Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. 1970/01/01 00:00:44 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:45 parsed 1 programs [ 48.208214][ T4028] cgroup: Unknown subsys name 'net' [ 48.466088][ T4028] cgroup: Unknown subsys name 'rlimit' [ 48.813140][ T4028] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 57.651536][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.653774][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.656502][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.673193][ T385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.675443][ T385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.678070][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.451466][ T4083] chnl_net:caif_netlink_parms(): no params data found [ 58.493963][ T4083] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.495980][ T4083] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.498726][ T4083] device bridge_slave_0 entered promiscuous mode [ 58.503617][ T4083] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.505558][ T4083] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.508221][ T4083] device bridge_slave_1 entered promiscuous mode [ 58.527215][ T4083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.534296][ T4083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.552262][ T4083] team0: Port device team_slave_0 added [ 58.555622][ T4083] team0: Port device team_slave_1 added [ 58.572089][ T4083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.573917][ T4083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.581307][ T4083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.586032][ T4083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.587773][ T4083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.595969][ T4083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.653478][ T4083] device hsr_slave_0 entered promiscuous mode [ 58.700224][ T4083] device hsr_slave_1 entered promiscuous mode [ 58.849527][ T4083] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.892909][ T4083] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.933706][ T4083] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.972277][ T4083] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.027989][ T4083] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.030153][ T4083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.032554][ T4083] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.034382][ T4083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.079232][ T4083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.088912][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.092997][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.095988][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.099579][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 59.109765][ T4083] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.117738][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.120757][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.122715][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.131966][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.134499][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.136272][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.148319][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.153171][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.171398][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.173978][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.179186][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.184776][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.263634][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.265820][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.271946][ T4083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.287461][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.303398][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.308529][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.311806][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.315941][ T4083] device veth0_vlan entered promiscuous mode [ 59.325380][ T4083] device veth1_vlan entered promiscuous mode [ 59.343327][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.345929][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.348603][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.355065][ T4083] device veth0_macvtap entered promiscuous mode [ 59.359702][ T4083] device veth1_macvtap entered promiscuous mode [ 59.383083][ T4083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.385234][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.388531][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.394621][ T4083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.396819][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.403505][ T4083] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.405767][ T4083] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.407873][ T4083] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.410956][ T4083] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:59 executed programs: 0 [ 60.014303][ T4119] chnl_net:caif_netlink_parms(): no params data found [ 60.052372][ T4119] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.054450][ T4119] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.057156][ T4119] device bridge_slave_0 entered promiscuous mode [ 60.060889][ T4119] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.062865][ T4119] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.065396][ T4119] device bridge_slave_1 entered promiscuous mode [ 60.082059][ T4119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.086677][ T4119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.102484][ T4119] team0: Port device team_slave_0 added [ 60.106955][ T4119] team0: Port device team_slave_1 added [ 60.121536][ T4119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.123520][ T4119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.130671][ T4119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.134887][ T4119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.136774][ T4119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.144243][ T4119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.202331][ T4119] device hsr_slave_0 entered promiscuous mode [ 60.240149][ T4119] device hsr_slave_1 entered promiscuous mode [ 60.300035][ T4119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.302275][ T4119] Cannot create hsr debugfs directory [ 60.361066][ T4119] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.960438][ T4098] Bluetooth: hci0: command 0x0409 tx timeout [ 62.778675][ T4119] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.040503][ T4042] Bluetooth: hci0: command 0x041b tx timeout [ 65.126256][ T4119] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.200956][ T4119] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.415273][ T4119] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.462342][ T4119] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.511890][ T4119] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.562016][ T4119] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.655544][ T4119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.666009][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.668648][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.674735][ T4119] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.686595][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.689386][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.692657][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.694639][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.697701][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.706416][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.709115][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.712408][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.714362][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.731639][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.737460][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.743707][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.747272][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.755521][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.758078][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.762245][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.767683][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.773834][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.779180][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.782706][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.802288][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.887422][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.889642][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.913977][ T4119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.929988][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.935118][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.953976][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.956802][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.959616][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.964700][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.970247][ T4119] device veth0_vlan entered promiscuous mode [ 65.976251][ T4119] device veth1_vlan entered promiscuous mode [ 65.992525][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.995149][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.997749][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.001417][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.005435][ T4119] device veth0_macvtap entered promiscuous mode [ 66.013919][ T4119] device veth1_macvtap entered promiscuous mode [ 66.025181][ T4119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.027992][ T4119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.038145][ T4119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.120020][ T4042] Bluetooth: hci0: command 0x040f tx timeout [ 66.330327][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.333324][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.350199][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.353088][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.357244][ T4119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.365625][ T4119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.369199][ T4119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.377152][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.380525][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.385908][ T4119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.388261][ T4119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.393782][ T4119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.396089][ T4119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.479283][ T385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.487983][ T385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.496663][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.503309][ T385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.505649][ T385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.511520][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.588031][ T4136] [ 66.588752][ T4136] ====================================================== [ 66.590659][ T4136] WARNING: possible circular locking dependency detected [ 66.592545][ T4136] 5.15.178-syzkaller #0 Not tainted [ 66.593972][ T4136] ------------------------------------------------------ [ 66.595822][ T4136] syz.0.16/4136 is trying to acquire lock: [ 66.597334][ T4136] ffff0000d4700c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 66.600410][ T4136] [ 66.600410][ T4136] but task is already holding lock: [ 66.602278][ T4136] ffff800016f39608 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 