[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.95' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 34.813975] netlink: 'syz-executor692': attribute type 1 has an invalid length. [ 34.862737] IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready [ 34.874289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.911515] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 34.940732] netlink: 'syz-executor692': attribute type 1 has an invalid length. [ 35.097333] IPv6: ADDRCONF(NETDEV_UP): bond2: link is not ready [ 35.127379] 8021q: adding VLAN 0 to HW filter on device bond2 [ 35.217780] bond1: Enslaving vlan1 as an active interface with an up link executing program [ 35.262249] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 35.277812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.294250] [ 35.295883] ============================================ [ 35.301317] WARNING: possible recursive locking detected [ 35.306756] 4.19.211-syzkaller #0 Not tainted [ 35.311271] -------------------------------------------- [ 35.316706] kworker/1:0/19 is trying to acquire lock: [ 35.321878] 00000000a85d965e (&vlan_netdev_addr_lock_key/1){+...}, at: dev_uc_sync_multiple+0x11a/0x1e0 [ 35.331413] [ 35.331413] but task is already holding lock: [ 35.337358] 00000000360c7177 (&vlan_netdev_addr_lock_key/1){+...}, at: dev_mc_add+0x1f/0xb0 [ 35.345831] [ 35.345831] other info that might help us debug this: [ 35.352467] Possible unsafe locking scenario: [ 35.352467] [ 35.358499] CPU0 [ 35.361061] ---- [ 35.363615] lock(&vlan_netdev_addr_lock_key/1); [ 35.368431] lock(&vlan_netdev_addr_lock_key/1); [ 35.373251] [ 35.373251] *** DEADLOCK *** [ 35.373251] [ 35.379291] May be due to missing lock nesting notation [ 35.379291] [ 35.386190] 7 locks held by kworker/1:0/19: [ 35.390483] #0: 0000000029972925 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x767/0x1570 [ 35.400870] #1: 0000000059397c77 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}, at: process_one_work+0x79c/0x1570 [ 35.411775] #2: 0000000012b85e13 (rtnl_mutex){+.+.}, at: addrconf_dad_work+0x9c/0x10a0 [ 35.419904] #3: 00000000e221e088 (&(&mc->mca_lock)->rlock){+.-.}, at: igmp6_group_added+0x154/0x5d0 [ 35.429160] #4: 00000000360c7177 (&vlan_netdev_addr_lock_key/1){+...}, at: dev_mc_add+0x1f/0xb0 [ 35.438066] #5: 00000000e3955c7f (&dev_addr_list_lock_key/3){+...}, at: dev_mc_sync+0x11a/0x1e0 [ 35.446974] #6: 00000000e4aed9a9 (rcu_read_lock){....}, at: bond_set_rx_mode+0x0/0x490 [ 35.455102] [ 35.455102] stack backtrace: [ 35.459584] CPU: 1 PID: 19 Comm: kworker/1:0 Not tainted 4.19.211-syzkaller #0 [ 35.466918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 35.476257] Workqueue: ipv6_addrconf addrconf_dad_work [ 35.481508] Call Trace: [ 35.484074] dump_stack+0x1fc/0x2ef [ 35.487682] __lock_acquire.cold+0x121/0x57e [ 35.492070] ? ret_from_fork+0x24/0x30 [ 35.495935] ? mark_held_locks+0xf0/0xf0 [ 35.499972] ? add_lock_to_list.constprop.0+0x17d/0x330 [ 35.505311] ? save_trace+0xd6/0x290 [ 35.509010] ? mark_held_locks+0xf0/0xf0 [ 35.513050] ? __lock_acquire+0x22f9/0x3ff0 [ 35.517351] ? __lock_acquire+0x22f9/0x3ff0 [ 35.521650] lock_acquire+0x170/0x3c0 [ 35.525427] ? dev_uc_sync_multiple+0x11a/0x1e0 [ 35.530073] _raw_spin_lock_nested+0x30/0x40 [ 35.534459] ? dev_uc_sync_multiple+0x11a/0x1e0 [ 35.539105] dev_uc_sync_multiple+0x11a/0x1e0 [ 35.543575] bond_set_rx_mode+0x1ae/0x490 [ 35.547713] ? bond_get_stats+0x500/0x500 [ 35.551838] ? __hw_addr_sync_one+0x95/0x150 [ 35.556220] ? __hw_addr_sync_one+0x115/0x150 [ 35.560690] ? bond_get_stats+0x500/0x500 [ 35.564814] __dev_set_rx_mode+0x1d9/0x2f0 [ 