Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. 1970/01/01 00:00:43 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:44 parsed 1 programs [ 47.034459][ T4030] cgroup: Unknown subsys name 'net' [ 47.334575][ T4030] cgroup: Unknown subsys name 'rlimit' [ 47.673935][ T4030] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 62.615410][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 62.653541][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.655575][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.658155][ T4043] device bridge_slave_0 entered promiscuous mode [ 62.662929][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.664877][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.667459][ T4043] device bridge_slave_1 entered promiscuous mode [ 62.683796][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.688150][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.702924][ T4043] team0: Port device team_slave_0 added [ 62.706345][ T4043] team0: Port device team_slave_1 added [ 62.721137][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.723122][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.730421][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.735098][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.736891][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.744357][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.810578][ T4043] device hsr_slave_0 entered promiscuous mode [ 62.868703][ T4043] device hsr_slave_1 entered promiscuous mode [ 63.004169][ T4043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.061466][ T4043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.101036][ T4043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.150850][ T4043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.206787][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.208896][ T4043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.211164][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.213288][ T4043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.249093][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.256706][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.261940][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.265339][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.268298][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 63.278575][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.284692][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.287549][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.289728][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.295272][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.297963][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.299990][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.313437][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.316372][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.323438][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.330571][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.336149][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.341442][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.417495][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.420782][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.429015][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.441294][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.454399][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.457268][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.460117][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.464291][ T4043] device veth0_vlan entered promiscuous mode [ 63.471255][ T4043] device veth1_vlan entered promiscuous mode [ 63.485173][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.487735][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.492390][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.496854][ T4043] device veth0_macvtap entered promiscuous mode [ 63.502345][ T4043] device veth1_macvtap entered promiscuous mode [ 63.515688][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.517921][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.522415][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.527779][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.531876][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.537961][ T4043] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.541143][ T4043] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.543491][ T4043] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.545831][ T4043] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.928838][ T136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.855960][ T650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.858208][ T650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.864012][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.876672][ T650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.879308][ T650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.882081][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.255332][ T136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.805433][ T136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.876367][ T136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.650670][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.652587][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 1970/01/01 00:01:09 executed programs: 0 [ 69.822449][ T4148] chnl_net:caif_netlink_parms(): no params data found [ 69.881393][ T4148] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.883425][ T4148] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.886397][ T4148] device bridge_slave_0 entered promiscuous mode [ 69.900198][ T4148] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.902209][ T4148] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.904874][ T4148] device bridge_slave_1 entered promiscuous mode [ 69.932835][ T4148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.937268][ T4148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.954248][ T4148] team0: Port device team_slave_0 added [ 69.957946][ T4148] team0: Port device team_slave_1 added [ 69.977123][ T136] device hsr_slave_0 left