Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. 1970/01/01 00:01:00 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:00 parsed 1 programs 1970/01/01 00:01:00 executed programs: 0 [ 60.636910][ T6103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.639822][ T6103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.642159][ T6103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.644381][ T6103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.646308][ T6103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.647960][ T6103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.708170][ T6451] chnl_net:caif_netlink_parms(): no params data found [ 60.732984][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.734639][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.736357][ T6451] bridge_slave_0: entered allmulticast mode [ 60.738103][ T6451] bridge_slave_0: entered promiscuous mode [ 60.740639][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.742453][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.744104][ T6451] bridge_slave_1: entered allmulticast mode [ 60.745876][ T6451] bridge_slave_1: entered promiscuous mode [ 60.756730][ T6451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.760619][ T6451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.771707][ T6451] team0: Port device team_slave_0 added [ 60.774509][ T6451] team0: Port device team_slave_1 added [ 60.784518][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.785976][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.791358][ T6451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.794895][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.796319][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.801885][ T6451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.873173][ T6451] hsr_slave_0: entered promiscuous mode [ 60.911614][ T6451] hsr_slave_1: entered promiscuous mode [ 61.738150][ T6451] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.773427][ T6451] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.818503][ T6451] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.852683][ T6451] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.936002][ T6451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.945904][ T6451] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.950152][ T6113] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.951771][ T6113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.961958][ T6113] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.963503][ T6113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.976025][ T6451] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.978232][ T6451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.046235][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.063952][ T6451] veth0_vlan: entered promiscuous mode [ 62.067895][ T6451] veth1_vlan: entered promiscuous mode [ 62.082153][ T6451] veth0_macvtap: entered promiscuous mode [ 62.085673][ T6451] veth1_macvtap: entered promiscuous mode [ 62.093359][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.098117][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.101037][ T6451] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.104997][ T6451] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.107057][ T6451] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.109035][ T6451] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.145816][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.147589][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.153228][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.154986][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.728204][ T6103] Bluetooth: hci0: command 0x0409 tx timeout [ 63.754668][ T12] [ 63.755280][ T12] ====================================================== [ 63.756834][ T12] WARNING: possible circular locking dependency detected [ 63.758427][ T12] 6.7.0-rc8-syzkaller-00101-g0802e17d9aca #0 Not tainted [ 63.760005][ T12] ------------------------------------------------------ [ 63.761528][ T12] kworker/u4:1/12 is trying to acquire lock: [ 63.762794][ T12] ffff0000cc5beaf0 (&rs->rs_recv_lock){....}-{2:2}, at: rds_wake_sk_sleep+0x34/0xc8 [ 63.764862][ T12] [ 63.764862][ T12] but task is already holding lock: [ 63.766477][ T12] ffff0000d0071100 (&rm->m_rs_lock){..-.}-{2:2}, at: rds_send_remove_from_sock+0x134/0x78c [ 63.768736][ T12] [ 63.768736][ T12] which lock already depends on the new lock. [ 63.768736][ T12] [ 63.771026][ T12] [ 63.771026][ T12] the existing dependency chain (in reverse order) is: [ 63.773029][ T12] [ 63.773029][ T12] -> #1 (&rm->m_rs_lock){..-.