Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. 1970/01/01 00:00:32 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:32 parsed 1 programs [ 34.072007][ T4326] cgroup: Unknown subsys name 'net' [ 34.347779][ T4326] cgroup: Unknown subsys name 'rlimit' [ 34.609855][ T4326] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 39.890166][ T4351] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.891528][ T4351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.892843][ T4351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.894228][ T4351] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.895939][ T4351] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.897127][ T4351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.174880][ T4363] chnl_net:caif_netlink_parms(): no params data found [ 40.194338][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.195786][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.197274][ T4363] device bridge_slave_0 entered promiscuous mode [ 40.199580][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.200722][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.202191][ T4363] device bridge_slave_1 entered promiscuous mode [ 40.209974][ T4363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.212395][ T4363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.219656][ T4363] team0: Port device team_slave_0 added [ 40.221977][ T4363] team0: Port device team_slave_1 added [ 40.228898][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.230009][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.233909][ T4363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.236687][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.237696][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.241803][ T4363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.286219][ T4363] device hsr_slave_0 entered promiscuous mode [ 40.335446][ T4363] device hsr_slave_1 entered promiscuous mode [ 40.420213][ T4363] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.436859][ T4363] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.495588][ T4363] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.546442][ T4363] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.595532][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.596788][ T4363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.598256][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.599420][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.617947][ T4363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.622227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.627236][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.628935][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.630860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 40.637960][ T4363] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.641711][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.643202][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.644298][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.647897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.649502][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.650600][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.656855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.658569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.661527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.664289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.676046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.680378][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.736355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.737810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.740683][ T4363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.748879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.759062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.760896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.762293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.764285][ T4363] device veth0_vlan entered promiscuous mode [ 40.767321][ T4363] device veth1_vlan entered promiscuous mode [ 40.773382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.774893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.781056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.783484][ T4363] device veth0_macvtap entered promiscuous mode [ 40.787440][ T4363] device veth1_macvtap entered promiscuous mode [ 40.792149][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.793367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.796073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.799220][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.800540][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.803116][ T4363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.804464][ T4363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.806674][ T4363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.807935][ T4363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.419961][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.421310][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.423409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.438348][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.439735][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.441494][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:41 executed programs: 0 [ 41.800944][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.802488][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.804166][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.806087][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.807494][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 41.808725][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 42.048202][ T252] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.089004][ T4426] chnl_net:caif_netlink_parms(): no params data found [ 42.104284][ T4426] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.105702][ T4426] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.107138][ T4426] device bridge_slave_0 entered promiscuous mode [ 42.108927][ T4426] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.109989][ T4426] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.111395][ T4426] device bridge_slave_1 entered promiscuous mode [ 42.117950][ T4426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.120248][ T4426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.128048][ T4426] team0: Port device team_slave_0 added [ 42.129618][ T4426] team0: Port device team_slave_1 added [ 42.134913][ T4426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.136301][ T4426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.140383][ T4426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.142605][ T4426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.143646][ T4426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.148210][ T4426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.196375][ T4426] device hsr_slave_0 entered promiscuous mode [ 42.236312][ T4426] device hsr_slave_1 entered promiscuous mode [ 42.305256][ T4426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.306477][ T4426] Cannot create hsr debugfs directory [ 43.835835][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 44.006847][ T252] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.915402][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 46.406372][ T252] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.507419][ T252] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.759694][ T4426] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.796486][ T4426] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.897189][ T4426] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.936175][ T4426] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.995161][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 48.039189][ T4426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.042808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.044299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.047698][ T4426] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.057344][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.058802][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.060332][ T626] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.061446][ T626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.063297][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.064853][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.069026][ T626] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.070099][ T626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.071439][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.072928][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.074439][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.076778][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.078424][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.079936][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.081444][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.082817][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.084205][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.087166][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.147702][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.151293][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.152810][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.194938][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.196409][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.199621][ T4426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.210258][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.212013][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.213452][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.214852][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.216522][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.217867][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.220184][ T4426] device veth0_vlan entered promiscuous mode [ 48.223172][ T4426] device veth1_vlan entered promiscuous mode [ 48.230141][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.231644][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.233086][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.234618][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.237915][ T4426] device veth0_macvtap entered promiscuous mode [ 48.240085][ T4426] device veth1_macvtap entered promiscuous mode [ 48.244138][ T4426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.246336][ T4426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.248473][ T4426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.249843][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.251345][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.252778][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.254243][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.257062][ T4426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.258829][ T4426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.260912][ T4426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.263050][ T4426] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.264338][ T4426] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.266530][ T4426] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.267971][ T4426] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.578635][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.580235][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.594980][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.597357][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.602757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.606965][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.608166][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.610013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.679058][ T4518] [ 48.679510][ T4518] ====================================================== [ 48.680638][ T4518] WARNING: possible circular locking dependency detected [ 48.681786][ T4518] 6.1.147-syzkaller #0 Not tainted [ 48.682557][ T4518] ------------------------------------------------------ [ 48.683699][ T4518] syz.0.17/4518 is trying to acquire lock: [ 48.684640][ T4518] ffff0000cd551450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 48.686543][ T4518] [ 48.686543][ T4518] but task is already holding lock: [ 48.687747][ T4518] ffff0000cd550130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x51c [ 48.689297][ T4518] [ 48.689297][ T4518] which lock already depends on the new lock. [ 48.689297][ T4518] [ 48.691007][ T4518] [ 48.691007][ T4518] the existing dependency chain (in reverse order) is: [ 48.692432][ T4518] [ 48.692432][ T4518] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 48.693744][ T4518] lock_sock_nested+0x70/0x130 [ 48.694574][ T4518] smc_listen_out+0x114/0x3b0 [ 48.695406][ T4518] smc_listen_work+0x1d0/0xde0 [ 48.696236][ T4518] process_one_work+0x7f4/0x13a8 [ 48.697157][ T4518] worker_thread+0x8c8/0xfbc [ 48.698006][ T4518] kthread+0x250/0x2d8 [ 48.698789][ T4518] ret_from_fork+0x10/0x20 [ 48.699602][ T4518] [ 48.699602][ T4518] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 48.701227][ T4518] __lock_acquire+0x293c/0x6544 [ 48.702028][ T4518] lock_acquire+0x20c/0x644 [ 48.702750][ T4518] __flush_work+0xf4/0x1bc [ 48.703482][ T4518] __cancel_work_timer+0x2ec/0x448 [ 48.704328][ T4518] cancel_work_sync+0x24/0x38 [ 48.705116][ T4518] smc_clcsock_release+0x64/0xe8 [ 48.705997][ T4518] __smc_release+0x568/0x6c4 [ 48.706797][ T4518] smc_close_non_accepted+0xd8/0x260 [ 48.707735][ T4518] smc_close_active+0x954/0xcc8 [ 48.708582][ T4518] __smc_release+0x48c/0x6c4 [ 48.709372][ T4518] smc_release+0x258/0x51c [ 48.710076][ T4518] sock_close+0xb4/0x1f8 [ 48.710769][ T4518] __fput+0x1bc/0x7c0 [ 48.711421][ T4518] ____fput+0x20/0x30 [ 48.712079][ T4518] task_work_run+0x1ec/0x270 [ 48.712838][ T4518] do_notify_resume+0x1f70/0x2b0c [ 48.713619][ T4518] el0_svc+0x98/0x138 [ 48.714313][ T4518] el0t_64_sync_handler+0x84/0xf0 [ 48.715143][ T4518] el0t_64_sync+0x18c/0x190 [ 48.715828][ T4518] [ 48.715828][ T4518] other info that might help us debug this: [ 48.715828][ T4518] [ 48.717415][ T4518] Possible unsafe locking scenario: [ 48.717415][ T4518] [ 48.718399][ T4518] CPU0 CPU1 [ 48.719199][ T4518] ---- ---- [ 48.720036][ T4518] lock(sk_lock-AF_SMC/1); [ 48.720745][ T4518] lock((work_completion)(&new_smc->smc_listen_work)); [ 48.722177][ T4518] lock(sk_lock-AF_SMC/1); [ 48.723278][ T4518] lock((work_completion)(&new_smc->smc_listen_work)); [ 48.724326][ T4518] [ 48.724326][ T4518] *** DEADLOCK *** [ 48.724326][ T4518] [ 48.725600][ T4518] 2 locks held by syz.0.17/4518: [ 48.726408][ T4518] #0: ffff0000e8c66e10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 [ 48.728056][ T4518] #1: ffff0000cd550130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x51c [ 48.729502][ T4518] [ 48.729502][ T4518] stack backtrace: [ 48.730426][ T4518] CPU: 1 PID: 4518 Comm: syz.0.17 Not tainted 6.1.147-syzkaller #0 [ 48.731598][ T4518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 48.733076][ T4518] Call trace: [ 48.733570][ T4518] dump_backtrace+0x1c8/0x1f4 [ 48.734281][ T4518] show_stack+0x2c/0x3c [ 48.734991][ T4518] __dump_stack+0x30/0x40 [ 48.735710][ T4518] dump_stack_lvl+0xf8/0x160 [ 48.736479][ T4518] dump_stack+0x1c/0x5c [ 48.737184][ T4518] print_circular_bug+0x148/0x1b0 [ 48.738002][ T4518] check_noncircular+0x240/0x2d4 [ 48.738779][ T4518] __lock_acquire+0x293c/0x6544 [ 48.739553][ T4518] lock_acquire+0x20c/0x644 [ 48.740268][ T4518] __flush_work+0xf4/0x1bc [ 48.740999][ T4518] __cancel_work_timer+0x2ec/0x448 [ 48.741830][ T4518] cancel_work_sync+0x24/0x38 [ 48.742652][ T4518] smc_clcsock_release+0x64/0xe8 [ 48.743509][ T4518] __smc_release+0x568/0x6c4 [ 48.744243][ T4518] smc_close_non_accepted+0xd8/0x260 [ 48.745073][ T4518] smc_close_active+0x954/0xcc8 [ 48.745806][ T4518] __smc_release+0x48c/0x6c4 [ 48.746539][ T4518] smc_release+0x258/0x51c [ 48.747233][ T4518] sock_close+0xb4/0x1f8 [ 48.747847][ T4518] __fput+0x1bc/0x7c0 [ 48.748425][ T4518] ____fput+0x20/0x30 [ 48.749046][ T4518] task_work_run+0x1ec/0x270 [ 48.749735][ T4518] do_notify_resume+0x1f70/0x2b0c [ 48.750543][ T4518] el0_svc+0x98/0x138 [ 48.751125][ T4518] el0t_64_sync_handler+0x84/0xf0 [ 48.751949][ T4518] el0t_64_sync+0x18c/0x190