promiscuous mode [ 70.008667][ T136] device hsr_slave_1 left promiscuous mode [ 70.089167][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.091223][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.094278][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.096226][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.098744][ T136] device bridge_slave_1 left promiscuous mode [ 70.100937][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.151605][ T136] device bridge_slave_0 left promiscuous mode [ 70.153416][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.298828][ T136] device veth1_macvtap left promiscuous mode [ 70.300881][ T136] device veth0_macvtap left promiscuous mode [ 70.302608][ T136] device veth1_vlan left promiscuous mode [ 70.304398][ T136] device veth0_vlan left promiscuous mode [ 70.509018][ T136] team0 (unregistering): Port device team_slave_1 removed [ 70.517982][ T136] team0 (unregistering): Port device team_slave_0 removed [ 70.531825][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.565363][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.684914][ T136] bond0 (unregistering): Released all slaves [ 70.783818][ T4148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.785759][ T4148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.793353][ T4148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.806956][ T4148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.809095][ T4148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.816081][ T4148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.870482][ T4148] device hsr_slave_0 entered promiscuous mode [ 70.908854][ T4148] device hsr_slave_1 entered promiscuous mode [ 71.567948][ T4148] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.631066][ T4148] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.660595][ T4148] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.704668][ T4148] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.719888][ T25] Bluetooth: hci0: command 0x0409 tx timeout [ 71.848534][ T4148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.860825][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.863461][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.868173][ T4148] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.873542][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.876418][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.883061][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.885000][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.901636][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.905208][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.907907][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.915305][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.917312][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.920702][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.923631][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.939102][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.942456][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.945429][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.948277][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.953149][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.955767][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.959542][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.962173][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.966323][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.973766][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.077590][ T4148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.083670][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.085965][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.100827][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.109223][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.133268][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.136266][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.143682][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.146260][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.151875][ T4148] device veth0_vlan entered promiscuous mode [ 72.157783][ T4148] device veth1_vlan entered promiscuous mode [ 72.194954][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.197556][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.201454][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.204721][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.210290][ T4148] device veth0_macvtap entered promiscuous mode [ 72.215008][ T4148] device veth1_macvtap entered promiscuous mode [ 72.249862][ T4148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.252998][ T1691] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.255696][ T1691] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.258201][ T1691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.263163][ T1691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.277236][ T4148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.286061][ T4148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.289981][ T4148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.292430][ T4148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.294667][ T4148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.301988][ T1691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.305019][ T1691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.371749][ T1691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.373975][ T1691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.376657][ T1691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.402605][ T1691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.404828][ T1691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.407894][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.623921][ T4242] [ 72.624546][ T4242] ====================================================== [ 72.626410][ T4242] WARNING: possible circular locking dependency detected [ 72.628233][ T4242] 5.15.185-syzkaller #0 Not tainted [ 72.629620][ T4242] ------------------------------------------------------ [ 72.631456][ T4242] syz.0.16/4242 is trying to acquire lock: [ 72.632984][ T4242] ffff0000d449cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 72.635878][ T4242] [ 72.635878][ T4242] but task is already holding lock: [ 72.637837][ T4242] ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 72.640355][ T4242] [ 72.640355][ T4242] which lock already depends on the new lock. [ 72.640355][ T4242] [ 72.643196][ T4242] [ 72.643196][ T4242] the existing dependency chain (in reverse order) is: [ 72.645637][ T4242] [ 72.645637][ T4242] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 72.647711][ T4242] __mutex_lock_common+0x194/0x1edc [ 72.649245][ T4242] mutex_lock_nested+0xac/0x11c [ 72.650667][ T4242] rfkill_register+0x44/0x77c [ 72.652024][ T4242] hci_register_dev+0x3d8/0x854 [ 72.653443][ T4242] vhci_create_device+0x2bc/0x564 [ 72.654917][ T4242] vhci_write+0x30c/0x3ac [ 72.656202][ T4242] vfs_write+0x7c8/0xa2c [ 72.657491][ T4242] ksys_write+0x120/0x210 [ 72.658804][ T4242] __arm64_sys_write+0x7c/0x90 [ 72.660173][ T4242] invoke_syscall+0x98/0x2b8 [ 72.661548][ T4242] el0_svc_common+0x138/0x258 [ 72.662957][ T4242] do_el0_svc+0x58/0x14c [ 72.664224][ T4242] el0_svc+0x78/0x1e0 [ 72.665440][ T4242] el0t_64_sync_handler+0xcc/0xe4 [ 72.666916][ T4242] el0t_64_sync+0x1a0/0x1a4 [ 72.668281][ T4242] [ 72.668281][ T4242] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 72.670375][ T4242] __mutex_lock_common+0x194/0x1edc [ 72.671887][ T4242] mutex_lock_nested+0xac/0x11c [ 72.673306][ T4242] vhci_send_frame+0x88/0x118 [ 72.674672][ T4242] hci_send_frame+0x194/0x2f0 [ 72.676073][ T4242] hci_tx_work+0x7e4/0x1394 [ 72.677371][ T4242] process_one_work+0x79c/0x1140 [ 72.678802][ T4242] worker_thread+0x8f4/0x101c [ 72.680212][ T4242] kthread+0x374/0x454 [ 72.681466][ T4242] ret_from_fork+0x10/0x20 [ 72.682748][ T4242] [ 72.682748][ T4242] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 72.685184][ T4242] __flush_work+0xf4/0x1bc [ 72.686447][ T4242] flush_work+0x24/0x38 [ 72.687658][ T4242] hci_dev_do_close+0x164/0x105c [ 72.689080][ T4242] hci_unregister_dev+0x23c/0x4c0 [ 72.690551][ T4242] vhci_release+0x74/0xc4 [ 72.691856][ T4242] __fput+0x1c0/0x7f8 [ 72.693054][ T4242] ____fput+0x20/0x30 [ 72.694246][ T4242] task_work_run+0x12c/0x1e0 [ 72.695595][ T4242] do_exit+0x67c/0x1f58 [ 72.696844][ T4242] do_group_exit+0x100/0x268 [ 72.698221][ T4242] get_signal+0x73c/0x1340 [ 72.699524][ T4242] do_notify_resume+0x35c/0x3128 [ 72.700993][ T4242] el0_svc+0xf0/0x1e0 [ 72.702220][ T4242] el0t_64_sync_handler+0xcc/0xe4 [ 72.703704][ T4242] el0t_64_sync+0x1a0/0x1a4 [ 72.705033][ T4242] [ 72.705033][ T4242] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 72.707052][ T4242] __mutex_lock_common+0x194/0x1edc [ 72.708587][ T4242] mutex_lock_nested+0xac/0x11c [ 72.710030][ T4242] bg_scan_update+0x48/0x3d0 [ 72.711391][ T4242] process_one_work+0x79c/0x1140 [ 72.712897][ T4242] worker_thread+0x8f4/0x101c [ 72.714249][ T4242] kthread+0x374/0x454 [ 72.715460][ T4242] ret_from_fork+0x10/0x20 [ 72.716740][ T4242] [ 72.716740][ T4242] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 72.719422][ T4242] __lock_acquire+0x2928/0x651c [ 72.720854][ T4242] lock_acquire+0x1f4/0x620 [ 72.722201][ T4242] __flush_work+0xf4/0x1bc [ 72.723468][ T4242] __cancel_work_timer+0x2ec/0x448 [ 72.725020][ T4242] cancel_work_sync+0x24/0x38 [ 72.726387][ T4242] hci_request_cancel_all+0xbc/0x2d0 [ 72.727965][ T4242] hci_dev_do_close+0x54/0x105c [ 72.729380][ T4242] hci_rfkill_set_block+0xdc/0x1d0 [ 72.730879][ T4242] rfkill_set_block+0x18c/0x374 [ 72.732300][ T4242] rfkill_fop_write+0x4a4/0x5cc [ 72.733754][ T4242] do_iter_write+0x348/0x670 [ 72.735162][ T4242] do_writev+0x1e0/0x380 [ 72.736443][ T4242] __arm64_sys_writev+0x80/0x94 [ 72.737894][ T4242] invoke_syscall+0x98/0x2b8 [ 72.739284][ T4242] el0_svc_common+0x138/0x258 [ 72.740634][ T4242] do_el0_svc+0x58/0x14c [ 72.741890][ T4242] el0_svc+0x78/0x1e0 [ 72.743095][ T4242] el0t_64_sync_handler+0xcc/0xe4 [ 72.744606][ T4242] el0t_64_sync+0x1a0/0x1a4 [ 72.745976][ T4242] [ 72.745976][ T4242] other info that might help us debug this: [ 72.745976][ T4242] [ 72.748691][ T4242] Chain exists of: [ 72.748691][ T4242] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 72.748691][ T4242] [ 72.752877][ T4242] Possible unsafe locking scenario: [ 72.752877][ T4242] [ 72.754893][ T4242] CPU0 CPU1 [ 72.756288][ T4242] ---- ---- [ 72.757736][ T4242] lock(rfkill_global_mutex); [ 72.759015][ T4242] lock(&data->open_mutex); [ 72.760901][ T4242] lock(rfkill_global_mutex); [ 72.762850][ T4242] lock((work_completion)(&hdev->bg_scan_update)); [ 72.764698][ T4242] [ 72.764698][ T4242] *** DEADLOCK *** [ 72.764698][ T4242] [ 72.766919][ T4242] 1 lock held by syz.0.16/4242: [ 72.768196][ T4242] #0: ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 72.770979][ T4242] [ 72.770979][ T4242] stack backtrace: [ 72.772576][ T4242] CPU: 0 PID: 4242 Comm: syz.0.16 Not tainted 5.15.185-syzkaller #0 [ 72.774683][ T4242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.777327][ T4242] Call trace: [ 72.778209][ T4242] dump_backtrace+0x0/0x43c [ 72.779430][ T4242] show_stack+0x2c/0x3c [ 72.780577][ T4242] __dump_stack+0x30/0x40 [ 72.781698][ T4242] dump_stack_lvl+0xf8/0x160 [ 72.782959][ T4242] dump_stack+0x1c/0x5c [ 72.784056][ T4242] print_circular_bug+0x148/0x1b0 [ 72.785419][ T4242] check_noncircular+0x240/0x2d4 [ 72.786775][ T4242] __lock_acquire+0x2928/0x651c [ 72.788052][ T4242] lock_acquire+0x1f4/0x620 [ 72.789264][ T4242] __flush_work+0xf4/0x1bc [ 72.790449][ T4242] __cancel_work_timer+0x2ec/0x448 [ 72.791799][ T4242] cancel_work_sync+0x24/0x38 [ 72.793024][ T4242] hci_request_cancel_all+0xbc/0x2d0 [ 72.794407][ T4242] hci_dev_do_close+0x54/0x105c [ 72.795705][ T4242] hci_rfkill_set_block+0xdc/0x1d0 [ 72.797090][ T4242] rfkill_set_block+0x18c/0x374 [ 72.798430][ T4242] rfkill_fop_write+0x4a4/0x5cc [ 72.799723][ T4242] do_iter_write+0x348/0x670 [ 72.800968][ T4242] do_writev+0x1e0/0x380 [ 72.802156][ T4242] __arm64_sys_writev+0x80/0x94 [ 72.803458][ T4242] invoke_syscall+0x98/0x2b8 [ 72.804718][ T4242] el0_svc_common+0x138/0x258 [ 72.805978][ T4242] do_el0_svc+0x58/0x14c [ 72.807114][ T4242] el0_svc+0x78/0x1e0 [ 72.808128][ T4242] el0t_64_sync_handler+0xcc/0xe4 [ 72.809681][ T4242] el0t_64_sync+0x1a0/0x1a4