35.569029] dev_mc_sync+0x193/0x1e0 [ 35.572719] ? vlan_dev_set_mac_address+0x5e0/0x5e0 [ 35.577709] vlan_dev_set_rx_mode+0x38/0x80 [ 35.582016] __dev_set_rx_mode+0x1d9/0x2f0 [ 35.586233] dev_mc_add+0xa1/0xb0 [ 35.589665] igmp6_group_added+0x4bc/0x5d0 [ 35.593875] ? ipv6_mc_netdev_event+0x480/0x480 [ 35.598521] ? mark_held_locks+0xa6/0xf0 [ 35.602566] ? __local_bh_enable_ip+0x159/0x270 [ 35.607215] __ipv6_dev_mc_inc+0x728/0xa80 [ 35.611434] addrconf_dad_work+0xb7d/0x10a0 [ 35.615733] ? addrconf_dad_completed+0xb60/0xb60 [ 35.620564] process_one_work+0x864/0x1570 [ 35.624779] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 35.629428] worker_thread+0x64c/0x1130 [ 35.633379] ? process_one_work+0x1570/0x1570 [ 35.637852] kthread+0x33f/0x460 [ 35.641194] ? kthread_park+0x180/0x180 [ 35.645146] ret_from_fork+0x24/0x30 [ 35.666972] netlink: 'syz-executor692': attribute type 1 has an invalid length. [ 35.676591] bond3 (uninitialized): Released all slaves [ 35.684834] netlink: 'syz-executor692': attribute type 1 has an invalid length. executing program [ 35.754764] IPv6: ADDRCONF(NETDEV_UP): bond3: link is not ready [ 35.760863] 8021q: adding VLAN 0 to HW filter on device bond3 [ 35.782392] bond1: Enslaving vlan2 as an active interface with an up link [ 35.814695] netlink: 'syz-executor692': attribute type 1 has an invalid length. [ 35.847269] bond4 (uninitialized): Released all slaves [ 35.888717] netlink: 'syz-executor692': attribute type 1 has an invalid length. executing program [ 36.024686] IPv6: ADDRCONF(NETDEV_UP): bond4: link is not ready [ 36.033923] 8021q: adding VLAN 0 to HW filter on device bond4 [ 36.058662] bond1: Enslaving vlan3 as an active interface with an up link [ 36.090364] netlink: 'syz-executor692': attribute type 1 has an invalid length. [ 36.117033] bond5 (uninitialized): Released all slaves [ 36.133537] netlink: 'syz-executor692': attribute type 1 has an invalid length. [ 36.221020] IPv6: ADDRCONF(NETDEV_UP): bond5: link is not ready [ 36.236802] 8021q: adding VLAN 0 to HW filter on device bond5 executing program [ 36.269243] bond1: Enslaving vlan4 as an active interface with an up link [ 36.328104] netlink: 'syz-executor692': attribute type 1 has an invalid length. [ 36.392377] bond6 (uninitialized): Released all slaves [ 36.399709] netlink: 'syz-executor692': attribute type 1 has an invalid length. executing program [ 36.484636] IPv6: ADDRCONF(NETDEV_UP): bond6: link is not ready [ 36.491083] 8021q: adding VLAN 0 to HW filter on device bond6 [ 36.516041] bond1: Enslaving vlan5 as an active interface with an up link [ 36.541327] bond7 (uninitialized): Released all slaves [ 36.666069] IPv6: ADDRCONF(NETDEV_UP): bond7: link is not ready [ 36.696945] 8021q: adding VLAN 0 to HW filter on device bond7 [ 36.750780] bond1: Enslaving vlan6 as an active interface with an up link executing program [ 36.829412] bond8 (uninitialized): Released all slaves [ 36.920475] IPv6: ADDRCONF(NETDEV_UP): bond8: link is not ready [ 36.927895] 8021q: adding VLAN 0 to HW filter on device bond8 executing program [ 36.979899] bond1: Enslaving vlan7 as an active interface with an up link [ 37.020929] bond9 (uninitialized): Released all slaves [ 37.165123] IPv6: ADDRCONF(NETDEV_UP): bond9: link is not ready [ 37.171222] 8021q: adding VLAN 0 to HW filter on device bond9 executing program [ 37.206110] bond1: Enslaving vlan8 as an active interface with an up link [ 37.248949] bond10 (uninitialized): Released all slaves [ 37.328312] IPv6: ADDRCONF(NETDEV_UP): bond10: link is not ready [ 37.347808] 8021q: adding VLAN 0 to HW filter on device bond10 executing program [ 37.422788] bond1: