Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. 1970/01/01 00:00:46 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:46 parsed 1 programs [ 49.358291][ T4022] cgroup: Unknown subsys name 'net' [ 49.627012][ T4022] cgroup: Unknown subsys name 'rlimit' [ 49.935114][ T4022] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 58.834349][ T1743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.836513][ T1743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.839248][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.852816][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.854776][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.857236][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.524337][ T4065] chnl_net:caif_netlink_parms(): no params data found [ 59.567790][ T4065] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.569471][ T4065] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.572142][ T4065] device bridge_slave_0 entered promiscuous mode [ 59.576449][ T4065] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.578072][ T4065] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.580382][ T4065] device bridge_slave_1 entered promiscuous mode [ 59.599850][ T4065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.605444][ T4065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.623253][ T4065] team0: Port device team_slave_0 added [ 59.627729][ T4065] team0: Port device team_slave_1 added [ 59.644313][ T4065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.646214][ T4065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.658322][ T4065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.664650][ T4065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.666263][ T4065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.672646][ T4065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.753740][ T4065] device hsr_slave_0 entered promiscuous mode [ 59.802713][ T4065] device hsr_slave_1 entered promiscuous mode [ 59.936371][ T4065] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.974393][ T4065] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.034633][ T4065] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.085760][ T4065] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.192627][ T4065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.200031][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.204738][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.210674][ T4065] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.217230][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.219905][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.224348][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.226265][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.229606][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.236836][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.239219][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.243724][ T1743] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.245438][ T1743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.258750][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.263953][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.266651][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.269806][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.273358][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.277620][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.280295][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.289831][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.292864][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.299980][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.305520][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.309373][ T4065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.387805][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.389863][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.397263][ T4065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.413058][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.429917][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.435290][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.437619][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.444942][ T4065] device veth0_vlan entered promiscuous mode [ 60.452694][ T4065] device veth1_vlan entered promiscuous mode [ 60.468697][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.471453][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.475231][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.479967][ T4065] device veth0_macvtap entered promiscuous mode [ 60.486476][ T4065] device veth1_macvtap entered promiscuous mode [ 60.498550][ T4065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.500580][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.504645][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.507188][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.513253][ T4065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.517819][ T4065] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.520013][ T4065] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.522740][ T4065] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.524763][ T4065] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.528184][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.530817][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 1970/01/01 00:01:01 executed programs: 0 [ 61.522016][ T4110] chnl_net:caif_netlink_parms(): no params data found [ 61.561593][ T4110] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.563276][ T4110] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.565796][ T4110] device bridge_slave_0 entered promiscuous mode [ 61.569330][ T4110] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.574057][ T4110] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.576533][ T4110] device bridge_slave_1 entered promiscuous mode [ 61.594838][ T4110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.599107][ T4110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.616384][ T4110] team0: Port device team_slave_0 added [ 61.619559][ T4110] team0: Port device team_slave_1 added [ 61.638216][ T4110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.639869][ T4110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.646213][ T4110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.650420][ T4110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.652242][ T4110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.658379][ T4110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.715085][ T4110] device hsr_slave_0 entered promiscuous mode [ 61.741497][ T4110] device hsr_slave_1 entered promiscuous mode [ 61.791176][ T4110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.793135][ T4110] Cannot create hsr debugfs directory [ 61.890448][ T4110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.471627][ T4039] Bluetooth: hci0: command 0x0409 tx timeout [ 65.069793][ T4110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.551312][ T4039] Bluetooth: hci0: command 0x041b tx timeout [ 66.066043][ T4110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.342147][ T4110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.481720][ T4110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.533918][ T4110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.592678][ T4110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.623932][ T4110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.714091][ T4110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.721662][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.723965][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.728558][ T4110] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.734022][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.736502][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.739154][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.740666][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.745392][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.749327][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.752735][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.754998][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.756690][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.785609][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.788598][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.807183][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.810685][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.815532][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.818448][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.821383][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.823791][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.826177][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.829867][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.835406][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.860869][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.915110][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.917063][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.925456][ T4110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.941915][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.944491][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.962266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.964756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.967385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.969575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.974736][ T4110] device veth0_vlan entered promiscuous mode [ 67.001815][ T4110] device veth1_vlan entered promiscuous mode [ 67.019868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.022336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.024592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.026930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.059829][ T4110] device veth0_macvtap entered promiscuous mode [ 67.064666][ T4110] device veth1_macvtap entered promiscuous mode [ 67.077959][ T4110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.080542][ T4110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.086397][ T4110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.088130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.090406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.096378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.098865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.143456][ T4110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.145807][ T4110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.148963][ T4110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.150732][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.156554][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.164868][ T4110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.166861][ T4110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.168979][ T4110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.170920][ T4110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.278916][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.280746][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.284693][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.312881][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.314736][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.317396][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.398158][ T4122] [ 67.398755][ T4122] ====================================================== [ 67.400307][ T4122] WARNING: possible circular locking dependency detected [ 67.401946][ T4122] 5.15.173-syzkaller #0 Not tainted [ 67.403122][ T4122] ------------------------------------------------------ [ 67.404652][ T4122] syz.0.15/4122 is trying to acquire lock: [ 67.405940][ T4122] ffff0000d50b4c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 67.408506][ T4122] [ 67.408506][ T4122] but task is already holding lock: [ 67.410059][ T4122] ffff800016e77268 