Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. 1970/01/01 00:00:37 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:38 parsed 1 programs [ 40.853361][ T4025] cgroup: Unknown subsys name 'net' [ 41.131933][ T4025] cgroup: Unknown subsys name 'rlimit' [ 41.481873][ T4025] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 47.408381][ T4039] chnl_net:caif_netlink_parms(): no params data found [ 47.454337][ T4039] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.455908][ T4039] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.458030][ T4039] device bridge_slave_0 entered promiscuous mode [ 47.462645][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.464188][ T4039] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.468275][ T4039] device bridge_slave_1 entered promiscuous mode [ 47.484309][ T4039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.489681][ T4039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.508527][ T4039] team0: Port device team_slave_0 added [ 47.511630][ T4039] team0: Port device team_slave_1 added [ 47.524143][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.526123][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.531339][ T4039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.538782][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.540331][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.546062][ T4039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.607889][ T4039] device hsr_slave_0 entered promiscuous mode [ 47.645855][ T4039] device hsr_slave_1 entered promiscuous mode [ 47.778028][ T4039] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.827887][ T4039] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.888362][ T4039] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.940777][ T4039] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.006258][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.008002][ T4039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.009959][ T4039] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.011395][ T4039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.060857][ T4039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.068116][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.071902][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.074994][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.078329][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 48.085856][ T4039] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.112670][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.114948][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.116557][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.128313][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.130799][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.132348][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.142915][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.147052][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.153566][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.163824][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.171691][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.179312][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.264127][ T4039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.268154][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.269864][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.283357][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.301929][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.304534][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.308140][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.312939][ T4039] device veth0_vlan entered promiscuous mode [ 48.321510][ T4039] device veth1_vlan entered promiscuous mode [ 48.341356][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.343998][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.347496][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.352451][ T4039] device veth0_macvtap entered promiscuous mode [ 48.357790][ T4039] device veth1_macvtap entered promiscuous mode [ 48.370655][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.372756][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.376153][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.381258][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.384911][ T4039] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.387529][ T4039] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.389584][ T4039] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.391316][ T4039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.394918][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.397328][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.537035][ T1622] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.952587][ T291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.954265][ T291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.961437][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.978078][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.979784][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.982195][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.562977][ T1622] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.632653][ T1622] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.685696][ T1622] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:53 executed programs: 0 [ 54.049707][ T4114] chnl_net:caif_netlink_parms(): no params data found [ 54.112030][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.116812][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.118973][ T4114] device bridge_slave_0 entered promiscuous mode [ 54.124044][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.126339][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.128569][ T4114] device bridge_slave_1 entered promiscuous mode [ 54.151733][ T4114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.157718][ T4114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.173818][ T4114] team0: Port device team_slave_0 added [ 54.178757][ T4114] team0: Port device team_slave_1 added [ 54.192554][ T4114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.194067][ T4114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.199557][ T4114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.203255][ T4114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.204747][ T4114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.212765][ T4114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.297608][ T4114] device hsr_slave_0 entered promiscuous mode [ 54.315943][ T4114] device hsr_slave_1 entered promiscuous mode [ 54.365828][ T4114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.367686][ T4114] Cannot create hsr debugfs directory [ 54.916880][ T4114] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.968302][ T4114] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.017528][ T4114] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.080672][ T4114] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.198778][ T4114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.210813][ T4114] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.212451][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.214730][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.234040][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.236803][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.238818][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.240367][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.242905][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.245119][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.249133][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.250617][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.287936][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.290060][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.292399][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.294747][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.298907][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.301555][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.304065][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.307915][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.310453][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.312541][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.318339][ T4114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.321008][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.329347][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.331611][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.412483][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.414117][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.420555][ T4114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.439730][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.442126][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.483617][ T4114] device veth0_vlan entered promiscuous mode [ 55.485604][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.487742][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.491267][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.493270][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.498653][ T4114] device veth1_vlan entered promiscuous mode [ 55.518707][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.520785][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.522806][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.524936][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.533099][ T4114] device veth0_macvtap entered promiscuous mode [ 55.538157][ T4114] device veth1_macvtap entered promiscuous mode [ 55.552008][ T4114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.554282][ T4114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.558378][ T4114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.560073][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.562128][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.564223][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.570697][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.575243][ T4114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.577837][ T4114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.580810][ T4114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.583442][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.587032][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.593474][ T4114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.595158][ T4114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.598010][ T4114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.599854][ T4114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.681171][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.682954][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.685675][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.703816][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.710171][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.712938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.902294][ T4209] [ 55.902812][ T4209] ====================================================== [ 55.904183][ T4209] WARNING: possible circular locking dependency detected [ 55.905534][ T4209] 5.15.173-syzkaller #0 Not tainted [ 55.906559][ T4209] ------------------------------------------------------ [ 55.907946][ T4209] syz.0.15/4209 is trying to acquire lock: [ 55.909168][ T4209] ffff0000db82cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 55.911481][ T4209] [ 55.911481][ T4209] but task is already holding lock: [ 55.913018][ T4209] ffff800016f25fe8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 55.914945][ T4209] [ 55.914945][ T4209] which lock already depends on the new lock. [ 55.914945][ T4209] [ 55.917176][ T4209] [ 55.917176][ T4209] the existing