[ 439.724014][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.732537][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.746105][ T9] device bridge_slave_1 left promiscuous mode [ 439.752387][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.765009][ T9] device bridge_slave_0 left promiscuous mode [ 439.771608][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.783150][ T9] device veth1_macvtap left promiscuous mode [ 439.789300][ T9] device veth0_macvtap left promiscuous mode [ 439.795658][ T9] device veth1_vlan left promiscuous mode [ 439.802820][ T9] device veth0_vlan left promiscuous mode [ 439.927563][ T9] team0 (unregistering): Port device team_slave_1 removed [ 439.940862][ T9] team0 (unregistering): Port device team_slave_0 removed [ 439.952332][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.967331][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.015275][ T9] bond0 (unregistering): Released all slaves [ 440.148335][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.154755][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '10.128.1.10' (ECDSA) to the list of known hosts. [ 445.256842][ T5353] cgroup: Unknown subsys name 'net' [ 445.264971][ T5353] cgroup: Unknown subsys name 'rlimit' [ 445.332623][ T5354] chnl_net:caif_netlink_parms(): no params data found [ 445.372669][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.380220][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.389157][ T5354] device bridge_slave_0 entered promiscuous mode [ 445.397949][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.405255][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.414187][ T5354] device bridge_slave_1 entered promiscuous mode [ 445.434171][ T5354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.446155][ T5354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.470191][ T5354] team0: Port device team_slave_0 added [ 445.477803][ T5354] team0: Port device team_slave_1 added [ 445.496599][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.503581][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.529870][ T5354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.542228][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.549447][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.575617][ T5354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.602755][ T5354] device hsr_slave_0 entered promiscuous mode [ 445.609794][ T5354] device hsr_slave_1 entered promiscuous mode [ 445.675024][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.682152][ T5354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.689624][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.696836][ T5354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.738605][ T5354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.753220][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.761269][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.770461][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.778771][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 445.791739][ T5354] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.802581][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.811382][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.818490][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.835805][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.844374][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.851504][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.864671][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 445.874095][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 445.886924][ T5346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 445.898810][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 445.912137][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 445.922423][ T5354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 445.940461][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 445.949026][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 445.961395][ T5354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.316297][ T5346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 446.330308][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 446.339433][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 446.349585][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 446.358702][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.368319][ T5354] device veth0_vlan entered promiscuous mode [ 446.380096][ T5354] device veth1_vlan entered promiscuous mode [ 