Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. 1970/01/01 00:00:27 parsed 1 programs [ 28.797527][ T6555] cgroup: Unknown subsys name 'net' [ 28.906615][ T6555] cgroup: Unknown subsys name 'cpuset' [ 28.908680][ T6555] cgroup: Unknown subsys name 'rlimit' [ 29.035423][ T6555] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 35.458132][ T6561] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.132056][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.132088][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.144620][ T4592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.144648][ T4592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.525762][ T6615] chnl_net:caif_netlink_parms(): no params data found [ 36.545878][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.546276][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.546339][ T6615] bridge_slave_0: entered allmulticast mode [ 36.546788][ T6615] bridge_slave_0: entered promiscuous mode [ 36.547810][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.547849][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.547891][ T6615] bridge_slave_1: entered allmulticast mode [ 36.548260][ T6615] bridge_slave_1: entered promiscuous mode [ 36.560266][ T6615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.561081][ T6615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.567627][ T6615] team0: Port device team_slave_0 added [ 36.568272][ T6615] team0: Port device team_slave_1 added [ 36.574070][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.574091][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.574106][ T6615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.574796][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.574803][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.574818][ T6615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.591785][ T6615] hsr_slave_0: entered promiscuous mode [ 36.592088][ T6615] hsr_slave_1: entered promiscuous mode [ 36.731616][ T6615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.734860][ T6615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.737386][ T6615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.739520][ T6615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.816158][ T6615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.819802][ T6615] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.822050][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.822101][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.824909][ T4592] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.824940][ T4592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.832025][ T6615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.832054][ T6615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.895777][ T6615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.904128][ T6615] veth0_vlan: entered promiscuous mode [ 36.907799][ T6615] veth1_vlan: entered promiscuous mode [ 36.912914][ T6615] veth0_macvtap: entered promiscuous mode [ 36.946568][ T6615] veth1_macvtap: entered promiscuous mode [ 36.951565][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.954833][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.957823][ T4592] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.959394][ T4592] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.960943][ T4592] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.962002][ T4592] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.062569][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.064378][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.066619][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.069041][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.069271][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.420121][ T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.459813][ T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.489964][ T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.536363][ T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:37 executed programs: 0 [ 37.574467][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.574802][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.574958][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.575572][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.575761][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.624076][ T6659] chnl_net:caif_netlink_parms(): no params data found [ 37.641915][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.641992][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.642039][ T6659] bridge_slave_0: entered allmulticast