Warning: Permanently added '10.128.10.19' (ECDSA) to the list of known hosts. 1970/01/01 00:01:00 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:00 parsed 1 programs 1970/01/01 00:01:00 executed programs: 0 [ 60.412587][ T5475] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.414963][ T5475] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.417119][ T5475] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.420135][ T5475] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.422253][ T5475] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.424199][ T5475] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.497243][ T6456] chnl_net:caif_netlink_parms(): no params data found [ 60.523227][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.525008][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.526955][ T6456] bridge_slave_0: entered allmulticast mode [ 60.528940][ T6456] bridge_slave_0: entered promiscuous mode [ 60.531976][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.533735][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.535423][ T6456] bridge_slave_1: entered allmulticast mode [ 60.537372][ T6456] bridge_slave_1: entered promiscuous mode [ 60.548556][ T6456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.552233][ T6456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.564933][ T6456] team0: Port device team_slave_0 added [ 60.568398][ T6456] team0: Port device team_slave_1 added [ 60.577886][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.579806][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.585996][ T6456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.590078][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.591711][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.597883][ T6456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.649341][ T6456] hsr_slave_0: entered promiscuous mode [ 60.688471][ T6456] hsr_slave_1: entered promiscuous mode [ 61.366413][ T6456] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.399478][ T6456] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.419375][ T6456] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.451565][ T6456] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.497353][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.499260][ T6456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.501079][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.502840][ T6456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.533098][ T3426] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.535288][ T3426] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.546574][ T6456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.552550][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.554694][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.560227][ T6456] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.563843][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.566190][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.568503][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.570370][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.586417][ T6456] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.590065][ T6456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.593287][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.595567][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.598262][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.600001][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.602035][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.604529][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.607336][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.612298][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.614704][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.617112][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.619695][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.621979][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.624441][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.626731][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.631460][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.633698][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.716289][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.718354][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.723004][ T6456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.733307][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.735668][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.747238][ T6456] veth0_vlan: entered promiscuous mode [ 61.750159][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.752526][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.754969][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.757430][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.764797][ T6456] veth1_vlan: entered promiscuous mode [ 61.778157][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.780533][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.782740][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.785030][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.790456][ T6456] veth0_macvtap: entered promiscuous mode [ 61.794774][ T6456] veth1_macvtap: entered promiscuous mode [ 61.803449][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.805327][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.807638][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.810360][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.812717][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.817403][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.821541][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.823915][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.826720][ T6456] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.830308][ T6456] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.832395][ T6456] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.834495][ T6456] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.873999][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.876046][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.879760][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.893492][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.895429][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.898487][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.432099][ C0] [ 62.432685][ C0] ====================================================== [ 62.434453][ C0] WARNING: possible circular locking dependency detected [ 62.436266][ C0] 6.3.0-rc6-syzkaller-g7920df21c1b7 #0 Not tainted [ 62.437859][ C0] ------------------------------------------------------ [ 62.439622][ C0] kworker/u4:5/1708 is trying to acquire lock: [ 62.441123][ C0] ffff0000dbbb4430 (&rs->rs_recv_lock){...-}-{2:2}, at: rds_wake_sk_sleep+0x34/0xc8 [ 62.443501][ C0] [ 62.443501][ C0] but task is already holding lock: [ 62.445243][ C0] ffff0000da5ce100 (&rm->m_rs_lock){..-.}-{2:2}, at: rds_send_remove_from_sock+0x134/0x78c [ 62.447748][ C0] [ 62.447748][ C0] which lock already depends on the new lock. [ 62.447748][ C0] [ 62.450263][ C0] [ 62.450263][ C0] the existing dependency chain (in reverse order) is: [ 62.452428][ C0] [ 62.452428][ C0] -> #1 (&rm->m_rs_lock){..-.