Warning: Permanently added '10.128.1.99' (ED25519) to the list of known hosts. Setting up swapspace version 1, size = 127995904 bytes [ 34.336246][ T6237] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.346919][ T6240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.349640][ T6240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.351708][ T6240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.354150][ T6240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.356146][ T6240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 34.357875][ T6240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 executing program [ 34.621111][ C0] [ 34.621699][ C0] ================================ [ 34.622815][ C0] WARNING: inconsistent lock state [ 34.624026][ C0] 6.9.0-rc4-syzkaller-g6a71d2909427 #0 Not tainted [ 34.625489][ C0] -------------------------------- [ 34.626567][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 34.628186][ C0] syz-executor356/6245 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 34.629630][ C0] ffff800090a3e558 (sync_timeline_list_lock){?.+.}-{2:2}, at: sync_timeline_debug_remove+0x38/0x130 [ 34.631990][ C0] {HARDIRQ-ON-W} state was registered at: [ 34.633242][ C0] trace_hardirqs_on+0x164/0x28c [ 34.634423][ C0] _raw_spin_unlock_irq+0x30/0x80 [ 34.635642][ C0] sync_info_debugfs_show+0x16c/0x464 [ 34.636783][ C0] seq_read_iter+0x3e0/0xc44 [ 34.637836][ C0] seq_read+0x2ec/0x434 [ 34.638762][ C0] vfs_read+0x230/0x954 [ 34.639727][ C0] ksys_read+0x15c/0x26c [ 34.640735][ C0] __arm64_sys_read+0x7c/0x90 [ 34.641785][ C0] invoke_syscall+0x98/0x2b8 [ 34.642802][ C0] el0_svc_common+0x130/0x23c [ 34.643880][ C0] do_el0_svc+0x48/0x58 [ 34.644738][ C0] el0_svc+0x54/0x168 [ 34.645611][ C0] el0t_64_sync_handler+0x84/0xfc [ 34.646723][ C0] el0t_64_sync+0x190/0x194 [ 34.647723][ C0] irq event stamp: 1212 [ 34.648620][ C0] hardirqs last enabled at (1211): [] _raw_spin_unlock_irq+0x30/0x80 [ 34.650814][ C0] hardirqs last disabled at (1212): [] el1_interrupt+0x24/0x68 [ 34.652893][ C0] softirqs last enabled at (8): [] local_bh_enable+0x10/0x34 [ 34.654859][ C0] softirqs last disabled at (6): [] local_bh_disable+0x10/0x34 [ 34.656839][ C0] [ 34.656839][ C0] other info that might help us debug this: [ 34.658771][ C0] Possible unsafe locking scenario: [ 34.658771][ C0] [ 34.660515][ C0] CPU0 [ 34.661253][ C0] ---- [ 34.662024][ C0] lock(sync_timeline_list_lock); [ 34.663272][ C0] [ 34.664099][ C0] lock(sync_timeline_list_lock); [ 34.665240][ C0] [ 34.665240][ C0] *** DEADLOCK *** [ 34.665240][ C0] [ 34.667160][ C0] no locks held by syz-executor356/6245. [ 34.668433][ C0] [ 34.668433][ C0] stack backtrace: [ 34.669795][ C0] CPU: 0 PID: 6245 Comm: syz-executor356 Not tainted 6.9.0-rc4-syzkaller-g6a71d2909427 #0 [ 34.672096][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 34.674374][ C0] Call trace: [ 34.675080][ C0] dump_backtrace+0x1b8/0x1e4 [ 34.676157][ C0] show_stack+0x2c/0x3c [ 34.677050][ C0] dump_stack_lvl+0xe4/0x150 [ 34.678039][ C0] dump_stack+0x1c/0x28 [ 34.679012][ C0] print_usage_bug+0x698/0x9ac [ 34.680097][ C0] mark_lock_irq+0x980/0xd2c [ 34.681064][ C0] mark_lock+0x258/0x360 [ 34.681990][ C0] __lock_acquire+0xbc0/0x763c [ 34.683070][ C0] lock_acquire+0x248/0x73c [ 34.684143][ C0] _raw_spin_lock_irqsave+0x5c/0x7c [ 34.685378][ C0] sync_timeline_debug_remove+0x38/0x130 [ 34.686545][ C0] timeline_fence_release+0x1e8/0x270 [ 34.687747][ C0] dma_fence_release+0x198/0x58c [ 34.688810][ C0] dma_fence_array_release+0x11c/0x24c [ 34.690032][ C0] dma_fence_release+0x198/0x58c [ 34.691200][ C0] irq_dma_fence_array_work+0x94/0x130 [ 34.692418][ C0] irq_work_single+0xbc/0x1c0 [ 34.693403][ C0] irq_work_run+0x104/0x254 [ 34.694445][ C0] ipi_handler+0x1b0/0x7dc [ 34.695466][ C0] handle_percpu_devid_irq+0x174/0x308 [ 34.696725][ C0] generic_handle_domain_irq+0x7c/0xc4 [ 34.697879][ C0] gic_handle_irq+0x6c/0x190 [ 34.698888][ C0] call_on_irq_stack+0x24/0x4c [ 34.699897][ C0] do_interrupt_handler+0xd4/0x138 [ 34.700962][ C0] el1_interrupt+0x34/0x68 [ 34.701940][ C0] el1h_64_irq_handler+0x18/0x24 [ 34.702989][ C0] el1h_64_irq+0x64/0x68 [ 34.703911][ C0] _raw_spin_unlock_irq+0x34/0x80 [ 34.704987][ C0] sw_sync_debugfs_release+0x134/0x1f0 [ 34.706175][ C0] __fput+0x30c/0x738 [ 34.707101][ C0] ____fput+0x20/0x30 [ 34.707952][ C0] task_work_run+0x230/0x2e0 [ 34.708990][ C0] do_notify_resume+0x178/0x1f4 [ 34.710095][ C0] el0_svc+0xac/0x168 [ 34.710964][ C0] el0t_64_sync_handler+0x84/0xfc [ 34.712053][ C0] el0t_64_sync+0x190/0x194