Warning: Permanently added '10.128.1.226' (ECDSA) to the list of known hosts. [ 34.219414] IPVS: ftp: loaded support on port[0] = 21 [ 34.289219] chnl_net:caif_netlink_parms(): no params data found [ 34.385369] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.391945] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.399618] device bridge_slave_0 entered promiscuous mode [ 34.407124] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.413490] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.421655] device bridge_slave_1 entered promiscuous mode [ 34.438803] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 34.447575] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 34.465355] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 34.473551] team0: Port device team_slave_0 added [ 34.479634] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 34.487326] team0: Port device team_slave_1 added [ 34.502372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.508696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.534903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.546629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.552857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.578780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.589714] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 34.597506] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 34.616362] device hsr_slave_0 entered promiscuous mode [ 34.622137] device hsr_slave_1 entered promiscuous mode [ 34.628492] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 34.635810] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 34.700671] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.707130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.713875] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.720282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.750789] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 34.758333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.766728] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 34.776570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.785319] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.792250] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.800075] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 34.810421] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 34.816862] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.826048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.833754] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.840154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.849860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.857965] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.864346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.879725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.887645] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.898262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.910732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.921275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.932799] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 34.939768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.947808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.955507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.967986] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 34.975453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.982087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.992374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.004703] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 35.014378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.041914] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 35.049338] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 35.056278] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 35.066144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.074786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.081603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.090638] device veth0_vlan entered promiscuous mode [ 35.099124] device veth1_vlan entered promiscuous mode [ 35.105758] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 35.115402] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 35.127191] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 35.136299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.143480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.150940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.160205] device