[ 52.136779][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.150909][ T12] veth1_macvtap: left promiscuous mode [ 52.158393][ T12] veth0_macvtap: left promiscuous mode [ 52.166294][ T12] veth1_vlan: left promiscuous mode [ 52.172083][ T12] veth0_vlan: left promiscuous mode [ 52.300146][ T12] team0 (unregistering): Port device team_slave_1 removed [ 52.312120][ T12] team0 (unregistering): Port device team_slave_0 removed [ 52.323123][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.340067][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.382648][ T12] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts. 2023/06/13 03:28:19 ignoring optional flag "sandboxArg"="0" 2023/06/13 03:28:19 parsed 1 programs 2023/06/13 03:28:19 executed programs: 0 [ 67.053590][ T4992] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.061736][ T4992] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.070152][ T4992] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.077742][ T4992] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.085003][ T4992] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.165074][ T5339] chnl_net:caif_netlink_parms(): no params data found [ 67.203308][ T5339] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.210637][ T5339] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.218061][ T5339] bridge_slave_0: entered allmulticast mode [ 67.224891][ T5339] bridge_slave_0: entered promiscuous mode [ 67.232431][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.240310][ T5339] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.248173][ T5339] bridge_slave_1: entered allmulticast mode [ 67.254750][ T5339] bridge_slave_1: entered promiscuous mode [ 67.273520][ T5339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.285257][ T5339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.308162][ T5339] team0: Port device team_slave_0 added [ 67.316329][ T5339] team0: Port device team_slave_1 added [ 67.333396][ T5339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.340412][ T5339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.366936][ T5339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.380681][ T5339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.388137][ T5339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.414746][ T5339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.441847][ T5339] hsr_slave_0: entered promiscuous mode [ 67.448463][ T5339] hsr_slave_1: entered promiscuous mode [ 67.967730][ T5339] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.984836][ T5339] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.995469][ T5339] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.009027][ T5339] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.034307][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.041805][ T5339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.049342][ T5339] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.057177][ T5339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.110686][ T5339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.124972][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.134572][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.149914][ T5339] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.163985][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.172196][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.198082][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.205362][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.221048][ T5339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.362985][ T5339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.401877][ T5339] veth0_vlan: entered promiscuous mode [ 68.414394][ T5339] veth1_vlan: entered promiscuous mode [ 68.443208][ T5339] veth0_macvtap: entered promiscuous mode [ 68.456493][ T5339] veth1_macvtap: entered promiscuous mode [ 68.475436][ T5339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.492238][ T5339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.504974][ T5339] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.518093][ T5339] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.529305][ T5339] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.538890][ T5339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.604116][ T5002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.616207][ T5002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.640677][ T897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.651331][ T897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.138609][ T4398] Bluetooth: hci0: command 0x0409 tx timeout [ 70.779782][ T5607] [ 70.782256][ T5607] ====================================================== [ 70.789697][ T5607] WARNING: possible circular locking dependency detected [ 70.796880][ T5607] 6.4.0-rc5-syzkaller #0 Not tainted [ 70.802413][ T5607] ------------------------------------------------------ [ 70.809726][ T5607] syz-executor.0/5607 is trying to acquire lock: [ 70.816314][ T5607] ffff8880793d2530 (&rs->rs_recv_lock){....}-{2:2}, at: rds_wake_sk_sleep+0x1e/0xc0 [ 70.826388][ T5607] [ 70.826388][ T5607] but task is already holding lock: [ 70.834096][ T5607] ffff88807d8a5900 (&rm->m_rs_lock){....}-{2:2}, at: rds_send_remove_from_sock+0x1e7/0x9a0 [ 70.844330][ T5607] [ 70.844330][ T5607] which lock already depends on the new lock. [ 70.844330][ T5607] [ 70.855249][ T5607] [ 70.855249][ T5607] the existing dependency chain (in reverse order) is: [ 70.865559][ T5607] [ 70.865559][ T5607] -> #1 (&rm->m_rs_lock){....}-{2:2}: [ 70.873566][ T5607] _raw_spin_lock_irqsave+0x3d/0x60 [ 70.884582][ T5607] rds_message_put+0x171/0xab0 [ 70.889948][ T5607] rds_clear_recv_queue+0x1c9/0x350 [ 70.895750][ T5607] rds_release+0xce/0x360 [ 70.900660][ T5607] __sock_release+0xbb/0x280 [ 70.905925][ T5607] sock_close+0x13/0x20 [ 70.910636][ T5607] __fput+0x1fa/0x9a0 [ 70.915220][ T5607] task_work_run+0x12f/0x220 [ 70.920576][ T5607] exit_to_user_mode_prepare+0x210/0x240 [ 70.927603][ T5607] syscall_exit_to_user_mode+0x1d/0x50 [ 70.933916][ T5607] do_syscall_64+0x46/0xb0 [ 70.938837][ T5607] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.945416][ T5607] [ 70.945416][ T5607] -> #0 (&rs->rs_recv_lock){....}-{2:2}: [ 70.953849][ T5607] __lock_acquire+0x2fcd/0x5f30 [ 70.959902][ T5607] lock_acquire+0x1b1/0x520 [ 70.965084][ T5607] _raw_read_lock_irqsave+0x49/0x90 [ 70.970873][ T5607] rds_wake_sk_sleep+0x1e/0xc0 [ 70.976146][ T5607] rds_send_remove_from_sock+0x256/0x9a0 [ 70.982906][ T5607] rds_send_path_drop_acked+0x27a/0x360 [ 70.989125][ T5607] rds_tcp_write_space+0x19a/0x5c0 [ 70.995016][ T5607] tcp_check_space+0xe2/0x730 [ 71.000675][ T5607] tcp_rcv_established+0x763/0x2040 [ 71.006749][ T5607] tcp_v4_do_rcv+0x532/0x800 [ 71.011951][ T5607] __release_sock+0x117/0x360 [ 71.017397][ T5607] release_sock+0x4e/0x170 [ 71.022510][ T5607] rds_send_xmit+0x882/0x2380 [ 71.027812][ T5607] rds_sendmsg+0x1da3/0x29e0 [ 71.032896][ T5607] sock_sendmsg+0xc0/0x150 [ 71.037819][ T5607] __sys_sendto+0x1c5/0x290 [ 71.042926][ T5607] __x64_sys_sendto+0xdc/0x1b0 [ 71.048666][ T5607] do_syscall_64+0x39/0xb0 [ 71.053827][ T5607] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.060324][ T5607] [ 71.060324][ T5607] other info that might help us debug this: [ 71.060324][ T5607] [ 71.070559][ T5607] Possible unsafe locking scenario: [ 71.070559][ T5607] [ 71.078070][ T5607] CPU0 CPU1 [ 71.083409][ T5607] ---- ---- [ 71.088886][ T5607] lock(&rm->m_rs_lock); [ 71.093185][ T5607] lock(&rs->rs_recv_lock); [ 71.100356][ T5607] lock(&rm->m_rs_lock); [ 71.107175][ T5607] rlock(&rs->rs_recv_lock); [ 71.111821][ T5607] [ 71.111821][ T5607] *** DEADLOCK *** [ 71.111821][ T5607] [ 71.120119][ T5607] 3 locks held by syz-executor.0/5607: [ 71.125682][ T5607] #0: ffff8880258ad6f0 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sock_set_cork+0x12/0x70 [ 71.136462][ T5607] #1: ffff8880258ad978 (k-clock-AF_INET){++.-}-{2:2}, at: rds_tcp_write_space+0x24/0x5c0 [ 71.146548][ T5607] #2: ffff88807d8a5900 (&rm->m_rs_lock){....