no interfaces have a carrier [ 32.211825][ T3850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.227454][ T3850] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. 2026/10/18 16:15:00 parsed 1 programs 2026/10/18 16:15:00 serving rpc on tcp://40803 syzkaller login: [ 58.060347][ T4196] cgroup: Unknown subsys name 'net' [ 58.190746][ T4196] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.402220][ T4196] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.945700][ T4250] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.974524][ T4250] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.997191][ T4250] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.146847][ T4211] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.156133][ T4250] infiniband rxe0: set active [ 62.160955][ T4250] infiniband rxe0: added rxe_eth0 [ 62.235083][ T4250] RDS/IB: rxe0: added [ 62.246357][ T4250] smc: adding ib device rxe0 with port count 1 [ 62.252658][ T4250] smc: ib device rxe0 port 1 has pnetid [ 62.275352][ T4211] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.284660][ T4250] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.422002][ T4250] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.582550][ T4250] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.654048][ T4250] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.747383][ T4250] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.813155][ T4250] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.862729][ T4250] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.911230][ T4250] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.974705][ T4250] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.038976][ T4250] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.109711][ T4250] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.228744][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 63.263091][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.271124][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.279502][ T4250] device bridge_slave_0 entered promiscuous mode [ 63.288875][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.296110][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.303659][ T4250] device bridge_slave_1 entered promiscuous mode [ 63.322950][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.334227][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.369356][ T4250] team0: Port device team_slave_0 added [ 63.376525][ T4250] team0: Port device team_slave_1 added [ 63.390718][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.398190][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.424119][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.452388][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.459415][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.485405][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.511445][ T4250] device hsr_slave_0 entered promiscuous mode [ 63.518408][ T4250] device hsr_slave_1 entered promiscuous mode [ 63.602695][ T4250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.613168][ T4250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.623252][ T4250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.652600][ T4250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.672628][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.679857][ T4250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.687674][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.694718][ T4250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.739717][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.753913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.766733][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.775549][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.786311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 63.802295][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.815556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.825817][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.832906][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.859195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.869062][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.876155][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.887676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.907674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.917986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.926530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.934763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.948008][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.067758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.075218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.088363][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.111573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.131941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.142051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.151184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.169154][ T4250] device veth0_vlan entered promiscuous mode [ 64.182912][ T4250] device veth1_vlan entered promiscuous mode [ 64.208507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.217293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.225451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.237177][ T4250] device veth0_macvtap entered promiscuous mode [ 64.248990][ T4250] device veth1_macvtap entered promiscuous mode [ 