Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. 2024/10/03 14:44:06 ignoring optional flag "sandboxArg"="0" 2024/10/03 14:44:06 ignoring optional flag "type"="gce" 2024/10/03 14:44:06 parsed 1 programs [ 95.162436][ T5642] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.927191][ T1833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.935695][ T1833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.968610][ T1833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.977199][ T1833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.157980][ T4622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.174337][ T4622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.184427][ T4622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.196391][ T4622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.208623][ T4622] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.220859][ T4622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.656460][ T5711] chnl_net:caif_netlink_parms(): no params data found [ 99.699197][ T5711] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.706454][ T5711] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.713574][ T5711] bridge_slave_0: entered allmulticast mode [ 99.720761][ T5711] bridge_slave_0: entered promiscuous mode [ 99.728480][ T5711] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.735792][ T5711] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.743037][ T5711] bridge_slave_1: entered allmulticast mode [ 99.751040][ T5711] bridge_slave_1: entered promiscuous mode [ 99.778935][ T5711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.790253][ T5711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.816004][ T5711] team0: Port device team_slave_0 added [ 99.823105][ T5711] team0: Port device team_slave_1 added [ 99.840997][ T5711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.848278][ T5711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.874318][ T5711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.886183][ T5711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.893150][ T5711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.919578][ T5711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.967550][ T5711] hsr_slave_0: entered promiscuous mode [ 99.973754][ T5711] hsr_slave_1: entered promiscuous mode [ 100.459186][ T5711] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.469274][ T5711] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.481269][ T5711] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.491036][ T5711] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.563227][ T5711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.580082][ T5711] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.597702][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.604878][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.621826][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.629027][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.813353][ T5711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.851415][ T5711] veth0_vlan: entered promiscuous mode [ 100.863877][ T5711] veth1_vlan: entered promiscuous mode [ 100.894393][ T5711] veth0_macvtap: entered promiscuous mode [ 100.907334][ T5711] veth1_macvtap: entered promiscuous mode [ 100.928649][ T5711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.942350][ T5711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.957379][ T5711] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.967477][ T5711] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.978912][ T5711] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.988044][ T5711] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.140384][ T1055] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.219095][ T1055] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.329249][ T1055] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2024/10/03 14:44:16 executed programs: 0 [ 101.444351][ T1055] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.545322][ T5675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.553762][ T5675] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.568433][ T5675] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.578725][ T5675] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.588706][ T5675] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.596691][ T5675] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.746127][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 101.839541][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.847005][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.854256][ T5794] bridge_slave_0: entered allmulticast mode [ 101.862238][ T5794] bridge_slave_0: entered promiscuous mode [ 101.872173][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.880164][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.887898][ T5794] bridge_slave_1: entered allmulticast mode [ 101.895754][ T5794] bridge_slave_1: entered promiscuous mode [ 101.923641][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.935736][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.976491][ T5794] team0: Port device team_slave_0 added [ 101.989615][ T5794] team0: Port device team_slave_1 added [ 102.017630][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.027083][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.055886][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.077298][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.088287][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.117620][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.159691][ T5794] hsr_slave_0: entered promiscuous mode [ 102.166356][ T5794] hsr_slave_1: entered promiscuous mode [ 102.172552][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.181080][ T5794] Cannot create hsr debugfs directory [ 103.645013][ T5293] Bluetooth: hci0: command tx timeout [ 104.566526][ T1055] bridge_slave_1: left allmulticast mode [ 104.572244][ T1055] bridge_slave_1: left promiscuous mode [ 104.585035][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.594054][ T1055] bridge_slave_0: left allmulticast mode [ 104.602873][ T1055] bridge_slave_0: left promiscuous mode [ 104.609902][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.939470][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.955065][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.968833][ T1055] bond0 (unregistering): Released all slaves [ 105.112146][ T1055] hsr_slave_0: left promiscuous mode [ 105.119829][ T1055] hsr_slave_1: left promiscuous mode [ 105.129714][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.137823][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.148071][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.156754][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.178836][ T1055] veth1_macvtap: left promiscuous mode [ 105.185228][ T1055] veth0_macvtap: left promiscuous mode [ 105.193644][ T1055] veth1_vlan: left promiscuous mode [ 105.200630][ T1055] veth0_vlan: left promiscuous mode [ 105.659312][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 