Warning: Permanently added '10.128.0.57' (ED25519) to the list of known hosts. 1970/01/01 00:01:07 parsed 1 programs [ 68.862271][ T4459] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 69.601208][ T25] cfg80211: failed to load regulatory.db [ 69.610873][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.611904][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.393971][ T4473] chnl_net:caif_netlink_parms(): no params data found [ 70.414624][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.415830][ T4473] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.417181][ T4473] device bridge_slave_0 entered promiscuous mode [ 70.419111][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.422718][ T4473] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.424162][ T4473] device bridge_slave_1 entered promiscuous mode [ 70.432488][ T4473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.434933][ T4473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.444108][ T4473] team0: Port device team_slave_0 added [ 70.445873][ T4473] team0: Port device team_slave_1 added [ 70.455231][ T4473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.456233][ T4473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.460210][ T4473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.462401][ T4473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.463442][ T4473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.467359][ T4473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.530482][ T4473] device hsr_slave_0 entered promiscuous mode [ 70.569777][ T4473] device hsr_slave_1 entered promiscuous mode [ 71.255710][ T4473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.290654][ T4473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.341584][ T4473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.391579][ T4473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.537110][ T4473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.543117][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.544379][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.547225][ T4473] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.552162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.553565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.554998][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.556111][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.557410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.561695][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.563981][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.565342][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.566331][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.574088][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.580320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.583194][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.585102][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.587691][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.592442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.594052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.598121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.600301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.601734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.603140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.610657][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.662811][ T4473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.670170][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.671338][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.672384][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.674068][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.680813][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.682235][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.684102][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.685365][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.688044][ T4473] device veth0_vlan entered promiscuous mode [ 71.695190][ T4473] device veth1_vlan entered promiscuous mode [ 71.704284][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.705778][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.707154][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.708596][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.712762][ T4473] device veth0_macvtap entered promiscuous mode [ 71.715230][ T4473] device veth1_macvtap entered promiscuous mode [ 71.732192][ T4473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.733424][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.735003][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.736422][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.737926][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.742497][ T4473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.744652][ T4473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.745980][ T4473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.747424][ T4473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.748768][ T4473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.752327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.753792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.093705][ T354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.116272][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.117557][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.119648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.128812][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.130366][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.131998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.803333][ T354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.042772][ T354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.093756][ T354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:17 executed programs: 0 [ 77.675267][ T4919] chnl_net:caif_netlink_parms(): no params data found [ 77.701777][ T4919] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.702956][ T4919] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.704514][ T4919] device bridge_slave_0 entered promiscuous mode [ 77.706538][ T4919] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.707650][ T4919] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.709090][ T4919] device bridge_slave_1 entered promiscuous mode [ 77.717849][ T4919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.720635][ T4919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.729984][ T4919] team0: Port device team_slave_0 added [ 77.732447][ T4919] team0: Port device team_slave_1 added [ 77.740586][ T4919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.741702][ T4919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.745425][ T4919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.747732][ T4919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.748754][ T4919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.753218][ T4919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.800977][ T4919] device hsr_slave_0 entered promiscuous mode [ 77.859503][ T4919] device hsr_slave_1 entered promiscuous mode [ 77.909486][ T4919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.910662][ T4919] Cannot create hsr debugfs