[ 57.162073][ T1195] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.178355][ T1195] veth1_macvtap: left promiscuous mode [ 57.185432][ T1195] veth0_macvtap: left promiscuous mode [ 57.191076][ T1195] veth1_vlan: left promiscuous mode [ 57.197067][ T1195] veth0_vlan: left promiscuous mode [ 57.419667][ T1195] team0 (unregistering): Port device team_slave_1 removed [ 57.431897][ T1195] team0 (unregistering): Port device team_slave_0 removed [ 57.445895][ T1195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.458280][ T1195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.501004][ T1195] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.168' (ECDSA) to the list of known hosts. 2023/04/17 09:06:09 ignoring optional flag "sandboxArg"="0" 2023/04/17 09:06:09 parsed 1 programs 2023/04/17 09:06:09 executed programs: 0 [ 73.728989][ T5510] cgroup: Unknown subsys name 'net' [ 73.738246][ T5510] cgroup: Unknown subsys name 'rlimit' [ 74.820605][ T4384] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.828561][ T4384] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.836853][ T4384] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.845227][ T4384] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.852896][ T4384] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.860497][ T4384] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.930135][ T5517] chnl_net:caif_netlink_parms(): no params data found [ 74.968879][ T5517] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.976942][ T5517] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.984471][ T5517] bridge_slave_0: entered allmulticast mode [ 74.991207][ T5517] bridge_slave_0: entered promiscuous mode [ 74.999997][ T5517] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.008092][ T5517] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.015461][ T5517] bridge_slave_1: entered allmulticast mode [ 75.024201][ T5517] bridge_slave_1: entered promiscuous mode [ 75.043669][ T5517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.054626][ T5517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.076754][ T5517] team0: Port device team_slave_0 added [ 75.084910][ T5517] team0: Port device team_slave_1 added [ 75.102816][ T5517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.109786][ T5517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.136034][ T5517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.148155][ T5517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.155786][ T5517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.182619][ T5517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.209107][ T5517] hsr_slave_0: entered promiscuous mode [ 75.215594][ T5517] hsr_slave_1: entered promiscuous mode [ 75.274045][ T5517] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.281320][ T5517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.288664][ T5517] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.295784][ T5517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.331076][ T5517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.342815][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.350939][ T4767] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.360308][ T4767] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.368620][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 75.380391][ T5517] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.390863][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.399502][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.406710][ T5075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.423508][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.432035][ T5075] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.439254][ T5075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.451153][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.462620][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.473645][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.490854][ T5517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.501481][ T5517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.514545][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.523047][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.531299][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.549704][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.557314][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.567826][ T5517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.882044][ T5517] veth0_vlan: entered promiscuous mode [ 75.890007][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.899038][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.908108][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.915975][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.929007][ T5517] veth1_vlan: entered promiscuous mode [ 75.946413][ T5517] veth0_macvtap: entered promiscuous mode [ 75.954657][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.963449][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.972044][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.983432][ T5517] veth1_macvtap: entered promiscuous mode [ 75.997500][ T5517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.005661][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.014325][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.023196][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.034550][ T5517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.051036][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.059852][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.101699][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.109959][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.129463][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.143269][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.151374][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.161202][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.198324][ T5540] [ 76.200699][ T5540] ============================================ [ 76.206848][ T5540] WARNING: possible recursive locking detected [ 76.214039][ T5540] 6.3.0-rc7-syzkaller-g6a8f57ae2eb0 #0 Not tainted [ 76.220516][ T5540] -------------------------------------------- [ 76.226661][ T5540] syz-executor.0/5540 is trying to acquire lock: [ 76.233067][ T5540] ffff8880726258d8 (_xmit_ETHER#2){+.-.}-{2:2}, at: __dev_queue_xmit+0x17f4/0x3bb0 [ 76.242384][ T5540] [ 76.242384][ T5540] but task is already holding lock: [ 76.249842][ T5540] ffff88802ae2f4d8 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x1c4/0x5f0 [ 76.258912][ T5540] [ 76.258912][ T5540] other info that might help us debug this: [ 76.267076][ T5540] Possible unsafe locking scenario: [ 76.267076][ T5540] [ 76.274628][ T5540] CPU0 [ 76.277919][ T5540] ---- [ 76.281304][ T5540] lock(_xmit_ETHER#2); [ 76.285561][ T5540] lock(_xmit_ETHER#2); [ 76.289901][ T5540] [ 76.289901][ T5540] *** DEADLOCK *** [ 76.289901][ T5540] [ 76.298225][ T5540] May be due to missing lock nesting notation [ 76.298225][ T5540] [ 76.306528][ T5540] 6 locks held by syz-executor.0/5540: [ 76.312006][ T5540] #0: ffffffff8cf25400 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x40 [ 76.322039][ T5540] #1: ffffffff8cf25400 