[ 53.967955][ T24] device veth1_vlan left promiscuous mode [ 53.975607][ T24] device veth0_vlan left promiscuous mode [ 57.108878][ T24] team0 (unregistering): Port device team_slave_1 removed [ 57.120146][ T24] team0 (unregistering): Port device team_slave_0 removed [ 57.132949][ T24] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.145552][ T24] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.187214][ T24] bond0 (unregistering): Released all slaves [ 58.724972][ T5430] can: request_module (can-proto-0) failed. [ 58.742208][ T5430] can: request_module (can-proto-0) failed. [ 71.173133][ T26] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.15.216' (ECDSA) to the list of known hosts. 2023/01/03 02:28:08 ignoring optional flag "sandboxArg"="0" 2023/01/03 02:28:08 parsed 1 programs 2023/01/03 02:28:08 executed programs: 0 [ 77.825929][ T5897] IPVS: ftp: loaded support on port[0] = 21 [ 77.893352][ T5897] chnl_net:caif_netlink_parms(): no params data found [ 77.923255][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.931709][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.939469][ T5897] device bridge_slave_0 entered promiscuous mode [ 77.947676][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.955168][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.963637][ T5897] device bridge_slave_1 entered promiscuous mode [ 77.979731][ T5897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.990742][ T5897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.010040][ T5897] team0: Port device team_slave_0 added [ 78.016935][ T5897] team0: Port device team_slave_1 added [ 78.030434][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.037379][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.063271][ T5897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.075104][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.082245][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.108561][ T5897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.132717][ T5897] device hsr_slave_0 entered promiscuous mode [ 78.139371][ T5897] device hsr_slave_1 entered promiscuous mode [ 79.778958][ T5897] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.788532][ T5897] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.798840][ T5897] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.809085][ T5897] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.869023][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.885926][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.895186][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.901242][ T2941] Bluetooth: hci0: command 0x0409 tx timeout [ 79.906228][ T5897] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.919193][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.929990][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.938745][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.945901][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.965550][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.975105][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.984351][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.993538][ T4759] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.000755][ T4759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.009664][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.018367][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.037941][ T5897] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.049749][ T5897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.063232][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.073756][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.082630][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.095271][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.104655][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.114741][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.124010][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.134122][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.146195][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.155743][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.253781][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.261820][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.273135][ T5897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.295143][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.305686][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.328767][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.338490][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.349885][ T5897] device veth0_vlan entered promiscuous mode [ 80.357373][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.366881][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.379238][ T5897] device veth1_vlan entered promiscuous mode [ 80.405541][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.413972][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.422818][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.431886][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.443336][ T5897] device veth0_macvtap entered promiscuous mode [ 80.454211][ T5897] device veth1_macvtap entered promiscuous mode [ 80.471914][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.479270][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.487410][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.496144][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.504844][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.517444][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.526728][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.537452][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.550209][ T5897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.560565][ T5897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.569270][ T5897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.580917][ T5897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.648074][ T210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.668213][ T210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.689663][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.691902][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.708699][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.720413][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.123837][ T24] [ 81.126196][ T24] ====================================================== [ 81.133295][ T24] WARNING: possible circular locking dependency detected [ 81.140391][ T24] 5.11.0-syzkaller #0 Not tainted [ 81.145402][ T24] ------------------------------------------------------ [ 81.152402][ T24] kworker/u4:1/24 is trying to acquire lock: [ 81.158708][ T24] ffff8880187d41d8 (&rs->rs_recv_lock){....}-{2:2}, at: rds_wake_sk_sleep+0x1a/0xc0 [ 81.168171][ T24] [ 81.168171][ T24] but task is already holding lock: [ 81.175864][ T24] ffff888014cdc100 (&rm->m_rs_lock){....}-{2:2}, at: rds_send_remove_from_sock+0x1e6/0x960 [ 81.185815][ T24] [ 81.185815][ T24] which lock already depends on the new lock. [ 81.185815][ T24] [ 81.196185][ T24] [ 81.196185][ T24] the existing dependency chain (in reverse order) is: [ 81.205267][ T24] [ 81.205267][ T24] -> #1 (&rm->m_rs_lock){....}-{2:2}: [ 81.212958][ T24] _raw_spin_lock_irqsave+0x39/0x50 [ 81.218646][ T24] rds_message_put+0x16d/0xc60 [ 81.224076][ T24] rds_clear_recv_queue+0x1c5/0x350 [ 81.229850][ T24] rds_release+0xca/0x350 [ 81.234847][ T24] __sock_release+0xbb/0x270 [ 81.240302][ T24] sock_close+0xf/0x20 [ 81.244861][ T24] __fput+0x204/0x870 [ 81.249332][ T24] task_work_run+0xc0/0x160 [ 81.254435][ T24] exit_to_user_mode_prepare+0x249/0x250 [ 81.260553][ T24] syscall_exit_to_user_mode+0x19/0x60 [ 81.266586][ T24] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 81.273057][ T24] [ 81.273057][ T24] -> #0 (&rs->rs_recv_lock){....}-{2:2}: [ 81.280829][ T24] __lock_acquire+0x2b2a/0x5500 [ 81.286256][ T24] lock_acquire+0x1a8/0x720 [ 81.291245][ T24] _raw_read_lock_irqsave+0x45/0x90 [ 81.297019][ T24] rds_wake_sk_sleep+0x1a/0xc0 [ 81.302273][ T24] rds_send_remove_from_sock+0x250/0x960 [ 81.308436][ T24] rds_send_path_drop_acked+0x276/0x360 [ 81.314469][ T24] rds_tcp_write_space+0x196/0x5a0 [ 81.320069][ T24] tcp_check_space+0x353/0x5f0 [ 81.325424][ T24] tcp_rcv_established+0x776/0x1f50 [ 81.331204][ T24] tcp_v4_do_rcv+0x4f0/0x750 [ 81.336383][ T24] __release_sock+0x113/0x350 [ 81.341639][ T24] release_sock+0x4a/0x170 [ 81.346543][ T24] rds_send_xmit+0x1010/0x2350 [ 81.351801][ T24] rds_send_worker+0x77/0x270 [ 81.357038][ T24] process_one_work+0x84c/0x13b0 [ 81.363121][ T24] worker_thread+0x598/0xf80 [ 81.368218][ T24] kthread+0x36f/0x450 [ 81.372873][ T24] ret_from_fork+0x1f/0x30 [ 81.377796][ T24] [ 81.377796][ T24] other info that might help us debug this: [ 81.377796][ T24] [ 81.388003][ T24] Possible unsafe locking scenario: [ 81.388003][ T24] [ 81.395603][ T24] CPU0 CPU1 [ 81.401125][ T24] ---- ---- [ 81.406826][ T24] lock(&rm->m_rs_lock); [ 81.411485][ T24] lock(&rs->rs_recv_lock); [ 81.418615][ T24] lock(&rm->m_rs_lock); [ 81.425627][ T24] lock(&rs->rs_recv_lock); [ 81.430194][ T24] [ 81.430194][ T24] *** DEADLOCK *** [ 81.430194][ T24] [ 81.438626][ T24] 5 locks held by kworker/u4:1/24: [ 81.443747][ T24] #0: ffff88814a5cd938 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_one_work+0x771/0x13b0 [ 81.454332][ T24] #1: ffffc90000defdb0 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0x13b0 [ 81.466554][ T24] #2: ffff88801a35c7a0 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sock_set_cork+0xe/0x70 [ 81.476517][ T24] #3: ffff88801a35ca48 (k-clock-AF_INET){++.-}-{2:2}, at: rds_tcp_write_space+0x20/0x5a0 [ 81.486411][ T24] #4: ffff888014cdc100 (&rm->m_rs_lock){....}-{2:2}, at: rds_send_remove_from_sock+0x1e6/0x960 [ 81.496809][ T24] [ 81.496809][ T24] stack backtrace: [ 81.502682][ T24] CPU: 0 PID: 24 Comm: kworker/u4:1 Not tainted 5.11.0-syzkaller #0 [ 81.510712][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 81.520737][ T24] Workqueue: krdsd rds_send_worker [ 81.525827][ T24] Call Trace: [ 81.529084][ T24] dump_stack+0x9a/0xcc [ 81.533212][ T24] check_noncircular+0x25f/0x2e0 [ 81.538121][ T24] ? print_circular_bug+0x480/0x480 [ 81.543287][ T24] ? lockdep_lock+0xc6/0x200 [ 81.547946][ T24] ? call_rcu_zapped+0xb0/0xb0 [ 81.552682][ T24] ? is_dynamic_key+0x1a0/0x1a0 [ 81.557589][ T24] ? kfree+0xdb/0x3b0 [ 81.561539][ T24] __lock_acquire+0x2b2a/0x5500 [ 81.566454][ T24] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 81.572401][ T24] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 81.578495][ T24] lock_acquire+0x1a8/0x720 [ 81.582980][ T24] ? rds_wake_sk_sleep+0x1a/0xc0 [ 81.587891][ T24] ? lock_release+0x710/0x710 [ 81.592536][ T24] ? lock_release+0x710/0x710 [ 81.597269][ T24] ? do_raw_spin_lock+0x120/0x2b0 [ 81.602271][ T24] ? rwlock_bug.part.0+0x90/0x90 [ 81.607176][ T24] ? slab_free_freelist_hook+0x5d/0x150 [ 81.612690][ T24] _raw_read_lock_irqsave+0x45/0x90 [ 81.617879][ T24] ? rds_wake_sk_sleep+0x1a/0xc0 [ 81.622783][ T24] rds_wake_sk_sleep+0x1a/0xc0 [ 81.627517][ T24] rds_send_remove_from_sock+0x250/0x960 [ 81.633135][ T24] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 81.638959][ T24] rds_send_path_drop_acked+0x276/0x360 [ 81.644499][ T24] ? rds_tcp_recv_exit+0x10/0x10 [ 81.649436][ T24] ? rds_send_remove_from_sock+0x960/0x960 [ 81.655376][ T24] ? mark_held_locks+0x9f/0xe0 [ 81.660123][ T24] ? sk_stream_wait_memory+0xd60/0xd60 [ 81.665552][ T24] rds_tcp_write_space+0x196/0x5a0 [ 81.670636][ T24] tcp_check_space+0x353/0x5f0 [ 81.675460][ T24] tcp_rcv_established+0x776/0x1f50 [ 81.680637][ T24] ? tcp_data_queue+0x4d00/0x4d00 [ 81.685657][ T24] ? mark_held_locks+0x9f/0xe0 [ 81.690412][ T24] tcp_v4_do_rcv+0x4f0/0x750 [ 81.694990][ T24] __release_sock+0x113/0x350 [ 81.699645][ T24] release_sock+0x4a/0x170 [ 81.704210][ T24] rds_send_xmit+0x1010/0x2350 [ 81.708947][ T24] ? lock_release+0x710/0x710 [ 81.713684][ T24] ? rds_rdma_send_complete+0x470/0x470 [ 81.719198][ T24] rds_send_worker+0x77/0x270 [ 81.723936][ T24] process_one_work+0x84c/0x13b0 [ 81.728851][ T24] ? lock_release+0x710/0x710 [ 81.733495][ T24] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 81.738836][ T24] ? rwlock_bug.part.0+0x90/0x90 [ 81.743740][ T24] ? _raw_spin_lock_irq+0x41/0x50 [ 81.748748][ T24] worker_thread+0x598/0xf80 [ 81.753347][ T24] ? process_one_work+0x13b0/0x13b0 [ 81.758538][ T24] kthread+0x36f/0x450 [ 81.762591][ T24] ? _raw_spin_unlock_irq+0x1f/0x40 [ 81.767845][ T24] ? __kthread_bind_mask+0x90/0x90 [ 81.773012][ T24] ret_from_fork+0x1f/0x30 [ 81.970747][ T2941] Bluetooth: hci0: command 0x041b tx timeout 2023/01/03 02:28:13 executed programs: 40 [ 84.061044][ T2941] Bluetooth: hci0: command 0x040f tx timeout [ 86.140810][ T5] Bluetooth: hci0: command 0x0419 tx timeout 2023/01/03 02:28:18 executed programs: 221