Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. 1970/01/01 00:00:41 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:42 parsed 1 programs [ 45.052750][ T4030] cgroup: Unknown subsys name 'net' [ 45.313326][ T4030] cgroup: Unknown subsys name 'rlimit' [ 45.656645][ T4030] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 55.958677][ T4062] chnl_net:caif_netlink_parms(): no params data found [ 56.003457][ T4062] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.005636][ T4062] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.008586][ T4062] device bridge_slave_0 entered promiscuous mode [ 56.013085][ T4062] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.015083][ T4062] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.017864][ T4062] device bridge_slave_1 entered promiscuous mode [ 56.034956][ T4062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.041802][ T4062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.057523][ T4062] team0: Port device team_slave_0 added [ 56.060758][ T4062] team0: Port device team_slave_1 added [ 56.074784][ T4062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.076741][ T4062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.084190][ T4062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.092662][ T4062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.094655][ T4062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.101949][ T4062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.179440][ T4062] device hsr_slave_0 entered promiscuous mode [ 56.217536][ T4062] device hsr_slave_1 entered promiscuous mode [ 56.372854][ T4062] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.410504][ T4062] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.453793][ T4062] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.489290][ T4062] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.594833][ T4062] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.596969][ T4062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.599732][ T4062] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.601831][ T4062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.648876][ T4062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.656621][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.661562][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.665089][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.672026][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 56.680400][ T4062] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.689429][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.692528][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.694494][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.696825][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.700631][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.702643][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.716351][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.719377][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.731242][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.734352][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.743991][ T4062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.750580][ T4062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.754495][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.844698][ T4062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.849386][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.851595][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.865436][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.883819][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.889044][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.891635][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.896624][ T4062] device veth0_vlan entered promiscuous mode [ 56.905845][ T4062] device veth1_vlan entered promiscuous mode [ 56.924513][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.928745][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.931641][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.938892][ T4062] device veth0_macvtap entered promiscuous mode [ 56.943609][ T4062] device veth1_macvtap entered promiscuous mode [ 56.947540][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.961525][ T4062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.963684][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.966571][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.973660][ T4062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.979982][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.983014][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.986911][ T4062] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.998660][ T4062] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.001197][ T4062] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.003721][ T4062] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.013952][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.204776][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.543393][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.597334][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.963341][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.965706][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.975017][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.996476][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.001290][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.005004][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:03 executed programs: 0 [ 63.918770][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 63.962413][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.964565][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.968986][ T4171] device bridge_slave_0 entered promiscuous mode [ 63.972766][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.974852][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.978030][ T4171] device bridge_slave_1 entered