Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. 1970/01/01 00:00:42 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:43 parsed 1 programs [ 46.068893][ T4031] cgroup: Unknown subsys name 'net' [ 46.354635][ T4031] cgroup: Unknown subsys name 'rlimit' [ 46.705207][ T4031] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 55.554323][ T4074] chnl_net:caif_netlink_parms(): no params data found [ 55.595613][ T4074] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.597586][ T4074] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.600974][ T4074] device bridge_slave_0 entered promiscuous mode [ 55.605538][ T4074] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.607549][ T4074] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.610317][ T4074] device bridge_slave_1 entered promiscuous mode [ 55.630553][ T4074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.634817][ T4074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.650721][ T4074] team0: Port device team_slave_0 added [ 55.654344][ T4074] team0: Port device team_slave_1 added [ 55.711711][ T4074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.713590][ T4074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.720999][ T4074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.725749][ T4074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.727612][ T4074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.735370][ T4074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.811463][ T4074] device hsr_slave_0 entered promiscuous mode [ 55.849611][ T4074] device hsr_slave_1 entered promiscuous mode [ 55.983890][ T4074] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.041399][ T4074] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.101962][ T4074] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.160654][ T4074] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.237428][ T4074] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.239536][ T4074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.242077][ T4074] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.244056][ T4074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.292041][ T4074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.303280][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.307369][ T435] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.313403][ T435] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.323008][ T4074] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.329850][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.332745][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.334641][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.343077][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.345629][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.347467][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.366331][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.369781][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.376178][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.385640][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.393480][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.402610][ T4074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.483232][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.485373][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.493864][ T4074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.507754][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.511717][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.524780][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.527635][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.533362][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.535986][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.540324][ T4074] device veth0_vlan entered promiscuous mode [ 56.546735][ T4074] device veth1_vlan entered promiscuous mode [ 56.565151][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.567811][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.571975][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.575149][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.580023][ T4074] device veth0_macvtap entered promiscuous mode [ 56.585457][ T4074] device veth1_macvtap entered promiscuous mode [ 56.599713][ T4074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.605564][ T4074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.611227][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.613955][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.616544][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.619824][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.622771][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.625655][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.631609][ T4074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.633992][ T4074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.636261][ T4074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.648023][ T4074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.825069][ T435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.827243][ T435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.840880][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.852204][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.854359][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.857306][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:57 executed programs: 0 [ 58.102441][ T4124] chnl_net:caif_netlink_parms(): no params data found [ 58.161797][ T4124] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.163974][ T4124] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.166704][ T4124] device bridge_slave_0 entered promiscuous mode [ 58.170698][ T4124] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.172649][ T4124] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.175335][ T4124] device bridge_slave_1 entered promiscuous mode [ 58.193505][ T4124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.200728][ T4124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.229799][ T4124] team0: Port device team_slave_0 added [ 58.233232][ T4124] team0: Port device team_slave_1 added [ 58.246912][ T4124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.249224][ T4124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.256396][ T4124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.261195][ T4124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.263063][ T4124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.270477][ T4124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.340124][ T4124] device hsr_slave_0 entered promiscuous mode [ 58.378553][ T4124] device hsr_slave_1 entered promiscuous mode [ 58.418502][ T4124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.420820][ T4124] Cannot create hsr debugfs directory [ 58.486093][ T4124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.028842][ T4093] Bluetooth: hci0: command 0x0409 tx timeout [ 61.536135][ T4124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.675357][ T4124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.732393][ T4124] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.911629][ T4124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.966259][ T4124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.021359][ T4124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.060191][ T4124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.109303][ T4138] Bluetooth: hci0: command 0x041b tx timeout [ 62.158370][ T4124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.165213][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.167846][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.173744][ T4124] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.178965][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.181812][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.184366][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.186289][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.232702][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.235280][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.237872][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.240754][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.242643][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.246757][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.251998][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.256824][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.259919][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.262893][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.271321][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.274412][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.281567][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.284231][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.289014][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.291827][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.298623][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.373468][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.375593][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.382655][ T4124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.396395][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.399768][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.413199][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.416105][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.419203][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.421737][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.426705][ T4124] device veth0_vlan entered promiscuous mode [ 62.434197][ T4124] device veth1_vlan entered promiscuous mode [ 62.450101][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.452874][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.455446][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.458741][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.464290][ T4124] device veth0_macvtap entered promiscuous mode [ 62.470277][ T4124] device veth1_macvtap entered promiscuous mode [ 62.479556][ T4124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.482379][ T4124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.486016][ T4124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.490073][ T4124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.493293][ T4124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.496900][ T4124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.499683][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.502242][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.504774][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.507408][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.513539][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.516286][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.522282][ T4124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.524654][ T4124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.526910][ T4124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.530804][ T4124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.573588][ T435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.583103][ T435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.607566][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.623977][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.626248][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.630372][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.835268][ T4146] [ 62.835985][ T4146] ====================================================== [ 62.837845][ T4146] WARNING: possible circular locking dependency detected [ 62.839698][ T4146] 5.15.184-syzkaller #0 Not tainted [ 62.841070][ T4146] ------------------------------------------------------ [ 62.842953][ T4146] syz.0.16/4146 is trying to acquire lock: [ 62.844496][ T4146] ffff0000d0b3cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 62.847440][ T4146] [ 62.847440][ T4146] but task is already holding lock: [ 62.849421][ T4146] ffff8000164f7788 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 62.851993][ T4146] [ 62.851993][ T4146] which lock already depends on the new lock. [ 62.851993][ T4146] [ 62.854802][ T4146] [ 62.854802][ T4146] the existing dependency chain (in reverse order) is: [ 62.857191][ T4146] [ 62.857191][ T4146] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 62.859326][ T4146] __mutex_lock_common+0x194/0x1edc [ 62.860873][ T4146] mutex_lock_nested+0xac/0x11c [ 62.862310][ T4146] rfkill_register+0x44/0x77c [ 62.863717][ T4146] hci_register_dev+0x3d8/0x854 [ 62.865195][ T4146] vhci_create_device+0x2bc/0x564 [ 62.866699][ T4146] vhci_write+0x30c/0x3ac [ 62.867990][ T4146] vfs_write+0x7c8/0xa2c [ 62.869257][ T4146] ksys_write+0x120/0x210 [ 62.870541][ T4146] __arm64_sys_write+0x7c/0x90 [ 62.871945][ T4146] invoke_syscall+0x98/0x2b8 [ 62.873317][ T4146] el0_svc_common+0x138/0x258 [ 62.874739][ T4146] do_el0_svc+0x58/0x14c [ 62.875999][ T4146] el0_svc+0x78/0x1e0 [ 62.877196][ T4146] el0t_64_sync_handler+0xcc/0xe4 [ 62.878681][ T4146] el0t_64_sync+0x1a0/0x1a4 [ 62.880046][ T4146] [ 62.880046][ T4146] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 62.882132][ T4146] __mutex_lock_common+0x194/0x1edc [ 62.883665][ T4146] mutex_lock_nested+0xac/0x11c [ 62.885094][ T4146] vhci_send_frame+0x88/0x118 [ 62.886478][ T4146] hci_send_frame+0x194/0x2f0 [ 62.887849][ T4146] hci_tx_work+0x7e4/0x1394 [ 62.889209][ T4146] process_one_work+0x79c/0x1140 [ 62.890692][ T4146] worker_thread+0x8f4/0x101c [ 62.892085][ T4146] kthread+0x374/0x454 [ 62.893313][ T4146] ret_from_fork+0x10/0x20 [ 62.894643][ T4146] [ 62.894643][ T4146] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 62.897109][ T4146] __flush_work+0xf4/0x1bc [ 62.898453][ T4146] flush_work+0x24/0x38 [ 62.899774][ T4146] hci_dev_do_close+0x164/0x105c [ 62.901264][ T4146] hci_unregister_dev+0x23c/0x4c0 [ 62.902764][ T4146] vhci_release+0x74/0xc4 [ 62.904060][ T4146] __fput+0x1c0/0x7f8 [ 62.905248][ T4146] ____fput+0x20/0x30 [ 62.906454][ T4146] task_work_run+0x12c/0x1e0 [ 62.907819][ T4146] do_exit+0x67c/0x1f58 [ 62.909044][ T4146] do_group_exit+0x100/0x268 [ 62.910395][ T4146] get_signal+0x73c/0x1340 [ 62.911706][ T4146] do_notify_resume+0x35c/0x3128 [ 62.913165][ T4146] el0_svc+0xf0/0x1e0 [ 62.914365][ T4146] el0t_64_sync_handler+0xcc/0xe4 [ 62.915858][ T4146] el0t_64_sync+0x1a0/0x1a4 [ 62.917190][ T4146] [ 62.917190][ T4146] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 62.919242][ T4146] __mutex_lock_common+0x194/0x1edc [ 62.920852][ T4146] mutex_lock_nested+0xac/0x11c [ 62.922305][ T4146] bg_scan_update+0x48/0x3d0 [ 62.923689][ T4146] process_one_work+0x79c/0x1140 [ 62.925154][ T4146] worker_thread+0x8f4/0x101c [ 62.926538][ T4146] kthread+0x374/0x454 [ 62.927901][ T4146] ret_from_fork+0x10/0x20 [ 62.929207][ T4146] [ 62.929207][ T4146] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 62.931910][ T4146] __lock_acquire+0x2928/0x651c [ 62.933338][ T4146] lock_acquire+0x1f4/0x620 [ 62.934678][ T4146] __flush_work+0xf4/0x1bc [ 62.935992][ T4146] __cancel_work_timer+0x2ec/0x448 [ 62.937505][ T4146] cancel_work_sync+0x24/0x38 [ 62.938882][ T4146] hci_request_cancel_all+0xbc/0x2d0 [ 62.940452][ T4146] hci_dev_do_close+0x54/0x105c [ 62.941918][ T4146] hci_rfkill_set_block+0xdc/0x1d0 [ 62.943421][ T4146] rfkill_set_block+0x18c/0x374 [ 62.944857][ T4146] rfkill_fop_write+0x4a4/0x5cc [ 62.946329][ T4146] vfs_write+0x280/0xa2c [ 62.947650][ T4146] ksys_write+0x120/0x210 [ 62.948950][ T4146] __arm64_sys_write+0x7c/0x90 [ 62.950357][ T4146] invoke_syscall+0x98/0x2b8 [ 62.951736][ T4146] el0_svc_common+0x138/0x258 [ 62.953136][ T4146] do_el0_svc+0x58/0x14c [ 62.954421][ T4146] el0_svc+0x78/0x1e0 [ 62.955645][ T4146] el0t_64_sync_handler+0xcc/0xe4 [ 62.957122][ T4146] el0t_64_sync+0x1a0/0x1a4 [ 62.958466][ T4146] [ 62.958466][ T4146] other info that might help us debug this: [ 62.958466][ T4146] [ 62.961237][ T4146] Chain exists of: [ 62.961237][ T4146] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 62.961237][ T4146] [ 62.965553][ T4146] Possible unsafe locking scenario: [ 62.965553][ T4146] [ 62.967541][ T4146] CPU0 CPU1 [ 62.968963][ T4146] ---- ---- [ 62.970398][ T4146] lock(rfkill_global_mutex); [ 62.971678][ T4146] lock(&data->open_mutex); [ 62.973627][ T4146] lock(rfkill_global_mutex); [ 62.975584][ T4146] lock((work_completion)(&hdev->bg_scan_update)); [ 62.977396][ T4146] [ 62.977396][ T4146] *** DEADLOCK *** [ 62.977396][ T4146] [ 62.979671][ T4146] 1 lock held by syz.0.16/4146: [ 62.980964][ T4146] #0: ffff8000164f7788 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 62.983740][ T4146] [ 62.983740][ T4146] stack backtrace: [ 62.985336][ T4146] CPU: 0 PID: 4146 Comm: syz.0.16 Not tainted 5.15.184-syzkaller #0 [ 62.987500][ T4146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.990187][ T4146] Call trace: [ 62.991046][ T4146] dump_backtrace+0x0/0x43c [ 62.992245][ T4146] show_stack+0x2c/0x3c [ 62.993352][ T4146] __dump_stack+0x30/0x40 [ 62.994535][ T4146] dump_stack_lvl+0xf8/0x160 [ 62.995780][ T4146] dump_stack+0x1c/0x5c [ 62.996897][ T4146] print_circular_bug+0x148/0x1b0 [ 62.998242][ T4146] check_noncircular+0x240/0x2d4 [ 62.999645][ T4146] __lock_acquire+0x2928/0x651c [ 63.000926][ T4146] lock_acquire+0x1f4/0x620 [ 63.002144][ T4146] __flush_work+0xf4/0x1bc [ 63.003326][ T4146] __cancel_work_timer+0x2ec/0x448 [ 63.004709][ T4146] cancel_work_sync+0x24/0x38 [ 63.005962][ T4146] hci_request_cancel_all+0xbc/0x2d0 [ 63.007414][ T4146] hci_dev_do_close+0x54/0x105c [ 63.008717][ T4146] hci_rfkill_set_block+0xdc/0x1d0 [ 63.010114][ T4146] rfkill_set_block+0x18c/0x374 [ 63.011407][ T4146] rfkill_fop_write+0x4a4/0x5cc [ 63.012759][ T4146] vfs_write+0x280/0xa2c [ 63.013922][ T4146] ksys_write+0x120/0x210 [ 63.015117][ T4146] __arm64_sys_write+0x7c/0x90 [ 63.016460][ T4146] invoke_syscall+0x98/0x2b8 [ 63.017704][ T4146] el0_svc_common+0x138/0x258 [ 63.018962][ T4146] do_el0_svc+0x58/0x14c [ 63.020117][ T4146] el0_svc+0x78/0x1e0 [ 63.021191][ T4146] el0t_64_sync_handler+0xcc/0xe4 [ 63.022557][ T4146] el0t_64_sync+0x1a0/0x1a4