Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.1' (ECDSA) to the list of known hosts. syzkaller login: [ 27.400220] IPVS: ftp: loaded support on port[0] = 21 [ 27.467563] chnl_net:caif_netlink_parms(): no params data found [ 27.545804] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.552378] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.560375] device bridge_slave_0 entered promiscuous mode [ 27.567992] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.574598] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.581460] device bridge_slave_1 entered promiscuous mode [ 27.597824] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 27.606569] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 27.624157] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 27.631368] team0: Port device team_slave_0 added [ 27.637120] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 27.644586] team0: Port device team_slave_1 added [ 27.659132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.665471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.690691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.701867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.708181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.733520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.744297] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 27.751586] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 27.769365] device hsr_slave_0 entered promiscuous mode [ 27.774995] device hsr_slave_1 entered promiscuous mode [ 27.780811] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 27.787861] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 27.845928] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.852322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.859299] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.865708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.891928] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 27.898080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.906864] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 27.916193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.934646] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.941555] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.951826] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 27.958898] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.967369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.975391] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.981716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.001722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.012216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.023510] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 28.030434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.038530] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.044928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.052086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.060220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.067915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.075566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.083181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.089906] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.103094] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 28.110104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.117887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.127649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.177041] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 28.186860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.214702] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 28.221543] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 28.228555] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 28.237091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.245485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.252274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.261170] device veth0_vlan entered promiscuous mode [ 28.269999] device veth1_vlan entered promiscuous mode [ 28.276085] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 28.284827] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 28.295734] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 28.304895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.312136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.319894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.328860] device veth0_macvtap entered promiscuous mode [ 28.335318] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 28.344030] device veth1_macvtap entered promiscuous mode [ 28.351978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 28.361142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 28.370860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.377978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.396632] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.406860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.414044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 28.453682] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready executing program executing program [ 28.495433] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 28.512808] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 28.528733] ip6_tables: ip6tables: counters copy to user failed while replacing table executing program [ 28.541659] device gretap0 entered promiscuous mode [ 28.547649] bridge0: port 3(macvlan2) entered blocking state [ 28.553596] bridge0: port 3(macvlan2) entered disabled state [ 28.559949] device macvlan2 entered promiscuous mode [ 28.566176] bridge0: port 3(macvlan2) entered blocking state [ 28.571978] bridge0: port 3(macvlan2) entered forwarding state [ 28.585893] ip6_tables: ip6tables: counters copy to user failed while replacing table executing program [ 28.596586] device erspan0 entered promiscuous mode [ 28.602095] bridge0: port 4(macvlan3) entered blocking state [ 28.608463] bridge0: port 4(macvlan3) entered disabled state [ 28.615030] device macvlan3 entered promiscuous mode [ 28.620450] bridge0: port 4(macvlan3) entered blocking state [ 28.626411] bridge0: port 4(macvlan3) entered forwarding state executing program executing program executing program executing program [ 28.639264] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 28.654998] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 28.670904] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 28.686880] ip6_tables: ip6tables: counters copy to user failed while replacing table executing program [ 28.704865] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 28.719704] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 28.731289] device ip6gretap0 entered promiscuous mode [ 28.738179] bridge0: port 5(macvlan4) entered blocking state [ 28.744473] bridge0: port 5(macvlan4) entered disabled state executing program [ 28.750829] device macvlan4 entered promiscuous mode [ 28.756939] bridge0: port 5(macvlan4) entered blocking state [ 28.762797] bridge0: port 5(macvlan4) entered forwarding state [ 28.780557] device bridge0 entered promiscuous mode [ 28.786359] bridge0: port 6(macvlan5) entered blocking state [ 28.792211] bridge0: port 6(macvlan5) entered disabled state [ 28.801955] device bridge0 left promiscuous mode [ 28.809248] [ 28.810884] ====================================================== [ 28.817174] WARNING: possible circular locking dependency detected [ 28.823463] 4.14.286-syzkaller #0 Not tainted [ 28.827926] ------------------------------------------------------ [ 28.834218] syz-executor388/8237 is trying to acquire lock: [ 28.839947] (&table[i].mutex){+.