Enslaving vlan9 as an active interface with an up link [ 37.475581] bond11 (uninitialized): Released all slaves [ 37.582983] IPv6: ADDRCONF(NETDEV_UP): bond11: link is not ready [ 37.589164] 8021q: adding VLAN 0 to HW filter on device bond11 executing program [ 37.659035] bond1: Enslaving vlan10 as an active interface with an up link [ 37.707468] bond12 (uninitialized): Released all slaves [ 37.827782] IPv6: ADDRCONF(NETDEV_UP): bond12: link is not ready [ 37.846174] 8021q: adding VLAN 0 to HW filter on device bond12 executing program [ 37.909775] bond1: Enslaving vlan11 as an active interface with an up link [ 37.956134] bond13 (uninitialized): Released all slaves [ 38.070089] IPv6: ADDRCONF(NETDEV_UP): bond13: link is not ready [ 38.077073] 8021q: adding VLAN 0 to HW filter on device bond13 executing program [ 38.120671] bond1: Enslaving vlan12 as an active interface with an up link [ 38.151355] bond14 (uninitialized): Released all slaves [ 38.249494] IPv6: ADDRCONF(NETDEV_UP): bond14: link is not ready [ 38.270522] 8021q: adding VLAN 0 to HW filter on device bond14 executing program [ 38.305199] bond1: Enslaving vlan13 as an active interface with an up link [ 38.360293] bond15 (uninitialized): Released all slaves [ 38.484050] IPv6: ADDRCONF(NETDEV_UP): bond15: link is not ready [ 38.490238] 8021q: adding VLAN 0 to HW filter on device bond15 executing program [ 38.556359] bond1: Enslaving vlan14 as an active interface with an up link [ 38.624095] bond16 (uninitialized): Released all slaves executing program [ 38.757807] IPv6: ADDRCONF(NETDEV_UP): bond16: link is not ready [ 38.778869] 8021q: adding VLAN 0 to HW filter on device bond16 [ 38.799856] bond1: Enslaving vlan15 as an active interface with an up link [ 38.831257] bond17 (uninitialized): Released all slaves [ 38.957478] IPv6: ADDRCONF(NETDEV_UP): bond17: link is not ready [ 38.982121] 8021q: adding VLAN 0 to HW filter on device bond17 executing program [ 39.025882] bond1: Enslaving vlan16 as an active interface with an up link [ 39.065551] bond18 (uninitialized): Released all slaves [ 39.174674] IPv6: ADDRCONF(NETDEV_UP): bond18: link is not ready [ 39.187462] 8021q: adding VLAN 0 to HW filter on device bond18 executing program [ 39.249086] bond1: Enslaving vlan17 as an active interface with an up link [ 39.311976] bond19 (uninitialized): Released all slaves [ 39.419010] IPv6: ADDRCONF(NETDEV_UP): bond19: link is not ready [ 39.444244] 8021q: adding VLAN 0 to HW filter on device bond19 executing program [ 39.486337] bond1: Enslaving vlan18 as an active interface with an up link [ 39.555183] bond20 (uninitialized): Released all slaves executing program [ 39.661646] IPv6: ADDRCONF(NETDEV_UP): bond20: link is not ready [ 39.668011] 8021q: adding VLAN 0 to HW filter on device bond20 [ 39.700428] bond1: Enslaving vlan19 as an active interface with an up link [ 39.739870] bond21 (uninitialized): Released all slaves [ 39.860610] IPv6: ADDRCONF(NETDEV_UP): bond21: link is not ready [ 39.867283] 8021q: adding VLAN 0 to HW filter on device bond21 executing program [ 39.904295] bond1: Enslaving vlan20 as an active interface with an up link [ 39.945958] validate_nla: 30 callbacks suppressed [ 39.945965] netlink: 'syz-executor692': attribute type 1 has an invalid length. [ 40.000238] bond22 (uninitialized): Released all slaves [ 40.021872] netlink: 'syz-executor692': attribute type 1 has an invalid length. executing program [ 40.137041] IPv6: ADDRCONF(NETDEV_UP): bond22: link is not ready [ 40.143580] 8021q: adding VLAN 0 to HW filter on device bond22 [ 40.176440] bond1: Enslaving vlan21 as an active interface with an up