_circular_bug.isra.0.cold+0x163/0x172 [ 95.194575][ T9588] check_noncircular+0x32e/0x3e0 [ 95.199502][ T9588] ? do_huge_pmd_anonymous_page+0x1454/0x1a50 [ 95.205582][ T9588] ? print_circular_bug.isra.0+0x230/0x230 [ 95.211378][ T9588] ? do_huge_pmd_anonymous_page+0x1454/0x1a50 [ 95.217436][ T9588] ? alloc_list_entry+0xc0/0xc0 [ 95.222276][ T9588] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 95.228497][ T9588] ? find_first_zero_bit+0x9a/0xc0 [ 95.233601][ T9588] __lock_acquire+0x2596/0x4a00 [ 95.238432][ T9588] ? mark_held_locks+0xf0/0xf0 [ 95.243170][ T9588] ? __kasan_check_read+0x11/0x20 [ 95.248219][ T9588] ? __lock_acquire+0x16f2/0x4a00 [ 95.253221][ T9588] lock_acquire+0x190/0x410 [ 95.257701][ T9588] ? htab_lru_map_delete_node+0xce/0x2f0 [ 95.263313][ T9588] _raw_spin_lock_irqsave+0x95/0xcd [ 95.268486][ T9588] ? htab_lru_map_delete_node+0xce/0x2f0 [ 95.274108][ T9588] htab_lru_map_delete_node+0xce/0x2f0 [ 95.279540][ T9588] ? __kasan_check_write+0x14/0x20 [ 95.284671][ T9588] __bpf_lru_list_shrink+0xf9/0x470 [ 95.289847][ T9588] bpf_lru_pop_free+0x87c/0x1670 [ 95.294779][ T9588] prealloc_lru_pop+0x2c/0xa0 [ 95.299445][ T9588] __htab_lru_percpu_map_update_elem+0x67e/0xa90 [ 95.305776][ T9588] bpf_percpu_hash_update+0x16e/0x210 [ 95.311135][ T9588] bpf_map_update_value.isra.0+0x2d7/0x8e0 [ 95.316974][ T9588] generic_map_update_batch+0x41f/0x610 [ 95.322501][ T9588] ? generic_map_delete_batch+0x6a0/0x6a0 [ 95.328202][ T9588] ? __fget_light+0x1ad/0x270 [ 95.332857][ T9588] ? generic_map_delete_batch+0x6a0/0x6a0 [ 95.338573][ T9588] bpf_map_do_batch+0x3f5/0x510 [ 95.343422][ T9588] __do_sys_bpf+0x9b7/0x41e0 [ 95.348035][ T9588] ? find_held_lock+0x35/0x130 [ 95.352777][ T9588] ? bpf_prog_load+0x1820/0x1820 [ 95.357690][ T9588] ? lock_downgrade+0x920/0x920 [ 95.362524][ T9588] ? handle_mm_fault+0x292/0xa50 [ 95.367458][ T9588] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 95.372896][ T9588] ? do_syscall_64+0x26/0x790 [ 95.377582][ T9588] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 95.383621][ T9588] ? do_syscall_64+0x26/0x790 [ 95.388275][ T9588] __x64_sys_bpf+0x73/0xb0 [ 95.392674][ T9588] do_syscall_64+0xfa/0x790 [ 95.397153][ T9588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 95.403018][ T9588] RIP: 0033:0x44a2b9 [ 95.406901][ T9588] Code: e8 dc 15 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 9b 0c fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 95.426497][ T9588] RSP: 002b:00007f99211b7ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.434882][ T9588] RAX: ffffffffffffffda RBX: 00000000006e0c48 RCX: 000000000044a2b9 [ 95.442830][ T9588] RDX: 0000000000000038 RSI: 0000000020000040 RDI: 000000000000001a [ 95.450775][ T9588] RBP: 00000000006e0c40 R08: 0000000000000000 R09: 0000000000000000 [ 95.458736][ T9588] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006e0c4c [ 95.466691][ T9588] R13: 00007ffc42559d0f R14: 00007f99211b89c0 R15: 0000000000000000