dependency chain (in reverse order) is: [ 55.919001][ T4209] [ 55.919001][ T4209] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 55.920574][ T4209] __mutex_lock_common+0x194/0x2154 [ 55.921689][ T4209] mutex_lock_nested+0xa4/0xf8 [ 55.922672][ T4209] rfkill_register+0x44/0x7a4 [ 55.923683][ T4209] hci_register_dev+0x3e0/0x880 [ 55.924734][ T4209] vhci_create_device+0x2c4/0x568 [ 55.925768][ T4209] vhci_write+0x318/0x3b8 [ 55.926705][ T4209] vfs_write+0x884/0xb44 [ 55.927686][ T4209] ksys_write+0x15c/0x26c [ 55.928675][ T4209] __arm64_sys_write+0x7c/0x90 [ 55.929763][ T4209] invoke_syscall+0x98/0x2b8 [ 55.930745][ T4209] el0_svc_common+0x138/0x258 [ 55.931807][ T4209] do_el0_svc+0x58/0x14c [ 55.932745][ T4209] el0_svc+0x7c/0x1f0 [ 55.933633][ T4209] el0t_64_sync_handler+0x84/0xe4 [ 55.934775][ T4209] el0t_64_sync+0x1a0/0x1a4 [ 55.935804][ T4209] [ 55.935804][ T4209] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 55.937571][ T4209] __mutex_lock_common+0x194/0x2154 [ 55.938689][ T4209] mutex_lock_nested+0xa4/0xf8 [ 55.939763][ T4209] vhci_send_frame+0x8c/0x10c [ 55.940798][ T4209] hci_send_frame+0x194/0x2f0 [ 55.941801][ T4209] hci_tx_work+0x9ac/0x16cc [ 55.942767][ T4209] process_one_work+0x790/0x11b8 [ 55.943765][ T4209] worker_thread+0x910/0x1034 [ 55.944830][ T4209] kthread+0x37c/0x45c [ 55.945707][ T4209] ret_from_fork+0x10/0x20 [ 55.946669][ T4209] [ 55.946669][ T4209] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 55.948556][ T4209] __flush_work+0xf8/0x1c0 [ 55.949444][ T4209] flush_work+0x24/0x38 [ 55.950432][ T4209] hci_dev_do_close+0x16c/0x1060 [ 55.951592][ T4209] hci_unregister_dev+0x248/0x4d4 [ 55.952720][ T4209] vhci_release+0x74/0xc4 [ 55.953798][ T4209] __fput+0x1c4/0x800 [ 55.954771][ T4209] ____fput+0x20/0x30 [ 55.955633][ T4209] task_work_run+0x130/0x1e4 [ 55.956732][ T4209] do_exit+0x670/0x20bc [ 55.957650][ T4209] do_group_exit+0x110/0x268 [ 55.958783][ T4209] get_signal+0x634/0x1550 [ 55.959767][ T4209] do_notify_resume+0x3d0/0x32b8 [ 55.960870][ T4209] el0_svc+0xfc/0x1f0 [ 55.961726][ T4209] el0t_64_sync_handler+0x84/0xe4 [ 55.962791][ T4209] el0t_64_sync+0x1a0/0x1a4 [ 55.963860][ T4209] [ 55.963860][ T4209] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 55.965354][ T4209] __mutex_lock_common+0x194/0x2154 [ 55.966538][ T4209] mutex_lock_nested+0xa4/0xf8 [ 55.967768][ T4209] bg_scan_update+0x9c/0x470 [ 55.968819][ T4209] process_one_work+0x790/0x11b8 [ 55.969958][ T4209] worker_thread+0x910/0x1034 [ 55.971104][ T4209] kthread+0x37c/0x45c [ 55.972140][ T4209] ret_from_fork+0x10/0x20 [ 55.973165][ T4209] [ 55.973165][ T4209] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 55.975097][ T4209] __lock_acquire+0x32d4/0x7638 [ 55.976223][ T4209] lock_acquire+0x240/0x77c [ 55.977392][ T4209] __flush_work+0xf8/0x1c0 [ 55.978436][ T4209] __cancel_work_timer+0x3ec/0x548 [ 55.979664][ T4209] cancel_work_sync+0x24/0x38 [ 55.980647][ T4209] hci_request_cancel_all+0xcc/0x2d0 [ 55.981812][ T4209] hci_dev_do_close+0x54/0x1060 [ 55.982951][ T4209] hci_rfkill_set_block+0xdc/0x1d0 [ 55.984038][ T4209] rfkill_set_block+0x18c/0x37c [ 55.985192][ T4209] rfkill_fop_write+0x594/0x750 [ 55.986364][ T4209] vfs_write+0x280/0xb44 [ 55.987325][ T4209] ksys_write+0x15c/0x26c [ 55.988377][ T4209] __arm64_sys_write+0x7c/0x90 [ 55.989374][ T4209] invoke_syscall+0x98/0x2b8 [ 55.990402][ T4209] el0_svc_common+0x138/0x258 [ 55.991426][ T4209] do_el0_svc+0x58/0x14c [ 55.992413][ T4209] el0_svc+0x7c/0x1f0 [ 55.993379][ T4209] el0t_64_sync_handler+0x84/0xe4 [ 55.994581][ T4209] el0t_64_sync+0x1a0/0x1a4 [ 55.995544][ T4209] [ 55.995544][ T4209] other info that might help us debug this: [ 55.995544][ T4209] [ 55.997704][ T4209] Chain exists of: [ 55.997704][ T4209] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 55.997704][ T4209] [ 56.000921][ T4209] Possible unsafe locking scenario: [ 56.000921][ T4209] [ 56.002482][ T4209] CPU0 CPU1 [ 56.003506][ T4209] ---- ---- [ 56.004633][ T4209] lock(rfkill_global_mutex); [ 56.005559][ T4209] lock(&data->open_mutex); [ 56.006895][ T4209] lock(rfkill_global_mutex); [ 56.008426][ T4209] lock((work_completion)(&hdev->bg_scan_update)); [ 56.009799][ T4209] [ 56.009799][ T4209] *** DEADLOCK *** [ 56.009799][ T4209] [ 56.011400][ T4209] 1 lock held by syz.0.15/4209: [ 56.012441][ T4209] #0: ffff800016f25fe8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 56.014467][ T4209] [ 56.014467][ T4209] stack backtrace: [ 56.015682][ T4209] CPU: 1 PID: 4209 Comm: syz.0.15 Not tainted 5.15.173-syzkaller #0 [ 56.017251][ T4209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 56.019302][ T4209] Call trace: [ 56.019984][ T4209] dump_backtrace+0x0/0x530 [ 56.020874][ T4209] show_stack+0x2c/0x3c [ 56.021684][ T4209] dump_stack_lvl+0x108/0x170 [ 56.022613][ T4209] dump_stack+0x1c/0x58 [ 56.023424][ T4209] print_circular_bug+0x150/0x1b8 [ 56.024439][ T4209] check_noncircular+0x2cc/0x378 [ 56.025415][ T4209] __lock_acquire+0x32d4/0x7638 [ 56.026393][ T4209] lock_acquire+0x240/0x77c [ 56.027309][ T4209] __flush_work+0xf8/0x1c0 [ 56.028205][ T4209] __cancel_work_timer+0x3ec/0x548 [ 56.029166][ T4209] cancel_work_sync+0x24/0x38 [ 56.030176][ T4209] hci_request_cancel_all+0xcc/0x2d0 [ 56.031286][ T4209] hci_dev_do_close+0x54/0x1060 [ 56.032173][ T4209] hci_rfkill_set_block+0xdc/0x1d0 [ 56.033354][ T4209] rfkill_set_block+0x18c/0x37c [ 56.034332][ T4209] rfkill_fop_write+0x594/0x750 [ 56.035311][ T4209] vfs_write+0x280/0xb44 [ 56.036228][ T4209] ksys_write+0x15c/0x26c [ 56.037088][ T4209] __arm64_sys_write+0x7c/0x90 [ 56.038013][ T4209] invoke_syscall+0x98/0x2b8 [ 56.038934][ T4209] el0_svc_common+0x138/0x258 [ 56.039958][ T4209] do_el0_svc+0x58/0x14c [ 56.040914][ T4209] el0_svc+0x7c/0x1f0 [ 56.041730][ T4209] el0t_64_sync_handler+0x84/0xe4 [ 56.042759][ T4209] el0t_64_sync+0x1a0/0x1a4 [ 56.045500][ T4040] Bluetooth: hci0: command 0x0409 tx timeout [ 56.468963][ T1622] device hsr_slave_0 left promiscuous mode [ 56.498233][ T1622] device hsr_slave_1 left promiscuous mode