Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. 2026/06/17 10:44:02 parsed 1 programs [ 90.986286][ T5645] cgroup: Unknown subsys name 'net' [ 91.103539][ T5645] cgroup: Unknown subsys name 'cpuset' [ 91.113376][ T5645] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.971635][ T809] cfg80211: failed to load regulatory.db [ 92.843648][ T5645] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.899043][ T5661] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.932250][ T3281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.944364][ T3281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.982910][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.993404][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.818016][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.829770][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.837404][ T5724] bridge_slave_0: entered allmulticast mode [ 99.845830][ T5724] bridge_slave_0: entered promiscuous mode [ 99.863152][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.870431][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.877609][ T5724] bridge_slave_1: entered allmulticast mode [ 99.885778][ T5724] bridge_slave_1: entered promiscuous mode [ 99.923693][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.937861][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.969170][ T5724] team0: Port device team_slave_0 added [ 99.980822][ T5724] team0: Port device team_slave_1 added [ 100.008736][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.015755][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.041711][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.054565][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.061636][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.087678][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.132958][ T5724] hsr_slave_0: entered promiscuous mode [ 100.139803][ T5724] hsr_slave_1: entered promiscuous mode [ 100.308956][ T5724] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.324923][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.333434][ T5724] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.344138][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.353709][ T5724] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.366962][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.377395][ T5724] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.387798][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.485292][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.511523][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.525222][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.533198][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.552868][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.560096][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.936619][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.988205][ T5724] veth0_vlan: entered promiscuous mode [ 101.004014][ T5724] veth1_vlan: entered promiscuous mode [ 101.043342][ T5724] veth0_macvtap: entered promiscuous mode [ 101.054881][ T5724] veth1_macvtap: entered promiscuous mode [ 101.075852][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.091831][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.114052][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.133847][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.144388][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.154444][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.325051][ T5762] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.335636][ T5762] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.345959][ T5762] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.355034][ T5762] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.362837][ T171] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.363296][ T5762] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.465958][ T171] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.549525][ T171] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.656592][ T171] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/06/17 10:44:17 executed programs: 0 [ 102.117802][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.127955][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.137753][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.151287][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.160860][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.775481][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.783560][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.794248][ T5771] bridge_slave_0: entered allmulticast mode [ 102.803723][ T5771] bridge_slave_0: entered promiscuous mode [ 102.813796][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.821143][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.828584][ T5771] bridge_slave_1: entered allmulticast mode [ 102.836946][ T5771] bridge_slave_1: entered promiscuous mode [ 102.879409][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.893197][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.936915][ T5771] team0: Port device team_slave_0 added [ 102.945959][ T5771] team0: Port device team_slave_1 added [ 