Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. 2024/08/31 22:20:51 ignoring optional flag "sandboxArg"="0" 2024/08/31 22:20:51 parsed 1 programs 2024/08/31 22:20:53 executed programs: 0 [ 48.729994][ T3438] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 48.759326][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.766942][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.774117][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.782087][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.789748][ T46] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 48.796992][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.869265][ T3502] chnl_net:caif_netlink_parms(): no params data found [ 48.884965][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.892528][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.899872][ T3502] device bridge_slave_0 entered promiscuous mode [ 48.906720][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.913742][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.921150][ T3502] device bridge_slave_1 entered promiscuous mode [ 48.930979][ T3502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.940880][ T3502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.953638][ T3502] team0: Port device team_slave_0 added [ 48.960058][ T3502] team0: Port device team_slave_1 added [ 48.968728][ T3502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.975846][ T3502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.002021][ T3502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.013142][ T3502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.020411][ T3502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.046444][ T3502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.061931][ T3502] device hsr_slave_0 entered promiscuous mode [ 49.068317][ T3502] device hsr_slave_1 entered promiscuous mode [ 49.393472][ T3502] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.401342][ T3502] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.409888][ T3502] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.418156][ T3502] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.431787][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.438873][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.446155][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.453206][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.474201][ T3502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.483180][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.491683][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.500377][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.508712][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 49.521507][ T3502] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.531330][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.539900][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.547252][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.564716][ T3502] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.575440][ T3502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.588600][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.596870][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.604097][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.612105][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.620370][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.629222][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.637244][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.663225][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.670809][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.726497][ T3502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.733844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.741419][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.758680][ T3502] device veth0_vlan entered promiscuous mode [ 49.766576][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.775052][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.783179][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.790931][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.800265][ T3502] device veth1_vlan entered promiscuous mode [ 49.811987][ T3502] device veth0_macvtap entered promiscuous mode [ 49.819593][ T3502] device veth1_macvtap entered promiscuous mode [ 49.830019][ T3502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.838181][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.847736][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.855517][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.864493][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.872801][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.883810][ T3502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.892271][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.104691][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.112767][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.121036][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.138321][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.146267][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.154511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.179830][ T3628] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 50.192002][ T3628] team0: Port device vlan0 added [ 50.198873][ T3628] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 50.210980][ T3628] device veth0_vlan left promiscuous mode [ 50.217306][ T3628] device veth0_vlan entered promiscuous mode [ 50.223382][ T3628] [ 50.225684][ T3628] ============================================ [ 50.231912][ T3628] WARNING: possible recursive locking detected [ 50.238108][ T3628] 6.1.107-syzkaller #0 Not tainted [ 50.243247][ T3628] -------------------------------------------- [ 50.249486][ T3628] syz-executor.0/3628 is trying to acquire lock: [ 50.255817][ T3628] ffff88817b1facc0 (team->team_lock_key){+.