[ 40.759145][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.770544][ T37] device veth1_macvtap left promiscuous mode [ 40.777547][ T37] device veth0_macvtap left promiscuous mode [ 40.784460][ T37] device veth1_vlan left promiscuous mode [ 40.790307][ T37] device veth0_vlan left promiscuous mode [ 40.855267][ T37] team0 (unregistering): Port device team_slave_1 removed [ 40.864620][ T37] team0 (unregistering): Port device team_slave_0 removed [ 40.873654][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.884977][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.906895][ T37] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. 2024/05/20 17:02:32 ignoring optional flag "sandboxArg"="0" 2024/05/20 17:02:32 parsed 1 programs 2024/05/20 17:02:33 executed programs: 0 [ 55.406988][ T3949] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.439071][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.446757][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.454551][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.462261][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.469534][ T46] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.477098][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.513924][ T3960] chnl_net:caif_netlink_parms(): no params data found [ 55.530351][ T3960] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.537749][ T3960] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.545267][ T3960] device bridge_slave_0 entered promiscuous mode [ 55.552406][ T3960] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.559456][ T3960] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.566961][ T3960] device bridge_slave_1 entered promiscuous mode [ 55.577670][ T3960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.587696][ T3960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.600731][ T3960] team0: Port device team_slave_0 added [ 55.607031][ T3960] team0: Port device team_slave_1 added [ 55.615558][ T3960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.622668][ T3960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.649184][ T3960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.660458][ T3960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.667795][ T3960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.694593][ T3960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.710428][ T3960] device hsr_slave_0 entered promiscuous mode [ 55.717086][ T3960] device hsr_slave_1 entered promiscuous mode [ 56.072154][ T3960] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.079822][ T3960] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.087909][ T3960] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.097287][ T3960] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.110237][ T3960] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.117331][ T3960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.124725][ T3960] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.131963][ T3960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.155821][ T3960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.166179][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.174200][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.182113][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.190198][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 56.200073][ T3960] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.209952][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.218903][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.226088][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.241239][ T3960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.252291][ T3960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.265469][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.274277][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.281344][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.289442][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.297841][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.306424][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.314792][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.324346][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.332460][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.394758][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.403220][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.411688][ T3960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.424957][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.438162][ T3960] device veth0_vlan entered promiscuous mode [ 56.451265][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.459875][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.468530][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.477925][ T3960] device veth1_vlan entered promiscuous mode [ 56.486103][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.499627][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.508376][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.517609][ T3960] device veth0_macvtap entered promiscuous mode [ 56.526303][ T3960] device veth1_macvtap entered promiscuous mode [ 56.536977][ T3960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.544491][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.553816][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.563968][ T3960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.572159][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.580531][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.590015][ T3960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.599326][ T3960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.608514][ T3960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.617616][ T3960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.647793][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.659256][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.670964][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.671773][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.679243][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.695545][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.713943][ T4052] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 56.742627][ T4052] team0: Port device vlan0 added [ 56.749200][ T4052] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 56.794935][ T4052] device veth0_vlan left promiscuous mode [ 56.802186][ T4052] device veth0_vlan entered promiscuous mode [ 56.808397][ T4052] [ 56.810719][ T4052] ============================================ [ 56.816858][ T4052] WARNING: possible recursive locking detected [ 56.823002][ T4052] 6.1.91-syzkaller #0 Not tainted [ 56.828018][ T4052] -------------------------------------------- [ 56.834257][ T4052] syz-executor.0/4052 is trying to acquire lock: [ 56.840609][ T4052] ffff888116d50d00 (team->team_lock_key){+.