Warning: Permanently added '10.128.0.74' (ECDSA) to the list of known hosts. 2023/04/17 09:43:01 ignoring optional flag "sandboxArg"="0" 2023/04/17 09:43:01 parsed 1 programs [ 75.458214][ T5524] cgroup: Unknown subsys name 'net' [ 75.465770][ T5524] cgroup: Unknown subsys name 'rlimit' 2023/04/17 09:43:01 executed programs: 0 [ 76.154099][ T14] cfg80211: failed to load regulatory.db [ 76.720288][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.728579][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.736759][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.745369][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.752796][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.760069][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.832461][ T5533] chnl_net:caif_netlink_parms(): no params data found [ 76.865398][ T5533] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.872869][ T5533] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.880191][ T5533] bridge_slave_0: entered allmulticast mode [ 76.887041][ T5533] bridge_slave_0: entered promiscuous mode [ 76.894665][ T5533] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.902281][ T5533] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.909582][ T5533] bridge_slave_1: entered allmulticast mode [ 76.916327][ T5533] bridge_slave_1: entered promiscuous mode [ 76.932394][ T5533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.943057][ T5533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.963232][ T5533] team0: Port device team_slave_0 added [ 76.970206][ T5533] team0: Port device team_slave_1 added [ 76.984489][ T5533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.991441][ T5533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.017668][ T5533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.029890][ T5533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.036994][ T5533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.063597][ T5533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.084450][ T5533] hsr_slave_0: entered promiscuous mode [ 77.090992][ T5533] hsr_slave_1: entered promiscuous mode [ 77.139181][ T5533] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.146648][ T5533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.154123][ T5533] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.161472][ T5533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.190944][ T5533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.202647][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.211318][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.220047][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.229167][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 77.239810][ T5533] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.249132][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.257816][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.265249][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.283941][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.292973][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.300025][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.308998][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.317764][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.326593][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.337718][ T5533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.349182][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.358237][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.366040][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.383361][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.391484][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.400451][ T5533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.662677][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.671473][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.681030][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.688783][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.698730][ T5533] veth0_vlan: entered promiscuous mode [ 77.708088][ T5533] veth1_vlan: entered promiscuous mode [ 77.723074][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.731319][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.740044][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.750135][ T5533] veth0_macvtap: entered promiscuous mode [ 77.759331][ T5533] veth1_macvtap: entered promiscuous mode [ 77.773203][ T5533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.780469][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.790470][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.800967][ T5533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.809323][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.854337][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.868778][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.879196][ T2430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.879644][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.888299][ T2430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.905510][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.939569][ T5555] [ 77.941915][ T5555] ============================================ [ 77.948156][ T5555] WARNING: possible recursive locking detected [ 77.954339][ T5555] 6.3.0-rc6-syzkaller-00130-g338469d677e5 #0 Not tainted [ 77.961608][ T5555] -------------------------------------------- [ 77.967753][ T5555] syz-executor.0/5555 is trying to acquire lock: [ 77.974161][ T5555] ffff8880775194d8 (_xmit_ETHER#2){+.-.}-{2:2}, at: __dev_queue_xmit+0x2dba/0x3c40 [ 77.983633][ T5555] [ 77.983633][ T5555] but task is already holding lock: [ 77.990984][ T5555] ffff888022a774d8 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x31c/0xc30 [ 78.000035][ T5555] [ 78.000035][ T5555] other info that might help us debug this: [ 78.008067][ T5555] Possible unsafe locking scenario: [ 78.008067][ T5555] [ 78.015847][ T5555] CPU0 [ 78.019117][ T5555] ---- [ 78.022387][ T5555] lock(_xmit_ETHER#2); [ 78.026643][ T5555] lock(_xmit_ETHER#2); [ 78.031033][ T5555] [ 78.031033][ T5555] *** DEADLOCK *** [ 78.031033][ T5555] [ 78.039205][ T5555] May be due to missing lock nesting notation [ 78.039205][ T5555] [ 78.047502][ T5555] 6 locks held by syz-executor.0/5555: [ 78.052959][ T5555] #0: ffffffff8c795560 (rcu_read_lock_bh){....}-{1:2}, at: ip_finish_output2+0x29a/0x22e0 [ 78.062963][ T5555] #1: ffffffff8c795560 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x23f/0x3c40 [ 78.072867][ T5555] #2: ffff8880215fe258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x13ce/0x3c40 [ 78.085379][ T5555] #3: ffff888022a774d8 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x31c/0xc30 [ 78.094917][ T5555] #4: ffffffff8c795560 (rcu_read_lock_bh){....}-{1:2}, at: ip_finish_output2+0x29a/0x22e0 [ 78.104891][ T5555] #5: ffffffff8c795560 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x23f/0x3c40 [ 78.115475][ T5555] [ 78.115475][ T5555] stack backtrace: [ 78.121344][ T5555] CPU: 1 PID: 5555 Comm: syz-executor.0 Not tainted 6.3.0-rc6-syzkaller-00130-g338469d677e5 #0 [ 78.132263][ T5555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 78.142686][ T5555] Call Trace: [ 78.146145][ T5555] [ 78.149061][ T5555] dump_stack_lvl+0xd9/0x150 [ 78.153635][ T5555] __lock_acquire+0x1362/0x5d40 [ 78.158477][ T5555] ? udpv6_sendmsg+0x180a/0x2d50 [ 78.163397][ T5555] ? inet6_sendmsg+0x9d/0xe0 [ 78.168064][ T5555] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 78.174126][ T5555] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.180459][ T5555] ? skb_checksum+0x94/0xc0 [ 78.184958][ T5555] lock_acquire+0x1af/0x520 [ 78.189538][ T5555] ? __dev_queue_xmit+0x2dba/0x3c40 [ 78.194821][ T5555] ? lock_release+0x670/0x670 [ 78.199487][ T5555] ? validate_xmit_skb+0x816/0xe60 [ 78.204591][ T5555] _raw_spin_lock+0x2e/0x40 [ 78.209104][ T5555] ? __dev_queue_xmit+0x2dba/0x3c40 [ 78.214414][ T5555] __dev_queue_xmit+0x2dba/0x3c40 [ 78.219436][ T5555] ? print_usage_bug.part.0+0x660/0x660 [ 78.224972][ T5555] ? netdev_core_pick_tx+0x350/0x350 [ 78.230435][ T5555] ? find_held_lock+0x2d/0x110 [ 78.235197][ T5555] ? ip_finish_output2+0x78a/0x22e0 [ 78.240399][ T5555] ? lock_downgrade+0x690/0x690 [ 78.245413][ T5555] ? mark_held_locks+0x9f/0xe0 [ 78.250165][ T5555] ? skb_push+0x9b/0xe0 [ 78.254332][ T5555] neigh_resolve_output+0x51b/0x870 [ 78.259617][ T5555] ip_finish_output2+0x78a/0x22e0 [ 78.264624][ T5555] ? nf_hook+0x20d/0x640 [ 78.268929][ T5555] ? ip_fragment.constprop.0+0x240/0x240 [ 78.274551][ T5555] ? ip_mc_finish_output+0x5a0/0x5a0 [ 78.279807][ T5555] ? lockdep_hardirqs_on+0x7d/0x100 [ 78.284996][ T5555] __ip_finish_output+0x396/0x650 [ 78.290008][ T5555] ip_finish_output+0x31/0x280 [ 78.294744][ T5555] ip_output+0x1a3/0x320 [ 78.298962][ T5555] ip_local_out+0xb3/0x1a0 [ 78.303367][ T5555] iptunnel_xmit+0x67e/0x9f0 [ 78.308114][ T5555] ip_tunnel_xmit+0xfb4/0x3150 [ 78.313047][ T5555] ? ip_md_tunnel_xmit+0x1830/0x1830 [ 78.318340][ T5555] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 78.324399][ T5555] ? __gre_xmit+0x4f4/0x9a0 [ 78.328923][ T5555] erspan_xmit+0x1124/0x2750 [ 78.333516][ T5555] dev_hard_start_xmit+0x187/0x700 [ 78.338634][ T5555] sch_direct_xmit+0x1a3/0xc30 [ 78.343414][ T5555] ? lock_release+0x670/0x670 [ 78.348235][ T5555] ? dev_watchdog+0x830/0x830 [ 78.353050][ T5555] ? do_raw_spin_trylock+0xb4/0x180 [ 78.358238][ T5555] ? do_raw_spin_lock+0x270/0x2b0 [ 78.363434][ T5555] ? __lock_acquire+0x27b0/0x5d40 [ 78.368473][ T5555] __dev_queue_xmit+0x15fd/0x3c40 [ 78.373579][ T5555] ? netdev_core_pick_tx+0x350/0x350 [ 78.378891][ T5555] ? find_held_lock+0x2d/0x110 [ 78.383659][ T5555] ? ip_finish_output2+0x78a/0x22e0 [ 78.389116][ T5555] ? lock_downgrade+0x690/0x690 [ 78.393984][ T5555] ? do_raw_write_lock+0x11e/0x3b0 [ 78.399172][ T5555] ? neigh_resolve_output+0x669/0x870 [ 78.404639][ T5555] ? skb_push+0x9b/0xe0 [ 78.409411][ T5555] neigh_resolve_output+0x51b/0x870 [ 78.414771][ T5555] ip_finish_output2+0x78a/0x22e0 [ 78.420314][ T5555] ? nf_hook+0x20d/0x640 [ 78.424547][ T5555] ? ip_fragment.constprop.0+0x240/0x240 [ 78.430281][ T5555] ? ip_mc_finish_output+0x5a0/0x5a0 [ 78.435583][ T5555] ? ipv4_link_failure+0x973/0x9e0 [ 78.440801][ T5555] __ip_finish_output+0x396/0x650 [ 78.445822][ T5555] ip_finish_output+0x31/0x280 [ 78.450578][ T5555] ip_output+0x1a3/0x320 [ 78.454827][ T5555] ip_send_skb+0xd8/0x260 [ 78.459146][ T5555] udp_send_skb+0x73a/0x1490 [ 78.463757][ T5555] udp_sendmsg+0x1bb8/0x2840 [ 78.468354][ T5555] ? ip_frag_init+0x320/0x320 [ 78.473023][ T5555] ? udp_recvmsg+0x12d0/0x12d0 [ 78.477815][ T5555] ? mark_lock.part.0+0xee/0x1970 [ 78.482827][ T5555] ? print_usage_bug.part.0+0x660/0x660 [ 78.488357][ T5555] ? print_usage_bug.part.0+0x660/0x660 [ 78.494321][ T5555] ? __lock_acquire+0x18bc/0x5d40 [ 78.499336][ T5555] udpv6_sendmsg+0x180a/0x2d50 [ 78.504119][ T5555] ? udp_v6_push_pending_frames+0x200/0x200 [ 78.510017][ T5555] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 78.515984][ T5555] ? find_held_lock+0x2d/0x110 [ 78.520740][ T5555] ? aa_sk_perm+0x31d/0xb10 [ 78.525260][ T5555] ? aa_af_perm+0x240/0x240 [ 78.529754][ T5555] ? __import_iovec+0x1fb/0x610 [ 78.534688][ T5555] inet6_sendmsg+0x9d/0xe0 [ 78.539088][ T5555] ? inet6_compat_ioctl+0x320/0x320 [ 78.544266][ T5555] sock_sendmsg+0xde/0x190 [ 78.548667][ T5555] ____sys_sendmsg+0x334/0x900 [ 78.553428][ T5555] ? copy_msghdr_from_user+0xfc/0x150 [ 78.558786][ T5555] ? kernel_sendmsg+0x50/0x50 [ 78.563539][ T5555] ___sys_sendmsg+0x110/0x1b0 [ 78.568233][ T5555] ? do_recvmmsg+0x6e0/0x6e0 [ 78.572824][ T5555] ? __fget_files+0x248/0x480 [ 78.577582][ T5555] ? lock_downgrade+0x690/0x690 [ 78.582466][ T5555] ? schedule+0xe8/0x1a0 [ 78.586704][ T5555] ? futex_unqueue+0xb7/0x120 [ 78.591376][ T5555] ? __fget_files+0x26a/0x480 [ 78.596143][ T5555] ? __fget_light+0xe5/0x270 [ 78.600747][ T5555] __sys_sendmmsg+0x18f/0x460 [ 78.605435][ T5555] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 78.610464][ T5555] ? __local_bh_enable_ip+0xa4/0x130 [ 78.615780][ T5555] ? __ia32_sys_get_robust_list+0x400/0x400 [ 78.621692][ T5555] ? fput+0x2f/0x1a0 [ 78.625574][ T5555] ? xfd_validate_state+0x5d/0x180 [ 78.630676][ T5555] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 78.636854][ T5555] ? __sys_socket+0x8e/0x250 [ 78.641462][ T5555] ? do_futex+0x360/0x360 [ 78.645808][ T5555] __x64_sys_sendmmsg+0x9d/0x100 [ 78.650776][ T5555] ? syscall_enter_from_user_mode+0x26/0x80 [ 78.656760][ T5555] do_syscall_64+0x39/0xb0 [ 78.662221][ T5555] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.668189][ T5555] RIP: 0033:0x7f012ec88a39 [ 78.672600][ T5555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 78.692538][ T5555] RSP: 002b:00007f012fd53188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 78.700927][ T5555] RAX: ffffffffffffffda RBX: 00007f012ed9bf60 RCX: 00007f012ec88a39 [ 78.708884][ T5555] RDX: 0000000000000001 RSI: 0000000020004d80 RDI: 0000000000000004 [ 78.716859][ T5555] RBP: 00007f012ece2e8f R08: 0000000000000000 R09: 0000000000000000 [ 78.724852][ T5555] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.732833][ T5555] R13: 00007ffcc7b3607f R14: 00007f012fd53300 R15: 0000000000022000 [ 78.740818][ T5555] [ 78.753315][ T5555] syz-executor.0 (5555) used greatest stack depth: 22256 bytes left [ 78.802328][ T48] Bluetooth: hci0: command 0x0409 tx timeout 2023/04/17 09:43:06 executed programs: 152 [ 80.872032][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 82.952352][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 85.032414][ T48] Bluetooth: hci0: command 0x0419 tx timeout 2023/04/17 09:43:11 executed programs: 582