}-{2:2}: [ 63.774735][ T12] _raw_spin_lock_irqsave+0x5c/0x7c [ 63.775963][ T12] rds_message_put+0x130/0xb30 [ 63.777121][ T12] rds_loop_inc_free+0x20/0x30 [ 63.778317][ T12] rds_clear_recv_queue+0x288/0x384 [ 63.779600][ T12] rds_release+0xbc/0x2d0 [ 63.780733][ T12] sock_close+0xa4/0x1e8 [ 63.781753][ T12] __fput+0x308/0x8e4 [ 63.782789][ T12] __fput_sync+0x60/0x9c [ 63.783784][ T12] __arm64_sys_close+0x150/0x1e0 [ 63.784982][ T12] invoke_syscall+0x98/0x2b8 [ 63.786104][ T12] el0_svc_common+0x130/0x23c [ 63.787309][ T12] do_el0_svc+0x48/0x58 [ 63.788296][ T12] el0_svc+0x54/0x158 [ 63.789308][ T12] el0t_64_sync_handler+0x84/0xfc [ 63.790509][ T12] el0t_64_sync+0x190/0x194 [ 63.791658][ T12] [ 63.791658][ T12] -> #0 (&rs->rs_recv_lock){....}-{2:2}: [ 63.793423][ T12] __lock_acquire+0x3384/0x763c [ 63.794632][ T12] lock_acquire+0x23c/0x71c [ 63.795782][ T12] _raw_read_lock_irqsave+0x6c/0x8c [ 63.796997][ T12] rds_wake_sk_sleep+0x34/0xc8 [ 63.798107][ T12] rds_send_remove_from_sock+0x1a4/0x78c [ 63.799580][ T12] rds_send_path_drop_acked+0x390/0x3f0 [ 63.800960][ T12] rds_tcp_write_space+0x1a8/0x598 [ 63.802232][ T12] tcp_check_space+0x150/0x888 [ 63.803480][ T12] tcp_rcv_established+0xe5c/0x1ff0 [ 63.804634][ T12] tcp_v4_do_rcv+0x3b0/0xe08 [ 63.805678][ T12] __release_sock+0x1a8/0x408 [ 63.806884][ T12] release_sock+0x68/0x1b8 [ 63.807944][ T12] tcp_sock_set_cork+0x100/0x188 [ 63.809103][ T12] rds_tcp_xmit_path_complete+0x7c/0x8c [ 63.810496][ T12] rds_send_xmit+0x197c/0x22a8 [ 63.811669][ T12] rds_send_worker+0x84/0x36c [ 63.812765][ T12] process_one_work+0x694/0x1204 [ 63.813993][ T12] worker_thread+0x938/0xef4 [ 63.815175][ T12] kthread+0x288/0x310 [ 63.816161][ T12] ret_from_fork+0x10/0x20 [ 63.817320][ T12] [ 63.817320][ T12] other info that might help us debug this: [ 63.817320][ T12] [ 63.819653][ T12] Possible unsafe locking scenario: [ 63.819653][ T12] [ 63.821290][ T12] CPU0 CPU1 [ 63.822459][ T12] ---- ---- [ 63.823641][ T12] lock(&rm->m_rs_lock); [ 63.824549][ T12] lock(&rs->rs_recv_lock); [ 63.825995][ T12] lock(&rm->m_rs_lock); [ 63.827460][ T12] rlock(&rs->rs_recv_lock); [ 63.828505][ T12] [ 63.828505][ T12] *** DEADLOCK *** [ 63.828505][ T12] [ 63.830314][ T12] 5 locks held by kworker/u4:1/12: [ 63.831400][ T12] #0: ffff0000d2362938 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_one_work+0x560/0x1204 [ 63.833698][ T12] #1: ffff800092fb7c20 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_one_work+0x5a0/0x1204 [ 63.836516][ T12] #2: ffff0000e1b66330 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sock_set_cork+0x38/0x188 [ 63.838749][ T12] #3: ffff0000e1b665b8 (k-clock-AF_INET){++.-}-{2:2}, at: rds_tcp_write_space+0x38/0x598 [ 63.840971][ T12] #4: ffff0000d0071100 (&rm->m_rs_lock){..-.}-{2:2}, at: rds_send_remove_from_sock+0x134/0x78c [ 63.843265][ T12] [ 63.843265][ T12] stack backtrace: [ 63.844686][ T12] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted 6.7.0-rc8-syzkaller-00101-g0802e17d9aca #0 [ 63.846920][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 63.849282][ T12] Workqueue: krdsd rds_send_worker [ 63.850380][ T12] Call trace: [ 63.851073][ T12] dump_backtrace+0x1b8/0x1e4 [ 63.852062][ T12] show_stack+0x2c/0x3c [ 63.853018][ T12] dump_stack_lvl+0xd0/0x124 [ 63.853976][ T12] dump_stack+0x1c/0x28 [ 63.854912][ T12] print_circular_bug+0x150/0x1b8 [ 63.856025][ T12] check_noncircular+0x310/0x404 [ 63.857091][ T12] __lock_acquire+0x3384/0x763c [ 63.858198][ T12] lock_acquire+0x23c/0x71c [ 63.859142][ T12] _raw_read_lock_irqsave+0x6c/0x8c [ 63.860322][ T12] rds_wake_sk_sleep+0x34/0xc8 [ 63.861382][ T12] rds_send_remove_from_sock+0x1a4/0x78c [ 63.862636][ T12] rds_send_path_drop_acked+0x390/0x3f0 [ 63.863878][ T12] rds_tcp_write_space+0x1a8/0x598 [ 63.865048][ T12] tcp_check_space+0x150/0x888 [ 63.866129][ T12] tcp_rcv_established+0xe5c/0x1ff0 [ 63.867371][ T12] tcp_v4_do_rcv+0x3b0/0xe08 [ 63.868429][ T12] __release_sock+0x1a8/0x408 [ 63.869498][ T12] release_sock+0x68/0x1b8 [ 63.870407][ T12] tcp_sock_set_cork+0x100/0x188 [ 63.871531][ T12] rds_tcp_xmit_path_complete+0x7c/0x8c [ 63.872709][ T12] rds_send_xmit+0x197c/0x22a8 [ 63.873710][ T12] rds_send_worker+0x84/0x36c [ 63.874750][ T12] process_one_work+0x694/0x1204 [ 63.875733][ T12] worker_thread+0x938/0xef4 [ 63.876691][ T12] kthread+0x288/0x310 [ 63.877598][ T12] ret_from_fork+0x10/0x20 [ 64.481700][ T2219] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.483135][ T2219] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.801363][ T6103] Bluetooth: hci0: command 0x041b tx timeout 1970/01/01 00:01:05 executed programs: 123 [ 66.881308][ T6103] Bluetooth: hci0: command 0x040f tx timeout [ 68.963833][ T6103] Bluetooth: hci0: command 0x0419 tx timeout [ 69.601879][ T23] cfg80211: failed to load regulatory.db 1970/01/01 00:01:10 executed programs: 479