mode [ 37.642434][ T6659] bridge_slave_0: entered promiscuous mode [ 37.643410][ T6659] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.643449][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.643490][ T6659] bridge_slave_1: entered allmulticast mode [ 37.643879][ T6659] bridge_slave_1: entered promiscuous mode [ 37.657348][ T6659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.658459][ T6659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.664497][ T6659] team0: Port device team_slave_0 added [ 37.665921][ T6659] team0: Port device team_slave_1 added [ 37.671768][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.671793][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.671812][ T6659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.672778][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.672786][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.672798][ T6659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.690541][ T6659] hsr_slave_0: entered promiscuous mode [ 37.690808][ T6659] hsr_slave_1: entered promiscuous mode [ 37.690973][ T6659] debugfs: 'hsr0' already exists in 'hsr' [ 37.691010][ T6659] Cannot create hsr debugfs directory [ 39.615905][ T6118] Bluetooth: hci0: command tx timeout [ 40.400655][ T14] bridge_slave_1: left allmulticast mode [ 40.402127][ T14] bridge_slave_1: left promiscuous mode [ 40.403498][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.409891][ T14] bridge_slave_0: left allmulticast mode [ 40.409915][ T14] bridge_slave_0: left promiscuous mode [ 40.409985][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.587505][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.616309][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.636785][ T14] bond0 (unregistering): Released all slaves [ 40.747703][ T14] hsr_slave_0: left promiscuous mode [ 40.748925][ T14] hsr_slave_1: left promiscuous mode [ 40.749169][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.749184][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.750165][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.750175][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.759302][ T14] veth1_macvtap: left promiscuous mode [ 40.760421][ T14] veth0_macvtap: left promiscuous mode [ 40.761505][ T14] veth1_vlan: left promiscuous mode [ 40.762476][ T14] veth0_vlan: left promiscuous mode [ 40.869804][ T14] team0 (unregistering): Port device team_slave_1 removed [ 40.876833][ T14] team0 (unregistering): Port device team_slave_0 removed [ 41.184609][ T6659] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.188309][ T6659] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.190817][ T6659] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.193087][ T6659] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.280183][ T6659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.283322][ T6659] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.290439][ T4592] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.290482][ T4592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.294729][ T1634] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.294822][ T1634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.362644][ T6659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.380795][ T6659] veth0_vlan: entered promiscuous mode [ 41.382241][ T6659] veth1_vlan: entered promiscuous mode [ 41.391362][ T6659] veth0_macvtap: entered promiscuous mode [ 41.392196][ T6659] veth1_macvtap: entered promiscuous mode [ 41.394886][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.395929][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.397380][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.397433][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.397451][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.397463][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.422902][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.422930][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.433825][ T4592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.433850][ T4592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.464509][ T6743] loop0: detected capacity change from 0 to 2048 [ 41.471409][ T6743] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 41.480502][ T6743] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input2 [ 41.591849][ T6659] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 41.592013][ T6659] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 41.695262][ T6118] Bluetooth: hci0: command tx timeout [ 41.826570][ T6659] [ 41.827028][ T6659] ====================================================== [ 