Warning: Permanently added '[localhost]:8968' (ED25519) to the list of known hosts. 2025/08/26 07:29:48 parsed 1 programs syzkaller login: [ 54.007804][ T5839] cgroup: Unknown subsys name 'net' [ 54.153033][ T5839] cgroup: Unknown subsys name 'cpuset' [ 54.159954][ T5839] cgroup: Unknown subsys name 'rlimit' [ 56.529090][ T5839] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.767235][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.884896][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.889140][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.892404][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.899591][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.908840][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.272595][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.275605][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.310251][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.313618][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.157126][ T5891] chnl_net:caif_netlink_parms(): no params data found [ 61.241729][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.245545][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.248964][ T5891] bridge_slave_0: entered allmulticast mode [ 61.252179][ T5891] bridge_slave_0: entered promiscuous mode [ 61.257619][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.260615][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.263331][ T5891] bridge_slave_1: entered allmulticast mode [ 61.266274][ T5891] bridge_slave_1: entered promiscuous mode [ 61.294980][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.299890][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.321061][ T5891] team0: Port device team_slave_0 added [ 61.324730][ T5891] team0: Port device team_slave_1 added [ 61.346237][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.348817][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.357847][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.363550][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.366445][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.375586][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.408761][ T5891] hsr_slave_0: entered promiscuous mode [ 61.411442][ T5891] hsr_slave_1: entered promiscuous mode [ 61.545768][ T5891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.554477][ T5891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.562185][ T5891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.570684][ T5891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.647829][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.672207][ T5891] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.686988][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.690340][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.703618][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.706463][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.861929][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.894975][ T5891] veth0_vlan: entered promiscuous mode [ 61.902809][ T5891] veth1_vlan: entered promiscuous mode [ 61.926633][ T5891] veth0_macvtap: entered promiscuous mode [ 61.932599][ T5891] veth1_macvtap: entered promiscuous mode [ 61.946094][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.957022][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.972140][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.976230][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.981467][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.985712][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.093559][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.147616][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.212171][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.271322][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/08/26 07:30:00 executed programs: 0 [ 64.162025][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.166467][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.173614][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.177886][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.181674][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.351172][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 