+.}, at: [] nf_tables_netdev_event+0x10d/0x4d0 [ 28.848983] [ 28.848983] but task is already holding lock: [ 28.854929] (rtnl_mutex){+.+.}, at: [] rtnetlink_rcv_msg+0x31d/0xb10 [ 28.863059] [ 28.863059] which lock already depends on the new lock. [ 28.863059] [ 28.871435] [ 28.871435] the existing dependency chain (in reverse order) is: [ 28.879047] [ 28.879047] -> #2 (rtnl_mutex){+.+.}: [ 28.884399] __mutex_lock+0xc4/0x1310 [ 28.888700] unregister_netdevice_notifier+0x5e/0x2b0 [ 28.894385] tee_tg_destroy+0x5c/0xb0 [ 28.898680] cleanup_entry+0x232/0x310 [ 28.903061] __do_replace+0x38d/0x580 [ 28.907354] do_ip6t_set_ctl+0x256/0x3b0 [ 28.911907] nf_setsockopt+0x5f/0xb0 [ 28.916111] ipv6_setsockopt+0xc0/0x120 [ 28.920581] sctp_setsockopt+0x12b/0x3d50 [ 28.925222] SyS_setsockopt+0x110/0x1e0 [ 28.929692] do_syscall_64+0x1d5/0x640 [ 28.934073] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 28.939751] [ 28.939751] -> #1 (&xt[i].mutex){+.+.}: [ 28.945180] __mutex_lock+0xc4/0x1310 [ 28.949473] match_revfn+0x43/0x210 [ 28.953594] xt_find_revision+0x8d/0x1d0 [ 28.958150] nfnl_compat_get+0x1f7/0x870 [ 28.962703] nfnetlink_rcv_msg+0x9bb/0xc00 [ 28.967434] netlink_rcv_skb+0x125/0x390 [ 28.971985] nfnetlink_rcv+0x1ab/0x1da0 [ 28.976449] netlink_unicast+0x437/0x610 [ 28.981091] netlink_sendmsg+0x648/0xbc0 [ 28.985735] sock_sendmsg+0xb5/0x100 [ 28.989946] ___sys_sendmsg+0x6c8/0x800 [ 28.994414] __sys_sendmsg+0xa3/0x120 [ 28.998808] SyS_sendmsg+0x27/0x40 [ 29.002842] do_syscall_64+0x1d5/0x640 [ 29.007223] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 29.012908] [ 29.012908] -> #0 (&table[i].mutex){+.+.}: [ 29.018601] lock_acquire+0x170/0x3f0 [ 29.022983] __mutex_lock+0xc4/0x1310 [ 29.027278] nf_tables_netdev_event+0x10d/0x4d0 [ 29.032443] notifier_call_chain+0x108/0x1a0 [ 29.037363] rollback_registered_many+0x765/0xbb0 [ 29.042698] unregister_netdevice_many.part.0+0x18/0x2e0 [ 29.048826] unregister_netdevice_many+0x36/0x50 [ 29.054078] rtnl_newlink+0x13fd/0x1830 [ 29.058564] rtnetlink_rcv_msg+0x3be/0xb10 [ 29.063303] netlink_rcv_skb+0x125/0x390 [ 29.067949] netlink_unicast+0x437/0x610 [ 29.072511] netlink_sendmsg+0x648/0xbc0 [ 29.077417] sock_sendmsg+0xb5/0x100 [ 29.081641] ___sys_sendmsg+0x6c8/0x800 [ 29.086275] __sys_sendmsg+0xa3/0x120 [ 29.090577] SyS_sendmsg+0x27/0x40 [ 29.094615] do_syscall_64+0x1d5/0x640 [ 29.099017] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 29.104814] [ 29.104814] other info that might help us debug this: [ 29.104814] [ 29.112937] Chain exists of: [ 29.112937] &table[i].mutex --> &xt[i].mutex --> rtnl_mutex [ 29.112937] [ 29.123144] Possible unsafe locking scenario: [ 29.123144] [ 29.129172] CPU0 CPU1 [ 29.133816] ---- ---- [ 29.138451] lock(rtnl_mutex); [ 29.141703] lock(&xt[i].mutex); [ 29.147647] lock(rtnl_mutex); [ 29.153424] lock(&table[i].mutex); [ 29.157110] [ 29.157110] *** DEADLOCK *** [ 29.157110] [ 29.163137] 1 lock held by syz-executor388/8237: [ 29.167860] #0: (rtnl_mutex){+.+.