[ 127.654083][ T1215] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.087538][ T1215] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.094069][ T1215] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.415487][ T4942] Bluetooth: hci0: command 0x0406 tx timeout [ 250.526764][ T1215] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.533425][ T1215] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.969112][ T1215] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.975466][ T1215] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.406898][ T1215] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.413565][ T1215] ieee802154 phy1 wpan1: encryption failed: -22 [ 429.858918][ T943] hsr_slave_0: left promiscuous mode [ 429.864606][ T943] hsr_slave_1: left promiscuous mode [ 429.871090][ T943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.878707][ T943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.887632][ T943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.895100][ T943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.903931][ T943] bridge_slave_1: left allmulticast mode [ 429.910100][ T943] bridge_slave_1: left promiscuous mode [ 429.916490][ T943] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.924347][ T943] bridge_slave_0: left allmulticast mode [ 429.930284][ T943] bridge_slave_0: left promiscuous mode [ 429.936230][ T943] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.946620][ T943] veth1_macvtap: left promiscuous mode [ 429.952569][ T943] veth0_macvtap: left promiscuous mode [ 429.958350][ T943] veth1_vlan: left promiscuous mode [ 429.963709][ T943] veth0_vlan: left promiscuous mode [ 430.064449][ T943] team0 (unregistering): Port device team_slave_1 removed [ 430.077352][ T943] team0 (unregistering): Port device team_slave_0 removed [ 430.088369][ T943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.100683][ T943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.148877][ T943] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. [ 431.838648][ T6541] cgroup: Unknown subsys name 'net' [ 431.849174][ T6541] cgroup: Unknown subsys name 'rlimit' [ 431.907400][ T6542] chnl_net:caif_netlink_parms(): no params data found [ 431.945141][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.952420][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.959876][ T6542] bridge_slave_0: entered allmulticast mode [ 431.966483][ T6542] bridge_slave_0: entered promiscuous mode [ 431.974001][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.981767][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.989298][ T6542] bridge_slave_1: entered allmulticast mode [ 431.996295][ T6542] bridge_slave_1: entered promiscuous mode [ 432.014124][ T6542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.025053][ T6542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.049130][ T6542] team0: Port device team_slave_0 added [ 432.056902][ T6542] team0: Port device team_slave_1 added [ 432.072954][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.080095][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.106664][ T6542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.119776][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.126939][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.153432][ T6542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.180602][ T6542] hsr_slave_0: entered promiscuous mode [ 432.188072][ T6542] hsr_slave_1: entered promiscuous mode [ 432.249521][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.256995][ T6542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.264627][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.271825][ T6542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.304661][ T6542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.315536][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.323933][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.334334][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.342842][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 432.354330][ T6542] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.366001][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.374461][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.381912][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.389903][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 