Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. 1970/01/01 00:00:44 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:46 parsed 1 programs [ 48.839772][ T4032] cgroup: Unknown subsys name 'net' [ 49.085115][ T4032] cgroup: Unknown subsys name 'rlimit' [ 49.456669][ T4032] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 57.102876][ T4040] chnl_net:caif_netlink_parms(): no params data found [ 57.142623][ T4040] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.144331][ T4040] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.146819][ T4040] device bridge_slave_0 entered promiscuous mode [ 57.151451][ T4040] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.153115][ T4040] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.155201][ T4040] device bridge_slave_1 entered promiscuous mode [ 57.170315][ T4040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.175204][ T4040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.189371][ T4040] team0: Port device team_slave_0 added [ 57.192592][ T4040] team0: Port device team_slave_1 added [ 57.205775][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.207383][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.213983][ T4040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.218112][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.219831][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.225747][ T4040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.281228][ T4040] device hsr_slave_0 entered promiscuous mode [ 57.319060][ T4040] device hsr_slave_1 entered promiscuous mode [ 57.433448][ T4040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.462274][ T4040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.521478][ T4040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.581753][ T4040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.655643][ T4040] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.657576][ T4040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.659870][ T4040] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.661884][ T4040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.702501][ T4040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.710892][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.714815][ T1614] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.718141][ T1614] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.721260][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 57.728538][ T4040] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.734916][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.737449][ T1614] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.739341][ T1614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.750753][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.753220][ T1614] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.755105][ T1614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.767326][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.770425][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.776580][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.784946][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.790535][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.795463][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.863802][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.865907][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.873343][ T4040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.886522][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.900555][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.903213][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.905626][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.910452][ T4040] device veth0_vlan entered promiscuous mode [ 57.917638][ T4040] device veth1_vlan entered promiscuous mode [ 57.932981][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.935468][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.938141][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.943368][ T4040] device veth0_macvtap entered promiscuous mode [ 57.947313][ T4040] device veth1_macvtap entered promiscuous mode [ 57.959699][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.961674][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.964927][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.971296][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.973513][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.978260][ T4040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.981988][ T4040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.984146][ T4040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.986497][ T4040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.352896][ T1614] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.785523][ T1700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.787648][ T1700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.792433][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.805329][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.807403][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.811928][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.016016][ T1614] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.394950][ T1614] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.468008][ T1614] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.466836][ T1614] device hsr_slave_0 left promiscuous mode 1970/01/01 00:01:04 executed programs: 0 [ 64.521742][ T1614] device hsr_slave_1 left promiscuous mode [ 64.629557][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.631475][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.634333][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.636261][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.638676][ T1614] device bridge_slave_1 left promiscuous mode [ 64.640891][ T1614] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.691841][ T1614] device bridge_slave_0 left promiscuous mode [ 64.693601][ T1614] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.869366][ T1614] device veth1_macvtap left promiscuous mode [ 64.871187][ T1614] device veth0_macvtap left promiscuous mode [ 