64.269258][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.287218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.298834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.309970][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.318975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.328154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.340330][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.350660][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.360426][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.369726][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.629396][ T4312] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.907544][ T4316] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.183600][ T4323] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.337594][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.345573][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.360077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.378071][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.387072][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.394624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.491279][ T4328] rxe_eth0 speed is unknown, defaulting to 1000 2026/10/18 16:15:10 executed programs: 0 [ 65.798111][ T483] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.886269][ T4331] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.983959][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 66.017681][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.024784][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.033421][ T4331] device bridge_slave_0 entered promiscuous mode [ 66.044286][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.051910][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.060074][ T4331] device bridge_slave_1 entered promiscuous mode [ 66.076893][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.088493][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.107392][ T4331] team0: Port device team_slave_0 added [ 66.114258][ T4331] team0: Port device team_slave_1 added [ 66.131476][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.138520][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.164737][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.177545][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.184490][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.210687][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.237163][ T4331] device hsr_slave_0 entered promiscuous mode [ 66.243707][ T4331] device hsr_slave_1 entered promiscuous mode [ 66.250423][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.258428][ T4331] Cannot create hsr debugfs directory [ 67.876701][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 69.132066][ T483] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.965967][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 70.119830][ T483] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.202631][ T483] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.160519][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.167272][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.227220][ T4331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.237395][ T4331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.247091][ T4331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.256900][ T4331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.318749][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.331940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.339861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.353807][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.364788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.377746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.388529][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.395586][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.405683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.426213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.437372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.448962][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.456051][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.465332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.475761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.487228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.496576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.508996][ T483] device hsr_slave_0 left promiscuous mode [ 71.515375][ T483] device hsr_slave_1 left promiscuous mode [ 71.521929][ T483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.529469][ T483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.539057][ T483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.546490][ T483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.553919][ T483] device bridge_slave_1 left promiscuous mode [ 71.560880][ T483] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.576666][ T483] device bridge_slave_0 left promiscuous mode [ 71.582811][ T483] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.599041][ T483] device veth1_macvtap left promiscuous mode [ 71.605174][ T483] device veth0_macvtap left promiscuous mode [ 71.611353][ T483] device veth1_vlan left promiscuous mode [ 71.617676][ T483] device veth0_vlan left promiscuous mode [ 71.740778][ T483] team0 (unregistering): Port device team_slave_1 removed [ 71.751975][ T483] team0 (unregistering): Port device team_slave_0 removed [ 71.763792][ T483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.778710][ T483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.827040][ T483] bond0 (unregistering): Released all slaves [ 71.847219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.855507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.864264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.881686][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.890094][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.899397][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.910189][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.920541][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.999276][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.006775][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.023053][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.036854][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 72.043887][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.052859][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.072599][ T4331] device veth0_vlan entered promiscuous mode [ 72.080412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.089045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.097955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.105585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.117989][ T4331] device veth1_vlan entered promiscuous mode [ 72.142929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.152136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.161480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.172014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.182871][ T4331] device veth0_macvtap entered promiscuous mode [ 72.193848][ T4331] device veth1_macvtap entered promiscuous mode [ 72.209606][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.219319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.227691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.236762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.245310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.255565][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.263898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.272931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.286410][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.295115][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.305251][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.314413][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.377581][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.385412][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.402627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.427877][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.435701][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.450858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.543962][ T4211] [ 72.546318][ T4211] ====================================================== [ 72.553321][ T4211] WARNING: possible circular locking dependency detected [ 72.560336][ T4211] syzkaller #0 Not tainted [ 72.564787][ T4211] ------------------------------------------------------ [ 72.571798][ T4211] kworker/1:4/4211 is trying to acquire lock: [ 72.577850][ T4211] ffffffff8e441c10 (rds_trans_sem){++++}-{3:3}, at: rds_trans_get_preferred+0x12f/0x3a0 [ 72.587602][ T4211] [ 72.587602][ T4211] but task is already holding lock: [ 72.594952][ T4211] ffff88807b1463b8 (&id_priv->handler_mutex/1){+.+.}-{3:3}, at: cma_ib_req_handler+0x251a/0x4fd0 [ 72.605479][ T4211] [ 72.605479][ T4211] which lock already depends on the new lock. [ 72.605479][ T4211] [ 72.615870][ T4211] [ 72.615870][ T4211] the existing dependency chain (in reverse order) is: [ 72.624870][ T4211] [ 72.624870][ T4211] -> #2 (&id_priv->handler_mutex/1){+.+.}-{3:3}: [ 72.633428][ T4211] __mutex_lock_common+0x1e5/0x2400 [ 72.639148][ T4211] mutex_lock_nested+0x17/0x20 [ 72.644426][ T4211] cma_ib_req_handler+0x251a/0x4fd0 [ 72.650139][ T4211] cm_process_work+0x4b/0x410 [ 72.655332][ T4211] cm_work_handler+0x9a26/0xeb30 [ 72.660796][ T4211] process_one_work+0x867/0xff0 [ 72.666161][ T4211] worker_thread+0xad7/0x12a0 [ 72.671353][ T4211] kthread+0x42e/0x520 [ 72.675935][ T4211] ret_from_fork+0x1f/0x30 [ 72.680865][ T4211] [ 72.680865][ T4211] -> #1 (&id_priv->handler_mutex){+.+.}-{3:3}: [ 72.689204][ T4211] __mutex_lock_common+0x1e5/0x2400 [ 72.694921][ T4211] mutex_lock_nested+0x17/0x20 [ 72.700205][ T4211] rdma_destroy_id+0x17/0x20 [ 72.705315][ T4211] rds_ib_laddr_check+0x3c1/0x680 [ 72.710856][ T4211] rds_trans_get_preferred+0x16f/0x3a0 [ 72.716833][ T4211] rds_bind+0x68c/0x870 [ 72.721509][ T4211] __sys_bind+0x2e9/0x3e0 [ 72.726353][ T4211] __x64_sys_bind+0x76/0x80 [ 72.731385][ T4211] do_syscall_64+0x4c/0xa0 [ 72.736312][ T4211] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.742721][ T4211] [ 72.742721][ T4211] -> #0 (rds_trans_sem){++++}-{3:3}: [ 72.750184][ T4211] __lock_acquire+0x38f7/0x7d40 [ 72.755553][ T4211] lock_acquire+0x19f/0x400 [ 72.760568][ T4211] down_read+0x44/0x2e0 [ 72.765239][ T4211] rds_trans_get_preferred+0x12f/0x3a0 [ 72.771213][ T4211] __rds_conn_create+0x9bc/0x1ea0 [ 72.776750][ T4211] rds_conn_create+0x3f/0x50 [ 72.781854][ T4211] rds_ib_cm_handle_connect+0x474/0x10d0 [ 72.788001][ T4211] rds_rdma_cm_event_handler_cmn+0x454/0x8e0 [ 72.794498][ T4211] cma_cm_event_handler+0xa6/0x290 [ 72.800128][ T4211] cma_ib_req_handler+0x2c49/0x4fd0 [ 72.805840][ T4211] cm_process_work+0x4b/0x410 [ 72.811025][ T4211] cm_work_handler+0x9a26/0xeb30 [ 72.816474][ T4211] process_one_work+0x867/0xff0 [ 72.821839][ T4211] worker_thread+0xad7/0x12a0 [ 