link [ 40.217149] netlink: 'syz-executor692': attribute type 1 has an invalid length. [ 40.254547] bond23 (uninitialized): Released all slaves [ 40.264398] netlink: 'syz-executor692': attribute type 1 has an invalid length. [ 40.370533] IPv6: ADDRCONF(NETDEV_UP): bond23: link is not ready [ 40.376763] 8021q: adding VLAN 0 to HW filter on device bond23 executing program [ 40.425889] bond1: Enslaving vlan22 as an active interface with an up link [ 40.469519] netlink: 'syz-executor692': attribute type 1 has an invalid length. [ 40.490264] bond24 (uninitialized): Released all slaves [ 40.498662] netlink: 'syz-executor692': attribute type 1 has an invalid length. executing program [ 40.599203] IPv6: ADDRCONF(NETDEV_UP): bond24: link is not ready [ 40.610278] 8021q: adding VLAN 0 to HW filter on device bond24 [ 40.629732] bond1: Enslaving vlan23 as an active interface with an up link [ 40.657484] netlink: 'syz-executor692': attribute type 1 has an invalid length. [ 40.693521] bond25 (uninitialized): Released all slaves [ 40.713883] netlink: 'syz-executor692': attribute type 1 has an invalid length. executing program [ 40.844203] IPv6: ADDRCONF(NETDEV_UP): bond25: link is not ready [ 40.852432] 8021q: adding VLAN 0 to HW filter on device bond25 [ 40.878333] bond1: Enslaving vlan24 as an active interface with an up link [ 40.899147] netlink: 'syz-executor692': attribute type 1 has an invalid length. [ 40.935390] bond26 (uninitialized): Released all slaves [ 40.961077] netlink: 'syz-executor692': attribute type 1 has an invalid length. [ 41.048231] IPv6: ADDRCONF(NETDEV_UP): bond26: link is not ready [ 41.055648] 8021q: adding VLAN 0 to HW filter on device bond26 executing program [ 41.091039] bond1: Enslaving vlan25 as an active interface with an up link [ 41.130401] bond27 (uninitialized): Released all slaves [ 41.272452] IPv6: ADDRCONF(NETDEV_UP): bond27: link is not ready [ 41.278639] 8021q: adding VLAN 0 to HW filter on device bond27 executing program [ 41.316028] bond1: Enslaving vlan26 as an active interface with an up link [ 41.334534] bond28 (uninitialized): Released all slaves [ 41.464480] IPv6: ADDRCONF(NETDEV_UP): bond28: link is not ready [ 41.487998] 8021q: adding VLAN 0 to HW filter on device bond28 executing program [ 41.552282] bond1: Enslaving vlan27 as an active interface with an up link [ 41.612683] bond29 (uninitialized): Released all slaves [ 41.727966] IPv6: ADDRCONF(NETDEV_UP): bond29: link is not ready [ 41.750272] 8021q: adding VLAN 0 to HW filter on device bond29 executing program [ 41.787184] bond1: Enslaving vlan28 as an active interface with an up link [ 41.824060] bond30 (uninitialized): Released all slaves [ 41.928672] IPv6: ADDRCONF(NETDEV_UP): bond30: link is not ready [ 41.960163] 8021q: adding VLAN 0 to HW filter on device bond30 executing program [ 41.995437] bond1: Enslaving vlan29 as an active interface with an up link [ 42.053115] bond31 (uninitialized): Released all slaves [ 42.151015] IPv6: ADDRCONF(NETDEV_UP): bond31: link is not ready [ 42.183758] 8021q: adding VLAN 0 to HW filter on device bond31 executing program [ 42.251117] bond1: Enslaving vlan30 as an active interface with an up link [ 42.309741] bond32 (uninitialized): Released all slaves executing program [ 42.434003] IPv6: ADDRCONF(NETDEV_UP): bond32: link is not ready [ 42.443847] 8021q: adding VLAN 0 to HW filter on device bond32 [ 42.463995] bond1: Enslaving vlan31 as an active interface with an up link [ 42.481268] bond33 (uninitialized): Released all slaves [ 42.580874] IPv6: ADDRCONF(NETDEV_UP): bond33: link is not ready [ 42.605500] 8021q: adding VLAN 0 to HW filter