102.978338][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.985439][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.014325][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.027545][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.034636][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.060894][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.107188][ T5771] hsr_slave_0: entered promiscuous mode [ 103.113798][ T5771] hsr_slave_1: entered promiscuous mode [ 103.120519][ T5771] debugfs: 'hsr0' already exists in 'hsr' [ 103.127049][ T5771] Cannot create hsr debugfs directory [ 103.958209][ T171] bridge_slave_1: left allmulticast mode [ 103.964281][ T171] bridge_slave_1: left promiscuous mode [ 103.972252][ T171] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.987317][ T171] bridge_slave_0: left allmulticast mode [ 103.996366][ T171] bridge_slave_0: left promiscuous mode [ 104.002429][ T171] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.212488][ T50] Bluetooth: hci0: command tx timeout [ 104.260159][ T171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.277195][ T171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.288759][ T171] bond0 (unregistering): Released all slaves [ 104.430522][ T171] hsr_slave_0: left promiscuous mode [ 104.436876][ T171] hsr_slave_1: left promiscuous mode [ 104.445082][ T171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.452835][ T171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.463504][ T171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.471100][ T171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.494068][ T171] veth1_macvtap: left promiscuous mode [ 104.500500][ T171] veth0_macvtap: left promiscuous mode [ 104.506741][ T171] veth1_vlan: left promiscuous mode [ 104.512575][ T171] veth0_vlan: left promiscuous mode [ 104.748417][ T171] team0 (unregistering): Port device team_slave_1 removed [ 104.764599][ T171] team0 (unregistering): Port device team_slave_0 removed [ 104.889785][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 105.201618][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.223079][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.236670][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.251223][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.263847][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.278459][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.296242][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.308552][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.585239][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.628193][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.644297][ T3281] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.651535][ T3281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.671927][ T3281] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.679888][ T3281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.226553][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.290260][ T50] Bluetooth: hci0: command tx timeout [ 106.310660][ T5771] veth0_vlan: entered promiscuous mode [ 106.326427][ T5771] veth1_vlan: entered promiscuous mode [ 106.367305][ T5771] veth0_macvtap: entered promiscuous mode [ 106.381561][ T5771] veth1_macvtap: entered promiscuous mode [ 106.406684][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.425646][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.451773][ T134] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.460827][ T134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.472130][ T134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.482242][ T134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.595629][ T3281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.621359][ T3281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.668532][ T3281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.681510][ T3281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/17 10:44:22 executed programs: 8 [ 108.370052][ T50] Bluetooth: hci0: command tx timeout [ 110.449435][ T50] Bluetooth: hci0: command tx timeout 2026/06/17 10:44:27 executed programs: 233 2026/06/17 10:44:32 executed programs: 475 [ 119.830717][ T5762] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.848595][ T5762] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.856928][ T5762] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.872900][ T5762] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.880697][ T5762] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.028571][ T171] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.104240][ T171] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.156849][ T171] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.261356][ T171] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.507316][ T171] bridge_slave_1: left allmulticast mode [ 120.513176][ T171] bridge_slave_1: left promiscuous mode [ 120.520155][ T171] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.534956][ T171] bridge_slave_0: left allmulticast mode [ 120.542368][ T171] bridge_slave_0: left promiscuous mode [ 120.548238][ T171] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.788662][ T171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.801343][ T171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.812126][ T171] bond0 (unregistering): Released all slaves [ 120.913119][ T6468] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.920444][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.927905][ T6468] bridge_slave_0: entered allmulticast mode [ 120.935905][ T6468] bridge_slave_0: entered promiscuous mode [ 120.948564][ T6468] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.955875][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.963659][ T6468] bridge_slave_1: entered allmulticast mode [ 120.971531][ T6468] bridge_slave_1: entered promiscuous mode [ 121.062039][ T6468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.105736][ T6468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.149059][ T6468] team0: Port device team_slave_0 added [ 121.157848][ T6468] team0: Port device team_slave_1 added [ 121.213562][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 121.223486][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.232776][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.261265][ T6468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.284026][ T171] hsr_slave_0: left promiscuous mode [ 121.290173][ T171] hsr_slave_1: left promiscuous mode [ 121.296079][ T171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.304577][ T171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.314080][ T171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.321589][ T171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.333306][ T171] veth1_macvtap: left promiscuous mode [ 121.338831][ T171] veth0_macvtap: left promiscuous mode [ 121.344753][ T171] veth1_vlan: left promiscuous mode [ 121.350074][ T171] veth0_vlan: left promiscuous mode [ 121.555663][ T171] team0 (unregistering): Port device team_slave_1 removed [ 121.574962][ T171] team0 (unregistering): Port device team_slave_0 removed [ 121.707268][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.714378][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.740747][ T6468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.811523][ T6468] hsr_slave_0: entered promiscuous mode [ 121.818383][ T6468] hsr_slave_1: entered promiscuous mode [ 121.980850][ T50] Bluetooth: hci1: command tx timeout [ 122.451512][ T6468] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.462183][ T6468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.470749][ T6468] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.481473][ T6468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.490843][ T6468] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.502976][ T6468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.511960][ T6468] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.524075][ T6468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.638404][ T6468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.665310][ T6468] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.678724][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.686027][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.706878][ T3281] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.714153][ T3281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.262224][ T6468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.323789][ T6468] veth0_vlan: entered promiscuous mode [ 123.342899][ T6468] veth1_vlan: entered promiscuous mode [ 123.386767][ T6468] veth0_macvtap: entered promiscuous mode [ 123.398091][ T6468] veth1_macvtap: entered promiscuous mode [ 123.429707][ T6468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.448747][ T6468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.470873][ T134] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.480564][ T134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.503270][ T134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.517412][ T134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.607388][ T3281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.628037][ T3281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/17 10:44:39 executed programs: 602 [ 123.676948][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.686063][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.051184][ T50] Bluetooth: hci1: command tx timeout [ 126.129384][ T50] Bluetooth: hci1: command tx timeout [ 128.209429][ T50] Bluetooth: hci1: command tx timeout 2026/06/17 10:44:44 executed programs: 836 [ 132.292552][ T6972] [ 132.294956][ T6972] ====================================================== [ 132.301996][ T6972] WARNING: possible circular locking dependency detected [ 132.309035][ T6972] syzkaller #0 Not tainted [ 132.313513][ T6972] ------------------------------------------------------ [ 132.320548][ T6972] syz.0.1027/6972 is trying to acquire lock: [ 132.326531][ T6972] ffff88807a13d568 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xca0 [ 132.338042][ T6972] [ 132.338042][ T6972] but task is already holding lock: [ 132.345407][ T6972] ffff88807a139b60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 132.354405][ T6972] [ 132.354405][ T6972] which lock already depends on the new lock. [ 132.354405][ T6972] [ 132.364822][ T6972] [ 132.364822][ T6972] the existing dependency chain (in reverse order) is: [ 132.373838][ T6972] [ 132.373838][ T6972] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 132.381580][ T6972] lock_sock_nested+0x41/0x100 [ 132.386873][ T6972] smc_listen_out+0x105/0x3c0 [ 132.392246][ T6972] smc_listen_work+0x81d/0x1410 [ 132.397622][ T6972] process_scheduled_works+0xa8e/0x14e0 [ 132.403782][ T6972] worker_thread+0xa47/0xfb0 [ 132.408905][ T6972] kthread+0x389/0x470 [ 132.413502][ T6972] ret_from_fork+0x514/0xb70 [ 132.418620][ T6972] ret_from_fork_asm+0x1a/0x30 [ 132.423919][ T6972] [ 132.423919][ T6972] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 132.434086][ T6972] __lock_acquire+0x1520/0x2cd0 [ 132.439466][ T6972] lock_acquire+0x106/0x350 [ 132.444592][ T6972] __flush_work+0x74c/0xca0 [ 132.449627][ T6972] __cancel_work_sync+0xbe/0x110 [ 132.455107][ T6972] smc_clcsock_release+0x60/0xf0 [ 132.460569][ T6972] __smc_release+0x64e/0x7c0 [ 132.465701][ T6972] smc_close_non_accepted+0xd5/0x1f0 [ 132.471544][ T6972] smc_close_active+0xb42/0xf30 [ 132.477088][ T6972] __smc_release+0x9c/0x7c0 [ 132.482168][ T6972] smc_release+0x2c5/0x550 [ 132.487146][ T6972] sock_close+0xad/0x220 [ 132.491929][ T6972] __fput+0x418/0xa50 [ 132.496452][ T6972] task_work_run+0x1d9/0x270 [ 132.501594][ T6972] exit_to_user_mode_loop+0x193/0x6b0 [ 132.507554][ T6972] do_syscall_64+0x353/0x580 [ 132.512685][ T6972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.519116][ T6972] [ 132.519116][ T6972] other info that might help us debug this: [ 132.519116][ T6972] [ 132.529377][ T6972] Possible unsafe locking scenario: [ 132.529377][ T6972] [ 132.536830][ T6972] CPU0 CPU1 [ 132.542195][ T6972] ---- ---- [ 132.547560][ T6972] lock(sk_lock-AF_SMC/1); [ 132.552078][ T6972] lock((work_completion)(&new_smc->smc_listen_work)); [ 132.561555][ T6972] lock(sk_lock-AF_SMC/1); [ 132.568587][ T6972] lock((work_completion)(&new_smc->smc_listen_work)); [ 132.575527][ T6972] [ 132.575527][ T6972] *** DEADLOCK *** [ 132.575527][ T6972] [ 132.583672][ T6972] 3 locks held by syz.0.1027/6972: [ 132.588780][ T6972] #0: ffff888056f32a80 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 132.598976][ T6972] #1: ffff88807a139b60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 132.608406][ T6972] #2: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xca0 [ 132.617662][ T6972] [ 132.617662][ T6972] stack backtrace: [ 132.623581][ T6972] CPU: 1 UID: 0 PID: 6972 Comm: syz.0.1027 Not tainted syzkaller #0 PREEMPT(full) [ 132.623601][ T6972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 132.623616][ T6972] Call Trace: [ 132.623622][ T6972] [ 132.623631][ T6972] dump_stack_lvl+0xe8/0x150 [ 132.623651][ T6972] print_circular_bug+0x2e1/0x300 [ 132.623672][ T6972] check_noncircular+0x12e/0x150 [ 132.623692][ T6972] __lock_acquire+0x1520/0x2cd0 [ 132.623711][ T6972] ? __pfx___schedule+0x10/0x10 [ 132.623732][ T6972] ? irqentry_exit+0x218/0x8e0 [ 132.623746][ T6972] ? irqentry_exit+0x218/0x8e0 [ 132.623757][ T6972] ? trace_irq_disable+0x3b/0x140 [ 132.623779][ T6972] ? __flush_work+0x101/0xca0 [ 132.623794][ T6972] lock_acquire+0x106/0x350 [ 132.623808][ T6972] ? __flush_work+0x101/0xca0 [ 132.623825][ T6972] ? preempt_schedule_thunk+0x16/0x30 [ 132.623846][ T6972] ? __flush_work+0x101/0xca0 [ 132.623861][ T6972] __flush_work+0x74c/0xca0 [ 132.623877][ T6972] ? __flush_work+0x101/0xca0 [ 132.623892][ T6972] ? __flush_work+0x101/0xca0 [ 132.623908][ T6972] ? __pfx___flush_work+0x10/0x10 [ 132.623924][ T6972] ? __pfx_wq_barrier_func+0x10/0x10 [ 132.623946][ T6972] ? __cancel_work_sync+0x5c/0x110 [ 132.623963][ T6972] __cancel_work_sync+0xbe/0x110 [ 132.623980][ T6972] smc_clcsock_release+0x60/0xf0 [ 132.623997][ T6972] __smc_release+0x64e/0x7c0 [ 132.624019][ T6972] smc_close_non_accepted+0xd5/0x1f0 [ 132.624043][ T6972] smc_close_active+0xb42/0xf30 [ 132.624058][ T6972] ? __pfx_sock_def_readable+0x10/0x10 [ 132.624076][ T6972] __smc_release+0x9c/0x7c0 [ 132.624095][ T6972] ? __local_bh_enable_ip+0xd0/0x130 [ 132.624110][ T6972] smc_release+0x2c5/0x550 [ 132.624131][ T6972] sock_close+0xad/0x220 [ 132.624147][ T6972] ? __pfx_sock_close+0x10/0x10 [ 132.624162][ T6972] __fput+0x418/0xa50 [ 132.624182][ T6972] task_work_run+0x1d9/0x270 [ 132.624206][ T6972] ? __pfx_task_work_run+0x10/0x10 [ 132.624229][ T6972] exit_to_user_mode_loop+0x193/0x6b0 [ 132.624242][ T6972] ? rcu_is_watching+0x15/0xb0 [ 132.624260][ T6972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.624275][ T6972] do_syscall_64+0x353/0x580 [ 132.624288][ T6972] ? trace_irq_disable+0x3b/0x140 [ 132.624309][ T6972] ? clear_bhb_loop+0x40/0x90 [ 132.624325][ T6972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.624340][ T6972] RIP: 0033:0x7f570359ce59 [ 132.624357][ T6972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.624369][ T6972] RSP: 002b:00007ffe1c4c59a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 132.624385][ T6972] RAX: 0000000000000000 RBX: 00007ffe1c4c5a90 RCX: 00007f570359ce59 [ 132.624395][ T6972] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 132.624403][ T6972] RBP: 000000000002048d R08: 0000000000000001 R09: 0000000000000000 [ 132.624412][ T6972] R10: 0000001b30320000 R11: 0000000000000246 R12: 0000000000000000 [ 132.624421][ T6972] R13: 00007f5703815fac R14: 00007f5703815fa8 R15: 00007f5703815fa0 [ 132.624437][ T6972] [ 132.930434][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.936821][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 2026/06/17 10:44:49 executed programs: 1058 [ 136.455594][ T5762] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.463030][ T5762] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.470617][ T5762] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.478290][ T5762] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.486629][ T5762] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.636132][ T134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.718816][ T134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.785140][ T134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.841900][ T7164] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.849233][ T7164] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.856472][ T7164] bridge_slave_0: entered allmulticast mode [ 136.863602][ T7164] bridge_slave_0: entered promiscuous mode [ 136.871140][ T7164] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.878433][ T7164] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.886736][ T7164] bridge_slave_1: entered allmulticast mode [ 136.893647][ T7164] bridge_slave_1: entered promiscuous mode [ 136.903779][ T134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.929161][ T7164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.940637][ T7164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.965929][ T7164] team0: Port device team_slave_0 added [ 136.973768][ T7164] team0: Port device team_slave_1 added [ 136.997137][ T7164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.004891][ T7164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.031484][ T7164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.043705][ T7164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.050807][ T7164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.076971][ T7164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.131527][ T134] bridge_slave_1: left allmulticast mode [ 137.137214][ T134] bridge_slave_1: left promiscuous mode [ 137.143262][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.152118][ T134] bridge_slave_0: left allmulticast mode [ 137.157840][ T134] bridge_slave_0: left promiscuous mode [ 137.163925][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.238792][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.249108][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.258870][ T134] bond0 (unregistering): Released all slaves [ 137.270765][ T7164] hsr_slave_0: entered promiscuous mode [ 137.277137][ T7164] hsr_slave_1: entered promiscuous mode [ 137.288394][ T7164] debugfs: 'hsr0' already exists in 'hsr' [ 137.294425][ T7164] Cannot create hsr debugfs directory [ 137.479871][ T134] hsr_slave_0: left promiscuous mode [ 137.485839][ T134] hsr_slave_1: left promiscuous mode [ 137.493246][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.501011][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.508847][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.517446][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.531420][ T134] veth1_macvtap: left promiscuous mode [ 137.537005][ T134] veth0_macvtap: left promiscuous mode [ 137.542632][ T134] veth1_vlan: left promiscuous mode [ 137.547904][ T134] veth0_vlan: left promiscuous mode [ 137.714378][ T134] team0 (unregistering): Port device team_slave_1 removed [ 137.727530][ T134] team0 (unregistering): Port device team_slave_0 removed [ 137.789098][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 137.974983][ T7164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.994395][ T7164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.009367][ T7164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 138.035139][ T7164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.043978][ T7164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 138.061970][ T7164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 138.070223][ T7164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 138.082336][ T7164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 138.157607][ T7164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.189478][ T7164] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.215141][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.222334][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.247663][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.254880][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.529296][ T50] Bluetooth: hci0: command tx timeout [ 138.613359][ T7164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.654584][ T7164] veth0_vlan: entered promiscuous mode [ 138.664307][ T7164] veth1_vlan: entered promiscuous mode [ 138.687243][ T7164] veth0_macvtap: entered promiscuous mode [ 138.695912][ T7164] veth1_macvtap: entered promiscuous mode [ 138.711039][ T7164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.723789][ T7164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.735836][ T171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.744926][ T171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.754894][ T171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.763973][ T171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.788736][ T7164] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 138.808468][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.813394][ T7164] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 138.827252][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.845729][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/06/17 10:44:54 executed programs: 1202 [ 138.855234][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.619319][ T50] Bluetooth: hci0: command tx timeout