Warning: Permanently added '10.128.1.33' (ED25519) to the list of known hosts. 1970/01/01 00:00:31 parsed 1 programs syzkaller login: [ 32.608687][ T4326] cgroup: Unknown subsys name 'net' [ 32.861654][ T4326] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.125030][ T4326] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 38.241442][ T209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.242756][ T209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.244682][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.252450][ T1882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.253659][ T1882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.255081][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.513686][ T4360] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.515125][ T4360] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.516314][ T4360] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.517770][ T4360] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.519815][ T4360] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.521065][ T4360] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.997179][ T4395] chnl_net:caif_netlink_parms(): no params data found [ 39.013871][ T4395] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.015109][ T4395] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.016543][ T4395] device bridge_slave_0 entered promiscuous mode [ 39.018698][ T4395] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.020225][ T4395] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.021670][ T4395] device bridge_slave_1 entered promiscuous mode [ 39.028369][ T4395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.031855][ T4395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.038820][ T4395] team0: Port device team_slave_0 added [ 39.040575][ T4395] team0: Port device team_slave_1 added [ 39.046875][ T4395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.048042][ T4395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.051938][ T4395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.054405][ T4395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.055506][ T4395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.059349][ T4395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.100781][ T4395] device hsr_slave_0 entered promiscuous mode [ 39.149034][ T4395] device hsr_slave_1 entered promiscuous mode [ 39.246446][ T4395] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.279695][ T4395] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.327973][ T4395] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.378509][ T4395] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.464840][ T4395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.479076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.480515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.483905][ T4395] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.486117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.487695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.490310][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.491443][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.492911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.495975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.497549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.500356][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.501451][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.503751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.506822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.510185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.512070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.513673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.516394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.518444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.532245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.533763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.536142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.537589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.540783][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.591750][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.593188][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.596981][ T4395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.603649][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.610518][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.612214][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.613572][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.615940][ T4395] device veth0_vlan entered promiscuous mode [ 39.624438][ T4395] device veth1_vlan entered promiscuous mode [ 39.630865][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.632510][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.634315][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.636614][ T4395] device veth0_macvtap entered promiscuous mode [ 39.639247][ T4395] device veth1_macvtap entered promiscuous mode [ 39.644553][ T4395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.645782][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.647279][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.648691][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.652412][ T4395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.653487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.654898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.657482][ T4395] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.659366][ T4395] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.660659][ T4395] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.662041][ T4395] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:40 executed programs: 0 [ 