72.827031][ T4211] kthread+0x42e/0x520 [ 72.831619][ T4211] ret_from_fork+0x1f/0x30 [ 72.836548][ T4211] [ 72.836548][ T4211] other info that might help us debug this: [ 72.836548][ T4211] [ 72.846756][ T4211] Chain exists of: [ 72.846756][ T4211] rds_trans_sem --> &id_priv->handler_mutex --> &id_priv->handler_mutex/1 [ 72.846756][ T4211] [ 72.861163][ T4211] Possible unsafe locking scenario: [ 72.861163][ T4211] [ 72.868596][ T4211] CPU0 CPU1 [ 72.873939][ T4211] ---- ---- [ 72.879281][ T4211] lock(&id_priv->handler_mutex/1); [ 72.884549][ T4211] lock(&id_priv->handler_mutex); [ 72.892158][ T4211] lock(&id_priv->handler_mutex/1); [ 72.899945][ T4211] rlock(rds_trans_sem); [ 72.904252][ T4211] [ 72.904252][ T4211] *** DEADLOCK *** [ 72.904252][ T4211] [ 72.912369][ T4211] 4 locks held by kworker/1:4/4211: [ 72.917542][ T4211] #0: ffff88802ad78938 ((wq_completion)ib_cm){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 72.927718][ T4211] #1: ffffc9000115fd00 ((work_completion)(&(&work->work)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 72.939519][ T4211] #2: ffff88802111d3b8 (&id_priv->handler_mutex){+.+.}-{3:3}, at: cma_ib_req_handler+0x2028/0x4fd0 [ 72.950277][ T4211] #3: ffff88807b1463b8 (&id_priv->handler_mutex/1){+.+.}-{3:3}, at: cma_ib_req_handler+0x251a/0x4fd0 [ 72.961216][ T4211] [ 72.961216][ T4211] stack backtrace: [ 72.967103][ T4211] CPU: 1 PID: 4211 Comm: kworker/1:4 Not tainted syzkaller #0 [ 72.974537][ T4211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.984572][ T4211] Workqueue: ib_cm cm_work_handler [ 72.989677][ T4211] Call Trace: [ 72.992939][ T4211] [ 72.995852][ T4211] dump_stack_lvl+0x188/0x250 [ 73.000523][ T4211] ? load_image+0x410/0x410 [ 73.005008][ T4211] ? show_regs_print_info+0x20/0x20 [ 73.010189][ T4211] ? print_circular_bug+0x12b/0x1a0 [ 73.015370][ T4211] check_noncircular+0x2f8/0x400 [ 73.020291][ T4211] ? print_deadlock_bug+0x5d0/0x5d0 [ 73.025466][ T4211] ? lockdep_lock+0xf1/0x1f0 [ 73.030040][ T4211] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 73.035918][ T4211] ? mark_lock+0x94/0x320 [ 73.040224][ T4211] ? _find_first_zero_bit+0xd1/0xf0 [ 73.045404][ T4211] __lock_acquire+0x38f7/0x7d40 [ 73.050244][ T4211] ? kasan_set_free_info+0x1f/0x40 [ 73.055337][ T4211] ? rds_cong_get_maps+0x4f/0xa0 [ 73.060258][ T4211] ? cm_process_work+0x4b/0x410 [ 73.065092][ T4211] ? cm_work_handler+0x9a26/0xeb30 [ 73.070184][ T4211] ? process_one_work+0x867/0xff0 [ 73.075188][ T4211] ? worker_thread+0xad7/0x12a0 [ 73.080021][ T4211] ? ret_from_fork+0x1f/0x30 [ 73.084595][ T4211] ? verify_lock_unused+0x140/0x140 [ 73.089779][ T4211] ? mark_lock+0x94/0x320 [ 73.094089][ T4211] lock_acquire+0x19f/0x400 [ 73.098571][ T4211] ? rds_trans_get_preferred+0x12f/0x3a0 [ 73.104185][ T4211] ? kasan_quarantine_put+0xd4/0x210 [ 73.109451][ T4211] ? __might_sleep+0xf0/0xf0 [ 73.114022][ T4211] ? read_lock_is_recursive+0x10/0x10 [ 73.119374][ T4211] ? slab_free_freelist_hook+0xec/0x170 [ 73.124899][ T4211] ? rds_cong_from_addr+0x34e/0x360 [ 73.130077][ T4211] ? kfree+0xef/0x2a0 [ 73.134042][ T4211] down_read+0x44/0x2e0 [ 73.138178][ T4211] ? rds_trans_get_preferred+0x12f/0x3a0 [ 73.143796][ T4211] rds_trans_get_preferred+0x12f/0x3a0 [ 73.149242][ T4211] __rds_conn_create+0x9bc/0x1ea0 [ 73.154261][ T4211] ? rds_conn_create+0x50/0x50 [ 73.159010][ T4211] ? __lock_acquire+0x35cf/0x7d40 [ 73.164020][ T4211] rds_conn_create+0x3f/0x50 [ 73.168593][ T4211] rds_ib_cm_handle_connect+0x474/0x10d0 [ 73.174209][ T4211] ? rds_ib_cm_connect_complete+0x8c0/0x8c0 [ 73.180081][ T4211] ? xas_store+0xcc5/0x1a00 [ 73.184569][ T4211] rds_rdma_cm_event_handler_cmn+0x454/0x8e0 [ 73.190528][ T4211] ? __lock_acquire+0x7d40/0x7d40 [ 73.195537][ T4211] ? rds_rdma_cm_event_handler+0x20/0x20 [ 73.201169][ T4211] ? trace_cm_event_handler+0x7f/0x1c0 [ 73.206610][ T4211] ? rds_cmsg_atomic+0xc60/0xc60 [ 73.211527][ T4211] ? cma_listen_handler+0xf7/0x150 [ 73.216623][ T4211] cma_cm_event_handler+0xa6/0x290 [ 73.221716][ T4211] cma_ib_req_handler+0x2c49/0x4fd0 [ 73.226900][ T4211] ? _cma_attach_to_dev+0x430/0x430 [ 73.232096][ T4211] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 73.238058][ T4211] ? lock_chain_count+0x20/0x20 [ 73.242891][ T4211] cm_process_work+0x4b/0x410 [ 73.247551][ T4211] ? _raw_spin_unlock_irq+0x2a/0x40 [ 73.252733][ T4211] cm_work_handler+0x9a26/0xeb30 [ 73.257659][ T4211] ? refcount_inc+0x70/0x70 [ 73.262143][ T4211] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 73.268106][ T4211] ? __lock_acquire+0x7d40/0x7d40 [ 73.273110][ T4211] ? read_lock_is_recursive+0x10/0x10 [ 73.278461][ T4211] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 73.284333][ T4211] ? _raw_spin_unlock+0x40/0x40 [ 73.289166][ T4211] ? _raw_spin_unlock_irq+0x1f/0x40 [ 73.294344][ T4211] process_one_work+0x867/0xff0 [ 73.299180][ T4211] ? worker_detach_from_pool+0x240/0x240 [ 73.304790][ T4211] ? lockdep_hardirqs_off+0x70/0x100 [ 73.310063][ T4211] ? _raw_spin_lock_irq+0xb7/0xf0 [ 73.315069][ T4211] ? _raw_spin_lock_irqsave+0x100/0x100 [ 73.320599][ T4211] ? wq_worker_running+0x97/0x170 [ 73.325601][ T4211] worker_thread+0xad7/0x12a0 [ 73.330262][ T4211] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 73.336137][ T4211] kthread+0x42e/0x520 [ 73.340185][ T4211] ? rcu_lock_release+0x20/0x20 [ 73.345014][ T4211] ? kthread_blkcg+0xd0/0xd0 [ 73.349584][ T4211] ret_from_fork+0x1f/0x30 [ 73.353986][ T4211] [ 73.387572][ T4291] RDS/IB: Active conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 73.443051][ T4211] RDS/IB: Passive conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1