Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts. syzkaller login: [ 29.493256] IPVS: ftp: loaded support on port[0] = 21 [ 29.567517] chnl_net:caif_netlink_parms(): no params data found [ 29.644477] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.651301] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.658277] device bridge_slave_0 entered promiscuous mode [ 29.665927] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.672430] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.679997] device bridge_slave_1 entered promiscuous mode [ 29.696591] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 29.705339] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 29.723023] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 29.730608] team0: Port device team_slave_0 added [ 29.736020] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 29.743414] team0: Port device team_slave_1 added [ 29.758898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.765150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.790398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.801606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.807924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.833169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.843714] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 29.851252] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 29.869186] device hsr_slave_0 entered promiscuous mode [ 29.874780] device hsr_slave_1 entered promiscuous mode [ 29.881396] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 29.888620] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 29.950122] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.956785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.963701] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.970117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.997446] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 30.003582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.012765] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 30.021339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.030849] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.047877] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.057792] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 30.064082] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.072889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.081430] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.087773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.104861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.115301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.126697] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 30.134413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.142488] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.148887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.156396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 30.164906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 30.172651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.180482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.188102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 30.194909] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 30.207815] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 30.215877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 30.222960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 30.232387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.284472] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 30.294187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.324761] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 30.332742] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 30.339423] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 30.348281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.355683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.363358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.372346] device veth0_vlan entered promiscuous mode [ 30.381736] device veth1_vlan entered promiscuous mode [ 30.387956] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 30.396383] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 30.407125] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 30.416677] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 30.423954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 30.431598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.441011] device veth0_macvtap entered promiscuous mode [ 30.447278] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 30.455335] device veth1_macvtap entered promiscuous mode [ 30.464027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 30.473073] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 30.482495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.489574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.497875] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 30.506958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.514284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 30.568753] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 30.608365] [ 30.610094] ====================================================== [ 30.616383] WARNING: possible circular locking dependency detected [ 30.622679] 4.14.287-syzkaller #0 Not tainted [ 30.627142] ------------------------------------------------------ [ 30.633433] kworker/u4:3/228 is trying to acquire lock: [ 30.638780] (sk_lock-AF_INET){+.+.}, at: [] strp_work+0x3e/0x100 [ 30.646562] [ 30.646562] but task is already holding lock: [ 30.652507] ((&strp->work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 30.660905] [ 30.660905] which lock already depends on the new lock. [ 30.660905] [ 30.669304] [ 30.669304] the existing dependency chain (in reverse order) is: [ 30.676905] [ 30.676905] -> #1 ((&strp->work)){+.+.}: [ 30.682448] flush_work+0xad/0x770 [ 30.686500] __cancel_work_timer+0x321/0x460 [ 30.691428] strp_done+0x53/0xd0 [ 30.695293] kcm_ioctl+0x828/0xfb0 [ 30.699339] sock_ioctl+0x2cc/0x4c0 [ 30.703484] do_vfs_ioctl+0x75a/0xff0 [ 30.707791] SyS_ioctl+0x7f/0xb0 [ 30.711670] do_syscall_64+0x1d5/0x640 [ 30.716065] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 30.721758] [ 30.721758] -> #0 (sk_lock-AF_INET){+.+.}: [ 30.727488] lock_acquire+0x170/0x3f0 [ 30.731798] lock_sock_nested+0xb7/0x100 [ 30.736364] strp_work+0x3e/0x100 [ 30.740324] process_one_work+0x793/0x14a0 [ 30.745056] worker_thread+0x5cc/0xff0 [ 30.749436] kthread+0x30d/0x420 [ 30.753308] ret_from_fork+0x24/0x30 [ 30.757519] [ 30.757519] other info that might help us debug this: [ 30.757519] [ 30.765710] Possible unsafe locking scenario: [ 30.765710] [ 30.771744] CPU0 CPU1 [ 30.776400] ---- ---- [ 30.781180] lock((&strp->work)); [ 30.784711] lock(sk_lock-AF_INET); [ 30.790924] lock((&strp->work)); [ 30.796966] lock(sk_lock-AF_INET); [ 30.800668] [ 30.800668] *** DEADLOCK *** [ 30.800668] [ 30.806709] 2 locks held by kworker/u4:3/228: [ 30.811188] #0: ("%s""kstrp"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 30.819844] #1: ((&strp->work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 30.828675] [ 30.828675] stack backtrace: [ 30.833155] CPU: 0 PID: 228 Comm: kworker/u4:3 Not tainted 4.14.287-syzkaller #0 [ 30.840774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 30.850116] Workqueue: kstrp strp_work [ 30.853980] Call Trace: [ 30.856548] dump_stack+0x1b2/0x281 [ 30.860157] print_circular_bug.constprop.0.cold+0x2d7/0x41e [ 30.865934] __lock_acquire+0x2e0e/0x3f20 [ 30.870063] ? __schedule+0x893/0x1de0 [ 30.873932] ? trace_hardirqs_on+0x10/0x10 [ 30.878158] ? lock_acquire+0x170/0x3f0 [ 30.882107] ? lock_sock_nested+0x98/0x100 [ 30.886318] lock_acquire+0x170/0x3f0 [ 30.890096] ? strp_work+0x3e/0x100 [ 30.893699] lock_sock_nested+0xb7/0x100 [ 30.897733] ? strp_work+0x3e/0x100 [ 30.901332] strp_work+0x3e/0x100 [ 30.904769] process_one_work+0x793/0x14a0 [ 30.908978] ? work_busy+0x320/0x320 [ 30.912666] ? worker_thread+0x158/0xff0 [ 30.916704] ? _raw_spin_unlock_irq+0x24