Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. 1970/01/01 00:00:43 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:44 parsed 1 programs [ 47.347593][ T4040] cgroup: Unknown subsys name 'net' [ 47.653679][ T4040] cgroup: Unknown subsys name 'rlimit' [ 48.013648][ T4040] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 55.275865][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.278329][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.281983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.295275][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.297679][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.300247][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.924628][ T4071] chnl_net:caif_netlink_parms(): no params data found [ 55.971586][ T4071] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.973512][ T4071] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.976478][ T4071] device bridge_slave_0 entered promiscuous mode [ 55.980805][ T4071] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.982807][ T4071] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.985488][ T4071] device bridge_slave_1 entered promiscuous mode [ 56.001721][ T4071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.007760][ T4071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.025268][ T4071] team0: Port device team_slave_0 added [ 56.028815][ T4071] team0: Port device team_slave_1 added [ 56.042539][ T4071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.044465][ T4071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.051991][ T4071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.056656][ T4071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.058579][ T4071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.065468][ T4071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.118291][ T4071] device hsr_slave_0 entered promiscuous mode [ 56.156377][ T4071] device hsr_slave_1 entered promiscuous mode [ 56.386824][ T4071] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.494946][ T4071] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.547989][ T4071] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.648712][ T4071] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.784808][ T4071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.792295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.795820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.802740][ T4071] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.810239][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.813101][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.815866][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.818165][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.830658][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.833973][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.838084][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.841084][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.843050][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.845459][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.860275][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.863688][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.867862][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.870675][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.873487][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.886947][ T4071] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.889873][ T4071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.895340][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.899644][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.902290][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.907627][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.910306][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.915902][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.997183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.999547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.005170][ T4071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.027448][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.030337][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.038225][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.040950][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.043711][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.047827][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.051986][ T4071] device veth0_vlan entered promiscuous mode [ 57.059609][ T4071] device veth1_vlan entered promiscuous mode [ 57.077794][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.080529][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.083062][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.089858][ T4071] device veth0_macvtap entered promiscuous mode [ 57.094633][ T4071] device veth1_macvtap entered promiscuous mode [ 57.107206][ T4071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.109626][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.112373][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.115351][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.124688][ T4071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.127315][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.130240][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.135249][ T4071] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.139141][ T4071] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.141525][ T4071] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.143896][ T4071] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.363394][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:58 executed programs: 0 [ 59.112984][ T4131] chnl_net:caif_netlink_parms(): no params data found [ 59.148901][ T4131] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.150814][ T4131] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.153298][ T4131] device bridge_slave_0 entered promiscuous mode [ 59.157401][ T4131] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.159453][ T4131] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.162040][ T4131] device bridge_slave_1 entered promiscuous mode [ 59.179961][ T4131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.184554][ T4131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.200367][ T4131] team0: Port device team_slave_0 added [ 59.203894][ T4131] team0: Port device team_slave_1 added [ 59.219391][ T4131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.221263][ T4131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.228365][ T4131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.232661][ T4131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.234391][ T4131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.241288][ T4131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.298182][ T4131] device hsr_slave_0 entered promiscuous mode [ 59.356369][ T4131] device hsr_slave_1 entered promiscuous mode [ 59.416154][ T4131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.418544][ T4131] Cannot create hsr debugfs directory [ 60.894201][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.086455][ T4042] Bluetooth: hci0: command 0x0409 tx timeout [ 62.412774][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.457081][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.176342][ T4154] Bluetooth: hci0: command 0x041b tx timeout [ 63.370746][ T4131] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.418818][ T4131] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.469024][ T4131] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.529473][ T4131] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.628862][ T4131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.636821][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.639408][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.644306][ T4131] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.649264][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.651993][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.654686][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.656681][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.659814][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.668996][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.671774][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.674383][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.676232][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.681347][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.692359][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.697869][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.700878][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.703633][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.706807][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.711134][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.715445][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.718450][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.724102][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.727241][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.731853][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.830795][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.833044][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.841252][ T4131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.855002][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.858255][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.872002][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.874710][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.880293][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.882798][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.888172][ T4131] device veth0_vlan entered promiscuous mode [ 63.894766][ T4131] device veth1_vlan entered promiscuous mode [ 63.910966][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.913675][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.916739][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.919600][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.924227][ T4131] device veth0_macvtap entered promiscuous mode [ 63.928934][ T4131] device veth1_macvtap entered promiscuous mode [ 63.940369][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.943346][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.947409][ T4131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.951043][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.953666][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.956720][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.959460][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.962714][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.965551][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.969825][ T4131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.972601][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.975258][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.979952][ T4131] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.982313][ T4131] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.984788][ T4131] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.987490][ T4131] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.029484][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.036605][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.043007][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.051962][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.054238][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.059072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:04 executed programs: 2 [ 64.090918][ T4188] [ 64.091620][ T4188] ====================================================== [ 64.093465][ T4188] WARNING: possible circular locking dependency detected [ 64.095291][ T4188] 5.15.186-syzkaller #0 Not tainted [ 64.096703][ T4188] ------------------------------------------------------ [ 64.098555][ T4188] syz.0.16/4188 is trying to acquire lock: [ 64.100133][ T4188] ffff0000d16ccc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 64.103220][ T4188] [ 64.103220][ T4188] but task is already holding lock: [ 64.105270][ T4188] ffff80001652cb88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 64.107913][ T4188] [ 64.107913][ T4188] which lock already depends on the new lock. [ 64.107913][ T4188] [ 64.110791][ T4188] [ 64.110791][ T4188] the existing dependency chain (in reverse order) is: [ 64.113132][ T4188] [ 64.113132][ T4188] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 64.115325][ T4188] __mutex_lock_common+0x194/0x1edc [ 64.116811][ T4188] mutex_lock_nested+0xac/0x11c [ 64.118265][ T4188] rfkill_register+0x44/0x77c [ 64.119657][ T4188] hci_register_dev+0x3d8/0x854 [ 64.121084][ T4188] vhci_create_device+0x2bc/0x564 [ 64.122593][ T4188] vhci_write+0x30c/0x3ac [ 64.123929][ T4188] vfs_write+0x7c8/0xa2c [ 64.125250][ T4188] ksys_write+0x120/0x210 [ 64.126536][ T4188] __arm64_sys_write+0x7c/0x90 [ 64.128062][ T4188] invoke_syscall+0x98/0x2b8 [ 64.129482][ T4188] el0_svc_common+0x138/0x258 [ 64.130903][ T4188] do_el0_svc+0x58/0x14c [ 64.132263][ T4188] el0_svc+0x78/0x1e0 [ 64.133504][ T4188] el0t_64_sync_handler+0xcc/0xe4 [ 64.134993][ T4188] el0t_64_sync+0x1a0/0x1a4 [ 64.136349][ T4188] [ 64.136349][ T4188] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 64.138513][ T4188] __mutex_lock_common+0x194/0x1edc [ 64.140037][ T4188] mutex_lock_nested+0xac/0x11c [ 64.141566][ T4188] vhci_send_frame+0x88/0x118 [ 64.143014][ T4188] hci_send_frame+0x194/0x2f0 [ 64.144450][ T4188] hci_tx_work+0x7e4/0x1394 [ 64.146031][ T4188] process_one_work+0x79c/0x1140 [ 64.147589][ T4188] worker_thread+0x8f4/0x101c [ 64.148975][ T4188] kthread+0x374/0x454 [ 64.150198][ T4188] ret_from_fork+0x10/0x20 [ 64.151526][ T4188] [ 64.151526][ T4188] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 64.154080][ T4188] __flush_work+0xf4/0x1bc [ 64.155406][ T4188] flush_work+0x24/0x38 [ 64.156741][ T4188] hci_dev_do_close+0x164/0x105c [ 64.158223][ T4188] hci_unregister_dev+0x23c/0x4c0 [ 64.159731][ T4188] vhci_release+0x74/0xc4 [ 64.161113][ T4188] __fput+0x1c0/0x7f8 [ 64.162303][ T4188] ____fput+0x20/0x30 [ 64.163502][ T4188] task_work_run+0x12c/0x1e0 [ 64.164883][ T4188] do_exit+0x684/0x1f58 [ 64.166155][ T4188] do_group_exit+0x100/0x268 [ 64.167584][ T4188] get_signal+0x73c/0x1340 [ 64.168927][ T4188] do_notify_resume+0x35c/0x3128 [ 64.170396][ T4188] el0_svc+0xf0/0x1e0 [ 64.171618][ T4188] el0t_64_sync_handler+0xcc/0xe4 [ 64.173088][ T4188] el0t_64_sync+0x1a0/0x1a4 [ 64.174412][ T4188] [ 64.174412][ T4188] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 64.176493][ T4188] __mutex_lock_common+0x194/0x1edc [ 64.178022][ T4188] mutex_lock_nested+0xac/0x11c [ 64.179509][ T4188] bg_scan_update+0x48/0x3d0 [ 64.180943][ T4188] process_one_work+0x79c/0x1140 [ 64.182478][ T4188] worker_thread+0x8f4/0x101c [ 64.183842][ T4188] kthread+0x374/0x454 [ 64.185122][ T4188] ret_from_fork+0x10/0x20 [ 64.186491][ T4188] [ 64.186491][ T4188] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 64.189090][ T4188] __lock_acquire+0x2928/0x651c [ 64.190611][ T4188] lock_acquire+0x1f4/0x620 [ 64.191937][ T4188] __flush_work+0xf4/0x1bc [ 64.193241][ T4188] __cancel_work_timer+0x2ec/0x448 [ 64.194653][ T4188] cancel_work_sync+0x24/0x38 [ 64.196176][ T4188] hci_request_cancel_all+0xbc/0x2d0 [ 64.197725][ T4188] hci_dev_do_close+0x54/0x105c [ 64.199117][ T4188] hci_rfkill_set_block+0xdc/0x1d0 [ 64.200674][ T4188] rfkill_set_block+0x18c/0x374 [ 64.202137][ T4188] rfkill_fop_write+0x4a4/0x5cc [ 64.203595][ T4188] vfs_write+0x280/0xa2c [ 64.204921][ T4188] ksys_write+0x120/0x210 [ 64.206247][ T4188] __arm64_sys_write+0x7c/0x90 [ 64.207665][ T4188] invoke_syscall+0x98/0x2b8 [ 64.209027][ T4188] el0_svc_common+0x138/0x258 [ 64.210490][ T4188] do_el0_svc+0x58/0x14c [ 64.211778][ T4188] el0_svc+0x78/0x1e0 [ 64.212955][ T4188] el0t_64_sync_handler+0xcc/0xe4 [ 64.214451][ T4188] el0t_64_sync+0x1a0/0x1a4 [ 64.215794][ T4188] [ 64.215794][ T4188] other info that might help us debug this: [ 64.215794][ T4188] [ 64.218535][ T4188] Chain exists of: [ 64.218535][ T4188] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 64.218535][ T4188] [ 64.222822][ T4188] Possible unsafe locking scenario: [ 64.222822][ T4188] [ 64.224865][ T4188] CPU0 CPU1 [ 64.226314][ T4188] ---- ---- [ 64.227821][ T4188] lock(rfkill_global_mutex); [ 64.229148][ T4188] lock(&data->open_mutex); [ 64.231036][ T4188] lock(rfkill_global_mutex); [ 64.233032][ T4188] lock((work_completion)(&hdev->bg_scan_update)); [ 64.234714][ T4188] [ 64.234714][ T4188] *** DEADLOCK *** [ 64.234714][ T4188] [ 64.236908][ T4188] 1 lock held by syz.0.16/4188: [ 64.238208][ T4188] #0: ffff80001652cb88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 64.240942][ T4188] [ 64.240942][ T4188] stack backtrace: [ 64.242497][ T4188] CPU: 0 PID: 4188 Comm: syz.0.16 Not tainted 5.15.186-syzkaller #0 [ 64.244637][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.247349][ T4188] Call trace: [ 64.248275][ T4188] dump_backtrace+0x0/0x43c [ 64.249536][ T4188] show_stack+0x2c/0x3c [ 64.250696][ T4188] __dump_stack+0x30/0x40 [ 64.251868][ T4188] dump_stack_lvl+0xf8/0x160 [ 64.253121][ T4188] dump_stack+0x1c/0x5c [ 64.254231][ T4188] print_circular_bug+0x148/0x1b0 [ 64.255694][ T4188] check_noncircular+0x240/0x2d4 [ 64.257025][ T4188] __lock_acquire+0x2928/0x651c [ 64.258372][ T4188] lock_acquire+0x1f4/0x620 [ 64.259548][ T4188] __flush_work+0xf4/0x1bc [ 64.260766][ T4188] __cancel_work_timer+0x2ec/0x448 [ 64.262199][ T4188] cancel_work_sync+0x24/0x38 [ 64.263446][ T4188] hci_request_cancel_all+0xbc/0x2d0 [ 64.264898][ T4188] hci_dev_do_close+0x54/0x105c [ 64.266153][ T4188] hci_rfkill_set_block+0xdc/0x1d0 [ 64.267604][ T4188] rfkill_set_block+0x18c/0x374 [ 64.268830][ T4188] rfkill_fop_write+0x4a4/0x5cc [ 64.270091][ T4188] vfs_write+0x280/0xa2c [ 64.271220][ T4188] ksys_write+0x120/0x210 [ 64.272320][ T4188] __arm64_sys_write+0x7c/0x90 [ 64.273693][ T4188] invoke_syscall+0x98/0x2b8 [ 64.274965][ T4188] el0_svc_common+0x138/0x258 [ 64.276231][ T4188] do_el0_svc+0x58/0x14c [ 64.277337][ T4188] el0_svc+0x78/0x1e0 [ 64.278453][ T4188] el0t_64_sync_handler+0xcc/0xe4 [ 64.279830][ T4188] el0t_64_sync+0x1a0/0x1a4 [ 66.631581][ T148] device hsr_slave_0 left promiscuous mode [ 66.649196][ T148] device hsr_slave_1 left promiscuous mode [ 66.717684][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.719864][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.728204][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.730216][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.734843][ T148] device bridge_slave_1 left promiscuous mode [ 66.738227][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.777913][ T148] device bridge_slave_0 left promiscuous mode [ 66.779784][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.887042][ T148] device veth1_macvtap left promiscuous mode [ 66.888743][ T148] device veth0_macvtap left promiscuous mode [ 66.890504][ T148] device veth1_vlan left promiscuous mode [ 66.892070][ T148] device veth0_vlan left promiscuous mode [ 67.184831][ T148] team0 (unregistering): Port device team_slave_1 removed [ 67.194763][ T148] team0 (unregistering): Port device team_slave_0 removed [ 67.223507][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.270964][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.453460][ T148] bond0 (unregistering): Released all slaves 1970/01/01 00:01:09 executed programs: 267 [ 69.646904][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.648814][ T2055] ieee802154 phy1 wpan1: encryption failed: -22