directory [ 78.407130][ T4919] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.427840][ T4919] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.462541][ T4919] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.491283][ T4919] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.553130][ T354] device hsr_slave_0 left promiscuous mode [ 78.589492][ T354] device hsr_slave_1 left promiscuous mode [ 78.699278][ T354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.700452][ T354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.701931][ T354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.702969][ T354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.704331][ T354] device bridge_slave_1 left promiscuous mode [ 78.705289][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.740121][ T354] device bridge_slave_0 left promiscuous mode [ 78.741182][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.899352][ T354] device veth1_macvtap left promiscuous mode [ 78.900301][ T354] device veth0_macvtap left promiscuous mode [ 78.901268][ T354] device veth1_vlan left promiscuous mode [ 78.902189][ T354] device veth0_vlan left promiscuous mode [ 79.010551][ T354] team0 (unregistering): Port device team_slave_1 removed [ 79.015115][ T354] team0 (unregistering): Port device team_slave_0 removed [ 79.021374][ T354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.074663][ T354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.204121][ T354] bond0 (unregistering): Released all slaves [ 79.344056][ T4919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.348326][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.350013][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.352981][ T4919] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.356370][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.357928][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.360654][ T1644] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.361932][ T1644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.363443][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.367279][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.368750][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.372697][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.373795][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.380077][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.383302][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.385920][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.388068][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.395636][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.397225][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.398925][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.406337][ T4919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.407953][ T4919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.413858][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.415496][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.417102][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.418874][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.424389][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.470714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.471926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.475685][ T4919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.485012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.486661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.495146][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.496767][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.498378][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.501271][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.504888][ T4919] device veth0_vlan entered promiscuous mode [ 79.508309][ T4919] device veth1_vlan entered promiscuous mode [ 79.517968][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.519707][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.521144][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.522697][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.525528][ T4919] device veth0_macvtap entered promiscuous mode [ 79.528148][ T4919] device veth1_macvtap entered promiscuous mode [ 79.534756][ T4919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.535990][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.537633][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.539092][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.542651][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.545798][ T4919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.548097][ T4919] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.550311][ T4919] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.551612][ T4919] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.552883][ T4919] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.556704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.558354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.597514][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.598729][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.601427][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.615523][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.616845][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.618528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.644722][ T5039] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'. [ 79.657225][ T5041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17'. [ 79.679548][ T4102] Bluetooth: hci0: command 0x0409 tx timeout [ 79.683924][ T5046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18'. [ 79.711212][ T5051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 79.721273][ T5053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'. [ 79.733518][ T5056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21'. [ 79.768851][ T5060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'. [ 79.778222][ T5063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'. [ 79.789174][ T5066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24'. [ 79.825430][ T5071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.25'. [ 81.046773][ T5198] [ 81.047216][ T5198] ============================================ [ 81.048100][ T5198] WARNING: possible recursive locking detected [ 81.048989][ T5198] syzkaller #0 Not tainted [ 81.049644][ T5198] -------------------------------------------- [ 81.050534][ T5198] syz.0.85/5198 is trying to acquire lock: [ 81.051375][ T5198] ffff0000d6d1a398 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x12c/0x3bc [ 81.052674][ T5198] [ 81.052674][ T5198] but task is already holding lock: [ 81.053713][ T5198] ffff0000da225c98 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x12c/0x3bc [ 81.055075][ T5198] [ 81.055075][ T5198] other info that might help us debug this: [ 81.056257][ T5198] Possible unsafe locking scenario: [ 81.056257][ T5198] [ 81.057353][ T5198] CPU0 [ 81.057847][ T5198] ---- [ 81.058317][ T5198] lock(_xmit_ETHER#2); [ 81.058955][ T5198] lock(_xmit_ETHER#2); [ 81.059542][ T5198] [ 81.059542][ T5198] *** DEADLOCK *** [ 81.059542][ T5198] [ 81.060627][ T5198] May be due to missing lock nesting notation [ 81.060627][ T5198] [ 81.061754][ T5198] 13 locks held by syz.0.85/5198: [ 81.062442][ T5198] #0: ffff800014361520 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 81.063722][ T5198] #1: ffff800014361580 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 81.065195][ T5198] #2: ffff800014361580 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 81.066581][ T5198] #3: ffff0000ddea7258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: qdisc_run_begin+0x120/0x2a8 [ 81.068320][ T5198] #4: ffff0000da225c98 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x12c/0x3bc [ 81.069717][ T5198] #5: ffff0000dc23ed60 (k-slock-AF_INET6){+...