}-{2:2}, at: rds_send_remove_from_sock+0x1e7/0x9a0 [ 71.157793][ T5607] [ 71.157793][ T5607] stack backtrace: [ 71.164202][ T5607] CPU: 0 PID: 5607 Comm: syz-executor.0 Not tainted 6.4.0-rc5-syzkaller #0 [ 71.173740][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 71.185031][ T5607] Call Trace: [ 71.188650][ T5607] [ 71.191557][ T5607] dump_stack_lvl+0x64/0xb0 [ 71.196220][ T5607] check_noncircular+0x25f/0x2e0 [ 71.201143][ T5607] ? register_lock_class+0xbe/0x1120 [ 71.206603][ T5607] ? print_circular_bug+0x730/0x730 [ 71.212242][ T5607] ? register_lock_class+0xbe/0x1120 [ 71.217950][ T5607] ? mark_lock.part.0+0xee/0x1970 [ 71.222961][ T5607] ? is_dynamic_key.part.0+0x190/0x190 [ 71.229199][ T5607] ? stack_trace_save+0x90/0xc0 [ 71.234147][ T5607] ? __stack_depot_save+0x39/0x510 [ 71.239686][ T5607] __lock_acquire+0x2fcd/0x5f30 [ 71.244872][ T5607] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 71.251724][ T5607] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 71.258052][ T5607] lock_acquire+0x1b1/0x520 [ 71.262615][ T5607] ? rds_wake_sk_sleep+0x1e/0xc0 [ 71.267903][ T5607] ? lock_sync+0x190/0x190 [ 71.272321][ T5607] ? lock_sync+0x190/0x190 [ 71.276809][ T5607] ? do_raw_spin_lock+0x124/0x2b0 [ 71.282156][ T5607] ? spin_bug+0x1c0/0x1c0 [ 71.286643][ T5607] _raw_read_lock_irqsave+0x49/0x90 [ 71.292353][ T5607] ? rds_wake_sk_sleep+0x1e/0xc0 [ 71.297466][ T5607] rds_wake_sk_sleep+0x1e/0xc0 [ 71.302312][ T5607] rds_send_remove_from_sock+0x256/0x9a0 [ 71.308451][ T5607] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 71.314595][ T5607] rds_send_path_drop_acked+0x27a/0x360 [ 71.320398][ T5607] ? rds_tcp_recv_exit+0x10/0x10 [ 71.325426][ T5607] ? rds_send_remove_from_sock+0x9a0/0x9a0 [ 71.331846][ T5607] ? sk_stream_wait_close+0x390/0x390 [ 71.337294][ T5607] rds_tcp_write_space+0x19a/0x5c0 [ 71.342678][ T5607] tcp_check_space+0xe2/0x730 [ 71.347880][ T5607] tcp_rcv_established+0x763/0x2040 [ 71.353062][ T5607] ? __release_sock+0xc6/0x360 [ 71.357980][ T5607] ? tcp_check_space+0x730/0x730 [ 71.363010][ T5607] tcp_v4_do_rcv+0x532/0x800 [ 71.367669][ T5607] __release_sock+0x117/0x360 [ 71.372338][ T5607] release_sock+0x4e/0x170 [ 71.377363][ T5607] rds_send_xmit+0x882/0x2380 [ 71.382234][ T5607] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 71.388394][ T5607] ? lockdep_hardirqs_on+0x7d/0x100 [ 71.394128][ T5607] ? rds_send_mprds_hash+0x3e0/0x3e0 [ 71.399491][ T5607] ? rds_send_queue_rm+0x4bc/0x6c0 [ 71.404762][ T5607] rds_sendmsg+0x1da3/0x29e0 [ 71.409431][ T5607] ? rds_send_drop_to+0x1380/0x1380 [ 71.414779][ T5607] ? aa_sk_perm+0x1bc/0x850 [ 71.419363][ T5607] ? aa_af_perm+0x220/0x220 [ 71.424095][ T5607] ? __fget_files+0x1bf/0x3c0 [ 71.428931][ T5607] ? rds_send_drop_to+0x1380/0x1380 [ 71.434190][ T5607] sock_sendmsg+0xc0/0x150 [ 71.438929][ T5607] __sys_sendto+0x1c5/0x290 [ 71.443937][ T5607] ? __ia32_sys_getpeername+0xb0/0xb0 [ 71.449832][ T5607] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 71.456004][ T5607] ? lock_acquire+0x1b1/0x520 [ 71.460755][ T5607] ? xfd_validate_state+0x23/0x120 [ 71.465841][ T5607] ? restore_fpregs_from_fpstate+0x94/0x170 [ 71.471704][ T5607] ? kernel_fpu_begin_mask+0x1d0/0x1d0 [ 71.477171][ T5607] ? lock_downgrade+0x690/0x690 [ 71.482178][ T5607] ? do_raw_spin_lock+0x124/0x2b0 [ 71.487544][ T5607] __x64_sys_sendto+0xdc/0x1b0 [ 71.492900][ T5607] ? syscall_enter_from_user_mode+0x26/0x80 [ 71.498940][ T5607] do_syscall_64+0x39/0xb0 [ 71.503762][ T5607] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.509871][ T5607] RIP: 0033:0x7f5034e8c0a9 [ 71.514353][ T5607] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.534302][ T5607] RSP: 002b:00007f5035ba2168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 71.543226][ T5607] RAX: ffffffffffffffda RBX: 00007f5034fac050 RCX: 00007f5034e8c0a9 [ 71.551365][ T5607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 71.559564][ T5607] RBP: 00007f5034ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 71.567784][ T5607] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 71.575887][ T5607] R13: 00007ffd0ae70b6f R14: 00007f5035ba2300 R15: 0000000000022000 [ 71.583953][ T5607] [ 71.589178][ T4398] Bluetooth: hci0: command 0x041b tx timeout 2023/06/13 03:28:24 executed programs: 46 [ 73.618171][ T4398] Bluetooth: hci0: command 0x040f tx timeout [ 75.696861][ T4398] Bluetooth: hci0: command 0x0419 tx timeout [ 76.507164][ T7] cfg80211: failed to load regulatory.db 2023/06/13 03:28:29 executed programs: 228