Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. 1970/01/01 00:00:46 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:46 parsed 1 programs [ 49.475417][ T4029] cgroup: Unknown subsys name 'net' [ 49.755018][ T4029] cgroup: Unknown subsys name 'rlimit' [ 50.127533][ T4029] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 57.750676][ T4090] chnl_net:caif_netlink_parms(): no params data found [ 57.789318][ T4090] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.790935][ T4090] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.793176][ T4090] device bridge_slave_0 entered promiscuous mode [ 57.797289][ T4090] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.799784][ T4090] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.802122][ T4090] device bridge_slave_1 entered promiscuous mode [ 57.819037][ T4090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.822995][ T4090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.838313][ T4090] team0: Port device team_slave_0 added [ 57.842716][ T4090] team0: Port device team_slave_1 added [ 57.856050][ T4090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.857709][ T4090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.863757][ T4090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.867828][ T4090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.870238][ T4090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.875637][ T4090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.932444][ T4090] device hsr_slave_0 entered promiscuous mode [ 57.979127][ T4090] device hsr_slave_1 entered promiscuous mode [ 58.111378][ T4090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.181803][ T4090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.221290][ T4090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.262078][ T4090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.337244][ T4090] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.338911][ T4090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.341053][ T4090] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.342529][ T4090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.386530][ T4090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.395722][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.401690][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.404281][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.413718][ T4090] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.421957][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.424376][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.425933][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.440425][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.442716][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.444347][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.458486][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.463054][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.470527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.476621][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.485570][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.491171][ T4090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.567626][ T292] ODEBUG: Out of memory. ODEBUG disabled [ 58.588311][ T4090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.590958][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.592706][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.603928][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.618573][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.621659][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.623637][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.627867][ T4090] device veth0_vlan entered promiscuous mode [ 58.635723][ T4090] device veth1_vlan entered promiscuous mode [ 58.652367][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.654378][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.656581][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.660680][ T4090] device veth0_macvtap entered promiscuous mode [ 58.664306][ T4090] device veth1_macvtap entered promiscuous mode [ 58.673712][ T4090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.675601][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.678625][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.683742][ T4090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.685635][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.687864][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.701170][ T4090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.703341][ T4090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.705318][ T4090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.707146][ T4090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.938440][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.940385][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.951875][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.954928][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.956585][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.958830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:58 executed programs: 0 [ 59.108659][ T4126] chnl_net:caif_netlink_parms(): no params data found [ 59.141643][ T4126] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.143260][ T4126] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.145455][ T4126] device bridge_slave_0 entered promiscuous mode [ 59.148613][ T4126] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.150806][ T4126] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.152950][ T4126] device bridge_slave_1 entered promiscuous mode [ 59.165716][ T4126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.169940][ T4126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.183826][ T4126] team0: Port device team_slave_0 added [ 59.186707][ T4126] team0: Port device team_slave_1 added [ 59.197688][ T4126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.199240][ T4126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.204451][ T4126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.208158][ T4126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.209901][ T4126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.215153][ T4126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.290940][ T4126] device hsr_slave_0 entered promiscuous mode [ 59.329348][ T4126] device hsr_slave_1 entered promiscuous mode [ 59.369112][ T4126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.371047][ T4126] Cannot create hsr debugfs directory [ 59.447493][ T4126] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.049590][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 61.505116][ T4126] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.128919][ T1534] Bluetooth: hci0: command 0x041b tx timeout [ 63.944650][ T4126] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.986273][ T4126] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.208279][ T4126] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.252039][ T4126] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.312230][ T4126] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.351179][ T4126] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.464549][ T4126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.472203][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.474363][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.478246][ T4126] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.485476][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.487744][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.490002][ T1637] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.491506][ T1637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.494028][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.496450][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.498471][ T1637] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.500221][ T1637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.503345][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.506876][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.519200][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.529236][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.533553][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.535855][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.538229][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.545256][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.547457][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.550150][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.554599][ T4126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.557324][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.563464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.566163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.634080][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.635709][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.641778][ T4126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.657027][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.659318][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.667175][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.672889][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.675943][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.678210][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.681822][ T4126] device veth0_vlan entered promiscuous mode [ 64.687526][ T4126] device veth1_vlan entered promiscuous mode [ 64.701647][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.703757][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.705856][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.707961][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.714670][ T4126] device veth0_macvtap entered promiscuous mode [ 64.718428][ T4126] device veth1_macvtap entered promiscuous mode [ 64.727931][ T4126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.730972][ T4126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.734077][ T4126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.735898][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.738459][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.743322][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.745574][ T1637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.750712][ T4126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.753128][ T4126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.755904][ T4126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.759168][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.761421][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.764721][ T4126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.766568][ T4126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.768419][ T4126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.771362][ T4126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.812093][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.813773][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.816998][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.826951][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.828982][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.832294][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.860437][ T4138] [ 64.861077][ T4138] ====================================================== [ 64.862597][ T4138] WARNING: possible circular locking dependency detected [ 64.864564][ T4138] 5.15.173-syzkaller #0 Not tainted [ 64.865642][ T4138] ------------------------------------------------------ [ 64.867072][ T4138] syz.0.15/4138 is trying to acquire lock: [ 64.868321][ T4138] ffff0000d5568c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 64.870654][ T4138] [ 64.870654][ T4138] but task is already holding lock: [ 64.872267][ T4138] ffff800016f25fe8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 64.874453][ T4138] [ 64.874453][ T4138] which lock already depends on the new lock. [ 64.874453][ T4138] [ 64.876793][ T4138] [ 64.876793][ T4138] the existing dependency chain (in reverse order) is: [ 64.878534][ T4138] [ 64.878534][ T4138] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 64.880324][ T4138] __mutex_lock_common+0x194/0x2154 [ 64.881572][ T4138] mutex_lock_nested+0xa4/0xf8 [ 64.882669][ T4138] rfkill_register+0x44/0x7a4 [ 64.883798][ T4138] hci_register_dev+0x3e0/0x880 [ 64.885108][ T4138] vhci_create_device+0x2c4/0x568 [ 64.886319][ T4138] vhci_write+0x318/0x3b8 [ 64.887359][ T4138] vfs_write+0x884/0xb44 [ 64.888405][ T4138] ksys_write+0x15c/0x26c [ 64.889375][ T4138] __arm64_sys_write+0x7c/0x90 [ 64.890555][ T4138] invoke_syscall+0x98/0x2b8 [ 64.891581][ T4138] el0_svc_common+0x138/0x258 [ 64.892648][ T4138] do_el0_svc+0x58/0x14c [ 64.893678][ T4138] el0_svc+0x7c/0x1f0 [ 64.894760][ T4138] el0t_64_sync_handler+0x84/0xe4 [ 64.895893][ T4138] el0t_64_sync+0x1a0/0x1a4 [ 64.897006][ T4138] [ 64.897006][ T4138] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 64.898573][ T4138] __mutex_lock_common+0x194/0x2154 [ 64.899730][ T4138] mutex_lock_nested+0xa4/0xf8 [ 64.900886][ T4138] vhci_send_frame+0x8c/0x10c [ 64.902027][ T4138] hci_send_frame+0x194/0x2f0 [ 64.903120][ T4138] hci_tx_work+0x9ac/0x16cc [ 64.904157][ T4138] process_one_work+0x790/0x11b8 [ 64.905357][ T4138] worker_thread+0x910/0x1034 [ 64.906508][ T4138] kthread+0x37c/0x45c [ 64.907483][ T4138] ret_from_fork+0x10/0x20 [ 64.908551][ T4138] [ 64.908551][ T4138] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 64.910496][ T4138] __flush_work+0xf8/0x1c0 [ 64.911616][ T4138] flush_work+0x24/0x38 [ 64.912677][ T4138] hci_dev_do_close+0x16c/0x1060 [ 64.913729][ T4138] hci_unregister_dev+0x248/0x4d4 [ 64.914845][ T4138] vhci_release+0x74/0xc4 [ 64.915887][ T4138] __fput+0x1c4/0x800 [ 64.916907][ T4138] ____fput+0x20/0x30 [ 64.917858][ T4138] task_work_run+0x130/0x1e4 [ 64.918960][ T4138] do_exit+0x670/0x20bc [ 64.920043][ T4138] do_group_exit+0x110/0x268 [ 64.921138][ T4138] get_signal+0x634/0x1550 [ 64.922250][ T4138] do_notify_resume+0x3d0/0x32b8 [ 64.923420][ T4138] el0_svc+0xfc/0x1f0 [ 64.924373][ T4138] el0t_64_sync_handler+0x84/0xe4 [ 64.925597][ T4138] el0t_64_sync+0x1a0/0x1a4 [ 64.926678][ T4138] [ 64.926678][ T4138] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 64.928446][ T4138] __mutex_lock_common+0x194/0x2154 [ 64.929718][ T4138] mutex_lock_nested+0xa4/0xf8 [ 64.930887][ T4138] bg_scan_update+0x9c/0x470 [ 64.931951][ T4138] process_one_work+0x790/0x11b8 [ 64.933146][ T4138] worker_thread+0x910/0x1034 [ 64.934184][ T4138] kthread+0x37c/0x45c [ 64.935186][ T4138] ret_from_fork+0x10/0x20 [ 64.936139][ T4138] [ 64.936139][ T4138] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 64.937881][ T4138] __lock_acquire+0x32d4/0x7638 [ 64.938781][ T4138] lock_acquire+0x240/0x77c [ 64.939625][ T4138] __flush_work+0xf8/0x1c0 [ 64.940459][ T4138] __cancel_work_timer+0x3ec/0x548 [ 64.941399][ T4138] cancel_work_sync+0x24/0x38 [ 64.942410][ T4138] hci_request_cancel_all+0xcc/0x2d0 [ 64.943619][ T4138] hci_dev_do_close+0x54/0x1060 [ 64.944754][ T4138] hci_rfkill_set_block+0xdc/0x1d0 [ 64.945935][ T4138] rfkill_set_block+0x18c/0x37c [ 64.947099][ T4138] rfkill_fop_write+0x594/0x750 [ 64.948175][ T4138] vfs_write+0x280/0xb44 [ 64.949257][ T4138] ksys_write+0x15c/0x26c [ 64.950220][ T4138] __arm64_sys_write+0x7c/0x90 [ 64.951253][ T4138] invoke_syscall+0x98/0x2b8 [ 64.952431][ T4138] el0_svc_common+0x138/0x258 [ 64.953574][ T4138] do_el0_svc+0x58/0x14c [ 64.954596][ T4138] el0_svc+0x7c/0x1f0 [ 64.955551][ T4138] el0t_64_sync_handler+0x84/0xe4 [ 64.956734][ T4138] el0t_64_sync+0x1a0/0x1a4 [ 64.957775][ T4138] [ 64.957775][ T4138] other info that might help us debug this: [ 64.957775][ T4138] [ 64.960038][ T4138] Chain exists of: [ 64.960038][ T4138] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 64.960038][ T4138] [ 64.963225][ T4138] Possible unsafe locking scenario: [ 64.963225][ T4138] [ 64.964821][ T4138] CPU0 CPU1 [ 64.965960][ T4138] ---- ---- [ 64.967103][ T4138] lock(rfkill_global_mutex); [ 64.968152][ T4138] lock(&data->open_mutex); [ 64.969723][ T4138] lock(rfkill_global_mutex); [ 64.971172][ T4138] lock((work_completion)(&hdev->bg_scan_update)); [ 64.972584][ T4138] [ 64.972584][ T4138] *** DEADLOCK *** [ 64.972584][ T4138] [ 64.974472][ T4138] 1 lock held by syz.0.15/4138: [ 64.975503][ T4138] #0: ffff800016f25fe8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 64.977506][ T4138] [ 64.977506][ T4138] stack backtrace: [ 64.978713][ T4138] CPU: 0 PID: 4138 Comm: syz.0.15 Not tainted 5.15.173-syzkaller #0 [ 64.980417][ T4138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.982511][ T4138] Call trace: [ 64.983223][ T4138] dump_backtrace+0x0/0x530 [ 64.984133][ T4138] show_stack+0x2c/0x3c [ 64.985031][ T4138] dump_stack_lvl+0x108/0x170 [ 64.986068][ T4138] dump_stack+0x1c/0x58 [ 64.986956][ T4138] print_circular_bug+0x150/0x1b8 [ 64.988028][ T4138] check_noncircular+0x2cc/0x378 [ 64.989049][ T4138] __lock_acquire+0x32d4/0x7638 [ 64.990085][ T4138] lock_acquire+0x240/0x77c [ 64.991138][ T4138] __flush_work+0xf8/0x1c0 [ 64.992025][ T4138] __cancel_work_timer+0x3ec/0x548 [ 64.993092][ T4138] cancel_work_sync+0x24/0x38 [ 64.994072][ T4138] hci_request_cancel_all+0xcc/0x2d0 [ 64.995189][ T4138] hci_dev_do_close+0x54/0x1060 [ 64.996215][ T4138] hci_rfkill_set_block+0xdc/0x1d0 [ 64.997750][ T4138] rfkill_set_block+0x18c/0x37c [ 64.998865][ T4138] rfkill_fop_write+0x594/0x750 [ 64.999885][ T4138] vfs_write+0x280/0xb44 [ 65.000823][ T4138] ksys_write+0x15c/0x26c [ 65.001688][ T4138] __arm64_sys_write+0x7c/0x90 [ 65.002666][ T4138] invoke_syscall+0x98/0x2b8 [ 65.003653][ T4138] el0_svc_common+0x138/0x258 [ 65.004672][ T4138] do_el0_svc+0x58/0x14c [ 65.005567][ T4138] el0_svc+0x7c/0x1f0 [ 65.006386][ T4138] el0t_64_sync_handler+0x84/0xe4 [ 65.007443][ T4138] el0t_64_sync+0x1a0/0x1a4