[ 74.759722][ T7] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts. 1970/01/01 00:01:16 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:17 parsed 1 programs [ 79.858944][ T4402] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 81.349027][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.351107][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.353911][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.368987][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.371184][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.374296][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.085937][ T4440] chnl_net:caif_netlink_parms(): no params data found [ 82.124286][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.126347][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.129330][ T4440] device bridge_slave_0 entered promiscuous mode [ 82.135180][ T4440] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.137204][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.139997][ T4440] device bridge_slave_1 entered promiscuous mode [ 82.156516][ T4440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.161551][ T4440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.176777][ T4440] team0: Port device team_slave_0 added [ 82.181049][ T4440] team0: Port device team_slave_1 added [ 82.195594][ T4440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.197477][ T4440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.204450][ T4440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.208838][ T4440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.210692][ T4440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.217422][ T4440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.320965][ T4440] device hsr_slave_0 entered promiscuous mode [ 82.358873][ T4440] device hsr_slave_1 entered promiscuous mode [ 83.196291][ T4440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.220432][ T4440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.250618][ T4440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.291905][ T4440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.436044][ T4440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.448327][ T4440] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.450713][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.461523][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.472406][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.475795][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.478333][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.480240][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.494909][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.497335][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.505469][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.508161][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.510038][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.512345][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.525563][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.528921][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.532185][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.534995][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.537906][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.552734][ T4440] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.555397][ T4440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.559853][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.562253][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.564743][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.570086][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.572773][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.580058][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.718219][ T4440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.730375][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.732510][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.745914][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.750035][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.778971][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.781811][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.794219][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.796847][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.810935][ T4440] device veth0_vlan entered promiscuous mode [ 83.817254][ T4440] device veth1_vlan entered promiscuous mode [ 83.841777][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.844548][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.847153][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.852725][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.858234][ T4440] device veth0_macvtap entered promiscuous mode [ 83.868433][ T4440] device veth1_macvtap entered promiscuous mode [ 83.883461][ T4440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.885544][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.888178][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.891094][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.894372][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.900460][ T4440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.905830][ T4440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.908155][ T4440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.911963][ T4440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.914332][ T4440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.931370][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.934224][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.409222][ T335] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:25 executed programs: 0 [ 85.601093][ T4627] chnl_net:caif_netlink_parms(): no params data found [ 85.652963][ T4627] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.654873][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.657598][ T4627] device bridge_slave_0 entered promiscuous mode [ 85.661973][ T4627] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.663903][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.666365][ T4627] device bridge_slave_1 entered promiscuous mode [ 85.682194][ T4627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.686739][ T4627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.704118][ T4627] team0: Port device team_slave_0 added [ 85.709638][ T4627] team0: Port device team_slave_1 added [ 85.725572][ T4627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.727474][ T4627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.734518][ T4627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.738995][ T4627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.740836][ T4627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.747376][ T4627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.820966][ T4627] device hsr_slave_0 entered promiscuous mode [ 85.859603][ T4627] device hsr_slave_1 entered promiscuous mode [ 85.908604][ T4627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.910617][ T4627] Cannot create hsr debugfs directory [ 86.588621][ T335] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.548588][ T4099] Bluetooth: hci1: command 0x0409 tx timeout [ 89.055285][ T335] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.125575][ T335] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.629045][ T4095] Bluetooth: hci1: command 0x041b tx timeout [ 90.100654][ T4627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.130912][ T4627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.181169][ T4627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.220774][ T4627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.313489][ T4627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.322645][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.325296][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.332974][ T4627] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.337862][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.341196][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.343690][ T4126] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.345452][ T4126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.347793][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.384101][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.386748][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.391413][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.393429][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.400316][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.404667][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.410409][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.414110][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.416984][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.426958][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.430154][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.434142][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.436737][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.446657][ T4627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.450770][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.453453][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.456203][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.531871][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.533988][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.540682][ T4627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.553051][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.556880][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.572776][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.575483][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.578136][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.582399][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.587098][ T4627] device veth0_vlan entered promiscuous mode [ 90.594745][ T4627] device veth1_vlan entered promiscuous mode [ 90.611776][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.614506][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.617138][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.620684][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.625040][ T4627] device veth0_macvtap entered promiscuous mode [ 90.631225][ T4627] device veth1_macvtap entered promiscuous mode [ 90.642333][ T4627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.645115][ T4627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.649498][ T4627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.652394][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.654914][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.657247][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.660172][ T651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.664905][ T4627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.667732][ T4627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.672079][ T4627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.674523][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.677503][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.683485][ T4627] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.685932][ T4627] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.688201][ T4627] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.691643][ T4627] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.763969][ T4126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.766383][ T4126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.772637][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.787358][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.790818][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.794105][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:30 executed programs: 2 [ 90.835713][ T4862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'. [ 90.860078][ T4864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'. [ 90.882244][ T4866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17'. [ 90.903674][ T4868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18'. [ 90.922566][ T4870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 90.947772][ T4872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'. [ 90.994395][ T4874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21'. [ 91.018030][ T4876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'. [ 91.065341][ T4878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'. [ 91.082763][ T4880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24'. [ 91.709822][ T4097] Bluetooth: hci1: command 0x040f tx timeout [ 92.733770][ T335] device hsr_slave_0 left promiscuous mode [ 92.778926][ T335] device hsr_slave_1 left promiscuous mode [ 92.868601][ T335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.870649][ T335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.873230][ T335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.875203][ T335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.877602][ T335] device bridge_slave_1 left promiscuous mode [ 92.879853][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.920292][ T335] device bridge_slave_0 left promiscuous mode [ 92.922278][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.048786][ T335] device veth1_macvtap left promiscuous mode [ 93.050664][ T335] device veth0_macvtap left promiscuous mode [ 93.052489][ T335] device veth1_vlan left promiscuous mode [ 93.053911][ T335] device veth0_vlan left promiscuous mode [ 93.254476][ T335] team0 (unregistering): Port device team_slave_1 removed [ 93.264131][ T335] team0 (unregistering): Port device team_slave_0 removed [ 93.272210][ T335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.307144][ T335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.435710][ T335] bond0 (unregistering): Released all slaves [ 93.788571][ T4096] Bluetooth: hci1: command 0x0419 tx timeout [ 94.525211][ T5106] [ 94.525878][ T5106] ============================================ [ 94.527562][ T5106] WARNING: possible recursive locking detected [ 94.529419][ T5106] 5.15.178-syzkaller #0 Not tainted [ 94.530865][ T5106] -------------------------------------------- [ 94.532453][ T5106] syz.0.137/5106 is trying to acquire lock: [ 94.534051][ T5106] ffff0000d24b4398 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x15c/0x484 [ 94.536443][ T5106] [ 94.536443][ T5106] but task is already holding lock: [ 94.538318][ T5106] ffff0000c91e7098 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x15c/0x484 [ 94.540685][ T5106] [ 94.540685][ T5106] other info that might help us debug this: [ 94.542752][ T5106] Possible unsafe locking scenario: [ 94.542752][ T5106] [ 94.544658][ T5106] CPU0 [ 94.545511][ T5106] ---- [ 94.546374][ T5106] lock(_xmit_ETHER#2); [ 94.547496][ T5106] lock(_xmit_ETHER#2); [ 94.548626][ T5106] [ 94.548626][ T5106] *** DEADLOCK *** [ 94.548626][ T5106] [ 94.550881][ T5106] May be due to missing lock nesting notation [ 94.550881][ T5106] [ 94.553248][ T5106] 13 locks held by syz.0.137/5106: [ 94.554655][ T5106] #0: ffff800014d42360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 94.557385][ T5106] #1: ffff800014d423c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 94.560139][ T5106] #2: ffff800014d423c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 94.562620][ T5106] #3: ffff0000db020258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: qdisc_run_begin+0x130/0x2bc [ 94.565881][ T5106] #4: ffff0000c91e7098 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x15c/0x484 [ 94.568336][ T5106] #5: ffff0000d95dd060 (k-slock-AF_INET6){+...