64.872820][ T1614] device veth1_vlan left promiscuous mode [ 64.874360][ T1614] device veth0_vlan left promiscuous mode [ 65.074564][ T1614] team0 (unregistering): Port device team_slave_1 removed [ 65.083204][ T1614] team0 (unregistering): Port device team_slave_0 removed [ 65.091632][ T1614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.127881][ T1614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.265979][ T1614] bond0 (unregistering): Released all slaves [ 65.483105][ T4160] chnl_net:caif_netlink_parms(): no params data found [ 65.524361][ T4160] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.526248][ T4160] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.529289][ T4160] device bridge_slave_0 entered promiscuous mode [ 65.532810][ T4160] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.534695][ T4160] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.538222][ T4160] device bridge_slave_1 entered promiscuous mode [ 65.557581][ T4160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.564780][ T4160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.580334][ T4160] team0: Port device team_slave_0 added [ 65.583952][ T4160] team0: Port device team_slave_1 added [ 65.598874][ T4160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.600757][ T4160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.607427][ T4160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.613003][ T4160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.614790][ T4160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.622216][ T4160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.672378][ T4160] device hsr_slave_0 entered promiscuous mode [ 65.712163][ T4160] device hsr_slave_1 entered promiscuous mode [ 66.496834][ T4160] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.570898][ T4160] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.599520][ T4048] Bluetooth: hci0: command 0x0409 tx timeout [ 66.602359][ T4160] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.643346][ T4160] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.784387][ T4160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.792536][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.795385][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.800616][ T4160] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.809275][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.812022][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.817373][ T1700] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.819232][ T1700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.825215][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.831780][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.834583][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.837042][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.838857][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.851984][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.860709][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.866715][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.870119][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.880397][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.886617][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.890009][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.901650][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.904685][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.907839][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.910993][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.915543][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.011861][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.013849][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.032587][ T4160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.052089][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.060478][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.078497][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.083935][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.087066][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.096488][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.104028][ T4160] device veth0_vlan entered promiscuous mode [ 67.119851][ T4160] device veth1_vlan entered promiscuous mode [ 67.144178][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.146838][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.150163][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.152962][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.157534][ T4160] device veth0_macvtap entered promiscuous mode [ 67.170605][ T4160] device veth1_macvtap entered promiscuous mode [ 67.200668][ T4160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.202756][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.206381][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.214149][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.216919][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.231322][ T4160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.235748][ T4160] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.237923][ T4160] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.240471][ T4160] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.242706][ T4160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.253098][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.255921][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.298175][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.301611][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.304481][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.334402][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.336496][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.341531][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.535620][ T4242] [ 67.536200][ T4242] ====================================================== [ 67.537999][ T4242] WARNING: possible circular locking dependency detected [ 67.539787][ T4242] 5.15.178-syzkaller #0 Not tainted [ 67.541217][ T4242] ------------------------------------------------------ [ 67.543033][ T4242] syz.0.16/4242 is trying to acquire