+.}-{3:3}, at: team_port_change_check+0x23/0xc0 [ 56.850585][ T4052] [ 56.850585][ T4052] but task is already holding lock: [ 56.858095][ T4052] ffff888116d50d00 (team->team_lock_key){+.+.}-{3:3}, at: team_add_slave+0x43/0x1190 [ 56.867805][ T4052] [ 56.867805][ T4052] other info that might help us debug this: [ 56.875930][ T4052] Possible unsafe locking scenario: [ 56.875930][ T4052] [ 56.883628][ T4052] CPU0 [ 56.886900][ T4052] ---- [ 56.890156][ T4052] lock(team->team_lock_key); [ 56.894914][ T4052] lock(team->team_lock_key); [ 56.899666][ T4052] [ 56.899666][ T4052] *** DEADLOCK *** [ 56.899666][ T4052] [ 56.908138][ T4052] May be due to missing lock nesting notation [ 56.908138][ T4052] [ 56.916462][ T4052] 2 locks held by syz-executor.0/4052: [ 56.921897][ T4052] #0: ffffffff8702ead8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x514/0xa00 [ 56.931259][ T4052] #1: ffff888116d50d00 (team->team_lock_key){+.+.}-{3:3}, at: team_add_slave+0x43/0x1190 [ 56.941150][ T4052] [ 56.941150][ T4052] stack backtrace: [ 56.947127][ T4052] CPU: 1 PID: 4052 Comm: syz-executor.0 Not tainted 6.1.91-syzkaller #0 [ 56.955474][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 56.965648][ T4052] Call Trace: [ 56.969206][ T4052] [ 56.972149][ T4052] dump_stack_lvl+0xfa/0x181 [ 56.977006][ T4052] __lock_acquire+0x73d/0x2830 [ 56.981786][ T4052] ? neigh_lookup+0x34/0x270 [ 56.986450][ T4052] ? cfg80211_netdev_notifier_call+0xb4/0x7f0 [ 56.992593][ T4052] ? neigh_lookup+0x34/0x270 [ 56.997199][ T4052] ? team_port_change_check+0x23/0xc0 [ 57.002577][ T4052] lock_acquire+0xe3/0x270 [ 57.007090][ T4052] ? team_port_change_check+0x23/0xc0 [ 57.012643][ T4052] ? arp_invalidate+0x9b/0x1d0 [ 57.017477][ T4052] ? team_port_change_check+0x23/0xc0 [ 57.022833][ T4052] __mutex_lock+0x99/0x970 [ 57.027227][ T4052] ? team_port_change_check+0x23/0xc0 [ 57.032687][ T4052] ? fib_rebalance+0x42/0x660 [ 57.037356][ T4052] team_port_change_check+0x23/0xc0 [ 57.042550][ T4052] team_device_event+0x28c/0x2b0 [ 57.047476][ T4052] raw_notifier_call_chain+0x63/0xa0 [ 57.052845][ T4052] __dev_notify_flags+0x144/0x220 [ 57.057851][ T4052] dev_change_flags+0x67/0x80 [ 57.062506][ T4052] vlan_device_event+0x275/0xcc0 [ 57.067432][ T4052] ? phonet_device_notify+0x14f/0x410 [ 57.072799][ T4052] ? raw_notifier+0x35c/0x3a0 [ 57.077562][ T4052] raw_notifier_call_chain+0x63/0xa0 [ 57.082924][ T4052] dev_open+0xd8/0x110 [ 57.086979][ T4052] team_add_slave+0x455/0x1190 [ 57.091992][ T4052] ? ip6_route_dev_notify+0x39/0x2b0 [ 57.097281][ T4052] ? raw_notifier_call_chain+0x80/0xa0 [ 57.102725][ T4052] ? __dev_notify_flags+0x1f5/0x220 [ 57.107939][ T4052] do_setlink+0x751/0x1d60 [ 57.112405][ T4052] ? __nla_validate_parse+0x2fc/0x1550 [ 57.118212][ T4052] ? __nla_validate_parse+0x103a/0x1550 [ 57.124181][ T4052] ? __nla_parse+0x3c/0x50 [ 57.128614][ T4052] ? validate_linkmsg+0x1a6/0x200 [ 57.133993][ T4052] rtnl_newlink+0xfbe/0x13b0 [ 57.138564][ T4052] ? rtnl_newlink+0x451/0x13b0 [ 57.143306][ T4052] ? rtnetlink_rcv_msg+0x514/0xa00 [ 57.148392][ T4052] ? rtnl_setlink+0x320/0x320 [ 57.153043][ T4052] rtnetlink_rcv_msg+0x54e/0xa00 [ 57.157956][ T4052] ? rtnetlink_rcv_msg+0xeb/0xa00 [ 57.163127][ T4052] ? lockdep_hardirqs_on+0x94/0xf0 [ 57.168218][ T4052] ? _raw_spin_unlock_irqrestore+0x68/0xb0 [ 57.174199][ T4052] ? debug_check_no_obj_freed+0x1e4/0x240 [ 57.179983][ T4052] ? kmem_cache_free+0x260/0x480 [ 57.184990][ T4052] ? nlmon_xmit+0x3e/0x50 [ 57.189387][ T4052] ? __local_bh_enable_ip+0xb7/0xf0 [ 57.194996][ T4052] ? lockdep_hardirqs_on+0x94/0xf0 [ 57.200168][ T4052] ? __dev_queue_xmit+0xb0/0x1e70 [ 57.205201][ T4052] ? ref_tracker_free+0x173/0x340 [ 57.210206][ T4052] netlink_rcv_skb+0x10a/0x1d0 [ 57.214950][ T4052] ? rtnetlink_bind+0x60/0x60 [ 57.219976][ T4052] netlink_unicast+0x46d/0x530 [ 57.224759][ T4052] netlink_sendmsg+0x57b/0x650 [ 57.229601][ T4052] ____sys_sendmsg+0x296/0x3c0 [ 57.234397][ T4052] ___sys_sendmsg+0x2f0/0x330 [ 57.239068][ T4052] __se_sys_sendmsg+0x142/0x1b0 [ 57.243927][ T4052] do_syscall_64+0x3b/0xb0 [ 57.248334][ T4052] ? clear_bhb_loop+0x45/0xa0 [ 57.253187][ T4052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.259115][ T4052] RIP: 0033:0x7f9405a7dda9 [ 57.263669][ T4052] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 57.283487][ T4052] RSP: 002b:00007f940688e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.291964][ T4052] RAX: ffffffffffffffda RBX: 00007f9405babf80 RCX: 00007f9405a7dda9 [ 57.300001][ T4052] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000004 [ 57.308034][ T4052] RBP: 00007f9405aca47a R08: 0000000000000000 R09: 0000000000000000 [ 57.315991][ T4052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.324115][ T4052] R13: 000000000000000b R14: 00007f9405babf80 R15: 00007fffceaedd58 [ 57.332093][ T4052] [ 57.531208][ T46] Bluetooth: hci0: command tx timeout [ 59.611049][ T3607] Bluetooth: hci0: command tx timeout [ 61.691066][ T46] Bluetooth: hci0: command tx timeout [ 63.771079][ T46] Bluetooth: hci0: command tx timeout [ 65.211340][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.217627][ T1260] ieee802154 phy1 wpan1: encryption failed: -22