}, at: [] rtnetlink_rcv_msg+0x31d/0xb10 [ 29.176421] [ 29.176421] stack backtrace: [ 29.180897] CPU: 0 PID: 8237 Comm: syz-executor388 Not tainted 4.14.286-syzkaller #0 [ 29.188747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 29.198072] Call Trace: [ 29.200654] dump_stack+0x1b2/0x281 [ 29.204262] print_circular_bug.constprop.0.cold+0x2d7/0x41e [ 29.210033] __lock_acquire+0x2e0e/0x3f20 [ 29.214174] ? lock_downgrade+0x740/0x740 [ 29.218311] ? unwind_next_frame+0xe54/0x17d0 [ 29.222785] ? trace_hardirqs_on+0x10/0x10 [ 29.227003] ? kernel_text_address+0xbd/0xf0 [ 29.231384] ? __kernel_text_address+0x9/0x30 [ 29.235855] ? unwind_get_return_address+0x51/0x90 [ 29.240765] lock_acquire+0x170/0x3f0 [ 29.244542] ? nf_tables_netdev_event+0x10d/0x4d0 [ 29.249380] ? nf_tables_netdev_event+0x10d/0x4d0 [ 29.254285] __mutex_lock+0xc4/0x1310 [ 29.258062] ? nf_tables_netdev_event+0x10d/0x4d0 [ 29.262891] ? nf_tables_netdev_event+0x10d/0x4d0 [ 29.267714] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 29.273140] ? trace_hardirqs_on+0x10/0x10 [ 29.277351] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 29.282338] ? lock_downgrade+0x740/0x740 [ 29.286459] nf_tables_netdev_event+0x10d/0x4d0 [ 29.291101] ? mirred_device_event+0x141/0x180 [ 29.295657] ? nf_tables_netdev_init_net+0x140/0x140 [ 29.300733] ? mirred_device_event+0x141/0x180 [ 29.305312] ? __local_bh_enable_ip+0xc1/0x170 [ 29.309873] notifier_call_chain+0x108/0x1a0 [ 29.314255] rollback_registered_many+0x765/0xbb0 [ 29.319077] ? netdev_state_change+0xf0/0xf0 [ 29.323544] ? netdev_notify_peers+0xd0/0xd0 [ 29.327925] unregister_netdevice_many.part.0+0x18/0x2e0 [ 29.333346] unregister_netdevice_many+0x36/0x50 [ 29.338073] rtnl_newlink+0x13fd/0x1830 [ 29.342021] ? __lock_acquire+0x5fc/0x3f20 [ 29.346229] ? kasan_slab_free+0xc3/0x1a0 [ 29.350361] ? rtnl_dellink+0x6a0/0x6a0 [ 29.354310] ? netlink_deliver_tap+0x61b/0x860 [ 29.358863] ? netlink_unicast+0x485/0x610 [ 29.363073] ? restore_image+0x4/0x30 [ 29.366854] ? ___sys_sendmsg+0x6c8/0x800 [ 29.370980] ? __sys_sendmsg+0xa3/0x120 [ 29.374939] ? lock_acquire+0x170/0x3f0 [ 29.378886] ? lock_downgrade+0x740/0x740 [ 29.383004] ? rtnl_dellink+0x6a0/0x6a0 [ 29.386951] rtnetlink_rcv_msg+0x3be/0xb10 [ 29.391161] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 29.395627] ? __netlink_lookup+0x345/0x5d0 [ 29.400012] ? netdev_pick_tx+0x2e0/0x2e0 [ 29.404151] netlink_rcv_skb+0x125/0x390 [ 29.408214] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 29.412682] ? netlink_ack+0x9a0/0x9a0 [ 29.416544] netlink_unicast+0x437/0x610 [ 29.420581] ? netlink_sendskb+0xd0/0xd0 [ 29.424626] ? __check_object_size+0x179/0x230 [ 29.429184] netlink_sendmsg+0x648/0xbc0 [ 29.433218] ? nlmsg_notify+0x1b0/0x1b0 [ 29.437164] ? kernel_recvmsg+0x210/0x210 [ 29.441288] ? security_socket_sendmsg+0x83/0xb0 [ 29.446016] ? nlmsg_notify+0x1b0/0x1b0 [ 29.449963] sock_sendmsg+0xb5/0x100 [ 29.453671] ___sys_sendmsg+0x6c8/0x800 [ 29.457627] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 29.462356] ? trace_hardirqs_on+0x10/0x10 [ 29.466565] ? lock_acquire+0x170/0x3f0 [ 29.470515] ? lock_downgrade+0x740/0x740 [ 29.474643] ? __might_fault+0x104/0x1b0 [ 29.478676] ? lock_acquire+0x170/0x3f0 [ 29.482623] ? lock_downgrade+0x740/0x740 [ 29.486839] ? __might_fault+0x177/0x1b0 [ 29.490873] ? _copy_to_user+0x82/0xd0 [ 29.494764] ? move_addr_to_user+0x13f/0x180 [ 29.499144] ? __fdget+0x167/0x1f0 [ 29.502662] ? sockfd_lookup_light+0xb2/0x160 [ 29.507136] __sys_sendmsg+0xa3/0x120 [ 29.510909] ? SyS_shutdown+0x160/0x160 [ 29.514869] ? move_addr_to_kernel+0x60/0x60 [ 29.519250] SyS_sendmsg+0x27/0x40 [ 29.522762] ? __sys_sendmsg+0x120/0x120 [ 29.526797] do_syscall_64+0x1d5/0x640 [ 29.530663] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 29.537137] RIP: 0033:0x7f0416991469 [ 29.540819] RSP: 002b:00007ffe50983598 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 29.548495] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0416991469 [ 29.555741] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 29.562989] RBP: 0000000000000000 R08: 000000000000000d R09: 000000000000000d [ 29.570231] R10: 000000000000000d R11: 0000000000000246 R12: 00007ffe509835b0 [ 29.577575] R13: 00000000000f4240 R14: 0000000000007040 