on device bond33 executing program [ 42.686508] bond1: Enslaving vlan32 as an active interface with an up link [ 42.733836] bond34 (uninitialized): Released all slaves [ 42.798789] IPv6: ADDRCONF(NETDEV_UP): bond34: link is not ready [ 42.830432] 8021q: adding VLAN 0 to HW filter on device bond34 executing program [ 42.878382] bond1: Enslaving vlan33 as an active interface with an up link [ 42.939953] bond35 (uninitialized): Released all slaves [ 43.080789] IPv6: ADDRCONF(NETDEV_UP): bond35: link is not ready [ 43.087078] 8021q: adding VLAN 0 to HW filter on device bond35 executing program [ 43.136216] bond1: Enslaving vlan34 as an active interface with an up link [ 43.165361] bond36 (uninitialized): Released all slaves [ 43.277952] IPv6: ADDRCONF(NETDEV_UP): bond36: link is not ready [ 43.291811] 8021q: adding VLAN 0 to HW filter on device bond36 executing program [ 43.337250] bond1: Enslaving vlan35 as an active interface with an up link [ 43.395098] bond37 (uninitialized): Released all slaves [ 43.490289] IPv6: ADDRCONF(NETDEV_UP): bond37: link is not ready [ 43.496476] 8021q: adding VLAN 0 to HW filter on device bond37 executing program [ 43.537604] bond1: Enslaving vlan36 as an active interface with an up link [ 43.599592] bond38 (uninitialized): Released all slaves [ 43.719609] IPv6: ADDRCONF(NETDEV_UP): bond38: link is not ready [ 43.725803] 8021q: adding VLAN 0 to HW filter on device bond38 executing program [ 43.802848] bond1: Enslaving vlan37 as an active interface with an up link [ 43.859532] bond39 (uninitialized): Released all slaves [ 43.968183] IPv6: ADDRCONF(NETDEV_UP): bond39: link is not ready [ 43.987329] 8021q: adding VLAN 0 to HW filter on device bond39 executing program [ 44.014166] bond1: Enslaving vlan38 as an active interface with an up link [ 44.069458] bond40 (uninitialized): Released all slaves executing program [ 44.198959] IPv6: ADDRCONF(NETDEV_UP): bond40: link is not ready [ 44.212965] 8021q: adding VLAN 0 to HW filter on device bond40 [ 44.234300] bond1: Enslaving vlan39 as an active interface with an up link [ 44.288704] bond41 (uninitialized): Released all slaves [ 44.406602] IPv6: ADDRCONF(NETDEV_UP): bond41: link is not ready [ 44.427730] 8021q: adding VLAN 0 to HW filter on device bond41 executing program [ 44.472642] bond1: Enslaving vlan40 as an active interface with an up link [ 44.510011] bond42 (uninitialized): Released all slaves [ 44.613943] IPv6: ADDRCONF(NETDEV_UP): bond42: link is not ready [ 44.631490] 8021q: adding VLAN 0 to HW filter on device bond42 executing program [ 44.671339] bond1: Enslaving vlan41 as an active interface with an up link [ 44.729436] bond43 (uninitialized): Released all slaves [ 44.830502] IPv6: ADDRCONF(NETDEV_UP): bond43: link is not ready [ 44.864489] 8021q: adding VLAN 0 to HW filter on device bond43 executing program [ 44.914528] bond1: Enslaving vlan42 as an active interface with an up link [ 44.953796] validate_nla: 34 callbacks suppressed [ 44.953804] netlink: 'syz-executor692': attribute type 1 has an invalid length. [ 45.009375] bond44 (uninitialized): Released all slaves [ 45.015893] netlink: 'syz-executor692': attribute type 1 has an invalid length. executing program [ 45.117252] IPv6: ADDRCONF(NETDEV_UP): bond44: link is not ready [ 45.126369] 8021q: adding VLAN 0 to HW filter on device bond44 [ 45.149327] bond1: Enslaving vlan43 as an active interface with an up link [ 45.180855] netlink: 'syz-executor692': attribute type 1 has an invalid length. [ 45.191578] bond45 (uninitialized): Released all slaves [ 45.208312] netlink: 'syz-executor692': attribute type 1 has an invalid length.