Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. 1970/01/01 00:00:44 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:46 parsed 1 programs [ 48.879033][ T4033] cgroup: Unknown subsys name 'net' [ 49.123052][ T4033] cgroup: Unknown subsys name 'rlimit' [ 49.464862][ T4033] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 57.621109][ T335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.623279][ T335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.626062][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.643051][ T335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.645137][ T335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.660719][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.892227][ T4089] chnl_net:caif_netlink_parms(): no params data found [ 58.931207][ T4089] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.933197][ T4089] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.935937][ T4089] device bridge_slave_0 entered promiscuous mode [ 58.941167][ T4089] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.943104][ T4089] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.945703][ T4089] device bridge_slave_1 entered promiscuous mode [ 58.961596][ T4089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.965955][ T4089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.983127][ T4089] team0: Port device team_slave_0 added [ 58.986751][ T4089] team0: Port device team_slave_1 added [ 59.000905][ T4089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.002766][ T4089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.009658][ T4089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.014611][ T4089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.016419][ T4089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.025343][ T4089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.109570][ T4089] device hsr_slave_0 entered promiscuous mode [ 59.167375][ T4089] device hsr_slave_1 entered promiscuous mode [ 59.323473][ T4089] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.359907][ T4089] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.409954][ T4089] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.471109][ T4089] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.524127][ T4089] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.526120][ T4089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.529133][ T4089] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.531010][ T4089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.581185][ T4089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.590105][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.594058][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.597361][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.605670][ T4089] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.615723][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.619464][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.621352][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.629191][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.631746][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.633509][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.646805][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.650218][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.660422][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.674079][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.676846][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.681886][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.760922][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.763010][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.773808][ T4089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.788849][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.805778][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.808870][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.811236][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.816330][ T4089] device veth0_vlan entered promiscuous mode [ 59.825888][ T4089] device veth1_vlan entered promiscuous mode [ 59.831959][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.856241][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.861640][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.866160][ T4089] device veth0_macvtap entered promiscuous mode [ 59.871405][ T4089] device veth1_macvtap entered promiscuous mode [ 59.883900][ T4089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.886169][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.890580][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.893358][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.896516][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.903050][ T4089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.908385][ T4089] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.910809][ T4089] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.913230][ T4089] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.915450][ T4089] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.920268][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.923095][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 1970/01/01 00:01:00 executed programs: 0 [ 60.624362][ T4118] chnl_net:caif_netlink_parms(): no params data found [ 60.660523][ T4118] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.662486][ T4118] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.665179][ T4118] device bridge_slave_0 entered promiscuous mode [ 60.670289][ T4118] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.672287][ T4118] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.674869][ T4118] device bridge_slave_1 entered promiscuous mode [ 60.692757][ T4118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.699340][ T4118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.740975][ T4118] team0: Port device team_slave_0 added [ 60.745331][ T4118] team0: Port device team_slave_1 added [ 60.761930][ T4118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.763823][ T4118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.771434][ T4118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.776296][ T4118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.778622][ T4118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.785550][ T4118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.841729][ T4118] device hsr_slave_0 entered promiscuous mode [ 60.877323][ T4118] device hsr_slave_1 entered promiscuous mode [ 60.917194][ T4118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.919398][ T4118] Cannot create hsr debugfs directory [ 60.989712][ T4118] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.597735][ T4106] Bluetooth: hci0: command 0x0409 tx timeout [ 63.495113][ T4118] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.667164][ T4107] Bluetooth: hci0: command 0x041b tx timeout [ 65.376512][ T4118] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.436209][ T4118] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.651973][ T4118] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.699662][ T4118] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.739633][ T4118] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.798982][ T4118] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.933446][ T4118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.942423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.944957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.955392][ T4118] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.960932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.964060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.966584][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.968526][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.991279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.993888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.996500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.005224][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.007180][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.020687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.024058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.026859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.043105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.068777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.071491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.074369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.090670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.093355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.096038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.100683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.105304][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.182011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.184170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.193249][ T4118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.216223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.220122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.238465][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.241095][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.244172][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.266651][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.274060][ T4118] device veth0_vlan entered promiscuous mode [ 66.281231][ T4118] device veth1_vlan entered promiscuous mode [ 66.308477][ T4118] device veth0_macvtap entered promiscuous mode [ 66.311239][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.313764][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.317444][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.321575][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.326262][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.332510][ T4118] device veth1_macvtap entered promiscuous mode [ 66.342611][ T4118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.345504][ T4118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.351389][ T4118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.355667][ T4118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.359110][ T4118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.362656][ T4118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.366705][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.370830][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.373517][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.376203][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.379645][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.384383][ T4118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.386775][ T4118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.389319][ T4118] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.391667][ T4118] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.434035][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.436521][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.441357][ T1717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.460060][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.462270][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.465283][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.588146][ T4132] [ 66.588903][ T4132] ====================================================== [ 66.590687][ T4132] WARNING: possible circular locking dependency detected [ 66.592464][ T4132] 5.15.178-syzkaller #0 Not tainted [ 66.593800][ T4132] ------------------------------------------------------ [ 66.595623][ T4132] syz.0.16/4132 is trying to acquire lock: [ 66.597105][ T4132] ffff0000d851cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 66.600137][ T4132] [ 66.600137][ T4132] but task is already holding lock: [ 66.602002][ T4132] ffff800016f39608 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 66.604650][ T4132] [ 