R15: 00007ffe509835a4 executing program executing program [ 29.645963] syz-executor388 (8237) used greatest stack depth: 24856 bytes left [ 29.661580] device bond_slave_0 entered promiscuous mode [ 29.667082] device bond_slave_1 entered promiscuous mode [ 29.673596] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 29.679930] bridge0: port 6(macvlan5) entered blocking state [ 29.686552] bridge0: port 6(macvlan5) entered disabled state executing program [ 29.693863] device macvlan5 entered promiscuous mode [ 29.698952] device bond0 entered promiscuous mode [ 29.705258] bridge0: port 6(macvlan5) entered blocking state [ 29.711063] bridge0: port 6(macvlan5) entered forwarding state [ 29.726126] device team_slave_0 entered promiscuous mode [ 29.731714] device team_slave_1 entered promiscuous mode [ 29.737807] 8021q: adding VLAN 0 to HW filter on device macvlan6 executing program [ 29.744326] bridge0: port 7(macvlan6) entered blocking state [ 29.750157] bridge0: port 7(macvlan6) entered disabled state [ 29.757336] device macvlan6 entered promiscuous mode [ 29.762473] device team0 entered promiscuous mode [ 29.767756] bridge0: port 7(macvlan6) entered blocking state [ 29.773584] bridge0: port 7(macvlan6) entered forwarding state [ 29.788769] device dummy0 entered promiscuous mode executing program executing program executing program [ 29.794162] bridge0: port 8(macvlan7) entered blocking state [ 29.799985] bridge0: port 8(macvlan7) entered disabled state [ 29.807042] device macvlan7 entered promiscuous mode [ 29.812942] bridge0: port 8(macvlan7) entered blocking state [ 29.818737] bridge0: port 8(macvlan7) entered forwarding state executing program executing program executing program [ 29.843325] device batadv0 entered promiscuous mode [ 29.848718] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 29.855429] bridge0: port 9(macvlan8) entered blocking state [ 29.861345] bridge0: port 9(macvlan8) entered disabled state [ 29.867829] device macvlan8 entered promiscuous mode [ 29.873726] bridge0: port 9(macvlan8) entered blocking state [ 29.879529] bridge0: port 9(macvlan8) entered forwarding state executing program [ 29.903639] device veth0 entered promiscuous mode [ 29.908927] bridge0: port 10(macvlan9) entered blocking state [ 29.915525] bridge0: port 10(macvlan9) entered disabled state [ 29.922188] device macvlan9 entered promiscuous mode [ 29.927576] bridge0: port 10(macvlan9) entered blocking state [ 29.933495] bridge0: port 10(macvlan9) entered forwarding state [ 29.947464] device veth1 entered promiscuous mode executing program [ 29.952818] bridge0: port 11(macvlan10) entered blocking state [ 29.958813] bridge0: port 11(macvlan10) entered disabled state [ 29.965809] device macvlan10 entered promiscuous mode [ 29.971287] bridge0: port 11(macvlan10) entered blocking state [ 29.977287] bridge0: port 11(macvlan10) entered forwarding state [ 29.992447] device veth0_to_bridge entered promiscuous mode executing program executing program [ 29.998611] bridge0: port 12(macvlan11) entered blocking state [ 30.004687] bridge0: port 12(macvlan11) entered disabled state [ 30.011127] device macvlan11 entered promiscuous mode [ 30.017172] bridge0: port 12(macvlan11) entered blocking state [ 30.023344] bridge0: port 12(macvlan11) entered forwarding state [ 30.043905] device veth1_to_bridge entered promiscuous mode executing program executing program [ 30.050088] bridge0: port 13(macvlan12) entered blocking state [ 30.056576] bridge0: port 13(macvlan12) entered disabled state [ 30.063232] device macvlan12 entered promiscuous mode [ 30.068774] bridge0: port 13(macvlan12) entered blocking state [ 30.074809] bridge0: port 13(macvlan12) entered forwarding state [ 30.095360] device veth0_to_bond