432.398748][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.405867][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.421039][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 432.430422][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 432.441056][ T6383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 432.452269][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 432.463683][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 432.476741][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 432.491087][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 432.499098][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 432.509672][ T6542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.673103][ T6542] veth0_vlan: entered promiscuous mode [ 432.680927][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 432.690659][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 432.699166][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 432.706980][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 432.718174][ T6542] veth1_vlan: entered promiscuous mode [ 432.733013][ T6542] veth0_macvtap: entered promiscuous mode [ 432.740293][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 432.749683][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 432.758153][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 432.767269][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 432.777858][ T6542] veth1_macvtap: entered promiscuous mode [ 432.792614][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.800396][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 432.812795][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.820793][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 434.856645][ T1215] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.862919][ T1215] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.286984][ T1215] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.293759][ T1215] ieee802154 phy1 wpan1: encryption failed: -22 [ 555.632237][ T1011] [ 555.634759][ T1011] ====================================================== [ 555.641919][ T1011] WARNING: possible circular locking dependency detected [ 555.649838][ T1011] 6.4.0-rc5-syzkaller #0 Not tainted [ 555.655607][ T1011] ------------------------------------------------------ [ 555.662596][ T1011] kworker/u4:5/1011 is trying to acquire lock: [ 555.668973][ T1011] ffff88802a28b630 (&rs->rs_recv_lock){...-}-{2:2}, at: rds_wake_sk_sleep+0x1a/0xc0 [ 555.678682][ T1011] [ 555.678682][ T1011] but task is already holding lock: [ 555.686210][ T1011] ffff888020ffd100 (&rm->m_rs_lock){..-.}-{2:2}, at: rds_send_remove_from_sock+0x1e7/0x9a0 [ 555.696332][ T1011] [ 555.696332][ T1011] which lock already depends on the new lock. [ 555.696332][ T1011] [ 555.707767][ T1011] [ 555.707767][ T1011] the existing dependency chain (in reverse order) is: [ 555.717024][ T1011] [ 555.717024][ T1011] -> #1 (&rm->m_rs_lock){..-.}-{2:2}: [ 555.725149][ T1011] _raw_spin_lock_irqsave+0x39/0x50 [ 555.731530][ T1011] rds_message_put+0x16d/0xab0 [ 555.737064][ T1011] rds_clear_recv_queue+0x1c5/0x350 [ 555.743036][ T1011] rds_release+0xca/0x350 [ 555.747948][ T1011] __sock_release+0xbb/0x280 [ 555.753917][ T1011] sock_close+0xf/0x20 [ 555.758504][ T1011] __fput+0x1fa/0x9a0 [ 555.763109][ T1011] task_work_run+0x12b/0x220 [ 555.768212][ T1011] exit_to_user_mode_prepare+0x210/0x240 [ 555.774395][ T1011] syscall_exit_to_user_mode+0x19/0x50 [ 555.780361][ T1011] do_syscall_64+0x42/0xb0 [ 555.785551][ T1011] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 555.792026][ T1011] [ 555.792026][ T1011] -> #0 (&rs->rs_recv_lock){...