446.401689][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 446.409868][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 446.419202][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 446.428126][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.439727][ T5354] device veth0_macvtap entered promiscuous mode [ 446.449014][ T5354] device veth1_macvtap entered promiscuous mode [ 446.463796][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.471271][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 446.479899][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 446.488397][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 446.497451][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.510007][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.518174][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 446.527067][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 498.314652][ T6031] [ 498.317018][ T6031] ====================================================== [ 498.324018][ T6031] WARNING: possible circular locking dependency detected [ 498.331021][ T6031] 6.1.0-rc7-syzkaller-00200-gc2bf05db6c78 #0 Not tainted [ 498.338194][ T6031] ------------------------------------------------------ [ 498.345187][ T6031] syz-executor983/6031 is trying to acquire lock: [ 498.351577][ T6031] ffff888075176af0 (&rs->rs_recv_lock){....}-{2:2}, at: rds_wake_sk_sleep+0x2a/0xd0 [ 498.361020][ T6031] [ 498.361020][ T6031] but task is already holding lock: [ 498.368366][ T6031] ffff888076810900 (&rm->m_rs_lock){....}-{2:2}, at: rds_send_remove_from_sock+0x14b/0x8c0 [ 498.378573][ T6031] [ 498.378573][ T6031] which lock already depends on the new lock. [ 498.378573][ T6031] [ 498.388968][ T6031] [ 498.388968][ T6031] the existing dependency chain (in reverse order) is: [ 498.398058][ T6031] [ 498.398058][ T6031] -> #1 (&rm->m_rs_lock){....}-{2:2}: [ 498.405953][ T6031] lock_acquire+0x1a7/0x400 [ 498.411015][ T6031] _raw_spin_lock_irqsave+0xd1/0x120 [ 498.416858][ T6031] rds_message_put+0x13c/0xab0 [ 498.422146][ T6031] rds_clear_recv_queue+0x2be/0x390 [ 498.427872][ T6031] rds_release+0xbe/0x2d0 [ 498.432713][ T6031] sock_close+0xd7/0x260 [ 498.437590][ T6031] __fput+0x3ba/0x880 [ 498.442176][ T6031] task_work_run+0x243/0x300 [ 498.447336][ T6031] exit_to_user_mode_loop+0x134/0x160 [ 498.453550][ T6031] exit_to_user_mode_prepare+0xad/0x110 [ 498.459606][ T6031] syscall_exit_to_user_mode+0x2e/0x60 [ 498.465627][ T6031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 498.472070][ T6031] [ 498.472070][ T6031] -> #0 (&rs->rs_recv_lock){....}-{2:2}: [ 498.479876][ T6031] validate_chain+0x184a/0x6470 [ 498.485263][ T6031] __lock_acquire+0x1292/0x1f60 [ 498.490626][ T6031] lock_acquire+0x1a7/0x400 [ 498.495728][ T6031] _raw_read_lock_irqsave+0xd9/0x120 [ 498.501533][ T6031] rds_wake_sk_sleep+0x2a/0xd0 [ 498.506816][ T6031] rds_send_remove_from_sock+0x1fd/0x8c0 [ 498.513311][ T6031] rds_send_path_drop_acked+0x380/0x3c0 [ 498.519668][ T6031] rds_tcp_write_space+0x192/0x520 [ 498.525598][ T6031] tcp_check_space+0x35d/0x4f0 [ 498.530918][ T6031] tcp_rcv_established+0xa72/0x1a10 [ 498.536633][ T6031] tcp_v4_do_rcv+0x479/0xac0 [ 498.541740][ T6031] __release_sock+0x1d8/0x4c0 [ 498.546944][ T6031] release_sock+0x5d/0x1c0 [ 498.551875][ T6031] rds_send_xmit+0x1e5d/0x2690 [ 498.557242][ T6031] rds_sendmsg+0x1bdf/0x2290 [ 498.562374][ T6031] __sys_sendto+0x46d/0x5f0 [ 498.568747][ T6031] __x64_sys_sendto+0xda/0xf0 [ 498.573948][ T6031] do_syscall_64+0x2b/0x70 [ 498.578987][ T6031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 498.585413][ T6031] [ 498.585413][ T6031] other info that might help us debug this: [ 498.585413][ T6031] [ 498.595723][ T6031] Possible unsafe locking scenario: [ 498.595723][ T6031] [ 498.603170][ T6031] CPU0 CPU1 [ 498.608525][ T6031] ---- ---- [ 498.613889][ T6031] lock(&rm->m_rs_lock); [ 498.618210][ T6031] lock(&rs->rs_recv_lock); [ 498.626527][ T6031] lock(&rm->m_rs_lock); [ 498.633376][ T6031] lock(&rs->rs_recv_lock); [ 498.637959][ T6031] [ 498.637959][ T6031] *** DEADLOCK *** [ 498.637959][ T6031] [ 498.646195][ T6031] 3 locks held by syz-executor983/6031: [ 498.651746][ T6031] #0: ffff88807b053d30 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sock_set_cork+0x29/0x1b0 [ 498.661775][ T6031] #1: ffff88807b053fb8 (k-clock-AF_INET){++.-}-{2:2}, at: rds_tcp_write_space+0x30/0x520 [ 498.671692][ T6031] #2: ffff888076810900 (&rm->m_rs_lock){....