entered promiscuous mode executing program executing program [ 30.102045] bridge0: port 14(macvlan13) entered blocking state [ 30.108050] bridge0: port 14(macvlan13) entered disabled state [ 30.115172] device macvlan13 entered promiscuous mode [ 30.120723] bridge0: port 14(macvlan13) entered blocking state [ 30.126743] bridge0: port 14(macvlan13) entered forwarding state [ 30.146943] device veth1_to_bond entered promiscuous mode executing program executing program [ 30.153143] bridge0: port 15(macvlan14) entered blocking state [ 30.159177] bridge0: port 15(macvlan14) entered disabled state [ 30.166800] device macvlan14 entered promiscuous mode [ 30.172883] bridge0: port 15(macvlan14) entered blocking state [ 30.178887] bridge0: port 15(macvlan14) entered forwarding state [ 30.198660] device veth0_to_team entered promiscuous mode executing program executing program [ 30.204709] bridge0: port 16(macvlan15) entered blocking state [ 30.210706] bridge0: port 16(macvlan15) entered disabled state [ 30.217965] device macvlan15 entered promiscuous mode [ 30.223921] bridge0: port 16(macvlan15) entered blocking state [ 30.229908] bridge0: port 16(macvlan15) entered forwarding state [ 30.249650] device veth1_to_team entered promiscuous mode executing program executing program [ 30.255722] bridge0: port 17(macvlan16) entered blocking state [ 30.261954] bridge0: port 17(macvlan16) entered disabled state [ 30.268398] device macvlan16 entered promiscuous mode [ 30.274179] bridge0: port 17(macvlan16) entered blocking state [ 30.280156] bridge0: port 17(macvlan16) entered forwarding state executing program [ 30.300847] device veth0_to_batadv entered promiscuous mode [ 30.307048] bridge0: port 18(macvlan17) entered blocking state [ 30.313741] bridge0: port 18(macvlan17) entered disabled state [ 30.320188] device macvlan17 entered promiscuous mode [ 30.326186] bridge0: port 18(macvlan17) entered blocking state [ 30.332221] bridge0: port 18(macvlan17) entered forwarding state [ 30.346484] device batadv_slave_0 entered promiscuous mode executing program [ 30.352614] bridge0: port 19(macvlan18) entered blocking state [ 30.358595] bridge0: port 19(macvlan18) entered disabled state [ 30.365624] device macvlan18 entered promiscuous mode [ 30.371119] bridge0: port 19(macvlan18) entered blocking state [ 30.377133] bridge0: port 19(macvlan18) entered forwarding state [ 30.392031] device veth1_to_batadv entered promiscuous mode [ 30.398181] bridge0: port 20(macvlan19) entered blocking state executing program [ 30.404228] bridge0: port 20(macvlan19) entered disabled state [ 30.410787] device macvlan19 entered promiscuous mode [ 30.416773] bridge0: port 20(macvlan19) entered blocking state [ 30.422845] bridge0: port 20(macvlan19) entered forwarding state [ 30.437607] device batadv_slave_1 entered promiscuous mode [ 30.443727] bridge0: port 21(macvlan20) entered blocking state [ 30.449713] bridge0: port 21(macvlan20) entered disabled state executing program [ 30.457006] device macvlan20 entered promiscuous mode [ 30.462753] bridge0: port 21(macvlan20) entered blocking state [ 30.468735] bridge0: port 21(macvlan20) entered forwarding state [ 30.483798] device veth0_to_hsr entered promiscuous mode [ 30.489685] bridge0: port 22(macvlan21) entered blocking state [ 30.496045] bridge0: port 22(macvlan21) entered disabled state executing program executing program [ 30.502787] device macvlan21 entered promiscuous mode [ 30.508266] bridge0: port 22(macvlan21) entered blocking state [ 30.514371] bridge0: port 22(macvlan21) entered forwarding state executing program executing program [ 30.547535] device veth1_to_hsr entered promiscuous mode [ 30.554024] bridge0: port 23(macvlan22) entered blocking state [ 30.560122] bridge0: port 23(macvlan22) entered disabled state [ 30.568870] device macvlan22 entered promiscuous mode [ 30.575286] bridge0: port 23(macvlan22) entered blocking state [ 30.581322] bridge0: port 23(macvlan22) entered forwarding state executing program [ 30.609786] device hsr0 entered promiscuous mode [ 30.615958] bridge0: port 24(macvlan23) entered blocking state [ 30.623558] bridge0: port 24(macvlan23) entered disabled state [ 30.630478] device macvlan23 entered promiscuous mode [ 30.637626] bridge0: port 24(macvlan23) entered blocking state [ 30.643660] bridge0: port 24(macvlan23) entered forwarding state executing program [ 30.670603] device veth1_virt_wifi entered promiscuous mode [ 30.678276] bridge0: port 25(macvlan24) entered blocking state [ 30.689365] bridge0: port 25(macvlan24) entered disabled state [ 30.697024] device macvlan24 entered promiscuous mode [ 30.703637] bridge0: port 25(macvlan24) entered blocking state [ 30.709645] bridge0: port 25(macvlan24) entered forwarding state [ 30.730132] device veth0_virt_wifi entered promiscuous mode [ 30.737575] bridge0: port 26(macvlan25) entered blocking state [ 30.744986] bridge0: port 26(macvlan25) entered disabled state [ 30.752920] device macvlan25 entered promiscuous mode [ 30.758636] bridge0: port 26(macvlan25) entered blocking state [ 30.764660] bridge0: port 26(macvlan25) entered forwarding state executing program [ 30.973902] bridge0: port 27(macvlan26) entered blocking state [ 30.979931] bridge0: port 27(macvlan26) entered disabled state [ 31.012539] device macvlan26 entered promiscuous mode [ 31.018267] bridge0: port 27(macvlan26) entered blocking state executing program [ 31.024308] bridge0: port 27(macvlan26) entered forwarding state executing program [ 31.134347] bridge0: port 28(macvlan27) entered blocking state [ 31.140386] bridge0: port 28(macvlan27) entered disabled state [ 31.162284] device macvlan27 entered promiscuous mode [ 31.167494] device vlan0 entered promiscuous mode [ 31.193227] bridge0: port 28(macvlan27) entered blocking state [ 31.199248] bridge0: port 28(macvlan27) entered forwarding state executing program [ 31.283825] bridge0: port 29(macvlan28) entered blocking state [ 31.289870] bridge0: port 29(macvlan28) entered disabled state [ 31.316381] device macvlan28 entered promiscuous mode [ 31.321597] device vlan1 entered promiscuous mode [ 31.327644] bridge0: port 29(macvlan28) entered blocking state [ 31.333676] bridge0: port 29(macvlan28) entered forwarding state executing program [ 31.423015] bridge0: port 30(macvlan29) entered blocking state [ 31.429061] bridge0: port 30(macvlan29) entered disabled state [ 31.485364] device macvlan29 entered promiscuous mode [ 31.491115] bridge0: port 30(macvlan29) entered blocking state [ 31.497111] bridge0: port 30(macvlan29) entered forwarding state [ 31.534107] HSR: VLAN not yet supported [ 31.534350] ------------[ cut here ]------------ [ 31.543102] WARNING: CPU: 1 PID: 18 at net/hsr/hsr_forward.c:336 hsr_forward_skb.cold+0x18/0xef [ 31.551923] Kernel panic - not syncing: panic_on_warn set ... [ 31.551923] [ 31.559274] CPU: 1 PID: 18 Comm: ksoftirqd/1 Not tainted 4.14.286-syzkaller #0 [ 31.566619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 31.575958] Call Trace: [ 31.578544] dump_stack+0x1b2/0x281 [ 31.582164] panic+0x1f9/0x42d [ 31.585345] ? add_taint.cold+0x16/0x16 [ 31.589311] ? hsr_forward_skb.cold+0x18/0xef [ 31.593811] ? hsr_forward_skb.cold+0x18/0xef [ 31.598293] __warn.cold+0x20/0x44 [ 31.601910] ? ist_end_non_atomic+0x10/0x10 [ 31.606221] ? hsr_forward_skb.cold+0x18/0xef [ 31.610706] report_bug+0x208/0x250 [ 31.614328] do_error_trap+0x195/0x2d0 [ 31.618201] ? math_error+0x2d0/0x2d0 [ 31.621996] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 