Warning: Permanently added '10.128.0.203' (ED25519) to the list of known hosts. 1970/01/01 00:01:00 parsed 1 programs [ 61.614427][ T4429] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 64.781696][ T4507] chnl_net:caif_netlink_parms(): no params data found [ 64.800261][ T4507] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.801494][ T4507] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.803109][ T4507] device bridge_slave_0 entered promiscuous mode [ 64.805253][ T4507] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.806429][ T4507] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.808028][ T4507] device bridge_slave_1 entered promiscuous mode [ 64.815791][ T4507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.818264][ T4507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.826692][ T4507] team0: Port device team_slave_0 added [ 64.828483][ T4507] team0: Port device team_slave_1 added [ 64.834790][ T4507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.835907][ T4507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.840041][ T4507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.842419][ T4507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.843470][ T4507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.848397][ T4507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.915418][ T4507] device hsr_slave_0 entered promiscuous mode [ 64.964680][ T4507] device hsr_slave_1 entered promiscuous mode [ 65.541967][ T4507] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.566212][ T4507] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.627482][ T4507] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.688099][ T4507] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.821839][ T4507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.836581][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.838184][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.840775][ T4507] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.843180][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.844798][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.846315][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.847493][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.852837][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.854260][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.859850][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.861484][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.862597][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.872654][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.875858][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.878794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.880732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.882611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.889571][ T4507] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.891242][ T4507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.896405][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.897936][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.899534][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.901062][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.902591][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.903994][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.908425][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.997126][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.998534][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.001866][ T4507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.008399][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.010070][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.017395][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.019051][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.020645][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.022109][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.025179][ T4507] device veth0_vlan entered promiscuous mode [ 66.031079][ T4507] device veth1_vlan entered promiscuous mode [ 66.042713][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.044258][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.046551][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.048103][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.051148][ T4507] device veth0_macvtap entered promiscuous mode [ 66.053591][ T4507] device veth1_macvtap entered promiscuous mode [ 66.059653][ T4507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.061022][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.062566][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.064135][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.066480][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.071451][ T4507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.072738][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.075247][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.078214][ T4507] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.079649][ T4507] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.080984][ T4507] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.082340][ T4507] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.760004][ T264] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.427572][ T264] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.606133][ T1968] cfg80211: failed to load regulatory.db [ 69.607960][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.609003][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.877436][ T264] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.938025][ T264] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.171413][ T1620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.172753][ T1620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.174132][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.183212][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.184860][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.186304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:12 executed programs: 0 [ 72.298183][ T4915] chnl_net:caif_netlink_parms(): no params data found [ 72.318061][ T4915] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.319412][ T4915] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.320965][ T4915] device bridge_slave_0 entered promiscuous mode [ 72.322960][ T4915] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.324231][ T4915] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.326959][ T4915] device bridge_slave_1 entered promiscuous mode [ 72.337873][ T4915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.340489][ T4915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.348707][ T4915] team0: Port device team_slave_0 added [ 72.352163][ T4915] team0: Port device team_slave_1 added [ 72.361702][ T4915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.362900][ T4915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.367705][ T4915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.370103][ T4915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.371287][ T4915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.377048][ T4915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.435739][ T4915] device hsr_slave_0 entered promiscuous mode [ 72.454975][ T4915] device hsr_slave_1 entered promiscuous mode [ 72.504510][ T4915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.505752][ T4915] Cannot create hsr debugfs directory [ 72.968359][ T4915] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.996150][ T4915] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.027042][ T4915] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.057821][ T4915] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.101858][ T4915] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.103176][ T4915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.104767][ T4915] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.105919][ T4915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.126814][ T4915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.131475][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.133745][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.141439][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.148166][ T4915] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.151385][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.152835][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.154023][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.176495][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.178217][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.179428][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.183457][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.187910][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.189717][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.192084][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.194311][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.197076][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.202154][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.203882][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.220965][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.224746][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.226697][ T4915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.270119][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.271473][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.275687][ T4915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.290722][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.292473][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.299255][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.300788][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.302301][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.303725][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.307286][ T4915] device veth0_vlan entered promiscuous mode [ 73.310634][ T4915] device veth1_vlan entered promiscuous mode [ 73.318804][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.320338][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.321813][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.323338][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.327240][ T4915] device veth0_macvtap entered promiscuous mode [ 73.329721][ T4915] device veth1_macvtap entered promiscuous mode [ 73.335606][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.337354][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.339657][ T4915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.340936][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.342551][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.344089][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.346063][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.348514][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.350158][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.352145][ T4915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.353363][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.355411][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.358111][ T4915] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.359541][ T4915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.360974][ T4915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.362376][ T4915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.383240][ T351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.386099][ T351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.387405][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.393714][ T1620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.395304][ T1620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.396606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.418158][ T5025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'. [ 73.429076][ T5027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'. [ 73.439937][ T5029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17'. [ 73.469343][ T5031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18'. [ 73.481605][ T5033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 73.491527][ T5035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'. [ 73.518992][ T5037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21'. [ 73.528664][ T5039] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'. [ 73.540086][ T5041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'. [ 73.569424][ T5043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24'. [ 74.324622][ T4162] Bluetooth: hci0: command 0x0409 tx timeout [ 74.729282][ T5181] [ 74.729708][ T5181] ============================================ [ 74.730637][ T5181] WARNING: possible recursive locking detected [ 74.731603][ T5181] syzkaller #0 Not tainted [ 74.732353][ T5181] -------------------------------------------- [ 74.733340][ T5181] syz.0.92/5181 is trying to acquire lock: [ 74.734256][ T5181] ffff0000ce293398 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x138/0x3c8 [ 74.735882][ T5181] [ 74.735882][ T5181] but task is already holding lock: [ 74.737117][ T5181] ffff0000c2d58098 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x138/0x3c8 [ 74.738625][ T5181] [ 74.738625][ T5181] other info that might help us debug this: [ 74.739955][ T5181] Possible unsafe locking scenario: [ 74.739955][ T5181] [ 74.741091][ T5181] CPU0 [ 74.741633][ T5181] ---- [ 74.742171][ T5181] lock(_xmit_ETHER#2); [ 74.742870][ T5181] lock(_xmit_ETHER#2); [ 74.743602][ T5181] [ 74.743602][ T5181] *** DEADLOCK *** [ 74.743602][ T5181] [ 74.744893][ T5181] May be due to missing lock nesting notation [ 74.744893][ T5181] [ 74.746248][ T5181] 13 locks held by syz.0.92/5181: [ 74.747071][ T5181] #0: ffff800014471360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 74.748603][ T5181] #1: ffff8000144713c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 74.750229][ T5181] #2: ffff8000144713c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 74.751816][ T5181] #3: ffff0000dbb06258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: qdisc_run_begin+0x120/0x2a0 [ 74.753870][ T5181] #4: ffff0000c2d58098 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x138/0x3c8 [ 74.755431][ T5181] #5: ffff0000dadcc1e0 (k-slock-AF_INET6){+...