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 67.412292][ T4122] [ 67.412292][ T4122] which lock already depends on the new lock. [ 67.412292][ T4122] [ 67.414579][ T4122] [ 67.414579][ T4122] the existing dependency chain (in reverse order) is: [ 67.416525][ T4122] [ 67.416525][ T4122] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 67.418268][ T4122] __mutex_lock_common+0x194/0x2154 [ 67.419475][ T4122] mutex_lock_nested+0xa4/0xf8 [ 67.420613][ T4122] rfkill_register+0x44/0x7a4 [ 67.421743][ T4122] hci_register_dev+0x3e0/0x880 [ 67.422902][ T4122] vhci_create_device+0x2c4/0x568 [ 67.424049][ T4122] vhci_write+0x318/0x3b8 [ 67.425132][ T4122] vfs_write+0x884/0xb44 [ 67.426160][ T4122] ksys_write+0x15c/0x26c [ 67.427219][ T4122] __arm64_sys_write+0x7c/0x90 [ 67.428386][ T4122] invoke_syscall+0x98/0x2b8 [ 67.429481][ T4122] el0_svc_common+0x138/0x258 [ 67.430613][ T4122] do_el0_svc+0x58/0x14c [ 67.431696][ T4122] el0_svc+0x7c/0x1f0 [ 67.432683][ T4122] el0t_64_sync_handler+0x84/0xe4 [ 67.433909][ T4122] el0t_64_sync+0x1a0/0x1a4 [ 67.435023][ T4122] [ 67.435023][ T4122] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 67.436763][ T4122] __mutex_lock_common+0x194/0x2154 [ 67.438038][ T4122] mutex_lock_nested+0xa4/0xf8 [ 67.439220][ T4122] vhci_send_frame+0x8c/0x10c [ 67.440385][ T4122] hci_send_frame+0x194/0x2f0 [ 67.441509][ T4122] hci_tx_work+0x9ac/0x16cc [ 67.442687][ T4122] process_one_work+0x790/0x11b8 [ 67.443906][ T4122] worker_thread+0x910/0x1034 [ 67.445008][ T4122] kthread+0x37c/0x45c [ 67.446028][ T4122] ret_from_fork+0x10/0x20 [ 67.447137][ T4122] [ 67.447137][ T4122] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 67.449250][ T4122] __flush_work+0xf8/0x1c0 [ 67.450369][ T4122] flush_work+0x24/0x38 [ 67.451442][ T4122] hci_dev_do_close+0x16c/0x1060 [ 67.452648][ T4122] hci_unregister_dev+0x248/0x4d4 [ 67.453842][ T4122] vhci_release+0x74/0xc4 [ 67.454893][ T4122] __fput+0x1c4/0x800 [ 67.455834][ T4122] ____fput+0x20/0x30 [ 67.456848][ T4122] task_work_run+0x130/0x1e4 [ 67.458005][ T4122] do_exit+0x670/0x20bc [ 67.459182][ T4122] do_group_exit+0x110/0x268 [ 67.460362][ T4122] get_signal+0x634/0x1550 [ 67.461436][ T4122] do_notify_resume+0x3d0/0x32b8 [ 67.462682][ T4122] el0_svc+0xfc/0x1f0 [ 67.463722][ T4122] el0t_64_sync_handler+0x84/0xe4 [ 67.464922][ T4122] el0t_64_sync+0x1a0/0x1a4 [ 67.466087][ T4122] [ 67.466087][ T4122] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 67.467731][ T4122] __mutex_lock_common+0x194/0x2154 [ 67.469040][ T4122] mutex_lock_nested+0xa4/0xf8 [ 67.470155][ T4122] bg_scan_update+0x9c/0x470 [ 67.471360][ T4122] process_one_work+0x790/0x11b8 [ 67.472550][ T4122] worker_thread+0x910/0x1034 [ 67.473738][ T4122] kthread+0x37c/0x45c [ 67.474750][ T4122] ret_from_fork+0x10/0x20 [ 67.475794][ T4122] [ 67.475794][ T4122] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 67.477973][ T4122] __lock_acquire+0x32d4/0x7638 [ 67.479216][ T4122] lock_acquire+0x240/0x77c [ 67.480302][ T4122] __flush_work+0xf8/0x1c0 [ 67.481406][ T4122] __cancel_work_timer+0x3ec/0x548 [ 67.482686][ T4122] cancel_work_sync+0x24/0x38 [ 67.483812][ T4122] hci_request_cancel_all+0xcc/0x2d0 [ 67.485053][ T4122] hci_dev_do_close+0x54/0x1060 [ 67.486174][ T4122] hci_rfkill_set_block+0xdc/0x1d0 [ 67.487373][ T4122] rfkill_set_block+0x18c/0x37c [ 67.488661][ T4122] rfkill_fop_write+0x594/0x750 [ 67.490013][ T4122] vfs_write+0x280/0xb44 [ 67.491062][ T4122] ksys_write+0x15c/0x26c [ 67.492138][ T4122] __arm64_sys_write+0x7c/0x90 [ 67.493297][ T4122] invoke_syscall+0x98/0x2b8 [ 67.494500][ T4122] el0_svc_common+0x138/0x258 [ 67.495634][ T4122] do_el0_svc+0x58/0x14c [ 67.496777][ T4122] el0_svc+0x7c/0x1f0 [ 67.497799][ T4122] el0t_64_sync_handler+0x84/0xe4 [ 67.498997][ T4122] el0t_64_sync+0x1a0/0x1a4 [ 67.500076][ T4122] [ 67.500076][ T4122] other info that might help us debug this: [ 67.500076][ T4122] [ 67.502422][ T4122] Chain exists of: [ 67.502422][ T4122] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 67.502422][ T4122] [ 67.505881][ T4122] Possible unsafe locking scenario: [ 67.505881][ T4122] [ 67.507671][ T4122] CPU0 CPU1 [ 67.508903][ T4122] ---- ---- [ 67.510040][ T4122] lock(rfkill_global_mutex); [ 67.511232][ T4122] lock(&data->open_mutex); [ 67.512928][ T4122] lock(rfkill_global_mutex); [ 67.514615][ T4122] lock((work_completion)(&hdev->bg_scan_update)); [ 67.516177][ T4122] [ 67.516177][ T4122] *** DEADLOCK *** [ 67.516177][ T4122] [ 67.517986][ T4122] 1 lock held by syz.0.15/4122: [ 67.519162][ T4122] #0: ffff800016e77268 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 67.521519][ T4122] [ 67.521519][ T4122] stack backtrace: [ 67.522870][ T4122] CPU: 1 PID: 4122 Comm: syz.0.15 Not tainted 5.15.173-syzkaller #0 [ 67.524696][ T4122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 67.526974][ T4122] Call trace: [ 67.527744][ T4122] dump_backtrace+0x0/0x530 [ 67.528783][ T4122] show_stack+0x2c/0x3c [ 67.529681][ T4122] dump_stack_lvl+0x108/0x170 [ 67.530741][ T4122] dump_stack+0x1c/0x58 [ 67.531722][ T4122] print_circular_bug+0x150/0x1b8 [ 67.532874][ T4122] check_noncircular+0x2cc/0x378 [ 67.533982][ T4122] __lock_acquire+0x32d4/0x7638 [ 67.535164][ T4122] lock_acquire+0x240/0x77c [ 67.536213][ T4122] __flush_work+0xf8/0x1c0 [ 67.537212][ T4122] __cancel_work_timer+0x3ec/0x548 [ 67.538346][ T4122] cancel_work_sync+0x24/0x38 [ 67.539389][ T4122] hci_request_cancel_all+0xcc/0x2d0 [ 67.540556][ T4122] hci_dev_do_close+0x54/0x1060 [ 67.541644][ T4122] hci_rfkill_set_block+0xdc/0x1d0 [ 67.542691][ T4122] rfkill_set_block+0x18c/0x37c [ 67.543734][ T4122] rfkill_fop_write+0x594/0x750 [ 67.544727][ T4122] vfs_write+0x280/0xb44 [ 67.545755][ T4122] ksys_write+0x15c/0x26c [ 67.546721][ T4122] __arm64_sys_write+0x7c/0x90 [ 67.547830][ T4122] invoke_syscall+0x98/0x2b8 [ 67.548864][ T4122] el0_svc_common+0x138/0x258 [ 67.549932][ T4122] do_el0_svc+0x58/0x14c [ 67.550922][ T4122] el0_svc+0x7c/0x1f0 [ 67.551804][ T4122] el0t_64_sync_handler+0x84/0xe4 [ 67.552894][ T4122] el0t_64_sync+0x1a0/0x1a4 [ 67.631549][ T3604] Bluetooth: hci0: command 0x040f tx timeout