Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. 1970/01/01 00:01:02 parsed 1 programs [ 63.873699][ T4396] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 67.624746][ T319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.626121][ T319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.628533][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.638982][ T319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.640291][ T319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.641745][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.967973][ T4548] chnl_net:caif_netlink_parms(): no params data found [ 67.984185][ T4548] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.985443][ T4548] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.986960][ T4548] device bridge_slave_0 entered promiscuous mode [ 67.988854][ T4548] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.990006][ T4548] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.991457][ T4548] device bridge_slave_1 entered promiscuous mode [ 68.002167][ T4548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.004744][ T4548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.012063][ T4548] team0: Port device team_slave_0 added [ 68.014925][ T4548] team0: Port device team_slave_1 added [ 68.021000][ T4548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.022107][ T4548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.026351][ T4548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.028984][ T4548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.030091][ T4548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.034107][ T4548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.114343][ T4548] device hsr_slave_0 entered promiscuous mode [ 68.152949][ T4548] device hsr_slave_1 entered promiscuous mode [ 68.844054][ T4548] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.873931][ T4548] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.913983][ T4548] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.953910][ T4548] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.027683][ T4548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.031328][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.032908][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.035515][ T4548] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.037854][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.039817][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.041359][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.042663][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.044938][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.048854][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.050348][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.052199][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.053298][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.054993][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.058531][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.062005][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.064137][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.069302][ T4548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.070904][ T4548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.080392][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.081924][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.085698][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.088546][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.091169][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.094842][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.096413][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.098718][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.131279][ T4548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.135355][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.136590][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.141474][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.143334][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.152293][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.153973][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.156103][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.157489][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.160797][ T4548] device veth0_vlan entered promiscuous mode [ 69.166181][ T4548] device veth1_vlan entered promiscuous mode [ 69.176733][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.178498][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.180025][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.181696][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.185628][ T4548] device veth0_macvtap entered promiscuous mode [ 69.188181][ T4548] device veth1_macvtap entered promiscuous mode [ 69.193672][ T4548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.194904][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.196354][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.197666][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.199062][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.202052][ T4548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.204711][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.206277][ T1650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.209343][ T4548] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.210766][ T4548] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.212130][ T4548] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.214701][ T4548] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.614093][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.614658][ T21] cfg80211: failed to load regulatory.db [ 69.615285][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 1970/01/01 00:01:09 executed programs: 0 [ 70.063500][ T4749] chnl_net:caif_netlink_parms(): no params data found [ 70.125425][ T4749] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.126683][ T4749] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.144204][ T4749] device bridge_slave_0 entered promiscuous mode [ 70.150462][ T4749] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.151640][ T4749] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.153238][ T4749] device bridge_slave_1 entered promiscuous mode [ 70.167468][ T4749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.169992][ T4749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.185805][ T4749] team0: Port device team_slave_0 added [ 70.187723][ T4749] team0: Port device team_slave_1 added [ 70.199582][ T4749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.200696][ T4749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.207827][ T4749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.210463][ T4749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.211583][ T4749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.216805][ T4749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.254098][ T4749] device hsr_slave_0 entered promiscuous mode [ 70.293104][ T4749] device hsr_slave_1 entered promiscuous mode [ 70.332825][ T4749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.333944][ T4749] Cannot create hsr debugfs directory [ 70.362700][ T4749] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.012963][ T3624] Bluetooth: hci0: command 0x0409 tx timeout [ 72.536368][ T4749] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.093115][ T4943] Bluetooth: hci0: command 0x041b tx timeout [ 74.496919][ T4749] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.547098][ T4749] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.695496][ T4749] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.735068][ T4749] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.793905][ T4749] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.834053][ T4749] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.895461][ T4749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.899090][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.900667][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.918856][ T4749] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.925071][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.926760][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.928222][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.929298][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.930573][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.931981][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.934259][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.935370][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.936876][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.938510][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.941083][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.945317][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.947378][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.948932][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.951377][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.954295][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.957018][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.958714][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.961140][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.962638][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.967476][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.006677][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.007997][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.010963][ T4749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.017555][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.019181][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.025281][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.026755][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.028300][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.029640][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.031735][ T4749] device veth0_vlan entered promiscuous mode [ 75.035550][ T4749] device veth1_vlan entered promiscuous mode [ 75.042236][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.043982][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.045372][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.046860][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.049909][ T4749] device veth0_macvtap entered promiscuous mode [ 75.052289][ T4749] device veth1_macvtap entered promiscuous mode [ 75.057919][ T4749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.059599][ T4749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.061577][ T4749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.063592][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.065143][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.066502][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.067955][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.070741][ T4749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.072378][ T4749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.074575][ T4749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.075827][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.077290][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.079815][ T4749] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.081187][ T4749] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.082564][ T4749] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.084016][ T4749] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.101395][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.106298][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.107818][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.109155][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.109731][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.112552][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:15 executed programs: 2 [ 75.134936][ T4955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'. [ 75.144748][ T4957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17'. [ 75.158244][ T4959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18'. [ 75.188319][ T4961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 75.199246][ T4963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'. [ 75.211200][ T4965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21'. [ 75.237365][ T4967] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'. [ 75.259779][ T4969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'. [ 75.268587][ T4971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24'. [ 75.288147][ T4973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.25'. [ 76.174761][ T4174] Bluetooth: hci0: command 0x040f tx timeout [ 77.496702][ T416] device hsr_slave_0 left promiscuous mode [ 77.522871][ T416] device hsr_slave_1 left promiscuous mode [ 77.602817][ T416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.604093][ T416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.605513][ T416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.606716][ T416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.608022][ T416] device bridge_slave_1 left promiscuous mode [ 77.608960][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.643319][ T416] device bridge_slave_0 left promiscuous mode [ 77.644296][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.802909][ T416] device veth1_macvtap left promiscuous mode [ 77.803965][ T416] device veth0_macvtap left promiscuous mode [ 77.804988][ T416] device veth1_vlan left promiscuous mode [ 77.805998][ T416] device veth0_vlan left promiscuous mode [ 77.900047][ T416] team0 (unregistering): Port device team_slave_1 removed [ 77.905020][ T416] team0 (unregistering): Port device team_slave_0 removed [ 77.908738][ T416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.937115][ T416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.056846][ T416] bond0 (unregistering): Released all slaves [ 78.254861][ T4174] Bluetooth: hci0: command 0x0419 tx timeout [ 79.150783][ T5335] [ 79.151211][ T5335] ============================================ [ 79.152198][ T5335] WARNING: possible recursive locking detected [ 79.153111][ T5335] syzkaller #0 Not tainted [ 79.153752][ T5335] -------------------------------------------- [ 79.154789][ T5335] syz.0.206/5335 is trying to acquire lock: [ 79.155763][ T5335] ffff0000ddece398 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x12c/0x3bc [ 79.157290][ T5335] [ 79.157290][ T5335] but task is already holding lock: [ 79.158478][ T5335] ffff0000d869b098 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x12c/0x3bc [ 79.160039][ T5335] [ 79.160039][ T5335] other info that might help us debug this: [ 79.161391][ T5335] Possible unsafe locking scenario: [ 79.161391][ T5335] [ 79.162636][ T5335] CPU0 [ 79.163119][ T5335] ---- [ 79.163645][ T5335] lock(_xmit_ETHER#2); [ 79.164291][ T5335] lock(_xmit_ETHER#2); [ 79.164925][ T5335] [ 79.164925][ T5335] *** DEADLOCK *** [ 79.164925][ T5335] [ 79.166168][ T5335] May be due to missing lock nesting notation [ 79.166168][ T5335] [ 79.167441][ T5335] 13 locks held by syz.0.206/5335: [ 79.168205][ T5335] #0: ffff8000143513a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 79.169631][ T5335] #1: ffff800014351400 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 79.171157][ T5335] #2: ffff800014351400 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 79.172593][ T5335] #3: ffff0000d591a258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: qdisc_run_begin+0x120/0x2a8 [ 79.174752][ T5335] #4: ffff0000d869b098 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x12c/0x3bc [ 79.176316][ T5335] #5: ffff0000cc944920 (k-slock-AF_INET6){+...}-{2:2}, at: icmpv6_xmit_lock+0xf0/0x140 [ 79.177974][ T5335] #6: ffff8000143513a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 79.179491][ T5335] #7: ffff8000143513a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 79.180931][ T5335] #8: ffff800014351400 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 79.182286][ T5335] #9: ffff8000143513a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 79.183805][ T5335] #10: ffff800014351400 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 79.185293][ T5335] #11: ffff800014351400 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 79.186972][ T5335] #12: ffff0000eb663258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: qdisc_run_begin+0x120/0x2a8 [ 79.189125][ T5335] [ 79.189125][ T5335] stack backtrace: [ 79.190091][ T5335] CPU: 1 PID: 5335 Comm: syz.0.206 Not tainted syzkaller #0 [ 79.191298][ T5335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 79.192988][ T5335] Call trace: [ 79.193517][ T5335] dump_backtrace+0x0/0x43c [ 79.194269][ T5335] show_stack+0x2c/0x3c [ 79.194968][ T5335] __dump_stack+0x30/0x40 [ 79.195680][ T5335] dump_stack_lvl+0xf8/0x160 [ 79.196477][ T5335] dump_stack+0x1c/0x5c [ 79.197144][ T5335] __lock_acquire+0x18a4/0x651c [ 79.197969][ T5335] lock_acquire+0x1f4/0x620 [ 79.198729][ T5335] _raw_spin_lock+0xb0/0x10c [ 79.199474][ T5335] sch_direct_xmit+0x12c/0x3bc [ 79.200309][ T5335] __dev_queue_xmit+0x13f4/0x2800 [ 79.201159][ T5335] dev_queue_xmit+0x24/0x34 [ 79.201950][ T5335] ip6_finish_output2+0x129c/0x1a14 [ 79.202762][ T5335] ip6_finish_output+0x570/0x6dc [ 79.203524][ T5335] ip6_output+0x274/0x500 [ 79.204174][ T5335] ndisc_send_skb+0xc10/0x1684 [ 79.204898][ T5335] ndisc_send_ns+0x518/0x6f4 [ 79.205662][ T5335] ndisc_solicit+0x2b0/0x408 [ 79.206400][ T5335] neigh_probe+0xc4/0x138 [ 79.207155][ T5335] __neigh_event_send+0xc14/0x1200 [ 79.208022][ T5335] neigh_resolve_output+0x180/0x5e0 [ 79.208901][ T5335] ip6_finish_output2+0x12d0/0x1a14 [ 79.209723][ T5335] ip6_finish_output+0x570/0x6dc [ 79.210524][ T5335] ip6_output+0x274/0x500 [ 79.211204][ T5335] ip6_local_out+0x120/0x15c [ 79.211927][ T5335] ip6_send_skb+0x1a8/0x4f4 [ 79.212619][ T5335] ip6_push_pending_frames+0xd0/0x118 [ 79.213491][ T5335] icmpv6_push_pending_frames+0x238/0x394 [ 79.214448][ T5335] icmp6_send+0xee4/0x144c [ 79.215173][ T5335] ip6_link_failure+0x44/0x4a8 [ 79.215962][ T5335] dst_link_failure+0x11c/0x160 [ 79.216714][ T5335] ip_tunnel_xmit+0x1444/0x1f30 [ 79.217540][ T5335] erspan_xmit+0x890/0x1490 [ 79.218289][ T5335] dev_hard_start_xmit+0x2a8/0x87c [ 79.219128][ T5335] sch_direct_xmit+0x2a4/0x3bc [ 79.219911][ T5335] __dev_queue_xmit+0x13f4/0x2800 [ 79.220718][ T5335] dev_queue_xmit+0x24/0x34 [ 79.221450][ T5335] ip6_finish_output2+0x129c/0x1a14 [ 79.222329][ T5335] ip6_finish_output+0x570/0x6dc [ 79.223190][ T5335] ip6_output+0x274/0x500 [ 79.223907][ T5335] rawv6_send_hdrinc+0xdb8/0x18cc [ 79.224637][ T5335] rawv6_sendmsg+0xd9c/0x12e8 [ 79.225414][ T5335] inet_sendmsg+0x154/0x284 [ 79.226166][ T5335] ____sys_sendmsg+0x61c/0x920 [ 79.226987][ T5335] ___sys_sendmsg+0x1d0/0x240 [ 79.227790][ T5335] __sys_sendmmsg+0x218/0x5f0 [ 79.228580][ T5335] __arm64_sys_sendmmsg+0xa0/0xbc [ 79.229433][ T5335] invoke_syscall+0x98/0x2b8 [ 79.230154][ T5335] el0_svc_common+0x138/0x258 [ 79.230904][ T5335] do_el0_svc+0x58/0x14c [ 79.231555][ T5335] el0_svc+0x78/0x1e0 [ 79.232114][ T5335] el0t_64_sync_handler+0xcc/0xe4 [ 79.232897][ T5335] el0t_64_sync+0x1a0/0x1a4 1970/01/01 00:01:20 executed programs: 238 [ 80.166775][ T5432] __nla_validate_parse: 228 callbacks suppressed [ 80.166784][ T5432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.254'. [ 80.175235][ T5434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.255'. [ 80.181978][ T5436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.256'. [ 80.217014][ T5438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.257'. [ 80.224995][ T5440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.258'. [ 80.231914][ T5442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.259'. [ 80.276907][ T5444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.260'. [ 80.284285][ T5446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.261'. [ 80.291264][ T5448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.262'. [ 80.336568][ T5450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.263'. 1970/01/01 00:01:25 executed programs: 526 [ 85.196946][ T6008] __nla_validate_parse: 278 callbacks suppressed [ 85.196956][ T6008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.542'. [ 85.204924][ T6010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.543'. [ 85.212038][ T6012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.544'. [ 85.246505][ T6014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.545'. [ 85.254221][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.546'. [ 85.263754][ T6018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.547'. [ 85.296506][ T6020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'. [ 85.303718][ T6022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.549'. [ 85.310818][ T6024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.550'. [ 85.346885][ T6026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.551'. [ 86.466009][ T6156] chnl_net:caif_netlink_parms(): no params data found [ 86.480925][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.482189][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.483809][ T6156] device bridge_slave_0 entered promiscuous mode [ 86.485621][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.486712][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.488116][ T6156] device bridge_slave_1 entered promiscuous mode [ 86.494513][ T6156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.496711][ T6156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.502875][ T6156] team0: Port device team_slave_0 added [ 86.504408][ T6156] team0: Port device team_slave_1 added [ 86.509458][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.510608][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.515179][ T6156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.517457][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.518531][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.522625][ T6156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.574095][ T6156] device hsr_slave_0 entered promiscuous mode [ 86.633013][ T6156] device hsr_slave_1 entered promiscuous mode [ 86.701929][ T6156] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.905085][ T6156] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.175316][ T6156] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.215967][ T6156] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.402060][ T6156] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.434142][ T6156] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.477673][ T6156] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.536571][ T6156] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.601102][ T6156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.604289][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.605925][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.608071][ T6156] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.610137][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.611562][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.612981][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.614147][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.619010][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.622648][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.624676][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.625896][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.626989][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.637458][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.640189][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.644109][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.645694][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.647109][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.649217][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.650787][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.654953][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.656335][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.659039][ T6156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.661017][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.662466][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.664187][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.693503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.694755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.696898][ T6156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.701944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.704575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.709957][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.711387][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.714207][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.715961][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.721234][ T6156] device veth0_vlan entered promiscuous mode [ 87.724406][ T6156] device veth1_vlan entered promiscuous mode [ 87.729550][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.730892][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.732226][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.734050][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.736183][ T6156] device veth0_macvtap entered promiscuous mode [ 87.738203][ T6156] device veth1_macvtap entered promiscuous mode [ 87.742085][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.744372][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.746396][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.747674][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.749054][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.750423][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.751815][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.756420][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.757937][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.759958][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.761138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.762490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.765458][ T6156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.766708][ T6156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.768218][ T6156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.769798][ T6156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.780561][ T6156] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 87.787047][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.787974][ T6156] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 87.788777][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.791090][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.796652][ T416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.797820][ T416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.799064][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.493311][ T4179] Bluetooth: hci1: command 0x0409 tx timeout [ 88.507121][ T1650] device hsr_slave_0 left promiscuous mode [ 88.553004][ T1650] device hsr_slave_1 left promiscuous mode [ 88.632829][ T1650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.634158][ T1650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.635536][ T1650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.636728][ T1650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.638009][ T1650] device bridge_slave_1 left promiscuous mode [ 88.638983][ T1650] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.673191][ T1650] device bridge_slave_0 left promiscuous mode [ 88.674211][ T1650] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.802851][ T1650] device veth1_macvtap left promiscuous mode [ 88.803819][ T1650] device veth0_macvtap left promiscuous mode [ 88.804840][ T1650] device veth1_vlan left promiscuous mode [ 88.805797][ T1650] device veth0_vlan left promiscuous mode [ 88.869363][ T1650] team0 (unregistering): Port device team_slave_1 removed [ 88.872411][ T1650] team0 (unregistering): Port device team_slave_0 removed [ 88.875526][ T1650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.915735][ T1650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.005034][ T1650] bond0 (unregistering): Released all slaves