[ 132.540767][ T3235] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.925324][ T2938] Bluetooth: hci0: command 0x0406 tx timeout [ 193.972788][ T3235] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.979134][ T3235] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.418831][ T3235] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.425222][ T3235] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.854742][ T3235] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.861089][ T3235] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.293521][ T3235] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.299988][ T3235] ieee802154 phy1 wpan1: encryption failed: -22 [ 426.655677][ T3095] device hsr_slave_0 left promiscuous mode [ 426.662619][ T3095] device hsr_slave_1 left promiscuous mode [ 426.669057][ T3095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.677417][ T3095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.685995][ T3095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.693383][ T3095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.702454][ T3095] device bridge_slave_1 left promiscuous mode [ 426.708823][ T3095] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.717576][ T3095] device bridge_slave_0 left promiscuous mode [ 426.723716][ T3095] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.733764][ T3095] device veth1_macvtap left promiscuous mode [ 426.740627][ T3095] device veth0_macvtap left promiscuous mode [ 426.746790][ T3095] device veth1_vlan left promiscuous mode [ 426.752539][ T3095] device veth0_vlan left promiscuous mode [ 430.152463][ T3095] team0 (unregistering): Port device team_slave_1 removed [ 430.163779][ T3095] team0 (unregistering): Port device team_slave_0 removed [ 430.177594][ T3095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.191183][ T3095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.231508][ T3095] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.159' (ECDSA) to the list of known hosts. [ 430.922233][ T7138] IPVS: ftp: loaded support on port[0] = 21 [ 430.999199][ T7138] chnl_net:caif_netlink_parms(): no params data found [ 431.048741][ T7138] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.055964][ T7138] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.063902][ T7138] device bridge_slave_0 entered promiscuous mode [ 431.072893][ T7138] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.080116][ T7138] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.088116][ T7138] device bridge_slave_1 entered promiscuous mode [ 431.108809][ T7138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.121214][ T7138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.145392][ T7138] team0: Port device team_slave_0 added [ 431.153195][ T7138] team0: Port device team_slave_1 added [ 431.170899][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.178010][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.203935][ T7138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.216678][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.223618][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.252014][ T7138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.284141][ T7138] device hsr_slave_0 entered promiscuous mode [ 431.291520][ T7138] device hsr_slave_1 entered promiscuous mode [ 431.411539][ T7138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.425372][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 431.432958][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.446171][ T7138] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.457174][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 431.466722][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.475354][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.482504][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.505728][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 431.513677][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 431.522701][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.531314][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.538409][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.547136][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 431.557120][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 431.567132][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 431.576168][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 431.584548][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 431.593495][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 431.608206][ T7138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 431.620826][ T7138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.634112][ T3379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 