}-{2:2}, at: icmpv6_xmit_lock+0x100/0x188 [ 94.570961][ T5106] #6: ffff800014d42360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 94.573499][ T5106] #7: ffff800014d42360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 94.575979][ T5106] #8: ffff800014d423c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 94.578518][ T5106] #9: ffff800014d42360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 94.581024][ T5106] #10: ffff800014d423c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 94.583680][ T5106] #11: ffff800014d423c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 94.586357][ T5106] #12: ffff0000c7a93258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: qdisc_run_begin+0x130/0x2bc [ 94.589687][ T5106] [ 94.589687][ T5106] stack backtrace: [ 94.591302][ T5106] CPU: 1 PID: 5106 Comm: syz.0.137 Not tainted 5.15.178-syzkaller #0 [ 94.593472][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 94.596159][ T5106] Call trace: [ 94.597086][ T5106] dump_backtrace+0x0/0x530 [ 94.598191][ T5106] show_stack+0x2c/0x3c [ 94.599587][ T5106] dump_stack_lvl+0x108/0x170 [ 94.600827][ T5106] dump_stack+0x1c/0x58 [ 94.602022][ T5106] __lock_acquire+0x62bc/0x7638 [ 94.603414][ T5106] lock_acquire+0x240/0x77c [ 94.604616][ T5106] _raw_spin_lock+0xb0/0x10c [ 94.605845][ T5106] sch_direct_xmit+0x15c/0x484 [ 94.607072][ T5106] __dev_queue_xmit+0x1488/0x2ac8 [ 94.608460][ T5106] dev_queue_xmit+0x24/0x34 [ 94.609641][ T5106] ip6_finish_output2+0x132c/0x1cec [ 94.610997][ T5106] __ip6_finish_output+0x580/0x6ec [ 94.612316][ T5106] ip6_finish_output+0x40/0x218 [ 94.613604][ T5106] ip6_output+0x274/0x594 [ 94.614795][ T5106] ndisc_send_skb+0xbf8/0x1788 [ 94.616078][ T5106] ndisc_send_ns+0x538/0x6ec [ 94.617198][ T5106] ndisc_solicit+0x2f4/0x47c [ 94.618408][ T5106] neigh_probe+0xc4/0x138 [ 94.619531][ T5106] __neigh_event_send+0xca4/0x1338 [ 94.620822][ T5106] neigh_resolve_output+0x178/0x5dc [ 94.622226][ T5106] ip6_finish_output2+0x1360/0x1cec [ 94.623608][ T5106] __ip6_finish_output+0x580/0x6ec [ 94.625066][ T5106] ip6_finish_output+0x40/0x218 [ 94.626297][ T5106] ip6_output+0x274/0x594 [ 94.627392][ T5106] ip6_local_out+0x120/0x160 [ 94.628567][ T5106] ip6_send_skb+0x1a4/0x580 [ 94.629760][ T5106] ip6_push_pending_frames+0xd0/0x118 [ 94.631179][ T5106] icmpv6_push_pending_frames+0x244/0x398 [ 94.632762][ T5106] icmp6_send+0x11a4/0x1b18 [ 94.633902][ T5106] ip6_link_failure+0x44/0x4a8 [ 94.635206][ T5106] dst_link_failure+0x11c/0x160 [ 94.636472][ T5106] ip_tunnel_xmit+0x15f4/0x2184 [ 94.637780][ T5106] erspan_xmit+0x9cc/0x14cc [ 94.638956][ T5106] dev_hard_start_xmit+0x2bc/0x92c [ 94.640219][ T5106] sch_direct_xmit+0x2e0/0x484 [ 94.641476][ T5106] __dev_queue_xmit+0x1488/0x2ac8 [ 94.642866][ T5106] dev_queue_xmit+0x24/0x34 [ 94.644115][ T5106] ip6_finish_output2+0x132c/0x1cec [ 94.645544][ T5106] __ip6_finish_output+0x580/0x6ec [ 94.646825][ T5106] ip6_finish_output+0x40/0x218 [ 94.648112][ T5106] ip6_output+0x274/0x594 [ 94.649240][ T5106] rawv6_send_hdrinc+0xd64/0x1c14 [ 94.650572][ T5106] rawv6_sendmsg+0x1074/0x1bcc [ 94.651839][ T5106] inet_sendmsg+0x15c/0x290 [ 94.653061][ T5106] sock_write_iter+0x2b0/0x3f8 [ 94.654235][ T5106] vfs_write+0x884/0xb44 [ 94.655323][ T5106] ksys_write+0x15c/0x26c [ 94.656432][ T5106] __arm64_sys_write+0x7c/0x90 [ 94.657623][ T5106] invoke_syscall+0x98/0x2b8 [ 94.658789][ T5106] el0_svc_common+0x138/0x258 [ 94.659949][ T5106] do_el0_svc+0x58/0x14c [ 94.661048][ T5106] el0_svc+0x7c/0x1f0 [ 94.661996][ T5106] el0t_64_sync_handler+0x84/0xe4 [ 94.663309][ T5106] el0t_64_sync+0x1a0/0x1a4 1970/01/01 00:01:35 executed programs: 185 [ 95.855058][ T5233] __nla_validate_parse: 175 callbacks suppressed [ 95.855071][ T5233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.200'. [ 95.874788][ T5235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.201'. [ 95.890490][ T5237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.202'. [ 95.914512][ T5239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.203'. [ 95.929351][ T5241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.204'. [ 95.944759][ T5243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.205'. [ 95.985996][ T5245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.206'. [ 96.000397][ T5247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.207'. [ 96.015067][ T5249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.208'. [ 96.045964][ T5251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.209'. [ 100.858913][ T5757] __nla_validate_parse: 251 callbacks suppressed [ 100.858926][ T5757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.461'. 1970/01/01 00:01:40 executed programs: 447 [ 100.897769][ T5759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.462'. [ 100.912586][ T5761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.463'. [ 100.926130][ T5763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.464'. [ 100.955835][ T5765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.465'. [ 100.970549][ T5767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.466'. [ 100.984991][ T5769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.467'. [ 101.025210][ T5771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.468'. [ 101.040039][ T5773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.469'. [ 101.054813][ T5775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.470'. [ 103.843266][ T6066] chnl_net:caif_netlink_parms(): no params data found [ 103.870831][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.872693][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.875040][ T6066] device bridge_slave_0 entered promiscuous mode [ 103.879001][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.880939][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.883348][ T6066] device bridge_slave_1 entered promiscuous mode [ 103.895720][ T6066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.900040][ T6066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.912929][ T6066] team0: Port device team_slave_0 added [ 103.915658][ T6066] team0: Port device team_slave_1 added [ 103.943511][ T6066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.945347][ T6066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.952547][ T6066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.956279][ T6066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.958093][ T6066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.965501][ T6066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.021170][ T6066] device hsr_slave_0 entered promiscuous mode [ 104.068838][ T6066] device hsr_slave_1 entered promiscuous mode [ 104.412858][ T136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.453659][ T136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.493969][ T136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0