Warning: Permanently added '10.128.10.49' (ED25519) to the list of known hosts. 1970/01/01 00:01:18 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:18 parsed 1 programs [ 81.545198][ T4442] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 86.155026][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.156989][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.159732][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.170687][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.172461][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.174881][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.537136][ T4508] chnl_net:caif_netlink_parms(): no params data found [ 87.572487][ T4508] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.574146][ T4508] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.576385][ T4508] device bridge_slave_0 entered promiscuous mode [ 87.580383][ T4508] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.582121][ T4508] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.584525][ T4508] device bridge_slave_1 entered promiscuous mode [ 87.609670][ T4508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.614775][ T4508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.630592][ T4508] team0: Port device team_slave_0 added [ 87.633996][ T4508] team0: Port device team_slave_1 added [ 87.649296][ T4508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.650709][ T4508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.656087][ T4508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.660126][ T4508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.661649][ T4508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.666977][ T4508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.728621][ T4508] device hsr_slave_0 entered promiscuous mode [ 87.766947][ T4508] device hsr_slave_1 entered promiscuous mode [ 88.632788][ T4508] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.655651][ T4508] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.709269][ T4508] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.738652][ T4508] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.852092][ T4508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.861195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.863222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.868604][ T4508] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.881226][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.883405][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.885393][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.886896][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.889636][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.892023][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.894338][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.895892][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.900456][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.903084][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.918562][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.921497][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.926858][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.929294][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.931674][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.934031][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.936350][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.941674][ T4508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.944497][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.948209][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.950858][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.953055][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.041894][ T4508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.043687][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.045418][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.100265][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.102623][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.118936][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.121074][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.123654][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.126206][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.132126][ T4508] device veth0_vlan entered promiscuous mode [ 89.141046][ T4508] device veth1_vlan entered promiscuous mode [ 89.160150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.162469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.164660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.167932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.171953][ T4508] device veth0_macvtap entered promiscuous mode [ 89.176024][ T4508] device veth1_macvtap entered promiscuous mode [ 89.190231][ T4508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.194358][ T4508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.197965][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.200012][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.202182][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.204446][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.207543][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.209876][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.217637][ T4508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.219556][ T4508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.221353][ T4508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.223139][ T4508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:29 executed programs: 0 [ 89.487324][ T4611] chnl_net:caif_netlink_parms(): no params data found [ 89.536757][ T4611] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.538516][ T4611] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.540780][ T4611] device bridge_slave_0 entered promiscuous mode [ 89.544383][ T4611] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.545924][ T4611] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.548639][ T4611] device bridge_slave_1 entered promiscuous mode [ 89.571593][ T4611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.575549][ T4611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.593131][ T4611] team0: Port device team_slave_0 added [ 89.597159][ T4611] team0: Port device team_slave_1 added [ 89.610462][ T4611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.611996][ T4611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.617597][ T4611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.621986][ T4611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.623580][ T4611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.629318][ T4611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.708949][ T4611] device hsr_slave_0 entered promiscuous mode [ 89.757084][ T4611] device hsr_slave_1 entered promiscuous mode [ 89.797773][ T4611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.799381][ T4611] Cannot create hsr debugfs directory [ 