66.604827][ T4136] [ 66.604827][ T4136] which lock already depends on the new lock. [ 66.604827][ T4136] [ 66.607738][ T4136] [ 66.607738][ T4136] the existing dependency chain (in reverse order) is: [ 66.610182][ T4136] [ 66.610182][ T4136] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 66.612316][ T4136] __mutex_lock_common+0x194/0x2154 [ 66.613917][ T4136] mutex_lock_nested+0xa4/0xf8 [ 66.615302][ T4136] rfkill_register+0x44/0x7a4 [ 66.616656][ T4136] hci_register_dev+0x3e0/0x880 [ 66.618046][ T4136] vhci_create_device+0x2c4/0x568 [ 66.619530][ T4136] vhci_write+0x318/0x3b8 [ 66.620812][ T4136] vfs_write+0x884/0xb44 [ 66.622096][ T4136] ksys_write+0x15c/0x26c [ 66.623453][ T4136] __arm64_sys_write+0x7c/0x90 [ 66.624903][ T4136] invoke_syscall+0x98/0x2b8 [ 66.626260][ T4136] el0_svc_common+0x138/0x258 [ 66.627713][ T4136] do_el0_svc+0x58/0x14c [ 66.628969][ T4136] el0_svc+0x7c/0x1f0 [ 66.630140][ T4136] el0t_64_sync_handler+0x84/0xe4 [ 66.631608][ T4136] el0t_64_sync+0x1a0/0x1a4 [ 66.632906][ T4136] [ 66.632906][ T4136] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 66.634961][ T4136] __mutex_lock_common+0x194/0x2154 [ 66.636430][ T4136] mutex_lock_nested+0xa4/0xf8 [ 66.637922][ T4136] vhci_send_frame+0x8c/0x10c [ 66.639244][ T4136] hci_send_frame+0x194/0x2f0 [ 66.640679][ T4136] hci_tx_work+0x9ac/0x16cc [ 66.641967][ T4136] process_one_work+0x790/0x11b8 [ 66.643389][ T4136] worker_thread+0x910/0x1034 [ 66.644695][ T4136] kthread+0x37c/0x45c [ 66.645918][ T4136] ret_from_fork+0x10/0x20 [ 66.647206][ T4136] [ 66.647206][ T4136] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 66.649626][ T4136] __flush_work+0xf8/0x1c0 [ 66.650949][ T4136] flush_work+0x24/0x38 [ 66.652217][ T4136] hci_dev_do_close+0x16c/0x1060 [ 66.653681][ T4136] hci_unregister_dev+0x248/0x4d4 [ 66.655171][ T4136] vhci_release+0x74/0xc4 [ 66.656506][ T4136] __fput+0x1c4/0x800 [ 66.657647][ T4136] ____fput+0x20/0x30 [ 66.658841][ T4136] task_work_run+0x130/0x1e4 [ 66.660194][ T4136] do_exit+0x670/0x20bc [ 66.661459][ T4136] do_group_exit+0x110/0x268 [ 66.662748][ T4136] get_signal+0x634/0x1550 [ 66.664022][ T4136] do_notify_resume+0x3d0/0x32b8 [ 66.665491][ T4136] el0_svc+0xfc/0x1f0 [ 66.666759][ T4136] el0t_64_sync_handler+0x84/0xe4 [ 66.668323][ T4136] el0t_64_sync+0x1a0/0x1a4 [ 66.669623][ T4136] [ 66.669623][ T4136] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 66.671656][ T4136] __mutex_lock_common+0x194/0x2154 [ 66.673089][ T4136] mutex_lock_nested+0xa4/0xf8 [ 66.674427][ T4136] bg_scan_update+0x9c/0x470 [ 66.675814][ T4136] process_one_work+0x790/0x11b8 [ 66.677279][ T4136] worker_thread+0x910/0x1034 [ 66.678671][ T4136] kthread+0x37c/0x45c [ 66.679827][ T4136] ret_from_fork+0x10/0x20 [ 66.681009][ T4136] [ 66.681009][ T4136] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 66.683700][ T4136] __lock_acquire+0x32d4/0x7638 [ 66.685061][ T4136] lock_acquire+0x240/0x77c [ 66.686450][ T4136] __flush_work+0xf8/0x1c0 [ 66.687737][ T4136] __cancel_work_timer+0x3ec/0x548 [ 66.689337][ T4136] cancel_work_sync+0x24/0x38 [ 66.690707][ T4136] hci_request_cancel_all+0xcc/0x2d0 [ 66.692319][ T4136] hci_dev_do_close+0x54/0x1060 [ 66.693684][ T4136] hci_rfkill_set_block+0xdc/0x1d0 [ 66.695189][ T4136] rfkill_set_block+0x18c/0x37c [ 66.696715][ T4136] rfkill_fop_write+0x594/0x750 [ 66.698154][ T4136] vfs_write+0x280/0xb44 [ 66.699344][ T4136] ksys_write+0x15c/0x26c [ 66.700676][ T4136] __arm64_sys_write+0x7c/0x90 [ 66.702090][ T4136] invoke_syscall+0x98/0x2b8 [ 66.703499][ T4136] el0_svc_common+0x138/0x258 [ 66.704831][ T4136] do_el0_svc+0x58/0x14c [ 66.706125][ T4136] el0_svc+0x7c/0x1f0 [ 66.707304][ T4136] el0t_64_sync_handler+0x84/0xe4 [ 66.708864][ T4136] el0t_64_sync+0x1a0/0x1a4 [ 66.710167][ T4136] [ 66.710167][ T4136] other info that might help us debug this: [ 66.710167][ T4136] [ 66.712923][ T4136] Chain exists of: [ 66.712923][ T4136] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 66.712923][ T4136] [ 66.717302][ T4136] Possible unsafe locking scenario: [ 66.717302][ T4136] [ 66.719330][ T4136] CPU0 CPU1 [ 66.720911][ T4136] ---- ---- [ 66.722409][ T4136] lock(rfkill_global_mutex); [ 66.723762][ T4136] lock(&data->open_mutex); [ 66.725701][ T4136] lock(rfkill_global_mutex); [ 66.727779][ T4136] lock((work_completion)(&hdev->bg_scan_update)); [ 66.729537][ T4136] [ 66.729537][ T4136] *** DEADLOCK *** [ 66.729537][ T4136] [ 66.732077][ T4136] 1 lock held by syz.0.16/4136: [ 66.733309][ T4136] #0: ffff800016f39608 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 66.736109][ T4136] [ 66.736109][ T4136] stack backtrace: [ 66.737702][ T4136] CPU: 1 PID: 4136 Comm: syz.0.16 Not tainted 5.15.178-syzkaller #0 [ 66.739864][ T4136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 66.742573][ T4136] Call trace: [ 66.743390][ T4136] dump_backtrace+0x0/0x530 [ 66.744565][ T4136] show_stack+0x2c/0x3c [ 66.745751][ T4136] dump_stack_lvl+0x108/0x170 [ 66.746990][ T4136] dump_stack+0x1c/0x58 [ 66.748106][ T4136] print_circular_bug+0x150/0x1b8 [ 66.749544][ T4136] check_noncircular+0x2cc/0x378 [ 66.750818][ T4136] __lock_acquire+0x32d4/0x7638 [ 66.752093][ T4136] lock_acquire+0x240/0x77c [ 66.753259][ T4136] __flush_work+0xf8/0x1c0 [ 66.754453][ T4136] __cancel_work_timer+0x3ec/0x548 [ 66.755768][ T4136] cancel_work_sync+0x24/0x38 [ 66.756990][ T4136] hci_request_cancel_all+0xcc/0x2d0 [ 66.758463][ T4136] hci_dev_do_close+0x54/0x1060 [ 66.759770][ T4136] hci_rfkill_set_block+0xdc/0x1d0 [ 66.761106][ T4136] rfkill_set_block+0x18c/0x37c [ 66.762384][ T4136] rfkill_fop_write+0x594/0x750 [ 66.763690][ T4136] vfs_write+0x280/0xb44 [ 66.764859][ T4136] ksys_write+0x15c/0x26c [ 66.766057][ T4136] __arm64_sys_write+0x7c/0x90 [ 66.767439][ T4136] invoke_syscall+0x98/0x2b8 [ 66.768726][ T4136] el0_svc_common+0x138/0x258 [ 66.769899][ T4136] do_el0_svc+0x58/0x14c [ 66.771019][ T4136] el0_svc+0x7c/0x1f0 [ 66.772096][ T4136] el0t_64_sync_handler+0x84/0xe4 [ 66.773351][ T4136] el0t_64_sync+0x1a0/0x1a4