66.604650][ T4132] which lock already depends on the new lock. [ 66.604650][ T4132] [ 66.607412][ T4132] [ 66.607412][ T4132] the existing dependency chain (in reverse order) is: [ 66.609848][ T4132] [ 66.609848][ T4132] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 66.611994][ T4132] __mutex_lock_common+0x194/0x2154 [ 66.613578][ T4132] mutex_lock_nested+0xa4/0xf8 [ 66.615050][ T4132] rfkill_register+0x44/0x7a4 [ 66.616496][ T4132] hci_register_dev+0x3e0/0x880 [ 66.617947][ T4132] vhci_create_device+0x2c4/0x568 [ 66.619402][ T4132] vhci_write+0x318/0x3b8 [ 66.620674][ T4132] vfs_write+0x884/0xb44 [ 66.621920][ T4132] ksys_write+0x15c/0x26c [ 66.623240][ T4132] __arm64_sys_write+0x7c/0x90 [ 66.624634][ T4132] invoke_syscall+0x98/0x2b8 [ 66.626015][ T4132] el0_svc_common+0x138/0x258 [ 66.627421][ T4132] do_el0_svc+0x58/0x14c [ 66.628660][ T4132] el0_svc+0x7c/0x1f0 [ 66.629828][ T4132] el0t_64_sync_handler+0x84/0xe4 [ 66.631265][ T4132] el0t_64_sync+0x1a0/0x1a4 [ 66.632547][ T4132] [ 66.632547][ T4132] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 66.634649][ T4132] __mutex_lock_common+0x194/0x2154 [ 66.636118][ T4132] mutex_lock_nested+0xa4/0xf8 [ 66.637527][ T4132] vhci_send_frame+0x8c/0x10c [ 66.638946][ T4132] hci_send_frame+0x194/0x2f0 [ 66.640343][ T4132] hci_tx_work+0x9ac/0x16cc [ 66.641703][ T4132] process_one_work+0x790/0x11b8 [ 66.643141][ T4132] worker_thread+0x910/0x1034 [ 66.644500][ T4132] kthread+0x37c/0x45c [ 66.645707][ T4132] ret_from_fork+0x10/0x20 [ 66.647015][ T4132] [ 66.647015][ T4132] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 66.649499][ T4132] __flush_work+0xf8/0x1c0 [ 66.650782][ T4132] flush_work+0x24/0x38 [ 66.651997][ T4132] hci_dev_do_close+0x16c/0x1060 [ 66.653446][ T4132] hci_unregister_dev+0x248/0x4d4 [ 66.654923][ T4132] vhci_release+0x74/0xc4 [ 66.656240][ T4132] __fput+0x1c4/0x800 [ 66.657435][ T4132] ____fput+0x20/0x30 [ 66.658664][ T4132] task_work_run+0x130/0x1e4 [ 66.659975][ T4132] do_exit+0x670/0x20bc [ 66.661280][ T4132] do_group_exit+0x110/0x268 [ 66.662638][ T4132] get_signal+0x634/0x1550 [ 66.663925][ T4132] do_notify_resume+0x3d0/0x32b8 [ 66.665369][ T4132] el0_svc+0xfc/0x1f0 [ 66.666543][ T4132] el0t_64_sync_handler+0x84/0xe4 [ 66.667971][ T4132] el0t_64_sync+0x1a0/0x1a4 [ 66.669302][ T4132] [ 66.669302][ T4132] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 66.671297][ T4132] __mutex_lock_common+0x194/0x2154 [ 66.672849][ T4132] mutex_lock_nested+0xa4/0xf8 [ 66.674307][ T4132] bg_scan_update+0x9c/0x470 [ 66.675648][ T4132] process_one_work+0x790/0x11b8 [ 66.677087][ T4132] worker_thread+0x910/0x1034 [ 66.678462][ T4132] kthread+0x37c/0x45c [ 66.679701][ T4132] ret_from_fork+0x10/0x20 [ 66.680993][ T4132] [ 66.680993][ T4132] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 66.683626][ T4132] __lock_acquire+0x32d4/0x7638 [ 66.684993][ T4132] lock_acquire+0x240/0x77c [ 66.686337][ T4132] __flush_work+0xf8/0x1c0 [ 66.687699][ T4132] __cancel_work_timer+0x3ec/0x548 [ 66.689166][ T4132] cancel_work_sync+0x24/0x38 [ 66.690610][ T4132] hci_request_cancel_all+0xcc/0x2d0 [ 66.692122][ T4132] hci_dev_do_close+0x54/0x1060 [ 66.693561][ T4132] hci_rfkill_set_block+0xdc/0x1d0 [ 66.695085][ T4132] rfkill_set_block+0x18c/0x37c [ 66.696495][ T4132] rfkill_fop_write+0x594/0x750 [ 66.697905][ T4132] do_iter_write+0x33c/0x66c [ 66.699271][ T4132] do_writev+0x220/0x3ec [ 66.700572][ T4132] __arm64_sys_writev+0x80/0x94 [ 66.701977][ T4132] invoke_syscall+0x98/0x2b8 [ 66.703349][ T4132] el0_svc_common+0x138/0x258 [ 66.704716][ T4132] do_el0_svc+0x58/0x14c [ 66.706079][ T4132] el0_svc+0x7c/0x1f0 [ 66.707296][ T4132] el0t_64_sync_handler+0x84/0xe4 [ 66.708788][ T4132] el0t_64_sync+0x1a0/0x1a4 [ 66.710130][ T4132] [ 66.710130][ T4132] other info that might help us debug this: [ 66.710130][ T4132] [ 66.712924][ T4132] Chain exists of: [ 66.712924][ T4132] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 66.712924][ T4132] [ 66.717093][ T4132] Possible unsafe locking scenario: [ 66.717093][ T4132] [ 66.719035][ T4132] CPU0 CPU1 [ 66.720459][ T4132] ---- ---- [ 66.721866][ T4132] lock(rfkill_global_mutex); [ 66.723180][ T4132] lock(&data->open_mutex); [ 66.725144][ T4132] lock(rfkill_global_mutex); [ 66.727121][ T4132] lock((work_completion)(&hdev->bg_scan_update)); [ 66.728936][ T4132] [ 66.728936][ T4132] *** DEADLOCK *** [ 66.728936][ T4132] [ 66.731111][ T4132] 1 lock held by syz.0.16/4132: [ 66.732423][ T4132] #0: ffff800016f39608 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 66.735212][ T4132] [ 66.735212][ T4132] stack backtrace: [ 66.736741][ T4132] CPU: 1 PID: 4132 Comm: syz.0.16 Not tainted 5.15.178-syzkaller #0 [ 66.738950][ T4132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 66.741668][ T4132] Call trace: [ 66.742577][ T4132] dump_backtrace+0x0/0x530 [ 66.743778][ T4132] show_stack+0x2c/0x3c [ 66.744882][ T4132] dump_stack_lvl+0x108/0x170 [ 66.746095][ T4132] dump_stack+0x1c/0x58 [ 66.747218][ T4132] print_circular_bug+0x150/0x1b8 [ 66.748561][ T4132] check_noncircular+0x2cc/0x378 [ 66.749859][ T4132] __lock_acquire+0x32d4/0x7638 [ 66.751150][ T4132] lock_acquire+0x240/0x77c [ 66.752312][ T4132] __flush_work+0xf8/0x1c0 [ 66.753518][ T4132] __cancel_work_timer+0x3ec/0x548 [ 66.754994][ T4132] cancel_work_sync+0x24/0x38 [ 66.756305][ T4132] hci_request_cancel_all+0xcc/0x2d0 [ 66.757772][ T4132] hci_dev_do_close+0x54/0x1060 [ 66.759077][ T4132] hci_rfkill_set_block+0xdc/0x1d0 [ 66.760469][ T4132] rfkill_set_block+0x18c/0x37c [ 66.761824][ T4132] rfkill_fop_write+0x594/0x750 [ 66.763159][ T4132] do_iter_write+0x33c/0x66c [ 66.764417][ T4132] do_writev+0x220/0x3ec [ 66.765573][ T4132] __arm64_sys_writev+0x80/0x94 [ 66.766942][ T4132] invoke_syscall+0x98/0x2b8 [ 66.768208][ T4132] el0_svc_common+0x138/0x258 [ 66.769522][ T4132] do_el0_svc+0x58/0x14c [ 66.770690][ T4132] el0_svc+0x7c/0x1f0 [ 66.771752][ T4132] el0t_64_sync_handler+0x84/0xe4 [ 66.773102][ T4132] el0t_64_sync+0x1a0/0x1a4 [ 66.785236][ T4105] Bluetooth: hci0: command 0x040f tx timeout