promiscuous mode [ 64.010454][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.015270][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.034182][ T4171] team0: Port device team_slave_0 added [ 64.041940][ T4171] team0: Port device team_slave_1 added [ 64.056439][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.058699][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.065831][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.070286][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.072266][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.079853][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.140081][ T4171] device hsr_slave_0 entered promiscuous mode [ 64.177447][ T4171] device hsr_slave_1 entered promiscuous mode [ 64.217225][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.219513][ T4171] Cannot create hsr debugfs directory [ 64.923227][ T4171] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.939084][ T4171] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.002435][ T4171] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.028944][ T4171] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.126111][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.134448][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.137204][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.142589][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.151719][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.154649][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.158856][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.160763][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.167589][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.170293][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.172990][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.175546][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.177939][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.187311][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.190336][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.205440][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.210953][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.213802][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.217735][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.220751][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.230029][ T4171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.232907][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.241420][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.244212][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.248053][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.251251][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.317849][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.366287][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.372960][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.375160][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.389790][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.393321][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.412281][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.415055][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.421239][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.424233][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.429300][ T4171] device veth0_vlan entered promiscuous mode [ 65.436051][ T4171] device veth1_vlan entered promiscuous mode [ 65.455216][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.460293][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.463147][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.466274][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.471325][ T4171] device veth0_macvtap entered promiscuous mode [ 65.475767][ T4171] device veth1_macvtap entered promiscuous mode [ 65.486394][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.490925][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.494700][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.496795][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.500236][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.502836][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.505636][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.533656][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.536515][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.542972][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.545251][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.548320][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.553382][ T4171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.555796][ T4171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.560675][ T4171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.563050][ T4171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.623521][ T522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.625735][ T522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.630327][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.652684][ T1599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.654981][ T1599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.661110][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.824153][ T4273] [ 65.824802][ T4273] ====================================================== [ 65.826753][ T4273] WARNING: possible circular locking dependency detected [ 65.828661][ T4273] 5.15.185-syzkaller #0 Not tainted [ 65.830034][ T4273] ------------------------------------------------------ [ 65.831958][ T4273] syz.0.16/4273 is trying to acquire lock: [ 65.833526][ T4273] ffff0000d32b8c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 65.836586][ T4273] [ 65.836586][ T4273] but task is already holding lock: [ 65.838643][ T4273] ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 65.841258][ T4273] [ 65.841258][ T4273] which lock already depends on the new lock. [ 65.841258][ T4273] [ 65.844114][ T4273] [ 65.844114][ T4273] the existing dependency chain (in reverse order) is: [ 65.846598][ T4273] [ 65.846598][ T4273] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 65.848767][ T4273] __mutex_lock_common+0x194/0x1edc [ 65.850390][ T4273] mutex_lock_nested+0xac/0x11c [ 65.851840][ T4273] rfkill_register+0x44/0x77c [ 65.853212][ T4273] hci_register_dev+0x3d8/0x854 [ 65.854689][ T4273] vhci_create_device+0x2bc/0x564 [ 65.856144][ T4273] vhci_write+0x30c/0x3ac [ 65.857434][ T4273] vfs_write+0x7c8/0xa2c [ 65.858687][ T4273] ksys_write+0x120/0x210 [ 65.859983][ T4273] __arm64_sys_write+0x7c/0x90 [ 65.861551][ T4273] invoke_syscall+0x98/0x2b8 [ 65.863021][ T4273] el0_svc_common+0x138/0x258 [ 65.864459][ T4273] do_el0_svc+0x58/0x14c [ 65.865797][ T4273] el0_svc+0x78/0x1e0 [ 65.867146][ T4273] el0t_64_sync_handler+0xcc/0xe4 [ 65.868687][ T4273] el0t_64_sync+0x1a0/0x1a4 [ 65.870023][ T4273] [ 65.870023][ T4273] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 65.872221][ T4273] __mutex_lock_common+0x194/0x1edc [ 65.873760][ T4273] mutex_lock_nested+0xac/0x11c [ 65.875228][ T4273] vhci_send_frame+0x88/0x118 [ 65.876661][ T4273] hci_send_frame+0x194/0x2f0 [ 65.878149][ T4273] hci_tx_work+0x7e4/0x1394 [ 65.879518][ T4273] process_one_work+0x79c/0x1140 [ 65.881140][ T4273] worker_thread+0x8f4/0x101c [ 65.882622][ T4273] kthread+0x374/0x454 [ 65.883908][ T4273] ret_from_fork+0x10/0x20 [ 65.885299][ T4273] [ 65.885299][ T4273] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 65.887923][ T4273] __flush_work+0xf4/0x1bc [ 65.889366][ T4273] flush_work+0x24/0x38 [ 65.890673][ T4273] hci_dev_do_close+0x164/0x105c [ 65.892219][ T4273] hci_unregister_dev+0x23c/0x4c0 [ 65.893740][ T4273] vhci_release+0x74/0xc4 [ 65.895051][ T4273] __fput+0x1c0/0x7f8 [ 65.896361][ T4273] ____fput+0x20/0x30 [ 65.897607][ T4273] task_work_run+0x12c/0x1e0 [ 65.899008][ T4273] do_exit+0x67c/0x1f58 [ 65.900329][ T4273] do_group_exit+0x100/0x268 [ 65.901759][ T4273] get_signal+0x73c/0x1340 [ 65.903230][ T4273] do_notify_resume+0x35c/0x3128 [ 65.904781][ T4273] el0_svc+0xf0/0x1e0 [ 65.906014][ T4273] el0t_64_sync_handler+0xcc/0xe4 [ 65.907584][ T4273] el0t_64_sync+0x1a0/0x1a4 [ 65.909014][ T4273] [ 65.909014][ T4273] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 65.911196][ T4273] __mutex_lock_common+0x194/0x1edc [ 65.912774][ T4273] mutex_lock_nested+0xac/0x11c [ 65.914269][ T4273] bg_scan_update+0x48/0x3d0 [ 65.915752][ T4273] process_one_work+0x79c/0x1140 [ 65.917330][ T4273] worker_thread+0x8f4/0x101c [ 65.918809][ T4273] kthread+0x374/0x454 [ 65.920153][ T4273] ret_from_fork+0x10/0x20 [ 65.921564][ T4273] [ 65.921564][ T4273] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 65.924390][ T4273] __lock_acquire+0x2928/0x651c [ 65.925911][ T4273] lock_acquire+0x1f4/0x620 [ 65.927537][ T4273] __flush_work+0xf4/0x1bc [ 65.928978][ T4273] __cancel_work_timer+0x2ec/0x448 [ 65.930575][ T4273] cancel_work_sync+0x24/0x38 [ 65.932010][ T4273] hci_request_cancel_all+0xbc/0x2d0 [ 65.933611][ T4273] hci_dev_do_close+0x54/0x105c [ 65.935160][ T4273] hci_rfkill_set_block+0xdc/0x1d0 [ 65.936784][ T4273] rfkill_set_block+0x18c/0x374 [ 65.938330][ T4273] rfkill_fop_write+0x4a4/0x5cc [ 65.939812][ T4273] vfs_write+0x280/0xa2c [ 65.941161][ T4273] ksys_write+0x120/0x210 [ 65.942545][ T4273] __arm64_sys_write+0x7c/0x90 [ 65.944002][ T4273] invoke_syscall+0x98/0x2b8 [ 65.945467][ T4273] el0_svc_common+0x138/0x258 [ 65.946912][ T4273] do_el0_svc+0x58/0x14c [ 65.948255][ T4273] el0_svc+0x78/0x1e0 [ 65.949483][ T4273] el0t_64_sync_handler+0xcc/0xe4 [ 65.951057][ T4273] el0t_64_sync+0x1a0/0x1a4 [ 65.952513][ T4273] [ 65.952513][ T4273] other info that might help us debug this: [ 65.952513][ T4273] [ 65.955422][ T4273] Chain exists of: [ 65.955422][ T4273] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 65.955422][ T4273] [ 65.959918][ T4273] Possible unsafe locking scenario: [ 65.959918][ T4273] [ 65.962030][ T4273] CPU0 CPU1 [ 65.963522][ T4273] ---- ---- [ 65.965079][ T4273] lock(rfkill_global_mutex); [ 65.966398][ T4273] lock(&data->open_mutex); [ 65.968358][ T4273] lock(rfkill_global_mutex); [ 65.970374][ T4273] lock((work_completion)(&hdev->bg_scan_update)); [ 65.972114][ T4273] [ 65.972114][ T4273] *** DEADLOCK *** [ 65.972114][ T4273] [ 65.974413][ T4273] 1 lock held by syz.0.16/4273: [ 65.975779][ T4273] #0: ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 65.978612][ T4273] [ 65.978612][ T4273] stack backtrace: [ 65.980233][ T4273] CPU: 1 PID: 4273 Comm: syz.0.16 Not tainted 5.15.185-syzkaller #0 [ 65.982485][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.985298][ T4273] Call trace: [ 65.986232][ T4273] dump_backtrace+0x0/0x43c [ 65.987464][ T4273] show_stack+0x2c/0x3c [ 65.988634][ T4273] __dump_stack+0x30/0x40 [ 65.989832][ T4273] dump_stack_lvl+0xf8/0x160 [ 65.991080][ T4273] dump_stack+0x1c/0x5c [ 65.992280][ T4273] print_circular_bug+0x148/0x1b0 [ 65.993738][ T4273] check_noncircular+0x240/0x2d4 [ 65.995059][ T4273] __lock_acquire+0x2928/0x651c [ 65.996375][ T4273] lock_acquire+0x1f4/0x620 [ 65.997573][ T4273] __flush_work+0xf4/0x1bc [ 65.998788][ T4273] __cancel_work_timer+0x2ec/0x448 [ 66.000202][ T4273] cancel_work_sync+0x24/0x38 [ 66.001476][ T4273] hci_request_cancel_all+0xbc/0x2d0 [ 66.002942][ T4273] hci_dev_do_close+0x54/0x105c [ 66.004221][ T4273] hci_rfkill_set_block+0xdc/0x1d0 [ 66.005609][ T4273] rfkill_set_block+0x18c/0x374 [ 66.006931][ T4273] rfkill_fop_write+0x4a4/0x5cc [ 66.008298][ T4273] vfs_write+0x280/0xa2c [ 66.009542][ T4273] ksys_write+0x120/0x210 [ 66.010803][ T4273] __arm64_sys_write+0x7c/0x90 [ 66.012081][ T4273] invoke_syscall+0x98/0x2b8 [ 66.013357][ T4273] el0_svc_common+0x138/0x258 [ 66.014661][ T4273] do_el0_svc+0x58/0x14c [ 66.015796][ T4273] el0_svc+0x78/0x1e0 [ 66.016884][ T4273] el0t_64_sync_handler+0xcc/0xe4 [ 66.018280][ T4273] el0t_64_sync+0x1a0/0x1a4 [ 66.020813][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 66.514554][ T148] device hsr_slave_0 left promiscuous mode [ 66.548600][ T148] device hsr_slave_1 left promiscuous mode