DUID 00:04:fd:d1:b1:d5:68:a0:3a:5f:50:0a:64:49:ea:42:3f:75 forked to background, child pid 3172 [ 22.527375][ T3173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.541712][ T3173] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.196' (ED25519) to the list of known hosts. 2024/07/20 18:46:35 ignoring optional flag "sandboxArg"="0" 2024/07/20 18:46:35 parsed 1 programs syzkaller login: [ 43.736184][ T3503] cgroup: Unknown subsys name 'net' [ 43.894536][ T3503] cgroup: Unknown subsys name 'rlimit' [ 45.157020][ T3503] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 46.867583][ T3533] chnl_net:caif_netlink_parms(): no params data found [ 46.911126][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.918622][ T3533] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.926928][ T3533] device bridge_slave_0 entered promiscuous mode [ 46.937494][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.944673][ T3533] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.952508][ T3533] device bridge_slave_1 entered promiscuous mode [ 46.972538][ T3533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.984845][ T3533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.006591][ T3533] team0: Port device team_slave_0 added [ 47.014051][ T3533] team0: Port device team_slave_1 added [ 47.029855][ T3533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.036799][ T3533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.062996][ T3533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.077082][ T3533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.084167][ T3533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.110217][ T3533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.140428][ T3533] device hsr_slave_0 entered promiscuous mode [ 47.147182][ T3533] device hsr_slave_1 entered promiscuous mode [ 47.232949][ T3533] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.244312][ T3533] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.254390][ T3533] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.264596][ T3533] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.290764][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.297940][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.305836][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.312939][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.368695][ T3533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.383772][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.395690][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.405689][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.420788][ T3533] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.433765][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.442725][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.449813][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.473938][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.482844][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.489936][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.498629][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.518445][ T3533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.531491][ T3533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.545288][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.553809][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.562312][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.571487][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.583613][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.670633][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.678114][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.695501][ T3533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.716552][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.727738][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.747456][ T3533] device veth0_vlan entered promiscuous mode [ 47.757076][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.766093][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.778967][ T3533] device veth1_vlan entered promiscuous mode [ 47.787344][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.795936][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.804299][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.829806][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.837843][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.846778][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.856170][ T3533] device veth0_macvtap entered promiscuous mode [ 47.869158][ T3533] device veth1_macvtap entered promiscuous mode [ 47.886647][ T3533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.895776][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.904985][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.914161][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.922803][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.934014][ T3533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.942617][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.952057][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.963128][ T3533] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.981759][ T3533] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.991075][ T3533] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.999808][ T3533] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.413150][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.762470][ T1382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.776548][ T1382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.787394][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.788077][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.796147][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.811574][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2024/07/20 18:46:42 executed programs: 0 [ 49.156283][ T3583] chnl_net:caif_netlink_parms(): no params data found [ 49.196652][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.203817][ T3583] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.211657][ T3583] device bridge_slave_0 entered promiscuous mode [ 49.220204][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.227297][ T3583] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.235341][ T3583] device bridge_slave_1 entered promiscuous mode [ 49.253805][ T3583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.265971][ T3583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.289969][ T3583] team0: Port device team_slave_0 added [ 49.297217][ T3583] team0: Port device team_slave_1 added [ 49.312998][ T3583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.320371][ T3583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.346645][ T3583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.360393][ T3583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.367336][ T3583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.393605][ T3583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.422235][ T3583] device hsr_slave_0 entered promiscuous mode [ 49.429235][ T3583] device hsr_slave_1 entered promiscuous mode [ 49.435954][ T3583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.443925][ T3583] Cannot create hsr debugfs directory [ 50.585347][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.090173][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 53.124153][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.165392][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.176015][ T26] Bluetooth: hci0: command 0x041b tx timeout [ 54.093423][ T3583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.102568][ T3583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.111273][ T3583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.130274][ T3583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.179251][ T154] device hsr_slave_0 left promiscuous mode [ 54.186024][ T154] device hsr_slave_1 left promiscuous mode [ 54.192508][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.200280][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.208538][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.218613][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.226825][ T154] device bridge_slave_1 left promiscuous mode [ 54.233918][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.245879][ T154] device bridge_slave_0 left promiscuous mode [ 54.253108][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.268568][ T154] device veth1_macvtap left promiscuous mode [ 54.274936][ T154] device veth0_macvtap left promiscuous mode [ 54.281061][ T154] device veth1_vlan left promiscuous mode [ 54.286964][ T154] device veth0_vlan left promiscuous mode [ 54.412547][ T154] team0 (unregistering): Port device team_slave_1 removed [ 54.427932][ T154] team0 (unregistering): Port device team_slave_0 removed [ 54.440632][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.454475][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.499566][ T154] bond0 (unregistering): Released all slaves [ 54.550517][ T3583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.562494][ T3539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.570237][ T3539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.580209][ T3583] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.590900][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.600032][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.608417][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.615495][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.624121][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.638744][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.648557][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.658070][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.665160][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.672778][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.689567][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.698152][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.707477][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.716231][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.724794][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.733518][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.741867][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.751128][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.762577][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.771169][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.781721][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.848598][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.856750][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.866819][ T3583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.883525][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.892495][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.917912][ T3583] device veth0_vlan entered promiscuous mode [ 54.925438][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.935120][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.949539][ T3583] device veth1_vlan entered promiscuous mode [ 54.957950][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.967787][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.976035][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.001834][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.010718][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.019236][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.032502][ T3583] device veth0_macvtap entered promiscuous mode [ 55.045189][ T3583] device veth1_macvtap entered promiscuous mode [ 55.062511][ T3583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.071209][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.079266][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.088942][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.097988][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.110271][ T3583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.122146][ T3583] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.131465][ T3583] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.140553][ T3583] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.149238][ T3583] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.160760][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.170388][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.226984][ T1382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.242165][ T1382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.249943][ T3601] Bluetooth: hci0: command 0x040f tx timeout 2024/07/20 18:46:49 executed programs: 2 [ 55.277393][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.287147][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.296608][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.307285][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.409479][ T3601] Bluetooth: hci1: command 0x1003 tx timeout [ 57.415591][ T3567] Bluetooth: hci1: sending frame failed (-49) [ 59.410363][ T3601] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 59.418733][ T3601] Bluetooth: hci0: Injecting HCI hardware error event [ 59.426623][ T3567] Bluetooth: hci0: hardware error 0x00 [ 59.489629][ T3601] Bluetooth: hci1: command 0x1001 tx timeout [ 59.495700][ T3634] Bluetooth: hci1: sending frame failed (-49) [ 61.569443][ T3601] Bluetooth: hci1: command 0x1009 tx timeout [ 65.446372][ T3636] chnl_net:caif_netlink_parms(): no params data found [ 65.481537][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.488617][ T3636] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.496499][ T3636] device bridge_slave_0 entered promiscuous mode [ 65.504911][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.515778][ T3636] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.524193][ T3636] device bridge_slave_1 entered promiscuous mode [ 65.532053][ T3567] [ 65.534387][ T3567] ============================================ [ 65.540521][ T3567] WARNING: possible recursive locking detected [ 65.546649][ T3567] 5.15.163-syzkaller #0 Not tainted [ 65.551903][ T3567] -------------------------------------------- [ 65.558021][ T3567] kworker/u5:1/3567 is trying to acquire lock: [ 65.564226][ T3567] ffff888077238138 ((wq_completion)hci0){+.+.}-{0:0}, at: flush_workqueue+0x154/0x1610 [ 65.573856][ T3567] [ 65.573856][ T3567] but task is already holding lock: [ 65.581191][ T3567] ffff888077238138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 65.590899][ T3567] [ 65.590899][ T3567] other info that might help us debug this: [ 65.598932][ T3567] Possible unsafe locking scenario: [ 65.598932][ T3567] [ 65.606352][ T3567] CPU0 [ 65.609604][ T3567] ---- [ 65.612853][ T3567] lock((wq_completion)hci0); [ 65.617586][ T3567] lock((wq_completion)hci0); [ 65.622323][ T3567] [ 65.622323][ T3567] *** DEADLOCK *** [ 65.622323][ T3567] [ 65.630435][ T3567] May be due to missing lock nesting notation [ 65.630435][ T3567] [ 65.638722][ T3567] 2 locks held by kworker/u5:1/3567: [ 65.643974][ T3567] #0: ffff888077238138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 65.654125][ T3567] #1: ffffc900031c7d20 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 65.665829][ T3567] [ 65.665829][ T3567] stack backtrace: [ 65.671694][ T3567] CPU: 1 PID: 3567 Comm: kworker/u5:1 Not tainted 5.15.163-syzkaller #0 [ 65.679991][ T3567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 65.690029][ T3567] Workqueue: hci0 hci_error_reset [ 65.695043][ T3567] Call Trace: [ 65.698294][ T3567] [ 65.701197][ T3567] dump_stack_lvl+0x1e3/0x2d0 [ 65.705848][ T3567] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 65.711454][ T3567] ? panic+0x860/0x860 [ 65.715585][ T3567] validate_chain+0x46d2/0x5930 [ 65.720436][ T3567] ? validate_chain+0x112/0x5930 [ 65.725353][ T3567] ? reacquire_held_locks+0x660/0x660 [ 65.730695][ T3567] ? read_lock_is_recursive+0x10/0x10 [ 65.736038][ T3567] ? reacquire_held_locks+0x660/0x660 [ 65.741379][ T3567] ? do_raw_spin_lock+0x14a/0x370 [ 65.746385][ T3567] ? __lock_acquire+0x1ff0/0x1ff0 [ 65.751384][ T3567] ? do_raw_spin_unlock+0x137/0x8b0 [ 65.756561][ T3567] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 65.762425][ T3567] ? mark_lock+0x98/0x340 [ 65.766726][ T3567] __lock_acquire+0x1295/0x1ff0 [ 65.771551][ T3567] lock_acquire+0x1db/0x4f0 [ 65.776025][ T3567] ? flush_workqueue+0x154/0x1610 [ 65.781022][ T3567] ? read_lock_is_recursive+0x10/0x10 [ 65.786368][ T3567] ? lockdep_softirqs_off+0x420/0x420 [ 65.791817][ T3567] ? __init_swait_queue_head+0xaa/0x140 [ 65.797336][ T3567] flush_workqueue+0x170/0x1610 [ 65.802159][ T3567] ? flush_workqueue+0x154/0x1610 [ 65.807154][ T3567] ? __mutex_lock_common+0x444/0x25a0 [ 65.812501][ T3567] ? rcu_work_rcufn+0x140/0x140 [ 65.817419][ T3567] ? mark_lock+0x98/0x340 [ 65.821720][ T3567] drain_workqueue+0xc5/0x390 [ 65.826370][ T3567] destroy_workqueue+0x7b/0xae0 [ 65.831362][ T3567] ? _raw_spin_unlock_irq+0x1f/0x40 [ 65.836532][ T3567] ? lockdep_hardirqs_on+0x94/0x130 [ 65.841702][ T3567] hci_release_dev+0x165/0x1620 [ 65.846531][ T3567] ? devres_release_all+0x1d5/0x240 [ 65.851703][ T3567] ? hci_dev_open+0x290/0x290 [ 65.856349][ T3567] ? hci_unregister_dev+0x550/0x550 [ 65.861516][ T3567] ? device_release+0x62/0x1c0 [ 65.866258][ T3567] ? rcu_is_watching+0x11/0xa0 [ 65.870998][ T3567] ? device_release+0x62/0x1c0 [ 65.875738][ T3567] ? kfree+0x4a/0x270 [ 65.879699][ T3567] bt_host_release+0x7f/0x90 [ 65.884263][ T3567] ? bt_link_release+0x20/0x20 [ 65.889000][ T3567] device_release+0x91/0x1c0 [ 65.893572][ T3567] kobject_put+0x224/0x460 [ 65.897963][ T3567] process_one_work+0x8a1/0x10c0 [ 65.902875][ T3567] ? worker_detach_from_pool+0x260/0x260 [ 65.908479][ T3567] ? _raw_spin_lock_irqsave+0x120/0x120 [ 65.913996][ T3567] ? kthread_data+0x4e/0xc0 [ 65.918514][ T3567] ? wq_worker_running+0x97/0x170 [ 65.923512][ T3567] worker_thread+0xaca/0x1280 [ 65.928166][ T3567] kthread+0x3f6/0x4f0 [ 65.932206][ T3567] ? rcu_lock_release+0x20/0x20 [ 65.937039][ T3567] ? kthread_blkcg+0xd0/0xd0 [ 65.941738][ T3567] ret_from_fork+0x1f/0x30 [ 65.946141][ T3567] [ 65.974072][ T3636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.984253][ T3636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.001283][ T3636] team0: Port device team_slave_0 added [ 66.007817][ T3636] team0: Port device team_slave_1 added [ 66.021762][ T3636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.028695][ T3636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.054635][ T3636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.065813][ T3636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.072791][ T3636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.098869][ T3636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.120838][ T3636] device hsr_slave_0 entered promiscuous mode [ 66.127252][ T3636] device hsr_slave_1 entered promiscuous mode [ 66.174117][ T3636] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.231805][ T3636] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.301762][ T3636] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.372167][ T3636] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.463044][ T3636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.471264][ T3636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.479517][ T3636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.490263][ T3636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.524041][ T3636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.536373][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.544133][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.554827][ T3636] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.564972][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.573508][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.581793][ T3633] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.588810][ T3633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.596698][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.614235][ T3636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.625308][ T3636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.636611][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.645094][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.653707][ T3633] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.660755][ T3633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.668189][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.676603][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.684928][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.693299][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.701625][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.710230][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.718409][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.726563][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.734663][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.742832][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.754442][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.762153][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.806272][ T3636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.815717][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.824013][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.839922][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.848374][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.861992][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.870881][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.880427][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.888009][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.898739][ T3636] device veth0_vlan entered promiscuous mode [ 66.907420][ T3636] device veth1_vlan entered promiscuous mode [ 66.920827][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.928621][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.936616][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.945522][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.959267][ T3636] device veth0_macvtap entered promiscuous mode [ 66.967776][ T3636] device veth1_macvtap entered promiscuous mode [ 66.978743][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.989442][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.000559][ T3636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.008183][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.016669][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.024539][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.032905][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.044250][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.054927][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.065385][ T3636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.077436][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.085903][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.095763][ T3636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.104866][ T3636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.114020][ T3636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.122902][ T3636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.141242][ T9] device hsr_slave_0 left promiscuous mode [ 67.147313][ T9] device hsr_slave_1 left promiscuous mode [ 67.153977][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.161453][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.168861][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.176891][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.184428][ T9] device bridge_slave_1 left promiscuous mode [ 67.190639][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.198311][ T9] device bridge_slave_0 left promiscuous mode [ 67.204753][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.213935][ T9] device veth1_macvtap left promiscuous mode [ 67.219962][ T9] device veth0_macvtap left promiscuous mode [ 67.225956][ T9] device veth1_vlan left promiscuous mode [ 67.231759][ T9] device veth0_vlan left promiscuous mode [ 67.301988][ T9] team0 (unregistering): Port device team_slave_1 removed [ 67.313038][ T9] team0 (unregistering): Port device team_slave_0 removed [ 67.324935][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.336131][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.365339][ T9] bond0 (unregistering): Released all slaves [ 67.409515][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 67.412251][ T3636] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 67.433664][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.434342][ T3636] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 67.444621][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/07/20 18:47:01 executed programs: 3 [ 67.466493][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.474563][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.482666][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.490647][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.569614][ T13] Bluetooth: hci1: command 0x1003 tx timeout [ 69.575738][ T3637] Bluetooth: hci1: sending frame failed (-49) [ 71.250281][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.256558][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.263382][ T1064] cfg80211: failed to load regulatory.db [ 71.569600][ T1064] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 71.577864][ T1064] Bluetooth: hci2: Injecting HCI hardware error event [ 71.584714][ T3634] Bluetooth: hci2: hardware error 0x00 [ 71.649592][ T13] Bluetooth: hci1: command 0x1001 tx timeout [ 71.655651][ T3637] Bluetooth: hci1: sending frame failed (-49) [ 73.729696][ T1064] Bluetooth: hci1: command 0x1009 tx timeout