40.676306][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.678178][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.680241][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.681707][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.683071][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.684291][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.063972][ T4434] chnl_net:caif_netlink_parms(): no params data found [ 41.080659][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.081779][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.083456][ T4434] device bridge_slave_0 entered promiscuous mode [ 41.085631][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.086696][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.088050][ T4434] device bridge_slave_1 entered promiscuous mode [ 41.096918][ T4434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.099853][ T4434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.106966][ T4434] team0: Port device team_slave_0 added [ 41.109621][ T4434] team0: Port device team_slave_1 added [ 41.115232][ T4434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.116326][ T4434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.120345][ T4434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.122626][ T4434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.123715][ T4434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.127639][ T4434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.170522][ T4434] device hsr_slave_0 entered promiscuous mode [ 41.189085][ T4434] device hsr_slave_1 entered promiscuous mode [ 41.229386][ T4434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.230657][ T4434] Cannot create hsr debugfs directory [ 41.561185][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.739274][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 44.049981][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.818875][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 45.170121][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.250833][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.451326][ T4434] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.544177][ T4434] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.643353][ T4434] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.722684][ T4434] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.845932][ T4434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.849581][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.851001][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.853741][ T4434] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.855993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.857557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.860560][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.861623][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.862983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.868432][ T9] device hsr_slave_0 left promiscuous mode [ 46.898906][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 46.908993][ T9] device hsr_slave_1 left promiscuous mode [ 46.988949][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.990116][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.991650][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.992689][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.993984][ T9] device bridge_slave_1 left promiscuous mode [ 46.995386][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.039941][ T9] device bridge_slave_0 left promiscuous mode [ 47.040936][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.159204][ T9] device veth1_macvtap left promiscuous mode [ 47.160276][ T9] device veth0_macvtap left promiscuous mode [ 47.161134][ T9] device veth1_vlan left promiscuous mode [ 47.161924][ T9] device veth0_vlan left promiscuous mode [ 48.910104][ T9] team0 (unregistering): Port device team_slave_1 removed [ 48.978880][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 49.089533][ T9] team0 (unregistering): Port device team_slave_0 removed [ 49.249293][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.449977][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.029783][ T9] bond0 (unregistering): Released all slaves [ 52.262720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.264503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.266293][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.267365][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.272534][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.274522][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.277023][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.278742][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.280614][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.283430][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.285038][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.287427][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.289091][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.291772][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.293572][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.296138][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.346924][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.348231][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.352949][ T4434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.358019][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.360084][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.366060][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.367563][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.370318][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.371971][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.374304][ T4434] device veth0_vlan entered promiscuous mode [ 52.377340][ T4434] device veth1_vlan entered promiscuous mode [ 