veth0_macvtap entered promiscuous mode [ 35.166949] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 35.175334] device veth1_macvtap entered promiscuous mode [ 35.183378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 35.193152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 35.204420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.211137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.219921] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.230184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.236916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.349325] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 35.356354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.374879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.380812] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 35.391670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 35.399783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.408753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.416463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.428201] [ 35.429820] ============================================ [ 35.435244] WARNING: possible recursive locking detected [ 35.440686] 4.19.211-syzkaller #0 Not tainted [ 35.445157] -------------------------------------------- [ 35.450580] syz-executor970/8091 is trying to acquire lock: [ 35.456264] 00000000309389d1 (_xmit_ETHER#2){+.-.}, at: sch_direct_xmit+0x254/0xf70 [ 35.464042] [ 35.464042] but task is already holding lock: [ 35.469988] 00000000f72df3e7 (_xmit_ETHER#2){+.-.}, at: sch_direct_xmit+0x254/0xf70 [ 35.477764] [ 35.477764] other info that might help us debug this: [ 35.484400] Possible unsafe locking scenario: [ 35.484400] [ 35.490431] CPU0 [ 35.492987] ---- [ 35.495542] lock(_xmit_ETHER#2); [ 35.499057] lock(_xmit_ETHER#2); [ 35.502574] [ 35.502574] *** DEADLOCK *** [ 35.502574] [ 35.508605] May be due to missing lock nesting notation [ 35.508605] [ 35.515508] 9 locks held by syz-executor970/8091: [ 35.520323] #0: 000000003f116d3c (rcu_read_lock_bh){....}, at: ip_finish_output2+0x28d/0x15a0 [ 35.529060] #1: 000000003f116d3c (rcu_read_lock_bh){....}, at: __dev_queue_xmit+0x1e2/0x2e00 [ 35.537711] #2: 0000000088eceec2 (&(&sch->seqlock)->rlock){+...}, at: __dev_queue_xmit+0x278b/0x2e00 [ 35.547055] #3: 00000000ac8de731 (dev->qdisc_running_key ?: &qdisc_running_key){+...}, at: neigh_resolve_output+0x55a/0x910 [ 35.558393] #4: 00000000f72df3e7 (_xmit_ETHER#2){+.-.}, at: sch_direct_xmit+0x254/0xf70 [ 35.566609] #5: 000000003f116d3c (rcu_read_lock_bh){....}, at: ip_finish_output2+0x28d/0x15a0 [ 35.575340] #6: 000000003f116d3c (rcu_read_lock_bh){....}, at: __dev_queue_xmit+0x1e2/0x2e00 [ 35.583986] #7: 00000000b02d8be2 (&(&sch->seqlock)->rlock){+...}, at: __dev_queue_xmit+0x278b/0x2e00 [ 35.593327] #8: 000000009ca40145 (dev->qdisc_running_key ?: &qdisc_running_key){+...}, at: neigh_resolve_output+0x55a/0x910 [ 35.604679] [ 35.604679] stack backtrace: [ 35.609159] CPU: 1 PID: 8091 Comm: syz-executor970 Not tainted 4.19.211-syzkaller #0 [ 35.617025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.626354] Call Trace: [ 35.628923] dump_stack+0x1fc/0x2ef [ 35.632527] __lock_acquire.cold+0x121/0x57e [ 35.636917] ? mark_held_locks+0xf0/0xf0 [ 35.640955] ? __skb_checksum+0x880/0x880 [ 35.645084] ? csum_block_add_ext+0x40/0x40 [ 35.649381] ? reqsk_fastopen_remove+0x580/0x580 [ 35.654114] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 35.659283] ? skb_checksum_help+0x501/0x9c0 [ 35.663670] ? validate_xmit_xfrm+0x3dc/0xe30 [ 35.668144] lock_acquire+0x170/0x3c0 [ 35.671924] ? sch_direct_xmit+0x254/0xf70 [ 35.676144] _raw_spin_lock+0x2a/0x40 [ 35.679922] ? sch_direct_xmit+0x254/0xf70 [ 35.684145] sch_direct_xmit+0x254/0xf70 [ 35.688190] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 35.693272] ? debug_object_active_state+0x254/0x330 [ 35.698352] ? qdisc_destroy+0x790/0x790 [ 35.702395] ? check_preemption_disabled+0x41/0x280 [ 35.707393] ? check_preemption_disabled+0x10/0x280 [ 35.712410] __qdisc_run+0x4d0/0x1640 [ 35.716191] __dev_queue_xmit+0x2102/0x2e00 [ 35.720493] ? neigh_resolve_output+0x55a/0x910 [ 35.725141] ? netdev_pick_tx+0x2f0/0x2f0 [ 35.729271] ? memcpy+0x35/0x50 [ 35.732528] neigh_resolve_output+0x55a/0x910 [ 35.737004] ip_finish_output2+0xd76/0x15a0 [ 35.741309] ? nf_conntrack_eventmask_report+0x700/0x700 [ 35.746748] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 