64.434770][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.437789][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.441045][ T5954] bridge_slave_0: entered allmulticast mode [ 64.445023][ T5954] bridge_slave_0: entered promiscuous mode [ 64.450109][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.453098][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.456041][ T5954] bridge_slave_1: entered allmulticast mode [ 64.460156][ T5954] bridge_slave_1: entered promiscuous mode [ 64.494711][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.502271][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.528865][ T5954] team0: Port device team_slave_0 added [ 64.533537][ T5954] team0: Port device team_slave_1 added [ 64.561910][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.564609][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.574620][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.581568][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.584305][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.593218][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.633559][ T5954] hsr_slave_0: entered promiscuous mode [ 64.636808][ T5954] hsr_slave_1: entered promiscuous mode [ 64.639783][ T5954] debugfs: 'hsr0' already exists in 'hsr' [ 64.642309][ T5954] Cannot create hsr debugfs directory [ 65.574533][ T12] bridge_slave_1: left allmulticast mode [ 65.576975][ T12] bridge_slave_1: left promiscuous mode [ 65.583989][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.592154][ T12] bridge_slave_0: left allmulticast mode [ 65.594288][ T12] bridge_slave_0: left promiscuous mode [ 65.596478][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.859897][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.866224][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.872107][ T12] bond0 (unregistering): Released all slaves [ 65.955756][ T12] hsr_slave_0: left promiscuous mode [ 65.968182][ T12] hsr_slave_1: left promiscuous mode [ 65.971068][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.974078][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.979926][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.982937][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.998895][ T12] veth1_macvtap: left promiscuous mode [ 66.001454][ T12] veth0_macvtap: left promiscuous mode [ 66.003884][ T12] veth1_vlan: left promiscuous mode [ 66.006347][ T12] veth0_vlan: left promiscuous mode [ 66.252099][ T5861] Bluetooth: hci0: command tx timeout [ 66.349911][ T12] team0 (unregistering): Port device team_slave_1 removed [ 66.377666][ T12] team0 (unregistering): Port device team_slave_0 removed [ 66.915844][ T5954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.926591][ T5954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.938717][ T5954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.959303][ T5954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.244705][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.264922][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.273298][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.276226][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.297214][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.300243][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.493070][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.534095][ T5954] veth0_vlan: entered promiscuous mode [ 67.541691][ T5954] veth1_vlan: entered promiscuous mode [ 67.560399][ T5954] veth0_macvtap: entered promiscuous mode [ 67.564563][ T5954] veth1_macvtap: entered promiscuous mode [ 67.574321][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.582433][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.590111][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.593199][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.597365][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.600784][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.641668][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.646113][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.661470][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.664006][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.692874][ T5996] bond0: entered promiscuous mode [ 67.694643][ T5996] bond_slave_0: entered promiscuous mode [ 67.696647][ T5996] bond_slave_1: entered promiscuous mode [ 67.702926][ T5996] dummy0: entered promiscuous mode [ 67.705652][ T5996] hsr1: entered promiscuous mode [ 67.707327][ T5996] hsr1: entered allmulticast mode [ 67.710106][ T5996] bond0: entered allmulticast mode [ 67.711856][ T5996] bond_slave_0: entered allmulticast mode [ 67.713772][ T5996] bond_slave_1: entered allmulticast mode [ 67.715711][ T5996] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:575 [ 67.721845][ T5996] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5996, name: syz.0.17 [ 67.725466][ T5996] preempt_count: 0, expected: 0 [ 67.726971][ T5996] RCU nest depth: 1, expected: 0 [ 67.731297][ T5996] 3 locks held by syz.0.17/5996: [ 67.732958][ T5996] #0: ffffffff8fa59670 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 67.735876][ T5996] #1: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 67.739546][ T5996] #2: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: hsr_change_rx_flags+0x28/0x2d0 [ 67.742868][ T5996] CPU: 0 UID: 0 PID: 5996 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 67.742879][ T5996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 67.742885][ T5996] Call Trace: [ 67.742890][ T5996] [ 67.742907][ T5996] dump_stack_lvl+0x189/0x250 [ 67.742924][ T5996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.742937][ T5996] ? print_lock_name+0xde/0x100 [ 67.742952][ T5996] __might_resched+0x495/0x610 [ 67.742963][ T5996] ? irq_enter_rcu+0x1b/0xf0 [ 67.742972][ T5996] ? __pfx___might_resched+0x10/0x10 [ 67.742988][ T5996] __mutex_lock+0x109/0x1360 [ 67.743001][ T5996] ? bond_set_rx_mode+0x79/0x4a0 [ 67.743016][ T5996] ? __dev_notify_flags+0x1d9/0x2e0 [ 67.743030][ T5996] ? __pfx___dev_notify_flags+0x10/0x10 [ 67.743041][ T5996] ? __local_bh_enable_ip+0x12d/0x1c0 [ 67.743049][ T5996] ? dev_set_allmulti+0x10e/0x260 [ 67.743062][ T5996] ? __pfx___mutex_lock+0x10/0x10 [ 67.743082][ T5996] dev_set_allmulti+0x10e/0x260 [ 67.743096][ T5996] hsr_change_rx_flags+0x1b2/0x2d0 [ 67.743106][ T5996] ? hsr_change_rx_flags+0x28/0x2d0 [ 67.743115][ T5996] ? __pfx_hsr_change_rx_flags+0x10/0x10 [ 67.743123][ T5996] netif_set_allmulti+0x212/0x380 [ 67.743139][ T5996] __dev_change_flags+0x52e/0x6d0 [ 67.743149][ T5996] ? __pfx___dev_change_flags+0x10/0x10 [ 67.743162][ T5996] rtnl_newlink_create+0x555/0xb00 [ 67.743170][ T5996] ? __pfx___nla_validate_parse+0x10/0x10 [ 67.743189][ T5996] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 67.743198][ T5996] ? __pfx___mutex_lock+0x10/0x10 [ 67.743213][ T5996] ? ns_capable+0x8a/0xf0 [ 67.743224][ T5996] rtnl_newlink+0x16d6/0x1c70 [ 67.743236][ T5996] ? netlink_sendmsg+0x805/0xb30 [ 67.743253][ T5996] ? __pfx_rtnl_newlink+0x10/0x10 [ 67.743275][ T5996] ? kasan_quarantine_put+0xdd/0x220 [ 67.743286][ T5996] ? lockdep_hardirqs_on+0x9c/0x150 [ 67.743301][ T5996] ? nlmon_xmit+0xb0/0x100 [ 67.743308][ T5996] ? kmem_cache_free+0x18f/0x400 [ 67.743324][ T5996] ? __local_bh_enable_ip+0x12d/0x1c0 [ 67.743332][ T5996] ? lockdep_hardirqs_on+0x9c/0x150 [ 67.743343][ T5996] ? __local_bh_enable_ip+0x12d/0x1c0 [ 67.743350][ T5996] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 67.743360][ T5996] ? __dev_queue_xmit+0x27b/0x3b50 [ 67.743368][ T5996] ? __dev_queue_xmit+0x27b/0x3b50 [ 67.743376][ T5996] ? __dev_queue_xmit+0x27b/0x3b50 [ 67.743385][ T5996] ? __dev_queue_xmit+0x1d79/0x3b50 [ 67.743395][ T5996] ? __lock_acquire+0xab9/0xd20 [ 67.743419][ T5996] ? __pfx_rtnl_newlink+0x10/0x10 [ 67.743429][ T5996] rtnetlink_rcv_msg+0x7cf/0xb70 [ 67.743441][ T5996] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 67.743452][ T5996] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.743461][ T5996] ? ref_tracker_free+0x63a/0x7d0 [ 67.743472][ T5996] ? __asan_memcpy+0x40/0x70 [ 67.743480][ T5996] ? __pfx_ref_tracker_free+0x10/0x10 [ 67.743490][ T5996] ? __skb_clone+0x63/0x7a0 [ 67.743503][ T5996] netlink_rcv_skb+0x208/0x470 [ 67.743515][ T5996] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.743526][ T5996] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 67.743542][ T5996] ? netlink_deliver_tap+0x2e/0x1b0 [ 67.743556][ T5996] netlink_unicast+0x82f/0x9e0 [ 67.743571][ T5996] ? __pfx_netlink_unicast+0x10/0x10 [ 67.743581][ T5996] ? netlink_sendmsg+0x642/0xb30 [ 67.743591][ T5996] ? skb_put+0x11b/0x210 [ 67.743605][ T5996] netlink_sendmsg+0x805/0xb30 [ 67.743620][ T5996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.743633][ T5996] ? aa_sock_msg_perm+0xf1/0x1d0 [ 67.743646][ T5996] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 67.743655][ T5996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.743667][ T5996] __sock_sendmsg+0x21c/0x270 [ 67.743679][ T5996] ____sys_sendmsg+0x505/0x830 [ 67.743691][ T5996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.743703][ T5996] ? import_iovec+0x74/0xa0 [ 67.743715][ T5996] ___sys_sendmsg+0x21f/0x2a0 [ 67.743724][ T5996] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.743735][ T5996] ? futex_hash_put+0x4b/0x60 [ 67.743744][ T5996] ? futex_wake+0x4b2/0x560 [ 67.743760][ T5996] ? _copy_to_user+0x8a/0xb0 [ 67.743782][ T5996] __x64_sys_sendmsg+0x19b/0x260 [ 67.743815][ T5996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 67.743834][ T5996] ? do_syscall_64+0xbe/0x3b0 [ 67.743848][ T5996] do_syscall_64+0xfa/0x3b0 [ 67.743858][ T5996] ? lockdep_hardirqs_on+0x9c/0x150 [ 67.743868][ T5996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.743875][ T5996] ? exc_page_fault+0x9f/0xf0 [ 67.743886][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.743893][ T5996] RIP: 0033:0x7ff4b418ebe9 [ 67.743903][ T5996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.743909][ T5996] RSP: 002b:00007ffef8386cc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.743918][ T5996] RAX: ffffffffffffffda RBX: 00007ff4b43b5fa0 RCX: 00007ff4b418ebe9 [ 67.743923][ T5996] RDX: 00000000000080c0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 67.743928][ T5996] RBP: 00007ff4b4211e19 R08: 0000000000000000 R09: 0000000000000000 [ 67.743933][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.743937][ T5996] R13: 00007ff4b43b5fa0 R14: 00007ff4b43b5fa0 R15: 0000000000000003 [ 67.743950][ T5996] [ 67.743955][ T5996] [ 67.902480][ T5996] ============================= [ 67.903968][ T5996] [ BUG: Invalid wait context ] [ 67.905441][ T5996] syzkaller #0 Tainted: G W [ 67.907377][ T5996] ----------------------------- [ 67.908874][ T5996] syz.0.17/5996 is trying to lock: [ 67.910565][ T5996] ffff888110848d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0x10e/0x260 [ 67.913573][ T5996] other info that might help us debug this: [ 67.915367][ T5996] context-{5:5} [ 67.916637][ T5996] 3 locks held by syz.0.17/5996: [ 67.918255][ T5996] #0: ffffffff8fa59670 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 67.921302][ T5996] #1: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 67.924164][ T5996] #2: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: hsr_change_rx_flags+0x28/0x2d0 [ 67.927253][ T5996] stack backtrace: [ 67.928485][ T5996] CPU: 0 UID: 0 PID: 5996 Comm: syz.0.17 Tainted: G W syzkaller #0 PREEMPT(full) [ 67.928497][ T5996] Tainted: [W]=WARN [ 67.928500][ T5996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 67.928505][ T5996] Call Trace: [ 67.928509][ T5996] [ 67.928513][ T5996] dump_stack_lvl+0x189/0x250 [ 67.928526][ T5996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.928535][ T5996] ? __pfx__printk+0x10/0x10 [ 67.928546][ T5996] ? print_lock_name+0xde/0x100 [ 67.928556][ T5996] __lock_acquire+0xbcb/0xd20 [ 67.928568][ T5996] ? dev_set_allmulti+0x10e/0x260 [ 67.928580][ T5996] lock_acquire+0x120/0x360 [ 67.928589][ T5996] ? dev_set_allmulti+0x10e/0x260 [ 67.928602][ T5996] __mutex_lock+0x187/0x1360 [ 67.928613][ T5996] ? dev_set_allmulti+0x10e/0x260 [ 67.928623][ T5996] ? bond_set_rx_mode+0x79/0x4a0 [ 67.928634][ T5996] ? __dev_notify_flags+0x1d9/0x2e0 [ 67.928646][ T5996] ? __pfx___dev_notify_flags+0x10/0x10 [ 67.928656][ T5996] ? __local_bh_enable_ip+0x12d/0x1c0 [ 67.928664][ T5996] ? dev_set_allmulti+0x10e/0x260 [ 67.928675][ T5996] ? __pfx___mutex_lock+0x10/0x10 [ 67.928687][ T5996] dev_set_allmulti+0x10e/0x260 [ 67.928699][ T5996] hsr_change_rx_flags+0x1b2/0x2d0 [ 67.928708][ T5996] ? hsr_change_rx_flags+0x28/0x2d0 [ 67.928716][ T5996] ? __pfx_hsr_change_rx_flags+0x10/0x10 [ 67.928724][ T5996] netif_set_allmulti+0x212/0x380 [ 67.928736][ T5996] __dev_change_flags+0x52e/0x6d0 [ 67.928744][ T5996] ? __pfx___dev_change_flags+0x10/0x10 [ 67.928752][ T5996] rtnl_newlink_create+0x555/0xb00 [ 67.928760][ T5996] ? __pfx___nla_validate_parse+0x10/0x10 [ 67.928801][ T5996] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 67.928809][ T5996] ? __pfx___mutex_lock+0x10/0x10 [ 67.928820][ T5996] ? ns_capable+0x8a/0xf0 [ 67.928828][ T5996] rtnl_newlink+0x16d6/0x1c70 [ 67.928840][ T5996] ? netlink_sendmsg+0x805/0xb30 [ 67.928852][ T5996] ? __pfx_rtnl_newlink+0x10/0x10 [ 67.928866][ T5996] ? kasan_quarantine_put+0xdd/0x220 [ 67.928875][ T5996] ? lockdep_hardirqs_on+0x9c/0x150 [ 67.928886][ T5996] ? nlmon_xmit+0xb0/0x100 [ 67.928893][ T5996] ? kmem_cache_free+0x18f/0x400 [ 67.928904][ T5996] ? __local_bh_enable_ip+0x12d/0x1c0 [ 67.928911][ T5996] ? lockdep_hardirqs_on+0x9c/0x150 [ 67.928920][ T5996] ? __local_bh_enable_ip+0x12d/0x1c0 [ 67.928927][ T5996] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 67.928935][ T5996] ? __dev_queue_xmit+0x27b/0x3b50 [ 67.928943][ T5996] ? __dev_queue_xmit+0x27b/0x3b50 [ 67.928950][ T5996] ? __dev_queue_xmit+0x27b/0x3b50 [ 67.928957][ T5996] ? __dev_queue_xmit+0x1d79/0x3b50 [ 67.928966][ T5996] ? __lock_acquire+0xab9/0xd20 [ 67.928979][ T5996] ? __pfx_rtnl_newlink+0x10/0x10 [ 67.928989][ T5996] rtnetlink_rcv_msg+0x7cf/0xb70 [ 67.928999][ T5996] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 67.929009][ T5996] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.929018][ T5996] ? ref_tracker_free+0x63a/0x7d0 [ 67.929028][ T5996] ? __asan_memcpy+0x40/0x70 [ 67.929035][ T5996] ? __pfx_ref_tracker_free+0x10/0x10 [ 67.929044][ T5996] ? __skb_clone+0x63/0x7a0 [ 67.929053][ T5996] netlink_rcv_skb+0x208/0x470 [ 67.929063][ T5996] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.929073][ T5996] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 67.929084][ T5996] ? netlink_deliver_tap+0x2e/0x1b0 [ 67.929095][ T5996] netlink_unicast+0x82f/0x9e0 [ 67.929105][ T5996] ? __pfx_netlink_unicast+0x10/0x10 [ 67.929114][ T5996] ? netlink_sendmsg+0x642/0xb30 [ 67.929124][ T5996] ? skb_put+0x11b/0x210 [ 67.929135][ T5996] netlink_sendmsg+0x805/0xb30 [ 67.929146][ T5996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.929156][ T5996] ? aa_sock_msg_perm+0xf1/0x1d0 [ 67.929169][ T5996] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 67.929177][ T5996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.929187][ T5996] __sock_sendmsg+0x21c/0x270 [ 67.929197][ T5996] ____sys_sendmsg+0x505/0x830 [ 67.929205][ T5996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.929214][ T5996] ? import_iovec+0x74/0xa0 [ 67.929222][ T5996] ___sys_sendmsg+0x21f/0x2a0 [ 67.929230][ T5996] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.929238][ T5996] ? futex_hash_put+0x4b/0x60 [ 67.929245][ T5996] ? futex_wake+0x4b2/0x560 [ 67.929256][ T5996] ? _copy_to_user+0x8a/0xb0 [ 67.929269][ T5996] __x64_sys_sendmsg+0x19b/0x260 [ 67.929277][ T5996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 67.929287][ T5996] ? do_syscall_64+0xbe/0x3b0 [ 67.929298][ T5996] do_syscall_64+0xfa/0x3b0 [ 67.929307][ T5996] ? lockdep_hardirqs_on+0x9c/0x150 [ 67.929316][ T5996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.929323][ T5996] ? exc_page_fault+0x9f/0xf0 [ 67.929332][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.929340][ T5996] RIP: 0033:0x7ff4b418ebe9 [ 67.929350][ T5996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.929356][ T5996] RSP: 002b:00007ffef8386cc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.929365][ T5996] RAX: ffffffffffffffda RBX: 00007ff4b43b5fa0 RCX: 00007ff4b418ebe9 [ 67.929370][ T5996] RDX: 