52.383776][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.385271][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.386733][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.388183][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.392228][ T4434] device veth0_macvtap entered promiscuous mode [ 52.394415][ T4434] device veth1_macvtap entered promiscuous mode [ 52.399195][ T4434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.400374][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.401987][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.403245][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.404707][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.407334][ T4434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.408585][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.411126][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.414498][ T4434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.415874][ T4434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.417213][ T4434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.418532][ T4434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.439523][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.440733][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.442637][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.447431][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.448593][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.451205][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.502103][ T4514] [ 52.502507][ T4514] ====================================================== [ 52.503615][ T4514] WARNING: possible circular locking dependency detected [ 52.504727][ T4514] syzkaller #0 Not tainted [ 52.505411][ T4514] ------------------------------------------------------ [ 52.506466][ T4514] syz.0.17/4514 is trying to acquire lock: [ 52.507304][ T4514] ffff0000d6b29458 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 52.508965][ T4514] [ 52.508965][ T4514] but task is already holding lock: [ 52.510023][ T4514] ffff0000d6b28130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x51c [ 52.511326][ T4514] [ 52.511326][ T4514] which lock already depends on the new lock. [ 52.511326][ T4514] [ 52.512749][ T4514] [ 52.512749][ T4514] the existing dependency chain (in reverse order) is: [ 52.514169][ T4514] [ 52.514169][ T4514] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 52.515337][ T4514] lock_sock_nested+0x70/0x130 [ 52.516115][ T4514] smc_listen_out+0x114/0x3b0 [ 52.516869][ T4514] smc_listen_work+0x1d0/0xde0 [ 52.517615][ T4514] process_one_work+0x7f4/0x13a8 [ 52.518515][ T4514] worker_thread+0x8c8/0xfbc [ 52.519315][ T4514] kthread+0x250/0x2d8 [ 52.520025][ T4514] ret_from_fork+0x10/0x20 [ 52.520761][ T4514] [ 52.520761][ T4514] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 52.522301][ T4514] __lock_acquire+0x293c/0x6544 [ 52.523045][ T4514] lock_acquire+0x20c/0x644 [ 52.523786][ T4514] __flush_work+0xf4/0x1bc [ 52.524539][ T4514] __cancel_work_timer+0x2ec/0x448 [ 52.525361][ T4514] cancel_work_sync+0x24/0x38 [ 52.526131][ T4514] smc_clcsock_release+0x64/0xe8 [ 52.526966][ T4514] __smc_release+0x568/0x6c4 [ 52.527709][ T4514] smc_close_non_accepted+0xd8/0x260 [ 52.528552][ T4514] smc_close_active+0x954/0xcc8 [ 52.529298][ T4514] __smc_release+0x48c/0x6c4 [ 52.530048][ T4514] smc_release+0x258/0x51c [ 52.530796][ T4514] sock_close+0xb4/0x1f8 [ 52.531545][ T4514] __fput+0x1bc/0x7c0 [ 52.532259][ T4514] ____fput+0x20/0x30 [ 52.532982][ T4514] task_work_run+0x1ec/0x270 [ 52.533791][ T4514] do_notify_resume+0x2038/0x2b28 [ 52.534692][ T4514] el0_svc+0x98/0x138 [ 52.535397][ T4514] el0t_64_sync_handler+0x84/0xf0 [ 52.536282][ T4514] el0t_64_sync+0x18c/0x190 [ 52.537094][ T4514] [ 52.537094][ T4514] other info that might help us debug this: [ 52.537094][ T4514] [ 52.538721][ T4514] Possible unsafe locking scenario: [ 52.538721][ T4514] [ 52.539818][ T4514] CPU0 CPU1 [ 52.540635][ T4514] ---- ---- [ 52.541399][ T4514] lock(sk_lock-AF_SMC/1); [ 52.542064][ T4514] lock((work_completion)(&new_smc->smc_listen_work)); [ 52.543424][ T4514] lock(sk_lock-AF_SMC/1); [ 52.544471][ T4514] lock((work_completion)(&new_smc->smc_listen_work)); [ 52.545486][ T4514] [ 52.545486][ T4514] *** DEADLOCK *** [ 52.545486][ T4514] [ 52.546789][ T4514] 2 locks held by syz.0.17/4514: [ 52.547646][ T4514] #0: ffff0000ea36fa10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 [ 52.549311][ T4514] #1: ffff0000d6b28130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x51c [ 52.550684][ T4514] [ 52.550684][ T4514] stack backtrace: [ 52.551506][ T4514] CPU: 1 PID: 4514 Comm: syz.0.17 Not tainted syzkaller #0 [ 52.552468][ T4514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 52.553870][ T4514] Call trace: [ 52.554312][ T4514] dump_backtrace+0x1c8/0x1f4 [ 52.554983][ T4514] show_stack+0x2c/0x3c [ 52.555641][ T4514] __dump_stack+0x30/0x40 [ 52.556222][ T4514] dump_stack_lvl+0xf8/0x160 [ 52.556914][ T4514] dump_stack+0x1c/0x5c [ 52.557508][ T4514] print_circular_bug+0x148/0x1b0 [ 52.558284][ T4514] check_noncircular+0x240/0x2d4 [ 52.559009][ T4514] __lock_acquire+0x293c/0x6544 [ 52.559737][ T4514] lock_acquire+0x20c/0x644 [ 52.560407][ T4514] __flush_work+0xf4/0x1bc [ 52.561129][ T4514] __cancel_work_timer+0x2ec/0x448 [ 52.561960][ T4514] cancel_work_sync+0x24/0x38 [ 52.562630][ T4514] smc_clcsock_release+0x64/0xe8 [ 52.563340][ T4514] __smc_release+0x568/0x6c4 [ 52.563996][ T4514] smc_close_non_accepted+0xd8/0x260 [ 52.564708][ T4514] smc_close_active+0x954/0xcc8 [ 52.565373][ T4514] __smc_release+0x48c/0x6c4 [ 52.566010][ T4514] smc_release+0x258/0x51c [ 52.566648][ T4514] sock_close+0xb4/0x1f8 [ 52.567251][ T4514] __fput+0x1bc/0x7c0 [ 52.567920][ T4514] ____fput+0x20/0x30 [ 52.568513][ T4514] task_work_run+0x1ec/0x270 [ 52.569136][ T4514] do_notify_resume+0x2038/0x2b28 [ 52.569881][ T4514] el0_svc+0x98/0x138 [ 52.570479][ T4514] el0t_64_sync_handler+0x84/0xf0 [ 52.571179][ T4514] el0t_64_sync+0x18c/0x190