105.701867][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 105.714787][ T5293] Bluetooth: hci0: command tx timeout [ 106.277095][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.289780][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.300782][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.311244][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.390964][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.467383][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.479035][ T3826] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.486212][ T3826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.502362][ T1833] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.510129][ T1833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.722796][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.763359][ T5794] veth0_vlan: entered promiscuous mode [ 106.778294][ T5794] veth1_vlan: entered promiscuous mode [ 106.810003][ T5794] veth0_macvtap: entered promiscuous mode [ 106.821306][ T5794] veth1_macvtap: entered promiscuous mode [ 106.845988][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.859712][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.871941][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.882260][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.891964][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.902998][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.975959][ T3826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.983812][ T3826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/10/03 14:44:22 executed programs: 2 [ 107.023312][ T1833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.032614][ T1833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.205611][ T6090] Bluetooth: MGMT ver 1.23 [ 107.210822][ T6086] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 107.217755][ T6089] [ 107.220212][ T6089] ============================================ [ 107.226457][ T6089] WARNING: possible recursive locking detected [ 107.232589][ T6089] 6.11.0-syzkaller-11519-gc30a3f54e661-dirty #0 Not tainted [ 107.239932][ T6089] -------------------------------------------- [ 107.246088][ T6089] syz.0.15/6089 is trying to acquire lock: [ 107.251993][ T6089] ffff88802cd3cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x66e/0x11b0 [ 107.261661][ T6089] [ 107.261661][ T6089] but task is already holding lock: [ 107.269018][ T6089] ffff88802cd3cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_close+0x10a/0x210 [ 107.278068][ T6089] [ 107.278068][ T6089] other info that might help us debug this: [ 107.286114][ T6089] Possible unsafe locking scenario: [ 107.286114][ T6089] [ 107.293549][ T6089] CPU0 [ 107.296818][ T6089] ---- [ 107.300093][ T6089] lock(&hdev->req_lock); [ 107.305026][ T6089] lock(&hdev->req_lock); [ 107.309442][ T6089] [ 107.309442][ T6089] *** DEADLOCK *** [ 107.309442][ T6089] [ 107.317569][ T6089] May be due to missing lock nesting notation [ 107.317569][ T6089] [ 107.325966][ T6089] 2 locks held by syz.0.15/6089: [ 107.330928][ T6089] #0: ffff88802cd3cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_close+0x10a/0x210 [ 107.340441][ T6089] #1: ffff88802cd3c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11b0 [ 107.350108][ T6089] [ 107.350108][ T6089] stack backtrace: [ 107.356023][ T6089] CPU: 1 UID: 0 PID: 6089 Comm: syz.0.15 Not tainted 6.11.0-syzkaller-11519-gc30a3f54e661-dirty #0 [ 107.366698][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.376747][ T6089] Call Trace: [ 107.380020][ T6089] [ 107.383031][ T6089] dump_stack_lvl+0x241/0x360 [ 107.387711][ T6089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.393340][ T6089] ? __pfx__printk+0x10/0x10 [ 107.398123][ T6089] ? lockdep_unlock+0x16a/0x300 [ 107.402998][ T6089] print_deadlock_bug+0x483/0x620 [ 107.408015][ T6089] validate_chain+0x15e2/0x5920 [ 107.412951][ T6089] ? __pfx_validate_chain+0x10/0x10 [ 107.418142][ T6089] ? __pfx_validate_chain+0x10/0x10 [ 107.423331][ T6089] ? mark_lock+0x9a/0x360 [ 107.427708][ T6089] ? mark_lock+0x9a/0x360 [ 107.432043][ T6089] __lock_acquire+0x1384/0x2050 [ 107.436907][ T6089] lock_acquire+0x1ed/0x550 [ 107.441580][ T6089] ? hci_dev_close_sync+0x66e/0x11b0 [ 107.446870][ T6089] ? __pfx_lock_acquire+0x10/0x10 [ 107.451888][ T6089] ? __pfx___might_resched+0x10/0x10 [ 107.457172][ T6089] ? __pfx___mutex_trylock_common+0x10/0x10 [ 107.463058][ T6089] __mutex_lock+0x136/0xd70 [ 107.467572][ T6089] ? hci_dev_close_sync+0x66e/0x11b0 [ 107.472888][ T6089] ? __mutex_unlock_slowpath+0x21d/0x750 [ 107.478726][ T6089] ? hci_dev_close_sync+0x66e/0x11b0 [ 107.484012][ T6089] ? __pfx___mutex_lock+0x10/0x10 [ 107.489033][ T6089] ? lockdep_hardirqs_on+0x99/0x150 [ 107.494244][ T6089] ? _raw_spin_unlock_irq+0x2e/0x50 [ 107.499438][ T6089] ? drain_workqueue+0x2d3/0x3a0 [ 107.504458][ T6089] ? hci_discovery_set_state+0x57/0x180 [ 107.510023][ T6089] hci_dev_close_sync+0x66e/0x11b0 [ 107.515130][ T6089] hci_dev_close+0x112/0x210 [ 107.519716][ T6089] sock_do_ioctl+0x158/0x460 [ 107.524304][ T6089] ? __pfx_sock_do_ioctl+0x10/0x10 [ 107.529440][ T6089] ? do_futex+0x392/0x560 [ 107.533776][ T6089] ? call_rcu+0x731/0xa70 [ 107.538670][ T6089] sock_ioctl+0x626/0x8e0 [ 107.543019][ T6089] ? __pfx_sock_ioctl+0x10/0x10 [ 107.547878][ T6089] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 107.553870][ T6089] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.560277][ T6089] ? __pfx_sock_ioctl+0x10/0x10 [ 107.565119][ T6089] __se_sys_ioctl+0xf9/0x170 [ 107.569727][ T6089] do_syscall_64+0xf3/0x230 [ 107.574219][ T6089] ? clear_bhb_loop+0x35/0x90 [ 107.578910][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.584884][ T6089] RIP: 0033:0x7fe0fa37cef9 [ 107.589297][ T6089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.609082][ T6089] RSP: 002b:00007fe0fb0e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.617494][ T6089] RAX: ffffffffffffffda RBX: 00007fe0fa536058 RCX: 00007fe0fa37cef9 [ 107.625454][ T6089] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000008 [ 107.633606][ T6089] RBP: 00007fe0fa3ef046 R08: 0000000000000000 R09: 0000000000000000 [ 107.641659][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.649620][ T6089] R13: 0000000000000000 R14: 00007fe0fa536058 R15: 00007fff1e0b61e8 [ 107.657594][ T6089] [ 107.794579][ T5675] Bluetooth: hci0: command tx timeout [ 109.874612][ T5675] Bluetooth: hci0: command tx timeout [ 111.954757][ T5675] Bluetooth: hci0: command tx timeout [ 117.095183][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.102423][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.109782][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.117605][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.125338][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 117.132778][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.197358][ T6092] chnl_net:caif_netlink_parms(): no params data found [ 117.228343][ T6092] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.235688][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state