431.643372][ T3379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 431.652121][ T3379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.664088][ T3379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 431.673095][ T3379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.694085][ T7138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.703105][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 431.711391][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 431.719447][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 431.865514][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.880566][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 431.893017][ T7138] device veth0_vlan entered promiscuous mode [ 431.900111][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 431.909688][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 431.922018][ T7138] device veth1_vlan entered promiscuous mode [ 431.943558][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 431.952444][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 431.961325][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 431.972615][ T7138] device veth0_macvtap entered promiscuous mode [ 431.985523][ T7138] device veth1_macvtap entered promiscuous mode [ 432.003224][ T7138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.012653][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 432.023392][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 432.033521][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 432.045399][ T7138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.066796][ T7131] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 432.075766][ T7131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 439.726656][ T3235] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.733076][ T3235] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.317698][ T8045] [ 496.320183][ T8045] ====================================================== [ 496.327184][ T8045] WARNING: possible circular locking dependency detected [ 496.334277][ T8045] 5.11.0-syzkaller #0 Not tainted [ 496.339486][ T8045] ------------------------------------------------------ [ 496.346622][ T8045] syz-executor330/8045 is trying to acquire lock: [ 496.353018][ T8045] ffff88802668a3d8 (&rs->rs_recv_lock){...-}-{2:2}, at: rds_wake_sk_sleep+0x1a/0xc0 [ 496.362479][ T8045] [ 496.362479][ T8045] but task is already holding lock: [ 496.369838][ T8045] ffff88802bd09100 (&rm->m_rs_lock){..-.}-{2:2}, at: rds_send_remove_from_sock+0x1e6/0x960 [ 496.379891][ T8045] [ 496.379891][ T8045] which lock already depends on the new lock. [ 496.379891][ T8045] [ 496.390280][ T8045] [ 496.390280][ T8045] the existing dependency chain (in reverse order) is: [ 496.399262][ T8045] [ 496.399262][ T8045] -> #1 (&rm->m_rs_lock){..-.}-{2:2}: [ 496.406774][ T8045] _raw_spin_lock_irqsave+0x39/0x50 [ 496.412551][ T8045] rds_message_put+0x16d/0xc60 [ 496.417802][ T8045] rds_clear_recv_queue+0x1c5/0x350 [ 496.423497][ T8045] rds_release+0xca/0x350 [ 496.428313][ T8045] __sock_release+0xbb/0x270 [ 496.433444][ T8045] sock_close+0xf/0x20 [ 496.438012][ T8045] __fput+0x204/0x870 [ 496.442508][ T8045] task_work_run+0xc0/0x160 [ 496.447523][ T8045] exit_to_user_mode_prepare+0x249/0x250 [ 496.453661][ T8045] syscall_exit_to_user_mode+0x19/0x60 [ 496.459612][ T8045] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.465992][ T8045] [ 496.465992][ T8045] -> #0 (&rs->rs_recv_lock){...-}-{2:2}: [ 496.473763][ T8045] __lock_acquire+0x2b3b/0x57d0 [ 496.479151][ T8045] lock_acquire+0x1a8/0x720 [ 496.484140][ T8045] _raw_read_lock_irqsave+0x45/0x90 [ 496.489825][ T8045] rds_wake_sk_sleep+0x1a/0xc0 [ 496.495075][ T8045] rds_send_remove_from_sock+0x250/0x960 [ 496.501364][ T8045] rds_send_path_drop_acked+0x276/0x360 [ 496.507391][ T8045] rds_tcp_write_space+0x196/0x5a0 [ 496.512984][ T8045] tcp_check_space+0x353/0x5f0 [ 496.518309][ T8045] tcp_rcv_established+0x776/0x1f50 [ 496.523992][ T8045] tcp_v4_do_rcv+0x4f0/0x750 [ 496.529076][ T8045] __release_sock+0x113/0x350 [ 496.534250][ T8045] release_sock+0x4a/0x170 [ 496.539152][ T8045] rds_send_xmit+0x1010/0x2350 [ 496.544486][ T8045] rds_sendmsg+0x1d84/0x28d0 [ 496.549560][ T8045] sock_sendmsg+0xab/0xe0 [ 496.554374][ T8045] __sys_sendto+0x1a4/0x270 [ 496.559358][ T8045] __x64_sys_sendto+0xd8/0x1b0 [ 496.564605][ T8045] do_syscall_64+0x2d/0x40 [ 496.569504][ T8045] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.575883][ T8045] [ 496.575883][ T8045] other info that might help us debug this: [ 496.575883][ T8045] [ 496.586085][ T8045] Possible unsafe locking scenario: [ 496.586085][ T8045] [ 496.593513][ T8045] CPU0 CPU1 [ 496.598889][ T8045] ---- ---- [ 496.604314][ T8045] lock(&rm->m_rs_lock); [ 496.608871][ T8045] lock(&rs->rs_recv_lock); [ 496.616207][ T8045] lock(&rm->m_rs_lock); [ 496.623121][ T8045] lock(&rs->rs_recv_lock); [ 496.627678][ T8045] [ 496.627678][ T8045] *** DEADLOCK *** [ 496.627678][ T8045] [ 496.635789][ T8045] 3 locks held by syz-executor330/8045: [ 496.641523][ T8045] #0: ffff888027a70ce0 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sock_set_cork+0xe/0x70 [ 496.651237][ T8045] #1: ffff888027a70f88 (k-clock-AF_INET){++.