00000000000080c0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 67.929375][ T5996] RBP: 00007ff4b4211e19 R08: 0000000000000000 R09: 0000000000000000 [ 67.929380][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.929384][ T5996] R13: 00007ff4b43b5fa0 R14: 00007ff4b43b5fa0 R15: 0000000000000003 [ 67.929392][ T5996] [ 68.101898][ T5996] dummy0: entered allmulticast mode [ 69.433500][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.951475][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.082097][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.144434][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.209499][ T1363] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.212061][ T1363] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.220512][ T12] bridge_slave_1: left allmulticast mode [ 71.222343][ T12] bridge_slave_1: left promiscuous mode [ 71.224136][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.230026][ T12] bridge_slave_0: left allmulticast mode [ 71.231848][ T12] bridge_slave_0: left promiscuous mode [ 71.233888][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.365195][ T12] bond0 (unregistering): left promiscuous mode [ 71.367738][ T12] bond_slave_0: left promiscuous mode [ 71.370809][ T12] bond_slave_1: left promiscuous mode [ 71.373973][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.377535][ T12] bond_slave_0: left allmulticast mode [ 71.381407][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.385150][ T12] bond_slave_1: left allmulticast mode [ 71.388207][ T12] bond0 (unregistering): Released all slaves [ 71.586571][ T12] dummy0: left promiscuous mode [ 71.599066][ T12] hsr_slave_0: left promiscuous mode [ 71.601703][ T12] hsr_slave_1: left promiscuous mode [ 71.604241][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.607236][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.620826][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.623869][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.630390][ T12] veth1_macvtap: left promiscuous mode [ 71.632832][ T12] veth0_macvtap: left promiscuous mode [ 71.635118][ T12] veth1_vlan: left promiscuous mode [ 71.637305][ T12] veth0_vlan: left promiscuous mode [ 71.755616][ T12] team0 (unregistering): Port device team_slave_1 removed [ 71.770630][ T12] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 07:30:04 Registers: info registers vcpu 0 CPU#0 RAX=6701de5014d3da00 RBX=ffffffff99d0f1b0 RCX=000000000000fa28 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff99d0f1b0 RBP=ffffc900045af850 RSP=ffffc900045af7c0 R8 =ffffc900045af887 R9 =0000000000000000 R10=ffffc900045af878 R11=fffff520008b5f11 R12=ffff88804b025900 R13=ffff888121c09828 R14=dffffc0000000000 R15=0000000000000802 RIP=ffffffff8b7bfb7f RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880b861b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000000200 CR3=0000000029436000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000 XMM02=0000000000000000 00000000ff000000 XMM03=0000000000000000 000000000000ff00 XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000 XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000 XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=8ecf4f12ea456f00 RBX=ffffffff819683a8 RCX=8ecf4f12ea456f00 RDX=0000000000000001 RSI=ffffffff8d9b6bc7 RDI=ffffffff8be33300 RBP=ffffc90000177f20 RSP=ffffc90000177de0 R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4 R12=ffffffff8fa37f30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d6000 RIP=ffffffff8b7963f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00100 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00100 FS =0000 0000000000000000 ffffffff 00c00100 GS =0000 ffff8881a3c1b000 ffffffff 00c00100 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffef8387030 CR3=000000011088c000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000ffffff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000 XMM04=0000000000000000 0000000000ffffff XMM05=000000ffffffff00 0000000000000000 XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000 XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000