}-{2:2}, at: icmpv6_xmit_lock+0xf0/0x140 [ 74.757091][ T5181] #6: ffff800014471360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 74.758695][ T5181] #7: ffff800014471360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 74.760242][ T5181] #8: ffff8000144713c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 74.761815][ T5181] #9: ffff800014471360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 74.763337][ T5181] #10: ffff8000144713c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 74.764927][ T5181] #11: ffff8000144713c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 74.766611][ T5181] #12: ffff0000d9c91258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: qdisc_run_begin+0x120/0x2a0 [ 74.768569][ T5181] [ 74.768569][ T5181] stack backtrace: [ 74.769503][ T5181] CPU: 0 PID: 5181 Comm: syz.0.92 Not tainted syzkaller #0 [ 74.770680][ T5181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 74.772327][ T5181] Call trace: [ 74.772880][ T5181] dump_backtrace+0x0/0x458 [ 74.773662][ T5181] show_stack+0x2c/0x3c [ 74.774379][ T5181] __dump_stack+0x30/0x40 [ 74.775090][ T5181] dump_stack_lvl+0xf4/0x15c [ 74.775886][ T5181] dump_stack+0x1c/0x5c [ 74.776602][ T5181] __lock_acquire+0x15bc/0x67ec [ 74.777426][ T5181] lock_acquire+0x1f4/0x618 [ 74.778153][ T5181] _raw_spin_lock+0xb0/0x10c [ 74.778877][ T5181] sch_direct_xmit+0x138/0x3c8 [ 74.779665][ T5181] __dev_queue_xmit+0x13d0/0x2800 [ 74.780493][ T5181] dev_queue_xmit+0x24/0x34 [ 74.781208][ T5181] neigh_resolve_output+0x530/0x5e0 [ 74.782007][ T5181] ip6_finish_output2+0x12cc/0x1a10 [ 74.782821][ T5181] ip6_finish_output+0x570/0x6dc [ 74.783602][ T5181] ip6_output+0x274/0x500 [ 74.784264][ T5181] ndisc_send_skb+0xc00/0x163c [ 74.785093][ T5181] ndisc_send_ns+0x528/0x6f0 [ 74.785908][ T5181] ndisc_solicit+0x2b4/0x410 [ 74.786655][ T5181] neigh_probe+0xc4/0x130 [ 74.787342][ T5181] __neigh_event_send+0xbe8/0x1198 [ 74.788150][ T5181] neigh_resolve_output+0x180/0x5e0 [ 74.788966][ T5181] ip6_finish_output2+0x12cc/0x1a10 [ 74.789846][ T5181] ip6_finish_output+0x570/0x6dc [ 74.790687][ T5181] ip6_output+0x274/0x500 [ 74.791424][ T5181] ip6_local_out+0x120/0x15c [ 74.792181][ T5181] ip6_send_skb+0x1a8/0x4f4 [ 74.792928][ T5181] ip6_push_pending_frames+0xd0/0x118 [ 74.793858][ T5181] icmpv6_push_pending_frames+0x238/0x394 [ 74.794848][ T5181] icmp6_send+0xf68/0x14e0 [ 74.795640][ T5181] ip6_link_failure+0x44/0x4a8 [ 74.796409][ T5181] dst_link_failure+0x11c/0x160 [ 74.797238][ T5181] ip_tunnel_xmit+0x175c/0x1f44 [ 74.798061][ T5181] erspan_xmit+0x894/0x1490 [ 74.798807][ T5181] dev_hard_start_xmit+0x298/0x864 [ 74.799702][ T5181] sch_direct_xmit+0x2b8/0x3c8 [ 74.800549][ T5181] __dev_queue_xmit+0x13d0/0x2800 [ 74.801351][ T5181] dev_queue_xmit+0x24/0x34 [ 74.802097][ T5181] neigh_resolve_output+0x530/0x5e0 [ 74.802962][ T5181] ip6_finish_output2+0x12cc/0x1a10 [ 74.803844][ T5181] ip6_finish_output+0x570/0x6dc [ 74.804631][ T5181] ip6_output+0x274/0x500 [ 74.805306][ T5181] rawv6_send_hdrinc+0xdec/0x1890 [ 74.806107][ T5181] rawv6_sendmsg+0xdbc/0x12f4 [ 74.806935][ T5181] inet_sendmsg+0x154/0x284 [ 74.807711][ T5181] sock_write_iter+0x250/0x340 [ 74.808496][ T5181] vfs_write+0x590/0xa60 [ 74.809164][ T5181] ksys_write+0x12c/0x224 [ 74.809890][ T5181] __arm64_sys_write+0x7c/0x90 [ 74.810704][ T5181] invoke_syscall+0x98/0x2b0 [ 74.811460][ T5181] el0_svc_common+0x138/0x258 [ 74.812310][ T5181] do_el0_svc+0x58/0x13c [ 74.812996][ T5181] el0_svc+0x78/0x1d0 [ 74.813657][ T5181] el0t_64_sync_handler+0xcc/0xe4 [ 74.814469][ T5181] el0t_64_sync+0x1a0/0x1a4 [ 75.077343][ T264] device hsr_slave_0 left promiscuous mode [ 75.095134][ T264] device hsr_slave_1 left promiscuous mode [ 75.184497][ T264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.185638][ T264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.186997][ T264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.188344][ T264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.189747][ T264] device bridge_slave_1 left promiscuous mode [ 75.190810][ T264] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.224842][ T264] device bridge_slave_0 left promiscuous mode [ 75.225836][ T264] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.364785][ T264] device veth1_macvtap left promiscuous mode [ 75.365939][ T264] device veth0_macvtap left promiscuous mode [ 75.367030][ T264] device veth1_vlan left promiscuous mode [ 75.368037][ T264] device veth0_vlan left promiscuous mode [ 75.435676][ T264] team0 (unregistering): Port device team_slave_1 removed [ 75.438856][ T264] team0 (unregistering): Port device team_slave_0 removed [ 75.441837][ T264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.467260][ T264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.587559][ T264] bond0 (unregistering): Released all slaves [ 76.405266][ T4162] Bluetooth: hci0: command 0x041b tx timeout 1970/01/01 00:01:17 executed programs: 165 [ 78.449638][ T5496] __nla_validate_parse: 224 callbacks suppressed [ 78.449648][ T5496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.249'. [ 78.460262][ T5498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.250'. [ 78.468304][ T5500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.251'. [ 78.484601][ T4156] Bluetooth: hci0: command 0x040f tx timeout [ 78.508379][ T5502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.252'. [ 78.515303][ T5504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.253'. [ 78.521964][ T5506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.254'. [ 78.568803][ T5508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.255'. [ 78.576012][ T5510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.256'. [ 78.583225][ T5512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.257'. [ 78.619577][ T5514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.258'. [ 80.566429][ T4894] Bluetooth: hci0: command 0x0419 tx timeout 1970/01/01 00:01:22 executed programs: 436 [ 83.458695][ T6038] __nla_validate_parse: 261 callbacks suppressed [ 83.458705][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.520'. [ 83.498549][ T6040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.521'. [ 83.507681][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.522'. [ 83.514079][ T6044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.523'. [ 83.558209][ T6046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.524'. [ 83.566927][ T6048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.525'. [ 83.574175][ T6050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.526'. [ 83.608198][ T6052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.527'. [ 83.618550][ T6054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.528'. [ 83.625583][ T6056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.529'.