}-{2:2}, at: rds_send_remove_from_sock+0x14b/0x8c0 [ 498.682158][ T6031] [ 498.682158][ T6031] stack backtrace: [ 498.688050][ T6031] CPU: 0 PID: 6031 Comm: syz-executor983 Not tainted 6.1.0-rc7-syzkaller-00200-gc2bf05db6c78 #0 [ 498.698468][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 498.708520][ T6031] Call Trace: [ 498.711792][ T6031] [ 498.714728][ T6031] dump_stack_lvl+0x1e3/0x2cb [ 498.719407][ T6031] ? nf_tcp_handle_invalid+0x62e/0x62e [ 498.724863][ T6031] ? print_circular_bug+0x13e/0x1c0 [ 498.730147][ T6031] check_noncircular+0x2f9/0x3b0 [ 498.735082][ T6031] ? add_chain_block+0x850/0x850 [ 498.740015][ T6031] ? lockdep_lock+0x11d/0x2a0 [ 498.744685][ T6031] ? mark_lock+0x9a/0x350 [ 498.749011][ T6031] ? _find_first_zero_bit+0xe8/0x110 [ 498.754349][ T6031] validate_chain+0x184a/0x6470 [ 498.759224][ T6031] ? reacquire_held_locks+0x680/0x680 [ 498.764615][ T6031] ? reacquire_held_locks+0x680/0x680 [ 498.770165][ T6031] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 498.776313][ T6031] ? print_irqtrace_events+0x220/0x220 [ 498.781767][ T6031] ? do_raw_spin_unlock+0x134/0x8a0 [ 498.786965][ T6031] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 498.792860][ T6031] ? lockdep_hardirqs_on+0x95/0x140 [ 498.798064][ T6031] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 498.803954][ T6031] ? _raw_spin_unlock+0x40/0x40 [ 498.809322][ T6031] ? stack_trace_save+0x12d/0x1f0 [ 498.814512][ T6031] ? register_lock_class+0xfe/0x9b0 [ 498.819707][ T6031] ? mark_lock+0x9a/0x350 [ 498.824125][ T6031] __lock_acquire+0x1292/0x1f60 [ 498.828975][ T6031] lock_acquire+0x1a7/0x400 [ 498.833559][ T6031] ? rds_wake_sk_sleep+0x2a/0xd0 [ 498.838496][ T6031] ? read_lock_is_recursive+0x10/0x10 [ 498.843867][ T6031] ? read_lock_is_recursive+0x10/0x10 [ 498.849235][ T6031] ? do_raw_spin_lock+0x148/0x360 [ 498.854285][ T6031] ? print_irqtrace_events+0x220/0x220 [ 498.859735][ T6031] ? __rwlock_init+0x140/0x140 [ 498.864492][ T6031] _raw_read_lock_irqsave+0xd9/0x120 [ 498.869790][ T6031] ? rds_wake_sk_sleep+0x2a/0xd0 [ 498.874807][ T6031] ? _raw_read_lock+0x40/0x40 [ 498.879482][ T6031] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 498.884965][ T6031] ? _raw_spin_lock+0x40/0x40 [ 498.889649][ T6031] ? rds_send_remove_from_sock+0x72c/0x8c0 [ 498.895461][ T6031] rds_wake_sk_sleep+0x2a/0xd0 [ 498.900219][ T6031] rds_send_remove_from_sock+0x1fd/0x8c0 [ 498.905848][ T6031] ? rds_tcp_write_space+0x520/0x520 [ 498.911124][ T6031] rds_send_path_drop_acked+0x380/0x3c0 [ 498.916667][ T6031] ? rds_tcp_write_space+0x520/0x520 [ 498.921953][ T6031] ? rds_atomic_send_complete+0x3f0/0x3f0 [ 498.927690][ T6031] ? rds_tcp_write_space+0x30/0x520 [ 498.932885][ T6031] rds_tcp_write_space+0x192/0x520 [ 498.937990][ T6031] ? datagram_poll+0x420/0x420 [ 498.942828][ T6031] tcp_check_space+0x35d/0x4f0 [ 498.947592][ T6031] tcp_rcv_established+0xa72/0x1a10 [ 498.952798][ T6031] ? tcp_check_space+0x4f0/0x4f0 [ 498.957741][ T6031] tcp_v4_do_rcv+0x479/0xac0 [ 498.962412][ T6031] __release_sock+0x1d8/0x4c0 [ 498.967109][ T6031] release_sock+0x5d/0x1c0 [ 498.971517][ T6031] ? rds_tcp_xmit_path_prepare+0x90/0x90 [ 498.977147][ T6031] rds_send_xmit+0x1e5d/0x2690 [ 498.981926][ T6031] ? rds_send_path_reset+0x3e0/0x3e0 [ 498.987265][ T6031] rds_sendmsg+0x1bdf/0x2290 [ 498.991856][ T6031] ? rds_send_sndbuf_remove+0x220/0x220 [ 498.997423][ T6031] ? tomoyo_socket_bind_permission+0x360/0x360 [ 499.003818][ T6031] ? __fget_files+0x3ba/0x420 [ 499.008561][ T6031] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 499.013898][ T6031] ? security_socket_sendmsg+0x9d/0xb0 [ 499.019522][ T6031] ? rds_send_sndbuf_remove+0x220/0x220 [ 499.025065][ T6031] __sys_sendto+0x46d/0x5f0 [ 499.029573][ T6031] ? __ia32_sys_getpeername+0x80/0x80 [ 499.034953][ T6031] __x64_sys_sendto+0xda/0xf0 [ 499.039628][ T6031] do_syscall_64+0x2b/0x70 [ 499.044042][ T6031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 499.049928][ T6031] RIP: 0033:0x7f0010e30129 [ 499.054336][ T6031] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 499.074208][ T6031] RSP: 002b:00007f0010ddd308 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 499.082628][ T6031] RAX: ffffffffffffffda RBX: 00007f0010eb94c8 RCX: 00007f0010e30129 [ 499.090598][ T6031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 499.098559][ T6031] RBP: 00007f0010eb94c0 R08: 0000000000000000 R09: 0000000000000000 [ 499.106520][ T6031] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0010e865c8 [ 499.114574][ T6031] R13: 00007ffe6b3ac31f R14: 00007f0010ddd400 R15: 0000000000022000 [ 499.122552][ T6031] [ 501.587126][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.593412][ T1246] ieee802154 phy1 wpan1: encryption failed: -22