31.627010] invalid_op+0x1b/0x40 [ 31.630626] RIP: 0010:hsr_forward_skb.cold+0x18/0xef [ 31.635712] RSP: 0018:ffff8880b54b7210 EFLAGS: 00010286 [ 31.641242] RAX: 000000000000001b RBX: ffff8880a8dbb87e RCX: 0000000000000000 [ 31.648588] RDX: 0000000000000100 RSI: 0000000000000002 RDI: ffffed1016a96e38 [ 31.655845] RBP: ffff8880a8dbaa00 R08: 000000000000001b R09: 0000000000000000 [ 31.663100] R10: 0000000000000000 R11: ffff8880b54a64c0 R12: ffff8880a8dbaac6 [ 31.670356] R13: ffff8880aa006f80 R14: ffff8880a8dbb88a R15: ffff8880a8dbaad0 [ 31.677631] ? netif_skb_features+0x4ed/0x9f0 [ 31.682122] hsr_dev_xmit+0x6b/0xa0 [ 31.685736] dev_hard_start_xmit+0x188/0x890 [ 31.690134] __dev_queue_xmit+0x1d7f/0x2480 [ 31.694449] ? cache_alloc_refill+0x2fa/0x350 [ 31.698942] ? deref_stack_reg+0x124/0x1a0 [ 31.703161] ? netdev_pick_tx+0x2e0/0x2e0 [ 31.707290] ? skb_release_data+0xf3/0x820 [ 31.711508] ? skb_headers_offset_update+0x110/0x240 [ 31.716585] ? pskb_expand_head+0x4cc/0xd30 [ 31.720987] macvlan_start_xmit+0x3cc/0x7a0 [ 31.725287] dev_hard_start_xmit+0x188/0x890 [ 31.729672] __dev_queue_xmit+0x1d7f/0x2480 [ 31.733975] ? ebt_do_table+0x13a1/0x1950 [ 31.738096] ? netdev_pick_tx+0x2e0/0x2e0 [ 31.742226] ? trace_hardirqs_on+0x10/0x10 [ 31.746523] ? br_nf_post_routing+0x258/0xdb0 [ 31.751001] ? br_nf_dev_queue_xmit+0x1400/0x1400 [ 31.755830] ? ebt_do_table+0x13a1/0x1950 [ 31.759961] br_dev_queue_push_xmit+0x1cc/0x5e0 [ 31.764612] ? br_fdb_offloaded_set+0x80/0x80 [ 31.769098] ? nf_hook_slow+0xcd/0x1a0 [ 31.772978] br_forward_finish+0x81/0x2f0 [ 31.777112] ? br_dev_queue_push_xmit+0x5e0/0x5e0 [ 31.781930] ? br_fdb_offloaded_set+0x80/0x80 [ 31.786518] ? nf_hook_slow+0xcd/0x1a0 [ 31.790381] __br_forward+0x4f9/0x950 [ 31.794156] ? br_forward_finish+0x2f0/0x2f0 [ 31.798544] ? br_dev_queue_push_xmit+0x5e0/0x5e0 [ 31.803362] ? skb_clone+0x6ac/0x9a0 [ 31.807054] maybe_deliver+0x1a5/0x270 [ 31.810923] br_flood+0x118/0x410 [ 31.814352] br_handle_frame_finish+0xae8/0x15c0 [ 31.819187] ? broute_net_init+0x30/0x30 [ 31.823225] ? br_pass_frame_up+0x600/0x600 [ 31.827537] ? lock_downgrade+0x740/0x740 [ 31.831664] ? nf_hook_slow+0xcd/0x1a0 [ 31.835527] br_handle_frame+0x65f/0x10a0 [ 31.839653] ? debug_object_activate+0x490/0x490 [ 31.844384] ? br_handle_local_finish+0x20/0x20 [ 31.849028] ? br_pass_frame_up+0x600/0x600 [ 31.853326] ? kfree_skbmem+0x98/0x100 [ 31.857190] ? check_preemption_disabled+0x35/0x240 [ 31.862179] ? br_handle_local_finish+0x20/0x20 [ 31.866824] __netif_receive_skb_core+0x730/0x2a30 [ 31.871730] ? trace_hardirqs_on_caller+0x580/0x580 [ 31.876724] ? mod_timer+0x4ec/0xf70 [ 31.880412] ? is_skb_forwardable+0x1e0/0x1e0 [ 31.884885] ? trace_hardirqs_on+0x10/0x10 [ 31.889094] ? lock_acquire+0x170/0x3f0 [ 31.893045] ? lock_downgrade+0x740/0x740 [ 31.897179] ? lock_acquire+0x170/0x3f0 [ 31.901150] ? process_backlog+0x1c2/0x6f0 [ 31.905457] __netif_receive_skb+0x27/0x1a0 [ 31.909783] process_backlog+0x218/0x6f0 [ 31.913843] ? lock_downgrade+0x740/0x740 [ 31.917976] ? check_preemption_disabled+0x35/0x240 [ 31.923495] net_rx_action+0x466/0xfd0 [ 31.927393] ? expire_timers+0x4d0/0x4d0 [ 31.931443] ? napi_gro_frags+0x8f0/0x8f0 [ 31.935604] ? sched_clock+0x2a/0x40 [ 31.939310] ? check_preemption_disabled+0x35/0x240 [ 31.944319] ? check_preemption_disabled+0x35/0x240 [ 31.949324] __do_softirq+0x24d/0x9ff [ 31.953115] ? __local_bh_enable_ip+0x170/0x170 [ 31.957766] run_ksoftirqd+0x50/0x1a0 [ 31.961563] smpboot_thread_fn+0x5c1/0x920 [ 31.965792] ? sort_range+0x30/0x30 [ 31.969413] ? sort_range+0x30/0x30 [ 31.973017] kthread+0x30d/0x420 [ 31.976360] ? kthread_create_on_node+0xd0/0xd0 [ 31.981020] ret_from_fork+0x24/0x30 [ 31.984942] Kernel Offset: disabled [ 31.988553] Rebooting in 86400 seconds..