}-{2:2}, at: icmpv6_xmit_lock+0xf0/0x140 [ 81.071209][ T5198] #6: ffff800014361520 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 81.072609][ T5198] #7: ffff800014361520 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 81.074004][ T5198] #8: ffff800014361580 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 81.075374][ T5198] #9: ffff800014361520 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 81.076770][ T5198] #10: ffff800014361580 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 81.078277][ T5198] #11: ffff800014361580 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 81.079803][ T5198] #12: ffff0000cce1a258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: qdisc_run_begin+0x120/0x2a8 [ 81.081670][ T5198] [ 81.081670][ T5198] stack backtrace: [ 81.082492][ T5198] CPU: 0 PID: 5198 Comm: syz.0.85 Not tainted syzkaller #0 [ 81.083558][ T5198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 81.084989][ T5198] Call trace: [ 81.085408][ T5198] dump_backtrace+0x0/0x43c [ 81.086031][ T5198] show_stack+0x2c/0x3c [ 81.086546][ T5198] __dump_stack+0x30/0x40 [ 81.087162][ T5198] dump_stack_lvl+0xf8/0x160 [ 81.087782][ T5198] dump_stack+0x1c/0x5c [ 81.088367][ T5198] __lock_acquire+0x18a4/0x651c [ 81.088996][ T5198] lock_acquire+0x1f4/0x620 [ 81.089625][ T5198] _raw_spin_lock+0xb0/0x10c [ 81.090271][ T5198] sch_direct_xmit+0x12c/0x3bc [ 81.090943][ T5198] __dev_queue_xmit+0x13f4/0x2800 [ 81.091576][ T5198] dev_queue_xmit+0x24/0x34 [ 81.092206][ T5198] neigh_resolve_output+0x530/0x5e0 [ 81.092922][ T5198] ip6_finish_output2+0x12d0/0x1a14 [ 81.093653][ T5198] ip6_finish_output+0x570/0x6dc [ 81.094376][ T5198] ip6_output+0x274/0x500 [ 81.094980][ T5198] ndisc_send_skb+0xc10/0x1684 [ 81.095647][ T5198] ndisc_send_ns+0x518/0x6f4 [ 81.096307][ T5198] ndisc_solicit+0x2b0/0x408 [ 81.096927][ T5198] neigh_probe+0xc4/0x138 [ 81.097549][ T5198] __neigh_event_send+0xc14/0x1200 [ 81.098281][ T5198] neigh_resolve_output+0x180/0x5e0 [ 81.099038][ T5198] ip6_finish_output2+0x12d0/0x1a14 [ 81.099789][ T5198] ip6_finish_output+0x570/0x6dc [ 81.100548][ T5198] ip6_output+0x274/0x500 [ 81.101231][ T5198] ip6_local_out+0x120/0x15c [ 81.101952][ T5198] ip6_send_skb+0x1a8/0x4f4 [ 81.102640][ T5198] ip6_push_pending_frames+0xd0/0x118 [ 81.103433][ T5198] icmpv6_push_pending_frames+0x238/0x394 [ 81.104277][ T5198] icmp6_send+0xee4/0x144c [ 81.104921][ T5198] ip6_link_failure+0x44/0x4a8 [ 81.105603][ T5198] dst_link_failure+0x11c/0x160 [ 81.106291][ T5198] ip_tunnel_xmit+0x1444/0x1f30 [ 81.107037][ T5198] erspan_xmit+0x890/0x1490 [ 81.107718][ T5198] dev_hard_start_xmit+0x2a8/0x87c [ 81.108437][ T5198] sch_direct_xmit+0x2a4/0x3bc [ 81.109154][ T5198] __dev_queue_xmit+0x13f4/0x2800 [ 81.109891][ T5198] dev_queue_xmit+0x24/0x34 [ 81.110513][ T5198] neigh_resolve_output+0x530/0x5e0 [ 81.111281][ T5198] ip6_finish_output2+0x12d0/0x1a14 [ 81.112048][ T5198] ip6_finish_output+0x570/0x6dc [ 81.112795][ T5198] ip6_output+0x274/0x500 [ 81.113433][ T5198] rawv6_send_hdrinc+0xdb8/0x18cc [ 81.114155][ T5198] rawv6_sendmsg+0xd9c/0x12e8 [ 81.114820][ T5198] inet_sendmsg+0x154/0x284 [ 81.115497][ T5198] ____sys_sendmsg+0x61c/0x920 [ 81.116198][ T5198] ___sys_sendmsg+0x1d0/0x240 [ 81.116892][ T5198] __sys_sendmmsg+0x218/0x5f0 [ 81.117561][ T5198] __arm64_sys_sendmmsg+0xa0/0xbc [ 81.118353][ T5198] invoke_syscall+0x98/0x2b8 [ 81.119072][ T5198] el0_svc_common+0x138/0x258 [ 81.119757][ T5198] do_el0_svc+0x58/0x14c [ 81.120374][ T5198] el0_svc+0x78/0x1e0 [ 81.120947][ T5198] el0t_64_sync_handler+0xcc/0xe4 [ 81.121679][ T5198] el0t_64_sync+0x1a0/0x1a4 [ 81.759617][ T4146] Bluetooth: hci0: command 0x041b tx timeout 1970/01/01 00:01:22 executed programs: 153 [ 83.839400][ T4146] Bluetooth: hci0: command 0x040f tx timeout [ 84.683243][ T5601] __nla_validate_parse: 260 callbacks suppressed [ 84.683253][ T5601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.286'. [ 84.695306][ T5603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.287'. [ 84.706642][ T5605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'. [ 84.733227][ T5607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.289'. [ 84.744285][ T5609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'. [ 84.752098][ T5611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.291'. [ 84.783639][ T5613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.292'. [ 84.792127][ T5615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.293'. [ 84.803340][ T5617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.294'. [ 84.833660][ T5619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.295'. [ 85.919289][ T1541] Bluetooth: hci0: command 0x0419 tx timeout 1970/01/01 00:01:27 executed programs: 415 [ 89.713868][ T6125] __nla_validate_parse: 252 callbacks suppressed [ 89.713878][ T6125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'. [ 89.722244][ T6127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.549'. [ 89.730365][ T6129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.550'. [ 89.763434][ T6131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.551'. [ 89.771747][ T6133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.552'. [ 89.780121][ T6135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.553'. [ 89.813061][ T6137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.554'. [ 89.820535][ T6139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.555'. [ 89.828123][ T6141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.556'. [ 89.862903][ T6143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.557'. [ 90.928751][ T6261] chnl_net:caif_netlink_parms(): no params data found [ 90.944252][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.945284][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.946646][ T6261] device bridge_slave_0 entered promiscuous mode [ 90.948374][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.950250][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.951561][ T6261] device bridge_slave_1 entered promiscuous mode [ 90.958485][ T6261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.960788][ T6261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.966943][ T6261] team0: Port device team_slave_0 added [ 90.968518][ T6261] team0: Port device team_slave_1 added [ 90.974563][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.975490][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.979154][ T6261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.981260][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.982229][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.985855][ T6261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.020368][ T6261] device hsr_slave_0 entered promiscuous mode