}-{2:2}: [ 62.454275][ C0] _raw_spin_lock_irqsave+0x68/0x88 [ 62.455700][ C0] rds_message_put+0x130/0xb30 [ 62.456987][ C0] rds_loop_inc_free+0x20/0x30 [ 62.458342][ C0] rds_clear_recv_queue+0x288/0x384 [ 62.459794][ C0] rds_release+0xbc/0x2d0 [ 62.461005][ C0] sock_close+0xb8/0x1fc [ 62.462184][ C0] __fput+0x30c/0x7bc [ 62.463271][ C0] ____fput+0x20/0x30 [ 62.464341][ C0] task_work_run+0x230/0x2e0 [ 62.465570][ C0] do_notify_resume+0x2180/0x3c90 [ 62.466908][ C0] el0_svc+0x9c/0x168 [ 62.468076][ C0] el0t_64_sync_handler+0x84/0xf0 [ 62.469429][ C0] el0t_64_sync+0x190/0x194 [ 62.470640][ C0] [ 62.470640][ C0] -> #0 (&rs->rs_recv_lock){...-}-{2:2}: [ 62.472566][ C0] __lock_acquire+0x3338/0x764c [ 62.473892][ C0] lock_acquire+0x238/0x718 [ 62.475152][ C0] _raw_read_lock_irqsave+0x78/0x98 [ 62.476643][ C0] rds_wake_sk_sleep+0x34/0xc8 [ 62.477940][ C0] rds_send_remove_from_sock+0x1a4/0x78c [ 62.479517][ C0] rds_send_path_drop_acked+0x390/0x3f0 [ 62.480955][ C0] rds_tcp_write_space+0x1a8/0x594 [ 62.482376][ C0] tcp_check_space+0x150/0x888 [ 62.483714][ C0] tcp_rcv_established+0xdc0/0x1ee0 [ 62.485128][ C0] tcp_v4_do_rcv+0x388/0xd8c [ 62.486417][ C0] tcp_v4_rcv+0x1f90/0x28dc [ 62.487668][ C0] ip_protocol_deliver_rcu+0x504/0xc8c [ 62.489149][ C0] ip_local_deliver_finish+0x23c/0x46c [ 62.490665][ C0] NF_HOOK+0x328/0x3d4 [ 62.491817][ C0] ip_local_deliver+0x11c/0x190 [ 62.493188][ C0] ip_rcv_finish+0x224/0x250 [ 62.494466][ C0] NF_HOOK+0x328/0x3d4 [ 62.495601][ C0] ip_rcv+0x78/0x98 [ 62.496679][ C0] __netif_receive_skb+0x18c/0x400 [ 62.498051][ C0] process_backlog+0x3c0/0x70c [ 62.499360][ C0] __napi_poll+0xb4/0x648 [ 62.500489][ C0] net_rx_action+0x5a8/0xc8c [ 62.501702][ C0] __do_softirq+0x2dc/0xd60 [ 62.502947][ C0] ____do_softirq+0x14/0x20 [ 62.504261][ C0] call_on_irq_stack+0x24/0x4c [ 62.505583][ C0] do_softirq_own_stack+0x20/0x2c [ 62.507000][ C0] do_softirq+0x11c/0x1d8 [ 62.508254][ C0] __local_bh_enable_ip+0x2b0/0x4ac [ 62.509716][ C0] local_bh_enable+0x28/0x1b0 [ 62.511043][ C0] ip_finish_output2+0xd2c/0x11a0 [ 62.512355][ C0] __ip_finish_output+0x1b0/0x458 [ 62.513746][ C0] ip_finish_output+0x40/0x268 [ 62.515077][ C0] ip_output+0x330/0x49c [ 62.516221][ C0] __ip_queue_xmit+0xe8c/0x1a00 [ 62.517559][ C0] ip_queue_xmit+0x5c/0x78 [ 62.518788][ C0] __tcp_transmit_skb+0x1938/0x31fc [ 62.520251][ C0] __tcp_send_ack+0x248/0x51c [ 62.521503][ C0] tcp_send_ack+0x4c/0x64 [ 62.522706][ C0] __tcp_ack_snd_check+0x3b4/0x8d8 [ 62.524164][ C0] tcp_rcv_established+0xdfc/0x1ee0 [ 62.525595][ C0] tcp_v4_do_rcv+0x388/0xd8c [ 62.526846][ C0] __release_sock+0x1a8/0x408 [ 62.528247][ C0] release_sock+0x68/0x1cc [ 62.529469][ C0] rds_tcp_tune+0x438/0x630 [ 62.530735][ C0] rds_tcp_accept_one+0x2c0/0x990 [ 62.532113][ C0] rds_tcp_accept_worker+0x44/0xb4 [ 62.533506][ C0] process_one_work+0x788/0x12d4 [ 62.534844][ C0] worker_thread+0x8e0/0xfe8 [ 62.536111][ C0] kthread+0x24c/0x2d4 [ 62.537257][ C0] ret_from_fork+0x10/0x20 [ 62.538435][ C0] [ 62.538435][ C0] other info that might help us debug this: [ 62.538435][ C0] [ 62.540937][ C0] Possible unsafe locking scenario: [ 62.540937][ C0] [ 62.542792][ C0] CPU0 CPU1 [ 62.544147][ C0] ---- ---- [ 62.545441][ C0] lock(&rm->m_rs_lock); [ 62.546494][ C0] lock(&rs->rs_recv_lock); [ 62.548256][ C0] lock(&rm->m_rs_lock); [ 62.549878][ C0] lock(&rs->rs_recv_lock); [ 62.551015][ C0] [ 62.551015][ C0] *** DEADLOCK *** [ 62.551015][ C0] [ 62.553000][ C0] 9 locks held by kworker/u4:5/1708: [ 62.554322][ C0] #0: ffff0000d3449938 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_one_work+0x664/0x12d4 [ 62.556861][ C0] #1: ffff800023017c20 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x12d4 [ 62.559955][ C0] #2: ffff0000d3482770 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: rds_tcp_tune+0xc4/0x630 [ 62.562326][ C0] #3: ffff800015e4ef00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 62.564698][ C0] #4: ffff800015e4ef00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 62.567069][ C0] #5: ffff800015e4ef00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 62.569463][ C0] #6: ffff0000ce319930 (k-slock-AF_INET/1){+.