89.873099][ T4611] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.406634][ T4562] Bluetooth: hci0: command 0x0409 tx timeout [ 92.475709][ T4611] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.476624][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 94.936268][ T4611] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.991321][ T4611] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.156689][ T4611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.203667][ T4611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.239346][ T4611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.259600][ T4611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.354860][ T4611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.364169][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.366375][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.370838][ T4611] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.374999][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.379699][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.381762][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.383324][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.385503][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.392140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.394398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.396885][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.398469][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.415057][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.420940][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.426061][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.429566][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.432121][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.446898][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.452108][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.454535][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.458002][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.461675][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.463891][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.468009][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.541450][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.543156][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.549852][ T4611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.557503][ T4164] Bluetooth: hci0: command 0x040f tx timeout [ 95.564824][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.567561][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.585108][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.588945][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.591297][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.593342][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.598105][ T4611] device veth0_vlan entered promiscuous mode [ 95.604286][ T4611] device veth1_vlan entered promiscuous mode [ 95.619188][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.621519][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.623601][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.625948][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.638231][ T4611] device veth0_macvtap entered promiscuous mode [ 95.642246][ T4611] device veth1_macvtap entered promiscuous mode [ 95.653364][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.655513][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.660045][ T4611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.662542][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.664968][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.667711][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.670127][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.674052][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.676223][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.682844][ T4611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.693198][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.695713][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.702128][ T4611] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.703976][ T4611] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.705857][ T4611] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.708052][ T4611] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.752888][ T1601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.757910][ T1601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.760627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.781209][ T1601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.783078][ T1601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.785752][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:35 executed programs: 2 [ 95.824206][ T4882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'. [ 95.853170][ T4884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'. [ 95.869310][ T4886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17'. [ 95.898717][ T4888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18'. [ 95.924000][ T1825] device hsr_slave_0 left promiscuous mode [ 95.948531][ T1825] device hsr_slave_1 left promiscuous mode [ 96.036750][ T1825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.038605][ T1825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.040658][ T1825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.042326][ T1825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.044338][ T1825] device bridge_slave_1 left promiscuous mode [ 96.045925][ T1825] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.098791][ T1825] device bridge_slave_0 left promiscuous mode [ 96.100164][ T1825] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.226803][ T1825] device veth1_macvtap left promiscuous mode [ 96.228241][ T1825] device veth0_macvtap left promiscuous mode [ 96.229730][ T1825] device veth1_vlan left promiscuous mode [ 96.230956][ T1825] device veth0_vlan left promiscuous mode [ 96.472548][ T1825] team0 (unregistering): Port device team_slave_1 removed [ 96.485048][ T1825] team0 (unregistering): Port device team_slave_0 removed [ 96.493470][ T1825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.522728][ T1825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.653396][ T1825] bond0 (unregistering): Released all slaves [ 96.771443][ T4890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 96.822496][ T4892] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'. [ 96.861787][ T4894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21'. [ 96.882532][ T4896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'. [ 96.900164][ T4898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'. [ 96.936227][ T4900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24'. [ 97.638320][ T4164] Bluetooth: hci0: command 0x0419 tx timeout [ 97.832730][ T4976] [ 97.833278][ T4976] ============================================ [ 97.834626][ T4976] WARNING: possible recursive locking detected [ 97.835873][ T4976] 5.15.173-syzkaller #0 Not tainted [ 97.836929][ T4976] -------------------------------------------- [ 97.838178][ T4976] syz.0.62/4976 is trying to acquire lock: [ 97.839339][ T4976] ffff0000ebb27398 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x15c/0x484 [ 97.841326][ T4976] [ 97.841326][ T4976] but task is already holding lock: [ 97.842985][ T4976] ffff0000c9d43898 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x15c/0x484 [ 97.844885][ T4976] [ 97.844885][ T4976] other info that might help us debug this: [ 97.846661][ T4976] Possible unsafe locking scenario: [ 97.846661][ T4976] [ 97.848312][ T4976] CPU0 [ 97.849081][ T4976] ---- [ 97.849727][ T4976] lock(_xmit_ETHER#2); [ 97.850673][ T4976] lock(_xmit_ETHER#2); [ 97.851590][ T4976] [ 97.851590][ T4976] *** DEADLOCK *** [ 97.851590][ T4976] [ 97.853433][ T4976] May be due to missing lock nesting notation [ 97.853433][ T4976] [ 97.855126][ T4976] 13 locks held by syz.0.62/4976: [ 97.856357][ T4976] #0: ffff800014d322e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 97.858369][ T4976] #1: ffff800014d32340 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 97.860614][ T4976] #2: ffff800014d32340 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 97.862690][ T4976] #3: ffff0000d0790258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: qdisc_run_begin+0x130/0x2bc [ 97.865276][ T4976] #4: ffff0000c9d43898 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x15c/0x484 [ 97.867149][ T4976] #5: ffff0000dc766620 (k-slock-AF_INET6){+...}-{2:2}, at: icmpv6_xmit_lock+0x100/0x188 [ 97.869294][ T4976] #6: ffff800014d322e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 97.871529][ T4976] #7: ffff800014d322e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 97.873617][ T4976] #8: ffff800014d32340 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 97.875809][ T4976] #9: ffff800014d322e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 97.877931][ T4976] #10: ffff800014d32340 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 97.879862][ T4976] #11: ffff800014d32340 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 97.881972][ T4976] #12: ffff0000caa90258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: qdisc_run_begin+0x130/0x2bc [ 97.884700][ T4976] [ 97.884700][ T4976] stack backtrace: [ 97.886053][ T4976] CPU: 1 PID: 4976 Comm: syz.0.62 Not tainted 5.15.173-syzkaller #0 [ 97.887724][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.890204][ T4976] Call trace: [ 97.890945][ T4976] dump_backtrace+0x0/0x530 [ 97.891852][ T4976] show_stack+0x2c/0x3c [ 97.892782][ T4976] dump_stack_lvl+0x108/0x170 [ 97.893847][ T4976] dump_stack+0x1c/0x58 [ 97.894835][ T4976] __lock_acquire+0x62bc/0x7638 [ 97.895955][ T4976] lock_acquire+0x240/0x77c [ 97.897012][ T4976] _raw_spin_lock+0xb0/0x10c [ 97.898083][ T4976] sch_direct_xmit+0x15c/0x484 [ 97.899207][ T4976] __dev_queue_xmit+0x1488/0x2ac8 [ 97.900396][ T4976] dev_queue_xmit+0x24/0x34 [ 97.901347][ T4976] neigh_resolve_output+0x52c/0x5dc [ 97.902419][ T4976] ip6_finish_output2+0x1360/0x1cec [ 97.903514][ T4976] __ip6_finish_output+0x580/0x6ec [ 97.904626][ T4976] ip6_finish_output+0x40/0x218 [ 97.905613][ T4976] ip6_output+0x274/0x594 [ 97.906652][ T4976] ndisc_send_skb+0xbf8/0x1788 [ 97.907574][ T4976] ndisc_send_ns+0x538/0x6ec [ 97.908600][ T4976] ndisc_solicit+0x2f4/0x47c [ 97.909537][ T4976] neigh_probe+0xc4/0x138 [ 97.910444][ T4976] __neigh_event_send+0xca4/0x1338 [ 97.911539][ T4976] neigh_resolve_output+0x178/0x5dc [ 97.912726][ T4976] ip6_finish_output2+0x1360/0x1cec [ 97.913745][ T4976] __ip6_finish_output+0x580/0x6ec [ 97.914898][ T4976] ip6_finish_output+0x40/0x218 [ 97.916065][ T4976] ip6_output+0x274/0x594 [ 97.916969][ T4976] ip6_local_out+0x120/0x160 [ 97.918008][ T4976] ip6_send_skb+0x1a4/0x580 [ 97.919044][ T4976] ip6_push_pending_frames+0xd0/0x118 [ 97.920214][ T4976] icmpv6_push_pending_frames+0x244/0x398 [ 97.921482][ T4976] icmp6_send+0x11a4/0x1b18 [ 97.922446][ T4976] ip6_link_failure+0x44/0x4a8 [ 97.923354][ T4976] dst_link_failure+0x11c/0x160 [ 97.924514][ T4976] ip_tunnel_xmit+0x15f4/0x2184 [ 97.925533][ T4976] erspan_xmit+0x9cc/0x14cc [ 97.926533][ T4976] dev_hard_start_xmit+0x2bc/0x92c [ 97.927702][ T4976] sch_direct_xmit+0x2e0/0x484 [ 97.928679][ T4976] __dev_queue_xmit+0x1488/0x2ac8 [ 97.929807][ T4976] dev_queue_xmit+0x24/0x34 [ 97.930908][ T4976] neigh_resolve_output+0x52c/0x5dc [ 97.932029][ T4976] ip6_finish_output2+0x1360/0x1cec [ 97.933166][ T4976] __ip6_finish_output+0x580/0x6ec [ 97.934305][ T4976] ip6_finish_output+0x40/0x218 [ 97.935366][ T4976] ip6_output+0x274/0x594 [ 97.936247][ T4976] rawv6_send_hdrinc+0xd64/0x1c14 [ 97.937420][ T4976] rawv6_sendmsg+0x1074/0x1bcc [ 97.938488][ T4976] inet_sendmsg+0x15c/0x290 [ 97.939519][ T4976] sock_write_iter+0x2b0/0x3f8 [ 97.940474][ T4976] vfs_write+0x884/0xb44 [ 97.941386][ T4976] ksys_write+0x15c/0x26c [ 97.942209][ T4976] __arm64_sys_write+0x7c/0x90 [ 97.943159][ T4976] invoke_syscall+0x98/0x2b8 [ 97.944065][ T4976] el0_svc_common+0x138/0x258 [ 97.944985][ T4976] do_el0_svc+0x58/0x14c [ 97.945946][ T4976] el0_svc+0x7c/0x1f0 [ 97.946838][ T4976] el0t_64_sync_handler+0x84/0xe4 [ 97.947950][ T4976] el0t_64_sync+0x1a0/0x1a4 1970/01/01 00:01:40 executed programs: 199 [ 100.853360][ T5281] __nla_validate_parse: 189 callbacks suppressed [ 100.853373][ T5281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.214'. [ 100.869533][ T5283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.215'. [ 100.882953][ T5285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.216'. [ 100.913475][ T5287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.217'. [ 100.928100][ T5289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.218'. [ 100.941490][ T5291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.219'. [ 100.983279][ T5293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.220'. [ 100.995872][ T5295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.221'. [ 101.010004][ T5297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.222'. [ 101.043100][ T5299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.223'. 1970/01/01 00:01:45 executed programs: 478 [ 105.872595][ T5839] __nla_validate_parse: 269 callbacks suppressed [ 105.872607][ T5839] netlink: 20 bytes leftover after parsing attributes in process `syz.0.493'. [ 105.887536][ T5841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.494'. [ 105.900852][ T5843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.495'. [ 105.943495][ T5845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.496'. [ 105.956929][ T5847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.497'. [ 105.969809][ T5849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.498'. [ 106.002714][ T5851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.499'. [ 106.016215][ T5853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.500'. [ 106.031077][ T5855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.501'. [ 106.064148][ T5857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.502'.