-}-{2:2}, at: rds_tcp_write_space+0x20/0x5a0 [ 496.661128][ T8045] #2: ffff88802bd09100 (&rm->m_rs_lock){..-.}-{2:2}, at: rds_send_remove_from_sock+0x1e6/0x960 [ 496.671515][ T8045] [ 496.671515][ T8045] stack backtrace: [ 496.677414][ T8045] CPU: 1 PID: 8045 Comm: syz-executor330 Not tainted 5.11.0-syzkaller #0 [ 496.685788][ T8045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.695811][ T8045] Call Trace: [ 496.699066][ T8045] dump_stack+0x9a/0xcc [ 496.703309][ T8045] check_noncircular+0x25f/0x2e0 [ 496.708232][ T8045] ? print_circular_bug+0x480/0x480 [ 496.713413][ T8045] ? lockdep_lock+0xc6/0x200 [ 496.717971][ T8045] ? call_rcu_zapped+0xb0/0xb0 [ 496.722699][ T8045] ? is_dynamic_key+0x1a0/0x1a0 [ 496.727529][ T8045] __lock_acquire+0x2b3b/0x57d0 [ 496.732361][ T8045] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 496.738411][ T8045] ? mark_lock+0xee/0x1720 [ 496.742797][ T8045] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 496.748755][ T8045] lock_acquire+0x1a8/0x720 [ 496.753405][ T8045] ? rds_wake_sk_sleep+0x1a/0xc0 [ 496.758316][ T8045] ? lock_release+0x710/0x710 [ 496.762970][ T8045] ? lock_release+0x710/0x710 [ 496.767618][ T8045] ? do_raw_spin_lock+0x120/0x2b0 [ 496.772675][ T8045] ? rwlock_bug.part.0+0x90/0x90 [ 496.777673][ T8045] _raw_read_lock_irqsave+0x45/0x90 [ 496.782955][ T8045] ? rds_wake_sk_sleep+0x1a/0xc0 [ 496.788002][ T8045] rds_wake_sk_sleep+0x1a/0xc0 [ 496.792746][ T8045] rds_send_remove_from_sock+0x250/0x960 [ 496.798347][ T8045] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 496.804247][ T8045] rds_send_path_drop_acked+0x276/0x360 [ 496.809785][ T8045] ? rds_tcp_recv_exit+0x10/0x10 [ 496.814703][ T8045] ? rds_send_remove_from_sock+0x960/0x960 [ 496.820478][ T8045] ? mark_held_locks+0x9f/0xe0 [ 496.825223][ T8045] ? sk_stream_wait_memory+0xd60/0xd60 [ 496.830781][ T8045] rds_tcp_write_space+0x196/0x5a0 [ 496.835882][ T8045] tcp_check_space+0x353/0x5f0 [ 496.840627][ T8045] tcp_rcv_established+0x776/0x1f50 [ 496.845906][ T8045] ? tcp_data_queue+0x4d00/0x4d00 [ 496.850907][ T8045] ? mark_held_locks+0x9f/0xe0 [ 496.855639][ T8045] tcp_v4_do_rcv+0x4f0/0x750 [ 496.860196][ T8045] __release_sock+0x113/0x350 [ 496.864839][ T8045] release_sock+0x4a/0x170 [ 496.869223][ T8045] rds_send_xmit+0x1010/0x2350 [ 496.873952][ T8045] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 496.879896][ T8045] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 496.885684][ T8045] ? lockdep_hardirqs_on+0x79/0x100 [ 496.890861][ T8045] ? rds_rdma_send_complete+0x470/0x470 [ 496.896390][ T8045] ? rds_send_queue_rm+0x4bc/0x6c0 [ 496.901495][ T8045] rds_sendmsg+0x1d84/0x28d0 [ 496.906075][ T8045] ? rds_send_drop_to+0x1380/0x1380 [ 496.911241][ T8045] ? aa_sk_perm+0x1b5/0x810 [ 496.915775][ T8045] ? aa_af_perm+0x210/0x210 [ 496.920252][ T8045] ? __fget_files+0x1ab/0x2b0 [ 496.924979][ T8045] ? rds_send_drop_to+0x1380/0x1380 [ 496.930162][ T8045] sock_sendmsg+0xab/0xe0 [ 496.934465][ T8045] __sys_sendto+0x1a4/0x270 [ 496.938940][ T8045] ? __ia32_sys_getpeername+0xa0/0xa0 [ 496.944369][ T8045] ? find_held_lock+0x2d/0x110 [ 496.949107][ T8045] ? __context_tracking_exit+0x80/0x90 [ 496.954537][ T8045] ? lock_downgrade+0x6d0/0x6d0 [ 496.959354][ T8045] __x64_sys_sendto+0xd8/0x1b0 [ 496.964094][ T8045] ? lockdep_hardirqs_on+0x79/0x100 [ 496.969255][ T8045] ? syscall_enter_from_user_mode+0x27/0x70 [ 496.975111][ T8045] do_syscall_64+0x2d/0x40 [ 496.979491][ T8045] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.985350][ T8045] RIP: 0033:0x7f3ff6cbe7d9 [ 496.989731][ T8045] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 497.009411][ T8045] RSP: 002b:00007f3ff6c6c308 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 497.017788][ T8045] RAX: ffffffffffffffda RBX: 00007f3ff6d474c8 RCX: 00007f3ff6cbe7d9 [ 497.025731][ T8045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 497.033668][ T8045] RBP: 00007f3ff6d474c0 R08: 0000000000000000 R09: 0000000000000000 [ 497.041887][ T8045] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3ff6d14494 [ 497.049825][ T8045] R13: 00007ffe84ee5f8f R14: 00007f3ff6c6c400 R15: 0000000000022000 [ 501.169209][ T3235] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.175542][ T3235] ieee802154 phy1 wpan1: encryption failed: -22