[ 74.773023][ T7] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. 1970/01/01 00:01:20 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:20 parsed 1 programs [ 83.274476][ T4479] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 85.029028][ T4502] chnl_net:caif_netlink_parms(): no params data found [ 85.067235][ T4502] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.069387][ T4502] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.072986][ T4502] device bridge_slave_0 entered promiscuous mode [ 85.076649][ T4502] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.078673][ T4502] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.081580][ T4502] device bridge_slave_1 entered promiscuous mode [ 85.102279][ T4502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.106699][ T4502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.122578][ T4502] team0: Port device team_slave_0 added [ 85.128879][ T4502] team0: Port device team_slave_1 added [ 85.143422][ T4502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.145308][ T4502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.152907][ T4502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.157206][ T4502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.159118][ T4502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.166955][ T4502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.223657][ T4502] device hsr_slave_0 entered promiscuous mode [ 85.261799][ T4502] device hsr_slave_1 entered promiscuous mode [ 85.969986][ T4502] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.013585][ T4502] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.033414][ T4502] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.110038][ T4502] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.239346][ T4502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.250478][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.255420][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.260360][ T4502] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.267614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.270538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.282561][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.284814][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.287345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.296882][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.299848][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.303118][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.305096][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.312273][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.316780][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.343562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.347160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.349986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.362296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.365341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.374393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.382276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.384940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.390504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.403010][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.542410][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.544668][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.550694][ T4502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.576758][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.583409][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.597582][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.600286][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.603887][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.606920][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.614766][ T4502] device veth0_vlan entered promiscuous mode [ 86.622872][ T4502] device veth1_vlan entered promiscuous mode [ 86.640687][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.643859][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.646496][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.649570][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.664397][ T4502] device veth0_macvtap entered promiscuous mode [ 86.668581][ T4502] device veth1_macvtap entered promiscuous mode [ 86.690513][ T4502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.700765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.704016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.706681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.709984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.718884][ T4502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.722645][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.725345][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.734488][ T4502] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.736887][ T4502] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.739257][ T4502] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.743120][ T4502] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.711066][ T153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.387928][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.390332][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.402797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.406493][ T330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.408666][ T330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.413251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:28 executed programs: 0 [ 89.158543][ T4719] chnl_net:caif_netlink_parms(): no params data found [ 89.208098][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.210144][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.213405][ T4719] device bridge_slave_0 entered promiscuous mode [ 89.217183][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.219198][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.222516][ T4719] device bridge_slave_1 entered promiscuous mode [ 89.239454][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.244849][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.266519][ T4719] team0: Port device team_slave_0 added [ 89.270075][ T4719] team0: Port device team_slave_1 added [ 89.285572][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.287506][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.297680][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.302259][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.304190][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.311304][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.383680][ T4719] device hsr_slave_0 entered promiscuous mode [ 89.414452][ T4719] device hsr_slave_1 entered promiscuous mode [ 89.451691][ T4719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.453791][ T4719] Cannot create hsr debugfs directory [ 89.888968][ T153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.081847][ T4198] Bluetooth: hci1: command 0x0409 tx timeout [ 91.750588][ T153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.809485][ T153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.769624][ T4719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.814000][ T4719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.853667][ T4719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.894388][ T4719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.023839][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.033351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.036129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.041268][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.046887][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.049692][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.054053][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.056210][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.059145][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.077774][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.081058][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.085098][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.087111][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.089579][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.095323][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.100925][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.105510][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.108403][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.114589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.118687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.125419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.128292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.133942][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.136741][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.142260][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.162099][ T4146] Bluetooth: hci1: command 0x041b tx timeout [ 93.229954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.234931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.242240][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.256365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.259303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.273418][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.276339][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.279305][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.282602][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.287512][ T4719] device veth0_vlan entered promiscuous mode [ 93.294517][ T4719] device veth1_vlan entered promiscuous mode [ 93.311172][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.314676][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.317354][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.320163][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.346344][ T4719] device veth0_macvtap entered promiscuous mode [ 93.351065][ T4719] device veth1_macvtap entered promiscuous mode [ 93.366000][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.369080][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.373724][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.376664][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.379418][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.382750][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.386137][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.392683][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.395662][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.399729][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.406041][ T4719] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.408503][ T4719] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.410952][ T4719] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.414831][ T4719] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.419827][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.422918][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.489346][ T330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.500667][ T330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.505730][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.513164][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.515549][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.518548][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.562644][ T4948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'. [ 93.588453][ T4950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'. [ 93.612822][ T4952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17'. [ 93.638158][ T4954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18'. [ 93.658605][ T4956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 93.686151][ T4958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'. [ 93.712508][ T4960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21'. [ 93.730374][ T4962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'. [ 93.752979][ T4964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'. [ 93.774361][ T4966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24'. 1970/01/01 00:01:34 executed programs: 23 [ 94.094877][ T153] device hsr_slave_0 left promiscuous mode [ 94.132012][ T153] device hsr_slave_1 left promiscuous mode [ 94.221663][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.223888][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.226515][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.228635][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.231168][ T153] device bridge_slave_1 left promiscuous mode [ 94.233186][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.283775][ T153] device bridge_slave_0 left promiscuous mode [ 94.285706][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.421785][ T153] device veth1_macvtap left promiscuous mode [ 94.423574][ T153] device veth0_macvtap left promiscuous mode [ 94.425401][ T153] device veth1_vlan left promiscuous mode [ 94.427044][ T153] device veth0_vlan left promiscuous mode [ 94.652834][ T153] team0 (unregistering): Port device team_slave_1 removed [ 94.662824][ T153] team0 (unregistering): Port device team_slave_0 removed [ 94.672639][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.709466][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.842539][ T153] bond0 (unregistering): Released all slaves [ 95.241821][ T4141] Bluetooth: hci1: command 0x040f tx timeout [ 97.321785][ T4146] Bluetooth: hci1: command 0x0419 tx timeout [ 98.136921][ T5241] [ 98.137703][ T5241] ============================================ [ 98.139507][ T5241] WARNING: possible recursive locking detected [ 98.141289][ T5241] 5.15.188-syzkaller #0 Not tainted [ 98.142884][ T5241] -------------------------------------------- [ 98.144568][ T5241] syz.0.161/5241 is trying to acquire lock: [ 98.146411][ T5241] ffff0000d8157398 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x12c/0x3bc [ 98.148954][ T5241] [ 98.148954][ T5241] but task is already holding lock: [ 98.150983][ T5241] ffff0000d3277498 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x12c/0x3bc [ 98.153722][ T5241] [ 98.153722][ T5241] other info that might help us debug this: [ 98.156033][ T5241] Possible unsafe locking scenario: [ 98.156033][ T5241] [ 98.158132][ T5241] CPU0 [ 98.159085][ T5241] ---- [ 98.159978][ T5241] lock(_xmit_ETHER#2); [ 98.161122][ T5241] lock(_xmit_ETHER#2); [ 98.162374][ T5241] [ 98.162374][ T5241] *** DEADLOCK *** [ 98.162374][ T5241] [ 98.164665][ T5241] May be due to missing lock nesting notation [ 98.164665][ T5241] [ 98.167032][ T5241] 13 locks held by syz.0.161/5241: [ 98.168479][ T5241] #0: ffff800014351360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 98.171158][ T5241] #1: ffff8000143513c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 98.173884][ T5241] #2: ffff8000143513c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 98.176728][ T5241] #3: ffff0000d57f5258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: qdisc_run_begin+0x120/0x2a8 [ 98.180142][ T5241] #4: ffff0000d3277498 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x12c/0x3bc [ 98.182835][ T5241] #5: ffff0000c872d060 (k-slock-AF_INET6){+...