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x40 [ 76.331789][ T5540] #2: ffff888020ff2258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x12e6/0x3bb0 [ 76.344360][ T5540] #3: ffff88802ae2f4d8 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x1c4/0x5f0 [ 76.354037][ T5540] #4: ffffffff8cf25400 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x40 [ 76.363950][ T5540] #5: ffffffff8cf25400 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x40 [ 76.373515][ T5540] [ 76.373515][ T5540] stack backtrace: [ 76.379488][ T5540] CPU: 0 PID: 5540 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-g6a8f57ae2eb0 #0 [ 76.389443][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 76.399488][ T5540] Call Trace: [ 76.402844][ T5540] [ 76.405773][ T5540] dump_stack_lvl+0x1e7/0x2d0 [ 76.410621][ T5540] ? nf_tcp_handle_invalid+0x650/0x650 [ 76.416086][ T5540] ? panic+0x770/0x770 [ 76.420152][ T5540] validate_chain+0x472a/0x58e0 [ 76.425016][ T5540] ? print_irqtrace_events+0x220/0x220 [ 76.430471][ T5540] ? stack_trace_save+0x117/0x1c0 [ 76.435481][ T5540] ? stack_trace_snprint+0xf0/0xf0 [ 76.440601][ T5540] ? reacquire_held_locks+0x660/0x660 [ 76.445974][ T5540] ? __stack_depot_save+0x4dc/0x650 [ 76.452377][ T5540] ? dst_release+0xe0/0xe0 [ 76.456801][ T5540] ? kasan_save_stack+0x4f/0x60 [ 76.461635][ T5540] ? kasan_save_stack+0x3f/0x60 [ 76.466470][ T5540] ? __kasan_record_aux_stack+0xb0/0xc0 [ 76.472004][ T5540] ? call_rcu+0x167/0xa70 [ 76.476339][ T5540] ? __dev_queue_xmit+0x9bd/0x3bb0 [ 76.481431][ T5540] ? ip_finish_output2+0xdd5/0x1290 [ 76.486711][ T5540] ? iptunnel_xmit+0x510/0x930 [ 76.491461][ T5540] ? ip_tunnel_xmit+0x22ea/0x2c60 [ 76.496487][ T5540] ? erspan_xmit+0xad8/0x1540 [ 76.501149][ T5540] ? dev_hard_start_xmit+0x241/0x750 [ 76.506422][ T5540] ? sch_direct_xmit+0x2b6/0x5f0 [ 76.511349][ T5540] ? __dev_queue_xmit+0x1a6b/0x3bb0 [ 76.516538][ T5540] ? ip_finish_output2+0xdd5/0x1290 [ 76.521739][ T5540] ? ip_send_skb+0x117/0x1b0 [ 76.526327][ T5540] ? udp_send_skb+0xa33/0x1420 [ 76.531085][ T5540] ? csum_partial+0x234/0x2b0 [ 76.535758][ T5540] ? __skb_checksum+0x850/0x850 [ 76.540606][ T5540] ? mark_lock+0x9a/0x340 [ 76.545024][ T5540] __lock_acquire+0x125b/0x1f80 [ 76.549953][ T5540] lock_acquire+0x1e1/0x520 [ 76.554470][ T5540] ? __dev_queue_xmit+0x17f4/0x3bb0 [ 76.559704][ T5540] ? skb_checksum_help+0x314/0x5b0 [ 76.564828][ T5540] ? read_lock_is_recursive+0x20/0x20 [ 76.570244][ T5540] ? validate_xmit_skb+0xa9b/0x1050 [ 76.575427][ T5540] ? validate_xmit_skb_list+0x130/0x130 [ 76.580958][ T5540] _raw_spin_lock+0x2e/0x40 [ 76.585467][ T5540] ? __dev_queue_xmit+0x17f4/0x3bb0 [ 76.590755][ T5540] __dev_queue_xmit+0x17f4/0x3bb0 [ 76.593085][ T22] cfg80211: failed to load regulatory.db [ 76.596227][ T5540] ? print_irqtrace_events+0x220/0x220 [ 76.607317][ T5540] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 76.612626][ T5540] ? neigh_event_send+0x120/0x120 [ 76.617649][ T5540] ? neigh_resolve_output+0x2d5/0x710 [ 76.623011][ T5540] ? eth_header+0x11c/0x1f0 [ 76.627500][ T5540] ? __asan_memcpy+0x40/0x70 [ 76.632082][ T5540] ? eth_header+0x11c/0x1f0 [ 76.636569][ T5540] ? llc_sysctl_exit+0x70/0x70 [ 76.641320][ T5540] ? neigh_resolve_output+0x5ee/0x710 [ 76.646719][ T5540] ip_finish_output2+0xdd5/0x1290 [ 76.651781][ T5540] ? ip_mc_finish_output+0x4f0/0x4f0 [ 76.657120][ T5540] ? ip_fast_csum+0x1f0/0x2b0 [ 76.662088][ T5540] ? ip_fragment+0x220/0x220 [ 76.666776][ T5540] ? ip_skb_dst_mtu+0x6e1/0x9d0 [ 76.671630][ T5540] ? __ip_finish_output+0x3e0/0x4b0 [ 76.676932][ T5540] iptunnel_xmit+0x510/0x930 [ 76.681516][ T5540] ip_tunnel_xmit+0x22ea/0x2c60 [ 76.686361][ T5540] ? tnl_update_pmtu+0x10b0/0x10b0 [ 76.691459][ T5540] ? __lock_acquire+0x125b/0x1f80 [ 76.696483][ T5540] ? gre_build_header+0x25b/0x9a0 [ 76.701518][ T5540] erspan_xmit+0xad8/0x1540 [ 76.706037][ T5540] dev_hard_start_xmit+0x241/0x750 [ 76.711152][ T5540] sch_direct_xmit+0x2b6/0x5f0 [ 76.715912][ T5540] ? mrp_pdu_parse_vecattr_event+0x2c0/0x2c0 [ 76.722054][ T5540] __dev_queue_xmit+0x1a6b/0x3bb0 [ 76.727188][ T5540] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 76.732666][ T5540] ? neigh_event_send+0x120/0x120 [ 76.737721][ T5540] ? neigh_resolve_output+0x2d5/0x710 [ 76.743214][ T5540] ? eth_header+0x11c/0x1f0 [ 76.747729][ T5540] ? __asan_memcpy+0x40/0x70 [ 76.752420][ T5540] ? eth_header+0x11c/0x1f0 [ 76.756912][ T5540] ? llc_sysctl_exit+0x70/0x70 [ 76.761669][ T5540] ? neigh_resolve_output+0x5ee/0x710 [ 76.767138][ T5540] ip_finish_output2+0xdd5/0x1290 [ 76.772150][ T5540] ? ip_mc_finish_output+0x4f0/0x4f0 [ 76.777622][ T5540] ? ip_fragment+0x220/0x220 [ 76.782213][ T5540] ? __asan_memset+0x23/0x40 [ 76.786906][ T5540] ? ip_skb_dst_mtu+0x6e1/0x9d0 [ 76.791746][ T5540] ? __ip_finish_output+0x3e0/0x4b0 [ 76.797038][ T5540] ip_send_skb+0x117/0x1b0 [ 76.801447][ T5540] udp_send_skb+0xa33/0x1420 [ 76.806025][ T5540] udp_sendmsg+0x1f10/0x2d20 [ 76.810777][ T5540] ? ip_skb_dst_mtu+0x9d0/0x9d0 [ 76.815619][ T5540] ? udp_cmsg_send+0x340/0x340 [ 76.820384][ T5540] ? reacquire_held_locks+0x660/0x660 [ 76.825757][ T5540] udpv6_sendmsg+0xda1/0x3060 [ 76.830438][ T5540] ? udp_v6_early_demux+0xff0/0xff0 [ 76.835621][ T5540] ? smack_socket_sendmsg+0x172/0x530 [ 76.840981][ T5540] ? iovec_from_user+0x61/0x390 [ 76.846006][ T5540] ? inet6_compat_ioctl+0x550/0x550 [ 76.851203][ T5540] ____sys_sendmsg+0x58f/0x890 [ 76.856076][ T5540] ? __sys_sendmsg_sock+0x30/0x30 [ 76.861105][ T5540] __sys_sendmmsg+0x3af/0x730 [ 76.865794][ T5540] ? __ia32_sys_sendmsg+0x90/0x90 [ 76.870813][ T5540] ? cpu_curr_snapshot+0xd0/0xd0 [ 76.875925][ T5540] ? do_raw_spin_unlock+0x13b/0x8b0 [ 76.881458][ T5540] ? wake_up_q+0xa3/0xe0 [ 76.885863][ T5540] ? futex_wake+0x4ee/0x590 [ 76.890462][ T5540] ? futex_wake_mark+0x170/0x170 [ 76.895395][ T5540] ? __local_bh_enable_ip+0x168/0x1f0 [ 76.900766][ T5540] ? lockdep_hardirqs_on+0x98/0x140 [ 76.906026][ T5540] ? __local_bh_enable_ip+0x168/0x1f0 [ 76.911396][ T5540] ? ip6_datagram_connect+0x38/0x40 [ 76.916601][ T5540] ? do_futex+0x37f/0x530 [ 76.920976][ T5540] ? print_irqtrace_events+0x220/0x220 [ 76.926436][ T5540] ? syscall_enter_from_user_mode+0x32/0x230 [ 76.932567][ T5540] __x64_sys_sendmmsg+0xa0/0xb0 [ 76.937437][ T5540] do_syscall_64+0x41/0xc0 [ 76.941933][ T5540] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.947831][ T5540] RIP: 0033:0x7f19a16890e9 [ 76.952247][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.971868][ T5540] RSP: 002b:00007f19a277c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 76.980276][ T5540] RAX: ffffffffffffffda RBX: 00007f19a179bf60 RCX: 00007f19a16890e9 [ 76.988429][ T5540] RDX: 0000000000000001 RSI: 0000000020004d80 RDI: 0000000000000004 [ 76.996400][ T5540] RBP: 00007f19a16e308d R08: 0000000000000000 R09: 0000000000000000 [ 77.004907][ T5540] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.012969][ T5540] R13: 00007ffd375e977f R14: 00007f19a277c300 R15: 0000000000022000 [ 77.020950][ T5540] [ 77.029181][ T4384] Bluetooth: hci0: command 0x0409 tx timeout 2023/04/17 09:06:14 executed programs: 123 [ 79.052480][ T4384] Bluetooth: hci0: command 0x041b tx timeout [ 81.132447][ T4384] Bluetooth: hci0: command 0x040f tx timeout [ 83.212490][ T4384] Bluetooth: hci0: command 0x0419 tx timeout 2023/04/17 09:06:19 executed programs: 524