+.}-{3:3}, at: team_port_change_check+0x23/0xc0 [ 50.265823][ T3628] [ 50.265823][ T3628] but task is already holding lock: [ 50.273178][ T3628] ffff88817b1facc0 (team->team_lock_key){+.+.}-{3:3}, at: team_add_slave+0x43/0x1190 [ 50.282730][ T3628] [ 50.282730][ T3628] other info that might help us debug this: [ 50.290855][ T3628] Possible unsafe locking scenario: [ 50.290855][ T3628] [ 50.298597][ T3628] CPU0 [ 50.301852][ T3628] ---- [ 50.305192][ T3628] lock(team->team_lock_key); [ 50.309941][ T3628] lock(team->team_lock_key); [ 50.314677][ T3628] [ 50.314677][ T3628] *** DEADLOCK *** [ 50.314677][ T3628] [ 50.322878][ T3628] May be due to missing lock nesting notation [ 50.322878][ T3628] [ 50.331264][ T3628] 2 locks held by syz-executor.0/3628: [ 50.336713][ T3628] #0: ffffffff865b2418 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x514/0xa00 [ 50.346197][ T3628] #1: ffff88817b1facc0 (team->team_lock_key){+.+.}-{3:3}, at: team_add_slave+0x43/0x1190 [ 50.356097][ T3628] [ 50.356097][ T3628] stack backtrace: [ 50.361999][ T3628] CPU: 0 PID: 3628 Comm: syz-executor.0 Not tainted 6.1.107-syzkaller #0 [ 50.370395][ T3628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 50.380522][ T3628] Call Trace: [ 50.383777][ T3628] [ 50.386704][ T3628] dump_stack_lvl+0xfa/0x181 [ 50.391273][ T3628] __lock_acquire+0x73d/0x2830 [ 50.396211][ T3628] ? neigh_lookup+0x34/0x270 [ 50.400778][ T3628] ? cfg80211_netdev_notifier_call+0xb4/0x8b0 [ 50.406994][ T3628] ? neigh_lookup+0x34/0x270 [ 50.411725][ T3628] ? team_port_change_check+0x23/0xc0 [ 50.417115][ T3628] lock_acquire+0xe3/0x270 [ 50.421813][ T3628] ? team_port_change_check+0x23/0xc0 [ 50.427511][ T3628] ? arp_invalidate+0x9b/0x1d0 [ 50.432251][ T3628] ? team_port_change_check+0x23/0xc0 [ 50.437596][ T3628] __mutex_lock+0x99/0x970 [ 50.442079][ T3628] ? team_port_change_check+0x23/0xc0 [ 50.447451][ T3628] ? fib_rebalance+0x42/0x660 [ 50.452117][ T3628] team_port_change_check+0x23/0xc0 [ 50.457301][ T3628] team_device_event+0x28c/0x2b0 [ 50.462238][ T3628] raw_notifier_call_chain+0x63/0xa0 [ 50.467503][ T3628] __dev_notify_flags+0x144/0x220 [ 50.472509][ T3628] dev_change_flags+0x67/0x80 [ 50.477250][ T3628] vlan_device_event+0x275/0xcc0 [ 50.482168][ T3628] ? phonet_device_notify+0x14f/0x410 [ 50.487611][ T3628] ? raw_notifier+0x35c/0x3a0 [ 50.492292][ T3628] raw_notifier_call_chain+0x63/0xa0 [ 50.497560][ T3628] dev_open+0xd8/0x110 [ 50.501619][ T3628] team_add_slave+0x455/0x1190 [ 50.506360][ T3628] ? ip6_route_dev_notify+0x39/0x2b0 [ 50.511627][ T3628] ? raw_notifier_call_chain+0x80/0xa0 [ 50.517085][ T3628] ? __dev_notify_flags+0x1f5/0x220 [ 50.522436][ T3628] do_setlink+0x751/0x1d60 [ 50.526830][ T3628] ? __nla_validate_parse+0x2fc/0x1550 [ 50.532292][ T3628] ? __nla_validate_parse+0x103a/0x1550 [ 50.538217][ T3628] ? __nla_parse+0x3c/0x50 [ 50.542624][ T3628] ? validate_linkmsg+0x1a6/0x200 [ 50.547652][ T3628] rtnl_newlink+0xfbe/0x13b0 [ 50.552225][ T3628] ? rtnl_newlink+0x3c1/0x13b0 [ 50.556987][ T3628] ? rtnetlink_rcv_msg+0x514/0xa00 [ 50.562081][ T3628] ? rtnl_setlink+0x320/0x320 [ 50.566737][ T3628] rtnetlink_rcv_msg+0x54e/0xa00 [ 50.571683][ T3628] ? rtnetlink_rcv_msg+0xeb/0xa00 [ 50.576785][ T3628] ? lockdep_hardirqs_on+0x94/0xf0 [ 50.581871][ T3628] ? _raw_spin_unlock_irqrestore+0x68/0xb0 [ 50.587658][ T3628] ? debug_check_no_obj_freed+0x1e4/0x240 [ 50.593388][ T3628] ? kmem_cache_free+0x260/0x480 [ 50.598318][ T3628] ? nlmon_xmit+0x3e/0x50 [ 50.602627][ T3628] ? __local_bh_enable_ip+0xb7/0xf0 [ 50.607806][ T3628] ? lockdep_hardirqs_on+0x94/0xf0 [ 50.612894][ T3628] ? __dev_queue_xmit+0xb0/0x1e70 [ 50.617979][ T3628] ? ref_tracker_free+0x173/0x340 [ 50.623021][ T3628] netlink_rcv_skb+0x10a/0x1d0 [ 50.627864][ T3628] ? rtnetlink_bind+0x60/0x60 [ 50.632534][ T3628] netlink_unicast+0x46d/0x530 [ 50.637291][ T3628] netlink_sendmsg+0x57b/0x650 [ 50.642128][ T3628] ____sys_sendmsg+0x296/0x3c0 [ 50.646960][ T3628] ___sys_sendmsg+0x2f0/0x330 [ 50.651710][ T3628] __se_sys_sendmsg+0x142/0x1b0 [ 50.656549][ T3628] do_syscall_64+0x3b/0xb0 [ 50.660942][ T3628] ? clear_bhb_loop+0x45/0xa0 [ 50.665676][ T3628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 50.671560][ T3628] RIP: 0033:0x7f00bf07dda9 [ 50.675962][ T3628] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.695641][ T3628] RSP: 002b:00007f00bfd240c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.704138][ T3628] RAX: ffffffffffffffda RBX: 00007f00bf1abf80 RCX: 00007f00bf07dda9 [ 50.712086][ T3628] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000004 [ 50.720120][ T3628] RBP: 00007f00bf0ca47a R08: 0000000000000000 R09: 0000000000000000 [ 50.728078][ T3628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.736042][ T3628] R13: 000000000000000b R14: 00007f00bf1abf80 R15: 00007ffce3b45718 [ 50.744002][ T3628] [ 50.846106][ T46] Bluetooth: hci0: command tx timeout [ 52.926081][ T46] Bluetooth: hci0: command tx timeout [ 55.006114][ T46] Bluetooth: hci0: command tx timeout [ 57.086129][ T46] Bluetooth: hci0: command tx timeout