}-{2:2}, at: icmpv6_xmit_lock+0xf0/0x140 [ 98.185637][ T5241] #6: ffff800014351360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 98.188365][ T5241] #7: ffff800014351360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 98.191088][ T5241] #8: ffff8000143513c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 98.193970][ T5241] #9: ffff800014351360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 98.196752][ T5241] #10: ffff8000143513c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 98.199599][ T5241] #11: ffff8000143513c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 98.202427][ T5241] #12: ffff0000d6ed2258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: qdisc_run_begin+0x120/0x2a8 [ 98.206174][ T5241] [ 98.206174][ T5241] stack backtrace: [ 98.207982][ T5241] CPU: 1 PID: 5241 Comm: syz.0.161 Not tainted 5.15.188-syzkaller #0 [ 98.210284][ T5241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.213332][ T5241] Call trace: [ 98.214297][ T5241] dump_backtrace+0x0/0x43c [ 98.215560][ T5241] show_stack+0x2c/0x3c [ 98.216731][ T5241] __dump_stack+0x30/0x40 [ 98.217947][ T5241] dump_stack_lvl+0xf8/0x160 [ 98.219259][ T5241] dump_stack+0x1c/0x5c [ 98.220409][ T5241] __lock_acquire+0x18a4/0x651c [ 98.221750][ T5241] lock_acquire+0x1f4/0x620 [ 98.223105][ T5241] _raw_spin_lock+0xb0/0x10c [ 98.224419][ T5241] sch_direct_xmit+0x12c/0x3bc [ 98.225774][ T5241] __dev_queue_xmit+0x13f4/0x2800 [ 98.227243][ T5241] dev_queue_xmit+0x24/0x34 [ 98.228526][ T5241] ip6_finish_output2+0x129c/0x1a14 [ 98.229929][ T5241] __ip6_finish_output+0x570/0x6dc [ 98.231402][ T5241] ip6_finish_output+0x40/0x218 [ 98.232823][ T5241] ip6_output+0x274/0x500 [ 98.234051][ T5241] ndisc_send_skb+0xc10/0x1684 [ 98.235387][ T5241] ndisc_send_ns+0x518/0x6f4 [ 98.236759][ T5241] ndisc_solicit+0x2b0/0x408 [ 98.238125][ T5241] neigh_probe+0xc4/0x138 [ 98.239361][ T5241] __neigh_event_send+0xc14/0x1200 [ 98.240816][ T5241] neigh_resolve_output+0x180/0x5e0 [ 98.242310][ T5241] ip6_finish_output2+0x12d0/0x1a14 [ 98.243748][ T5241] __ip6_finish_output+0x570/0x6dc [ 98.245181][ T5241] ip6_finish_output+0x40/0x218 [ 98.246508][ T5241] ip6_output+0x274/0x500 [ 98.247849][ T5241] ip6_local_out+0x120/0x15c [ 98.249095][ T5241] ip6_send_skb+0x1a8/0x4f4 [ 98.250409][ T5241] ip6_push_pending_frames+0xd0/0x118 [ 98.251969][ T5241] icmpv6_push_pending_frames+0x238/0x394 [ 98.253550][ T5241] icmp6_send+0xee4/0x144c [ 98.254764][ T5241] ip6_link_failure+0x44/0x4a8 [ 98.256111][ T5241] dst_link_failure+0x11c/0x160 [ 98.257513][ T5241] ip_tunnel_xmit+0x1444/0x1f30 [ 98.258959][ T5241] erspan_xmit+0x890/0x1490 [ 98.260243][ T5241] dev_hard_start_xmit+0x2a8/0x87c [ 98.261803][ T5241] sch_direct_xmit+0x2a4/0x3bc [ 98.263200][ T5241] __dev_queue_xmit+0x13f4/0x2800 [ 98.264605][ T5241] dev_queue_xmit+0x24/0x34 [ 98.265852][ T5241] ip6_finish_output2+0x129c/0x1a14 [ 98.267314][ T5241] __ip6_finish_output+0x570/0x6dc [ 98.268725][ T5241] ip6_finish_output+0x40/0x218 [ 98.270114][ T5241] ip6_output+0x274/0x500 [ 98.271357][ T5241] rawv6_send_hdrinc+0xdb8/0x18cc [ 98.272785][ T5241] rawv6_sendmsg+0xd9c/0x12e8 [ 98.274182][ T5241] inet_sendmsg+0x154/0x284 [ 98.275412][ T5241] sock_write_iter+0x23c/0x31c [ 98.276765][ T5241] vfs_write+0x7c8/0xa2c [ 98.277966][ T5241] ksys_write+0x120/0x210 [ 98.279133][ T5241] __arm64_sys_write+0x7c/0x90 [ 98.280507][ T5241] invoke_syscall+0x98/0x2b8 [ 98.281828][ T5241] el0_svc_common+0x138/0x258 [ 98.283101][ T5241] do_el0_svc+0x58/0x14c [ 98.284314][ T5241] el0_svc+0x78/0x1e0 [ 98.285408][ T5241] el0t_64_sync_handler+0xcc/0xe4 [ 98.286755][ T5241] el0t_64_sync+0x1a0/0x1a4 [ 98.588765][ T5272] __nla_validate_parse: 151 callbacks suppressed [ 98.588776][ T5272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.176'. [ 98.609268][ T5274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.177'. [ 98.624395][ T5276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.178'. [ 98.651096][ T5278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.179'. [ 98.666079][ T5280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.180'. [ 98.682465][ T5282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.181'. [ 98.708457][ T5284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.182'. [ 98.724149][ T5286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.183'. [ 98.739280][ T5288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.184'. [ 98.768921][ T5290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.185'. 1970/01/01 00:01:39 executed programs: 188 [ 103.607697][ T5750] __nla_validate_parse: 229 callbacks suppressed [ 103.607708][ T5750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.415'. [ 103.624959][ T5752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.416'. [ 103.639500][ T5754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.417'. [ 103.668371][ T5756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.418'. [ 103.683727][ T5758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.419'. [ 103.697944][ T5760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.420'. [ 103.728191][ T5762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.421'. [ 103.742467][ T5764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.422'. [ 103.756077][ T5766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.423'. [ 103.790109][ T5768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.424'. 1970/01/01 00:01:44 executed programs: 430 [ 107.307643][ T6150] chnl_net:caif_netlink_parms(): no params data found [ 107.335771][ T6150] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.337862][ T6150] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.340422][ T6150] device bridge_slave_0 entered promiscuous mode [ 107.344581][ T6150] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.346577][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.349099][ T6150] device bridge_slave_1 entered promiscuous mode [ 107.385630][ T6150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.389641][ T6150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.403298][ T6150] team0: Port device team_slave_0 added [ 107.406217][ T6150] team0: Port device team_slave_1 added [ 107.417878][ T6150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.419838][ T6150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.427386][ T6150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.431288][ T6150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.433919][ T6150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.440844][ T6150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.503997][ T6150] device hsr_slave_0 entered promiscuous mode [ 107.541789][ T6150] device hsr_slave_1 entered promiscuous mode [ 107.875887][ T330] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.927095][ T330] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.977117][ T330] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.017735][ T330] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0