lock: [ 67.544612][ T4242] ffff0000d7524c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 67.547612][ T4242] [ 67.547612][ T4242] but task is already holding lock: [ 67.549524][ T4242] ffff800016f39608 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 67.551987][ T4242] [ 67.551987][ T4242] which lock already depends on the new lock. [ 67.551987][ T4242] [ 67.554757][ T4242] [ 67.554757][ T4242] the existing dependency chain (in reverse order) is: [ 67.557157][ T4242] [ 67.557157][ T4242] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 67.559182][ T4242] __mutex_lock_common+0x194/0x2154 [ 67.560671][ T4242] mutex_lock_nested+0xa4/0xf8 [ 67.562104][ T4242] rfkill_register+0x44/0x7a4 [ 67.563462][ T4242] hci_register_dev+0x3e0/0x880 [ 67.564924][ T4242] vhci_create_device+0x2c4/0x568 [ 67.566378][ T4242] vhci_write+0x318/0x3b8 [ 67.567665][ T4242] vfs_write+0x884/0xb44 [ 67.568967][ T4242] ksys_write+0x15c/0x26c [ 67.570205][ T4242] __arm64_sys_write+0x7c/0x90 [ 67.571615][ T4242] invoke_syscall+0x98/0x2b8 [ 67.572950][ T4242] el0_svc_common+0x138/0x258 [ 67.574270][ T4242] do_el0_svc+0x58/0x14c [ 67.575525][ T4242] el0_svc+0x7c/0x1f0 [ 67.576737][ T4242] el0t_64_sync_handler+0x84/0xe4 [ 67.578254][ T4242] el0t_64_sync+0x1a0/0x1a4 [ 67.579535][ T4242] [ 67.579535][ T4242] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 67.581663][ T4242] __mutex_lock_common+0x194/0x2154 [ 67.583173][ T4242] mutex_lock_nested+0xa4/0xf8 [ 67.584597][ T4242] vhci_send_frame+0x8c/0x10c [ 67.585942][ T4242] hci_send_frame+0x194/0x2f0 [ 67.587446][ T4242] hci_tx_work+0x9ac/0x16cc [ 67.588744][ T4242] process_one_work+0x790/0x11b8 [ 67.590166][ T4242] worker_thread+0x910/0x1034 [ 67.591514][ T4242] kthread+0x37c/0x45c [ 67.592680][ T4242] ret_from_fork+0x10/0x20 [ 67.593910][ T4242] [ 67.593910][ T4242] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 67.596270][ T4242] __flush_work+0xf8/0x1c0 [ 67.597597][ T4242] flush_work+0x24/0x38 [ 67.598784][ T4242] hci_dev_do_close+0x16c/0x1060 [ 67.600171][ T4242] hci_unregister_dev+0x248/0x4d4 [ 67.601597][ T4242] vhci_release+0x74/0xc4 [ 67.602832][ T4242] __fput+0x1c4/0x800 [ 67.603972][ T4242] ____fput+0x20/0x30 [ 67.605143][ T4242] task_work_run+0x130/0x1e4 [ 67.606416][ T4242] do_exit+0x670/0x20bc [ 67.607685][ T4242] do_group_exit+0x110/0x268 [ 67.609080][ T4242] get_signal+0x634/0x1550 [ 67.610569][ T4242] do_notify_resume+0x3d0/0x32b8 [ 67.611985][ T4242] el0_svc+0xfc/0x1f0 [ 67.613188][ T4242] el0t_64_sync_handler+0x84/0xe4 [ 67.614618][ T4242] el0t_64_sync+0x1a0/0x1a4 [ 67.615949][ T4242] [ 67.615949][ T4242] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 67.617928][ T4242] __mutex_lock_common+0x194/0x2154 [ 67.619465][ T4242] mutex_lock_nested+0xa4/0xf8 [ 67.620790][ T4242] bg_scan_update+0x9c/0x470 [ 67.622142][ T4242] process_one_work+0x790/0x11b8 [ 67.623566][ T4242] worker_thread+0x910/0x1034 [ 67.625000][ T4242] kthread+0x37c/0x45c [ 67.626222][ T4242] ret_from_fork+0x10/0x20 [ 67.627512][ T4242] [ 67.627512][ T4242] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 67.630029][ T4242] __lock_acquire+0x32d4/0x7638 [ 67.631391][ T4242] lock_acquire+0x240/0x77c [ 67.632795][ T4242] __flush_work+0xf8/0x1c0 [ 67.634150][ T4242] __cancel_work_timer+0x3ec/0x548 [ 67.635629][ T4242] cancel_work_sync+0x24/0x38 [ 67.636939][ T4242] hci_request_cancel_all+0xcc/0x2d0 [ 67.638557][ T4242] hci_dev_do_close+0x54/0x1060 [ 67.640031][ T4242] hci_rfkill_set_block+0xdc/0x1d0 [ 67.641443][ T4242] rfkill_set_block+0x18c/0x37c [ 67.642848][ T4242] rfkill_fop_write+0x594/0x750 [ 67.644276][ T4242] vfs_write+0x280/0xb44 [ 67.645472][ T4242] ksys_write+0x15c/0x26c [ 67.646775][ T4242] __arm64_sys_write+0x7c/0x90 [ 67.648102][ T4242] invoke_syscall+0x98/0x2b8 [ 67.649402][ T4242] el0_svc_common+0x138/0x258 [ 67.650750][ T4242] do_el0_svc+0x58/0x14c [ 67.651990][ T4242] el0_svc+0x7c/0x1f0 [ 67.653211][ T4242] el0t_64_sync_handler+0x84/0xe4 [ 67.654676][ T4242] el0t_64_sync+0x1a0/0x1a4 [ 67.656004][ T4242] [ 67.656004][ T4242] other info that might help us debug this: [ 67.656004][ T4242] [ 67.658642][ T4242] Chain exists of: [ 67.658642][ T4242] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 67.658642][ T4242] [ 67.662944][ T4242] Possible unsafe locking scenario: [ 67.662944][ T4242] [ 67.664831][ T4242] CPU0 CPU1 [ 67.666280][ T4242] ---- ---- [ 67.667693][ T4242] lock(rfkill_global_mutex); [ 67.668934][ T4242] lock(&data->open_mutex); [ 67.670787][ T4242] lock(rfkill_global_mutex); [ 67.672736][ T4242] lock((work_completion)(&hdev->bg_scan_update)); [ 67.674457][ T4242] [ 67.674457][ T4242] *** DEADLOCK *** [ 67.674457][ T4242] [ 67.676605][ T4242] 1 lock held by syz.0.16/4242: [ 67.677961][ T4242] #0: ffff800016f39608 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 67.680576][ T4242] [ 67.680576][ T4242] stack backtrace: [ 67.682176][ T4242] CPU: 1 PID: 4242 Comm: syz.0.16 Not tainted 5.15.178-syzkaller #0 [ 67.684318][ T4242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 67.687057][ T4242] Call trace: [ 67.687866][ T4242] dump_backtrace+0x0/0x530 [ 67.689113][ T4242] show_stack+0x2c/0x3c [ 67.690201][ T4242] dump_stack_lvl+0x108/0x170 [ 67.691451][ T4242] dump_stack+0x1c/0x58 [ 67.692518][ T4242] print_circular_bug+0x150/0x1b8 [ 67.693846][ T4242] check_noncircular+0x2cc/0x378 [ 67.695070][ T4242] __lock_acquire+0x32d4/0x7638 [ 67.696280][ T4242] lock_acquire+0x240/0x77c [ 67.697458][ T4242] __flush_work+0xf8/0x1c0 [ 67.698617][ T4242] __cancel_work_timer+0x3ec/0x548 [ 67.699883][ T4242] cancel_work_sync+0x24/0x38 [ 67.701157][ T4242] hci_request_cancel_all+0xcc/0x2d0 [ 67.702541][ T4242] hci_dev_do_close+0x54/0x1060 [ 67.703827][ T4242] hci_rfkill_set_block+0xdc/0x1d0 [ 67.705197][ T4242] rfkill_set_block+0x18c/0x37c [ 67.706485][ T4242] rfkill_fop_write+0x594/0x750 [ 67.707736][ T4242] vfs_write+0x280/0xb44 [ 67.708780][ T4242] ksys_write+0x15c/0x26c [ 67.709833][ T4242] __arm64_sys_write+0x7c/0x90 [ 67.711015][ T4242] invoke_syscall+0x98/0x2b8 [ 67.712207][ T4242] el0_svc_common+0x138/0x258 [ 67.713395][ T4242] do_el0_svc+0x58/0x14c [ 67.714594][ T4242] el0_svc+0x7c/0x1f0 [ 67.715685][ T4242] el0t_64_sync_handler+0x84/0xe4 [ 67.716906][ T4242] el0t_64_sync+0x1a0/0x1a4