35.751836] ? ip_send_check+0xb0/0xb0 [ 35.755704] ? ip_output+0x3a5/0x5f0 [ 35.759396] ip_finish_output+0xae9/0x10b0 [ 35.763623] ip_output+0x203/0x5f0 [ 35.767141] ? ip_mc_output+0xec0/0xec0 [ 35.771096] ? __call_rcu.constprop.0+0x245/0x7f0 [ 35.775916] ? ip_fragment.constprop.0+0x240/0x240 [ 35.780823] ? prandom_u32+0x171/0x1f0 [ 35.784687] ip_local_out+0xaf/0x170 [ 35.788377] iptunnel_xmit+0x63b/0x9d0 [ 35.792251] ? skb_clone+0x20/0x3d0 [ 35.795878] ip_tunnel_xmit+0x13ad/0x3850 [ 35.800004] ? ip_md_tunnel_xmit+0x12a0/0x12a0 [ 35.804562] ? __gre_xmit+0x52c/0x8d0 [ 35.808338] erspan_xmit+0xd6e/0x27e0 [ 35.812192] ? netif_skb_features+0x5c1/0xb30 [ 35.816676] ? ipgre_header+0x3c0/0x3c0 [ 35.820633] ? __skb_gso_segment+0x720/0x720 [ 35.825022] ? validate_xmit_xfrm+0x3dc/0xe30 [ 35.829499] ? __lock_acquire+0x6de/0x3ff0 [ 35.833723] ? check_preemption_disabled+0x41/0x280 [ 35.838719] dev_hard_start_xmit+0x1a8/0x920 [ 35.843124] sch_direct_xmit+0x2d6/0xf70 [ 35.847167] ? inet_addr_type_dev_table+0x129/0x570 [ 35.852160] ? qdisc_destroy+0x790/0x790 [ 35.856199] ? check_preemption_disabled+0x41/0x280 [ 35.861207] ? check_preemption_disabled+0x10/0x280 [ 35.866218] __qdisc_run+0x4d0/0x1640 [ 35.869998] __dev_queue_xmit+0x2102/0x2e00 [ 35.874298] ? neigh_resolve_output+0x55a/0x910 [ 35.878943] ? check_preemption_disabled+0x41/0x280 [ 35.883982] ? netdev_pick_tx+0x2f0/0x2f0 [ 35.888117] ? lock_downgrade+0x720/0x720 [ 35.892255] ? memcpy+0x35/0x50 [ 35.895522] neigh_resolve_output+0x55a/0x910 [ 35.899999] ip_finish_output2+0xd76/0x15a0 [ 35.904304] ? nf_conntrack_eventmask_report+0x700/0x700 [ 35.909764] ? ip_send_check+0xb0/0xb0 [ 35.913631] ? ip_output+0x3a5/0x5f0 [ 35.917323] ip_finish_output+0xae9/0x10b0 [ 35.921535] ip_output+0x203/0x5f0 [ 35.925064] ? ip_mc_output+0xec0/0xec0 [ 35.929015] ? ip_fragment.constprop.0+0x240/0x240 [ 35.933920] ? ip_do_fragment+0x2620/0x2620 [ 35.938218] ip_local_out+0xaf/0x170 [ 35.941909] ip_send_skb+0x3e/0xe0 [ 35.945439] udp_send_skb+0x6a4/0x1170 [ 35.949309] udp_sendmsg+0x1cb4/0x2550 [ 35.953179] ? ip_do_fragment+0x2620/0x2620 [ 35.957489] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 35.963357] ? udp_seq_next+0x80/0x80 [ 35.967142] ? mark_held_locks+0xf0/0xf0 [ 35.971184] ? check_preemption_disabled+0x41/0x280 [ 35.976180] ? mark_held_locks+0xa6/0xf0 [ 35.980220] ? __lock_acquire+0x6de/0x3ff0 [ 35.984447] udpv6_sendmsg+0x14b2/0x2ae0 [ 35.988488] ? __lock_acquire+0x6de/0x3ff0 [ 35.992702] ? udp_v6_push_pending_frames+0x360/0x360 [ 35.997876] ? __x64_sys_connect+0x6f/0xb0 [ 36.002087] ? do_syscall_64+0xf9/0x620 [ 36.006039] ? aa_label_sk_perm+0xf1/0x510 [ 36.010263] ? aa_profile_af_perm+0x2e0/0x2e0 [ 36.014735] ? __ip_dev_find+0x1d5/0x410 [ 36.018774] ? rt_set_nexthop.constprop.0+0x59c/0xf10 [ 36.023944] ? rw_copy_check_uvector+0x27c/0x340 [ 36.028681] ? aa_sk_perm+0x534/0x930 [ 36.032458] ? aa_af_perm+0x230/0x230 [ 36.036249] ? kernel_recvmsg+0x220/0x220 [ 36.040389] inet_sendmsg+0x132/0x5a0 [ 36.044175] ? security_socket_sendmsg+0x83/0xb0 [ 36.048911] ? inet_recvmsg+0x5c0/0x5c0 [ 36.052871] sock_sendmsg+0xc3/0x120 [ 36.056571] ___sys_sendmsg+0x3b3/0x8e0 [ 36.060527] ? copy_msghdr_from_user+0x440/0x440 [ 36.065266] ? mark_held_locks+0xf0/0xf0 [ 36.069309] ? __lock_acquire+0x6de/0x3ff0 [ 36.073704] ? udp_lib_rehash+0x44f/0x620 [ 36.077856] ? mark_held_locks+0xf0/0xf0 [ 36.081898] ? __local_bh_enable_ip+0x159/0x270 [ 36.086547] ? reacquire_held_locks+0xb5/0x430 [ 36.091109] ? release_sock+0x1b/0x1b0 [ 36.095065] ? udp6_seq_show+0x1f0/0x1f0 [ 36.099106] ? __fdget+0x1a0/0x230 [ 36.102637] __sys_sendmmsg+0x195/0x470 [ 36.106604] ? __ia32_sys_sendmsg+0x220/0x220 [ 36.111077] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 36.115635] ? ip6_datagram_connect+0x36/0x40 [ 36.120105] ? __sys_connect+0x140/0x2c0 [ 36.124150] ? __ia32_sys_accept+0xb0/0xb0 [ 36.128383] ? __sys_socket+0x16d/0x200 [ 36.132334] ? move_addr_to_kernel+0x70/0x70 [ 36.136722] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 36.142064] __x64_sys_sendmmsg+0x99/0x100 [ 36.146279] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 36.150840] do_syscall_64+0xf9/0x620 [ 36.154627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 36.159795] RIP: 0033:0x7fd94fe4eaa9 [ 36.163485] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 36.182359] RSP: 002b:00007fff36cb4548 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 36.190047] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd94fe4eaa9 [ 36.197303] RDX: 0000000000000001 RSI: 0000000020004d80 RDI: 0000