-.}-{2:2}, at: tcp_v4_rcv+0x1f4c/0x28dc [ 62.571890][ C0] #7: ffff0000ce319c38 (k-clock-AF_INET){++.-}-{2:2}, at: rds_tcp_write_space+0x38/0x594 [ 62.574420][ C0] #8: ffff0000da5ce100 (&rm->m_rs_lock){..-.}-{2:2}, at: rds_send_remove_from_sock+0x134/0x78c [ 62.576991][ C0] [ 62.576991][ C0] stack backtrace: [ 62.578543][ C0] CPU: 0 PID: 1708 Comm: kworker/u4:5 Not tainted 6.3.0-rc6-syzkaller-g7920df21c1b7 #0 [ 62.580964][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 62.583492][ C0] Workqueue: krdsd rds_tcp_accept_worker [ 62.584897][ C0] Call trace: [ 62.585740][ C0] dump_backtrace+0x1b8/0x1e4 [ 62.586894][ C0] show_stack+0x2c/0x44 [ 62.587928][ C0] dump_stack_lvl+0xd0/0x124 [ 62.589030][ C0] dump_stack+0x1c/0x28 [ 62.590041][ C0] print_circular_bug+0x150/0x1b8 [ 62.591320][ C0] check_noncircular+0x2cc/0x378 [ 62.592576][ C0] __lock_acquire+0x3338/0x764c [ 62.593760][ C0] lock_acquire+0x238/0x718 [ 62.594919][ C0] _raw_read_lock_irqsave+0x78/0x98 [ 62.596255][ C0] rds_wake_sk_sleep+0x34/0xc8 [ 62.597448][ C0] rds_send_remove_from_sock+0x1a4/0x78c [ 62.598819][ C0] rds_send_path_drop_acked+0x390/0x3f0 [ 62.600190][ C0] rds_tcp_write_space+0x1a8/0x594 [ 62.601426][ C0] tcp_check_space+0x150/0x888 [ 62.602590][ C0] tcp_rcv_established+0xdc0/0x1ee0 [ 62.603857][ C0] tcp_v4_do_rcv+0x388/0xd8c [ 62.604990][ C0] tcp_v4_rcv+0x1f90/0x28dc [ 62.606095][ C0] ip_protocol_deliver_rcu+0x504/0xc8c [ 62.607521][ C0] ip_local_deliver_finish+0x23c/0x46c [ 62.608851][ C0] NF_HOOK+0x328/0x3d4 [ 62.609812][ C0] ip_local_deliver+0x11c/0x190 [ 62.611041][ C0] ip_rcv_finish+0x224/0x250 [ 62.612093][ C0] NF_HOOK+0x328/0x3d4 [ 62.613071][ C0] ip_rcv+0x78/0x98 [ 62.613989][ C0] __netif_receive_skb+0x18c/0x400 [ 62.615250][ C0] process_backlog+0x3c0/0x70c [ 62.616403][ C0] __napi_poll+0xb4/0x648 [ 62.617465][ C0] net_rx_action+0x5a8/0xc8c [ 62.618607][ C0] __do_softirq+0x2dc/0xd60 [ 62.619706][ C0] ____do_softirq+0x14/0x20 [ 62.620903][ C0] call_on_irq_stack+0x24/0x4c [ 62.622069][ C0] do_softirq_own_stack+0x20/0x2c [ 62.623336][ C0] do_softirq+0x11c/0x1d8 [ 62.624420][ C0] __local_bh_enable_ip+0x2b0/0x4ac [ 62.625681][ C0] local_bh_enable+0x28/0x1b0 [ 62.626793][ C0] ip_finish_output2+0xd2c/0x11a0 [ 62.628022][ C0] __ip_finish_output+0x1b0/0x458 [ 62.629284][ C0] ip_finish_output+0x40/0x268 [ 62.630488][ C0] ip_output+0x330/0x49c [ 62.631514][ C0] __ip_queue_xmit+0xe8c/0x1a00 [ 62.632761][ C0] ip_queue_xmit+0x5c/0x78 [ 62.633855][ C0] __tcp_transmit_skb+0x1938/0x31fc [ 62.635187][ C0] __tcp_send_ack+0x248/0x51c [ 62.636401][ C0] tcp_send_ack+0x4c/0x64 [ 62.637503][ C0] __tcp_ack_snd_check+0x3b4/0x8d8 [ 62.638767][ C0] tcp_rcv_established+0xdfc/0x1ee0 [ 62.640041][ C0] tcp_v4_do_rcv+0x388/0xd8c [ 62.641199][ C0] __release_sock+0x1a8/0x408 [ 62.642418][ C0] release_sock+0x68/0x1cc [ 62.643504][ C0] rds_tcp_tune+0x438/0x630 [ 62.644629][ C0] rds_tcp_accept_one+0x2c0/0x990 [ 62.645917][ C0] rds_tcp_accept_worker+0x44/0xb4 [ 62.647242][ C0] process_one_work+0x788/0x12d4 [ 62.648491][ C0] worker_thread+0x8e0/0xfe8 [ 62.649589][ C0] kthread+0x24c/0x2d4 [ 62.650602][ C0] ret_from_fork+0x10/0x20 [ 62.660571][ T5999] Bluetooth: hci0: command 0x0409 tx timeout [ 64.478391][ T2092] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.480013][ T2092] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.728265][ T5999] Bluetooth: hci0: command 0x041b tx timeout 1970/01/01 00:01:05 executed programs: 111 [ 66.808317][ T5999] Bluetooth: hci0: command 0x040f tx timeout [ 68.878111][ T5475] Bluetooth: hci0: command 0x0419 tx timeout [ 69.598804][ T22] cfg80211: failed to load regulatory.db 1970/01/01 00:01:10 executed programs: 306