-}-{2:2}: [ 555.799803][ T1011] __lock_acquire+0x2fcd/0x5f30 [ 555.805336][ T1011] lock_acquire+0x1ad/0x520 [ 555.810523][ T1011] _raw_read_lock_irqsave+0x45/0x90 [ 555.816286][ T1011] rds_wake_sk_sleep+0x1a/0xc0 [ 555.821806][ T1011] rds_send_remove_from_sock+0x256/0x9a0 [ 555.828014][ T1011] rds_send_path_drop_acked+0x276/0x360 [ 555.834166][ T1011] rds_tcp_write_space+0x196/0x5c0 [ 555.840157][ T1011] tcp_check_space+0xde/0x730 [ 555.845526][ T1011] tcp_rcv_established+0x75f/0x2040 [ 555.851748][ T1011] tcp_v4_do_rcv+0x52e/0x7f0 [ 555.856864][ T1011] __release_sock+0x113/0x360 [ 555.862165][ T1011] release_sock+0x4a/0x170 [ 555.867071][ T1011] rds_send_xmit+0x87e/0x2370 [ 555.872242][ T1011] rds_send_worker+0x77/0x270 [ 555.877411][ T1011] process_one_work+0x86e/0x1410 [ 555.882837][ T1011] worker_thread+0x5ab/0xef0 [ 555.887924][ T1011] kthread+0x2e6/0x3c0 [ 555.892479][ T1011] ret_from_fork+0x1f/0x30 [ 555.897409][ T1011] [ 555.897409][ T1011] other info that might help us debug this: [ 555.897409][ T1011] [ 555.907693][ T1011] Possible unsafe locking scenario: [ 555.907693][ T1011] [ 555.915371][ T1011] CPU0 CPU1 [ 555.920706][ T1011] ---- ---- [ 555.926039][ T1011] lock(&rm->m_rs_lock); [ 555.930613][ T1011] lock(&rs->rs_recv_lock); [ 555.939594][ T1011] lock(&rm->m_rs_lock); [ 555.946410][ T1011] rlock(&rs->rs_recv_lock); [ 555.951146][ T1011] [ 555.951146][ T1011] *** DEADLOCK *** [ 555.951146][ T1011] [ 555.959621][ T1011] 5 locks held by kworker/u4:5/1011: [ 555.964958][ T1011] #0: ffff88814a21a138 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_one_work+0x793/0x1410 [ 555.975704][ T1011] #1: ffffc90004db7dc0 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_one_work+0x7c0/0x1410 [ 555.988110][ T1011] #2: ffff888076192db0 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sock_set_cork+0xe/0x70 [ 555.998137][ T1011] #3: ffff888076193038 (k-clock-AF_INET){++.-}-{2:2}, at: rds_tcp_write_space+0x20/0x5c0 [ 556.008022][ T1011] #4: ffff888020ffd100 (&rm->m_rs_lock){..-.}-{2:2}, at: rds_send_remove_from_sock+0x1e7/0x9a0 [ 556.018780][ T1011] [ 556.018780][ T1011] stack backtrace: [ 556.024901][ T1011] CPU: 1 PID: 1011 Comm: kworker/u4:5 Not tainted 6.4.0-rc5-syzkaller #0 [ 556.033286][ T1011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 556.043660][ T1011] Workqueue: krdsd rds_send_worker [ 556.049357][ T1011] Call Trace: [ 556.052801][ T1011] [ 556.055796][ T1011] dump_stack_lvl+0x60/0xa0 [ 556.060389][ T1011] check_noncircular+0x25f/0x2e0 [ 556.065327][ T1011] ? register_lock_class+0xbe/0x1120 [ 556.070682][ T1011] ? print_circular_bug+0x730/0x730 [ 556.075853][ T1011] ? register_lock_class+0xbe/0x1120 [ 556.081103][ T1011] ? is_dynamic_key.part.0+0x190/0x190 [ 556.086619][ T1011] __lock_acquire+0x2fcd/0x5f30 [ 556.091538][ T1011] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 556.097579][ T1011] ? find_held_lock+0x2d/0x110 [ 556.102748][ T1011] ? debug_check_no_obj_freed+0x20c/0x420 [ 556.108476][ T1011] lock_acquire+0x1ad/0x520 [ 556.113212][ T1011] ? rds_wake_sk_sleep+0x1a/0xc0 [ 556.118466][ T1011] ? lock_sync+0x180/0x180 [ 556.122933][ T1011] ? lock_sync+0x180/0x180 [ 556.127498][ T1011] ? do_raw_spin_lock+0x120/0x2a0 [ 556.132593][ T1011] ? spin_bug+0x1c0/0x1c0 [ 556.137113][ T1011] _raw_read_lock_irqsave+0x45/0x90 [ 556.142649][ T1011] ? rds_wake_sk_sleep+0x1a/0xc0 [ 556.147729][ T1011] rds_wake_sk_sleep+0x1a/0xc0 [ 556.152765][ T1011] rds_send_remove_from_sock+0x256/0x9a0 [ 556.158821][ T1011] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 556.164960][ T1011] rds_send_path_drop_acked+0x276/0x360 [ 556.170567][ T1011] ? rds_tcp_recv_exit+0x10/0x10 [ 556.175642][ T1011] ? rds_send_remove_from_sock+0x9a0/0x9a0 [ 556.181497][ T1011] ? sk_stream_wait_close+0x380/0x380 [ 556.186977][ T1011] rds_tcp_write_space+0x196/0x5c0 [ 556.192161][ T1011] tcp_check_space+0xde/0x730 [ 556.197324][ T1011] tcp_rcv_established+0x75f/0x2040 [ 556.202936][ T1011] ? __release_sock+0xc2/0x360 [ 556.207954][ T1011] ? tcp_check_space+0x730/0x730 [ 556.213043][ T1011] tcp_v4_do_rcv+0x52e/0x7f0 [ 556.217709][ T1011] __release_sock+0x113/0x360 [ 556.222809][ T1011] release_sock+0x4a/0x170 [ 556.227546][ T1011] rds_send_xmit+0x87e/0x2370 [ 556.232208][ T1011] ? lock_sync+0x180/0x180 [ 556.236785][ T1011] ? rds_send_mprds_hash+0x3e0/0x3e0 [ 556.242060][ T1011] rds_send_worker+0x77/0x270 [ 556.246906][ T1011] process_one_work+0x86e/0x1410 [ 556.251933][ T1011] ? lock_sync+0x180/0x180 [ 556.256428][ T1011] ? pwq_dec_nr_in_flight+0x230/0x230 [ 556.262131][ T1011] ? spin_bug+0x1c0/0x1c0 [ 556.266439][ T1011] worker_thread+0x5ab/0xef0 [ 556.270999][ T1011] ? process_one_work+0x1410/0x1410 [ 556.276336][ T1011] kthread+0x2e6/0x3c0 [ 556.280374][ T1011] ? kthread_complete_and_exit+0x20/0x20 [ 556.286085][ T1011] ret_from_fork+0x1f/0x30 [ 556.290645][ T1011] [ 557.726783][ T1215] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.733441][ T1215] ieee802154 phy1 wpan1: encryption failed: -22