Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. 1970/01/01 00:00:45 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:46 parsed 1 programs [ 48.853190][ T4023] cgroup: Unknown subsys name 'net' [ 49.145195][ T4023] cgroup: Unknown subsys name 'rlimit' [ 49.534703][ T4023] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 58.464045][ T4033] chnl_net:caif_netlink_parms(): no params data found [ 58.504350][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.505862][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.507922][ T4033] device bridge_slave_0 entered promiscuous mode [ 58.512108][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.513574][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.515679][ T4033] device bridge_slave_1 entered promiscuous mode [ 58.530900][ T4033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.535643][ T4033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.551095][ T4033] team0: Port device team_slave_0 added [ 58.554198][ T4033] team0: Port device team_slave_1 added [ 58.568686][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.570231][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.575337][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.579707][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.581292][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.586341][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.641856][ T4033] device hsr_slave_0 entered promiscuous mode [ 58.679702][ T4033] device hsr_slave_1 entered promiscuous mode [ 58.796831][ T4033] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.832410][ T4033] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.872791][ T4033] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.941544][ T4033] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.997244][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.998855][ T4033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.000915][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.002387][ T4033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.045083][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.054565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.058365][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.061334][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.063841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 59.072247][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.077557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.080354][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.081921][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.086926][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.089000][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.090645][ T436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.106199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.108592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.116621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.123491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.128462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.132938][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.202346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.203975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.211228][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.224018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.236675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.239545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.241682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.245756][ T4033] device veth0_vlan entered promiscuous mode [ 59.253675][ T4033] device veth1_vlan entered promiscuous mode [ 59.267700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.271500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.273842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.278302][ T4033] device veth0_macvtap entered promiscuous mode [ 59.283310][ T4033] device veth1_macvtap entered promiscuous mode [ 59.293946][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.295750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.300690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.306232][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.308201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.313092][ T4033] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.314927][ T4033] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.316759][ T4033] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.318453][ T4033] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.680193][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.744492][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.747705][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.758242][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.767963][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.770926][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.773396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.636577][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.776201][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.858096][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.246415][ T148] device hsr_slave_0 left promiscuous mode [ 66.272881][ T148] device hsr_slave_1 left promiscuous mode [ 66.371329][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.372892][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.376646][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.378242][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.381185][ T148] device bridge_slave_1 left promiscuous mode [ 66.383200][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.432680][ T148] device bridge_slave_0 left promiscuous mode [ 66.434076][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.549895][ T148] device veth1_macvtap left promiscuous mode [ 66.551436][ T148] device veth0_macvtap left promiscuous mode [ 66.552958][ T148] device veth1_vlan left promiscuous mode [ 66.554350][ T148] device veth0_vlan left promiscuous mode [ 66.758807][ T148] team0 (unregistering): Port device team_slave_1 removed [ 66.767056][ T148] team0 (unregistering): Port device team_slave_0 removed [ 66.775074][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.819972][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.938898][ T148] bond0 (unregistering): Released all slaves 1970/01/01 00:01:07 executed programs: 0 [ 67.277715][ T4164] chnl_net:caif_netlink_parms(): no params data found [ 67.325830][ T4164] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.327405][ T4164] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.329740][ T4164] device bridge_slave_0 entered promiscuous mode [ 67.332896][ T4164] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.334426][ T4164] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.336550][ T4164] device bridge_slave_1 entered promiscuous mode [ 67.352878][ T4164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.356910][ T4164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.377121][ T4164] team0: Port device team_slave_0 added [ 67.380687][ T4164] team0: Port device team_slave_1 added [ 67.395847][ T4164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.397334][ T4164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.403254][ T4164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.407481][ T4164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.408877][ T4164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.414859][ T4164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.481476][ T4164] device hsr_slave_0 entered promiscuous mode [ 67.530798][ T4164] device hsr_slave_1 entered promiscuous mode [ 68.277512][ T4164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.331551][ T4164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.381426][ T4164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.433458][ T4164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.572332][ T4164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.582321][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.584723][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.589002][ T4164] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.612079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.614501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.616637][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.618172][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.629815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.634863][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.637357][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.641221][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.642826][ T410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.646617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.672012][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.674672][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.677410][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.686991][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.692824][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.702141][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.705783][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.711645][ T4164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.714542][ T4164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.730048][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.732240][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.734651][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.895903][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.897667][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.914459][ T4164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.941360][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.943866][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.965901][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.968115][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.972973][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.978903][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.991237][ T4164] device veth0_vlan entered promiscuous mode [ 68.997208][ T4164] device veth1_vlan entered promiscuous mode [ 69.033076][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.035642][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.037862][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.044506][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.060138][ T4164] device veth0_macvtap entered promiscuous mode [ 69.064326][ T4164] device veth1_macvtap entered promiscuous mode [ 69.085456][ T4164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.087138][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.090557][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.102226][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.104581][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.109260][ T4164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.113165][ T4164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.115091][ T4164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.116859][ T4164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.118707][ T4164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.124500][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.126882][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.186535][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.188371][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.191712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.209049][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.211174][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.214048][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.258175][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 69.427035][ T4270] [ 69.427680][ T4270] ====================================================== [ 69.429141][ T4270] WARNING: possible circular locking dependency detected [ 69.430615][ T4270] 5.15.170-syzkaller #0 Not tainted [ 69.431770][ T4270] ------------------------------------------------------ [ 69.433313][ T4270] syz.0.15/4270 is trying to acquire lock: [ 69.434528][ T4270] ffff0000c12b0c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 69.437035][ T4270] [ 69.437035][ T4270] but task is already holding lock: [ 69.438664][ T4270] ffff800016e76f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 69.440747][ T4270] [ 69.440747][ T4270] which lock already depends on the new lock. [ 69.440747][ T4270] [ 69.442968][ T4270] [ 69.442968][ T4270] the existing dependency chain (in reverse order) is: [ 69.445083][ T4270] [ 69.445083][ T4270] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 69.446805][ T4270] __mutex_lock_common+0x194/0x2154 [ 69.447906][ T4270] mutex_lock_nested+0xa4/0xf8 [ 69.449086][ T4270] rfkill_register+0x44/0x7a4 [ 69.450181][ T4270] hci_register_dev+0x3e0/0x880 [ 69.451407][ T4270] vhci_create_device+0x2c4/0x568 [ 69.452658][ T4270] vhci_write+0x318/0x3b8 [ 69.453709][ T4270] vfs_write+0x884/0xb44 [ 69.454684][ T4270] ksys_write+0x15c/0x26c [ 69.455700][ T4270] __arm64_sys_write+0x7c/0x90 [ 69.456821][ T4270] invoke_syscall+0x98/0x2b8 [ 69.458057][ T4270] el0_svc_common+0x138/0x258 [ 69.459152][ T4270] do_el0_svc+0x58/0x14c [ 69.460159][ T4270] el0_svc+0x7c/0x1f0 [ 69.461108][ T4270] el0t_64_sync_handler+0x84/0xe4 [ 69.462286][ T4270] el0t_64_sync+0x1a0/0x1a4 [ 69.463278][ T4270] [ 69.463278][ T4270] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 69.464935][ T4270] __mutex_lock_common+0x194/0x2154 [ 69.466159][ T4270] mutex_lock_nested+0xa4/0xf8 [ 69.467239][ T4270] vhci_send_frame+0x8c/0x10c [ 69.468360][ T4270] hci_send_frame+0x194/0x2f0 [ 69.469419][ T4270] hci_tx_work+0x9ac/0x16cc [ 69.470489][ T4270] process_one_work+0x790/0x11b8 [ 69.471614][ T4270] worker_thread+0x910/0x1034 [ 69.472847][ T4270] kthread+0x37c/0x45c [ 69.473762][ T4270] ret_from_fork+0x10/0x20 [ 69.474784][ T4270] [ 69.474784][ T4270] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 69.476764][ T4270] __flush_work+0xf8/0x1c0 [ 69.477757][ T4270] flush_work+0x24/0x38 [ 69.478744][ T4270] hci_dev_do_close+0x16c/0x1060 [ 69.479950][ T4270] hci_unregister_dev+0x248/0x4d4 [ 69.481120][ T4270] vhci_release+0x74/0xc4 [ 69.482152][ T4270] __fput+0x1c4/0x800 [ 69.483139][ T4270] ____fput+0x20/0x30 [ 69.484205][ T4270] task_work_run+0x130/0x1e4 [ 69.485347][ T4270] do_exit+0x670/0x20bc [ 69.486310][ T4270] do_group_exit+0x110/0x268 [ 69.487414][ T4270] get_signal+0x634/0x1550 [ 69.488385][ T4270] do_notify_resume+0x3d0/0x32b8 [ 69.489597][ T4270] el0_svc+0xfc/0x1f0 [ 69.490591][ T4270] el0t_64_sync_handler+0x84/0xe4 [ 69.491904][ T4270] el0t_64_sync+0x1a0/0x1a4 [ 69.493039][ T4270] [ 69.493039][ T4270] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 69.494916][ T4270] __mutex_lock_common+0x194/0x2154 [ 69.496265][ T4270] mutex_lock_nested+0xa4/0xf8 [ 69.497340][ T4270] bg_scan_update+0x9c/0x470 [ 69.498421][ T4270] process_one_work+0x790/0x11b8 [ 69.499656][ T4270] worker_thread+0x910/0x1034 [ 69.500824][ T4270] kthread+0x37c/0x45c [ 69.501793][ T4270] ret_from_fork+0x10/0x20 [ 69.502854][ T4270] [ 69.502854][ T4270] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 69.504844][ T4270] __lock_acquire+0x32d4/0x7638 [ 69.506125][ T4270] lock_acquire+0x240/0x77c [ 69.507134][ T4270] __flush_work+0xf8/0x1c0 [ 69.508198][ T4270] __cancel_work_timer+0x3ec/0x548 [ 69.509382][ T4270] cancel_work_sync+0x24/0x38 [ 69.510479][ T4270] hci_request_cancel_all+0xcc/0x2d0 [ 69.511747][ T4270] hci_dev_do_close+0x54/0x1060 [ 69.512951][ T4270] hci_rfkill_set_block+0xdc/0x1d0 [ 69.514086][ T4270] rfkill_set_block+0x18c/0x37c [ 69.515151][ T4270] rfkill_fop_write+0x594/0x750 [ 69.516376][ T4270] do_iter_write+0x33c/0x66c [ 69.517677][ T4270] do_writev+0x220/0x3ec [ 69.518668][ T4270] __arm64_sys_writev+0x80/0x94 [ 69.519814][ T4270] invoke_syscall+0x98/0x2b8 [ 69.520922][ T4270] el0_svc_common+0x138/0x258 [ 69.522038][ T4270] do_el0_svc+0x58/0x14c [ 69.523087][ T4270] el0_svc+0x7c/0x1f0 [ 69.524038][ T4270] el0t_64_sync_handler+0x84/0xe4 [ 69.525182][ T4270] el0t_64_sync+0x1a0/0x1a4 [ 69.526301][ T4270] [ 69.526301][ T4270] other info that might help us debug this: [ 69.526301][ T4270] [ 69.528525][ T4270] Chain exists of: [ 69.528525][ T4270] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 69.528525][ T4270] [ 69.531744][ T4270] Possible unsafe locking scenario: [ 69.531744][ T4270] [ 69.533308][ T4270] CPU0 CPU1 [ 69.534374][ T4270] ---- ---- [ 69.535505][ T4270] lock(rfkill_global_mutex); [ 69.536516][ T4270] lock(&data->open_mutex); [ 69.538004][ T4270] lock(rfkill_global_mutex); [ 69.539466][ T4270] lock((work_completion)(&hdev->bg_scan_update)); [ 69.540828][ T4270] [ 69.540828][ T4270] *** DEADLOCK *** [ 69.540828][ T4270] [ 69.542635][ T4270] 1 lock held by syz.0.15/4270: [ 69.543611][ T4270] #0: ffff800016e76f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 69.546180][ T4270] [ 69.546180][ T4270] stack backtrace: [ 69.547489][ T4270] CPU: 0 PID: 4270 Comm: syz.0.15 Not tainted 5.15.170-syzkaller #0 [ 69.549227][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.551278][ T4270] Call trace: [ 69.551969][ T4270] dump_backtrace+0x0/0x530 [ 69.552861][ T4270] show_stack+0x2c/0x3c [ 69.553739][ T4270] dump_stack_lvl+0x108/0x170 [ 69.554661][ T4270] dump_stack+0x1c/0x58 [ 69.555542][ T4270] print_circular_bug+0x150/0x1b8 [ 69.556553][ T4270] check_noncircular+0x2cc/0x378 [ 69.557598][ T4270] __lock_acquire+0x32d4/0x7638 [ 69.558647][ T4270] lock_acquire+0x240/0x77c [ 69.559583][ T4270] __flush_work+0xf8/0x1c0 [ 69.560614][ T4270] __cancel_work_timer+0x3ec/0x548 [ 69.561662][ T4270] cancel_work_sync+0x24/0x38 [ 69.562668][ T4270] hci_request_cancel_all+0xcc/0x2d0 [ 69.563794][ T4270] hci_dev_do_close+0x54/0x1060 [ 69.564815][ T4270] hci_rfkill_set_block+0xdc/0x1d0 [ 69.565896][ T4270] rfkill_set_block+0x18c/0x37c [ 69.566990][ T4270] rfkill_fop_write+0x594/0x750 [ 69.568071][ T4270] do_iter_write+0x33c/0x66c [ 69.569068][ T4270] do_writev+0x220/0x3ec [ 69.570069][ T4270] __arm64_sys_writev+0x80/0x94 [ 69.571113][ T4270] invoke_syscall+0x98/0x2b8 [ 69.572100][ T4270] el0_svc_common+0x138/0x258 [ 69.573092][ T4270] do_el0_svc+0x58/0x14c [ 69.574032][ T4270] el0_svc+0x7c/0x1f0 [ 69.574886][ T4270] el0t_64_sync_handler+0x84/0xe4 [ 69.576008][ T4270] el0t_64_sync+0x1a0/0x1a4 [ 69.625310][ T148] ODEBUG: Out of memory. ODEBUG disabled [ 69.639855][ T1961] cfg80211: failed to load regulatory.db [ 69.641417][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.642898][ T2057] ieee802154 phy1 wpan1: encryption failed: -22