41.828092][ T6659] WARNING: possible circular locking dependency detected [ 41.829222][ T6659] 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 Not tainted [ 41.830262][ T6659] ------------------------------------------------------ [ 41.831446][ T6659] syz-executor/6659 is trying to acquire lock: [ 41.832398][ T6659] ffff0000df04d840 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: touch_work_lockdep_map+0x70/0x118 [ 41.834405][ T6659] [ 41.834405][ T6659] but task is already holding lock: [ 41.835580][ T6659] ffff0000df04db38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x74/0x5f0 [ 41.837035][ T6659] [ 41.837035][ T6659] which lock already depends on the new lock. [ 41.837035][ T6659] [ 41.838716][ T6659] [ 41.838716][ T6659] the existing dependency chain (in reverse order) is: [ 41.840275][ T6659] [ 41.840275][ T6659] -> #1 (&conn->lock#2){+.+.}-{4:4}: [ 41.841504][ T6659] __mutex_lock_common+0x1d0/0x24ac [ 41.842423][ T6659] mutex_lock_nested+0x2c/0x38 [ 41.843373][ T6659] l2cap_info_timeout+0x70/0xb0 [ 41.844216][ T6659] process_one_work+0x7e8/0x155c [ 41.845039][ T6659] worker_thread+0x958/0xed8 [ 41.845922][ T6659] kthread+0x5fc/0x75c [ 41.846761][ T6659] ret_from_fork+0x10/0x20 [ 41.847574][ T6659] [ 41.847574][ T6659] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}: [ 41.849292][ T6659] __lock_acquire+0x1774/0x30a4 [ 41.850151][ T6659] lock_acquire+0x14c/0x2e0 [ 41.851015][ T6659] touch_work_lockdep_map+0x98/0x118 [ 41.851896][ T6659] __flush_work+0x4fc/0x8c0 [ 41.852680][ T6659] cancel_delayed_work_sync+0xc4/0x120 [ 41.853536][ T6659] l2cap_conn_del+0x460/0x5f0 [ 41.854318][ T6659] l2cap_disconn_cfm+0x90/0xe0 [ 41.855134][ T6659] hci_conn_hash_flush+0x108/0x218 [ 41.855944][ T6659] hci_dev_close_sync+0x89c/0x1154 [ 41.856737][ T6659] hci_unregister_dev+0x204/0x4c0 [ 41.857519][ T6659] vhci_release+0x7c/0xd0 [ 41.858215][ T6659] __fput+0x340/0x75c [ 41.858891][ T6659] ____fput+0x20/0x58 [ 41.859583][ T6659] task_work_run+0x1dc/0x260 [ 41.860348][ T6659] do_exit+0x524/0x1a14 [ 41.861001][ T6659] do_group_exit+0x194/0x22c [ 41.861692][ T6659] pid_child_should_wake+0x0/0x1dc [ 41.862554][ T6659] invoke_syscall+0x98/0x2b8 [ 41.863352][ T6659] el0_svc_common+0x130/0x23c [ 41.864127][ T6659] do_el0_svc+0x48/0x58 [ 41.864831][ T6659] el0_svc+0x58/0x180 [ 41.865502][ T6659] el0t_64_sync_handler+0x84/0x12c [ 41.866419][ T6659] el0t_64_sync+0x198/0x19c [ 41.867313][ T6659] [ 41.867313][ T6659] other info that might help us debug this: [ 41.867313][ T6659] [ 41.869060][ T6659] Possible unsafe locking scenario: [ 41.869060][ T6659] [ 41.870234][ T6659] CPU0 CPU1 [ 41.871048][ T6659] ---- ---- [ 41.871849][ T6659] lock(&conn->lock#2); [ 41.872557][ T6659] lock((work_completion)(&(&conn->info_timer)->work)); [ 41.873912][ T6659] lock(&conn->lock#2); [ 41.874917][ T6659] lock((work_completion)(&(&conn->info_timer)->work)); [ 41.875991][ T6659] [ 41.875991][ T6659] *** DEADLOCK *** [ 41.875991][ T6659] [ 41.877226][ T6659] 5 locks held by syz-executor/6659: [ 41.878006][ T6659] #0: ffff0000d32f8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fc/0x4c0 [ 41.879468][ T6659] #1: ffff0000d32f80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x4c4/0x1154 [ 41.880930][ T6659] #2: ffff800092bbdc88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xb0/0x218 [ 41.882472][ T6659] #3: ffff0000df04db38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x74/0x5f0 [ 41.883894][ T6659] #4: ffff80008f9a9060 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x10/0x4c [ 41.885285][ T6659] [ 41.885285][ T6659] stack backtrace: [ 41.886200][ T6659] CPU: 0 UID: 0 PID: 6659 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 41.887923][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 41.889648][ T6659] Call trace: [ 41.890248][ T6659] show_stack+0x2c/0x3c (C) [ 41.890985][ T6659] __dump_stack+0x30/0x40 [ 41.891748][ T6659] dump_stack_lvl+0xd8/0x12c [ 41.892534][ T6659] dump_stack+0x1c/0x28 [ 41.893256][ T6659] print_circular_bug+0x324/0x32c [ 41.894055][ T6659] check_noncircular+0x154/0x174 [ 41.894859][ T6659] __lock_acquire+0x1774/0x30a4 [ 41.895623][ T6659] lock_acquire+0x14c/0x2e0 [ 41.896415][ T6659] touch_work_lockdep_map+0x98/0x118 [ 41.897400][ T6659] __flush_work+0x4fc/0x8c0 [ 41.898225][ T6659] cancel_delayed_work_sync+0xc4/0x120 [ 41.899172][ T6659] l2cap_conn_del+0x460/0x5f0 [ 41.899929][ T6659] l2cap_disconn_cfm+0x90/0xe0 [ 41.900749][ T6659] hci_conn_hash_flush+0x108/0x218 [ 41.901601][ T6659] hci_dev_close_sync+0x89c/0x1154 [ 41.902404][ T6659] hci_unregister_dev+0x204/0x4c0 [ 41.903173][ T6659] vhci_release+0x7c/0xd0 [ 41.903868][ T6659] __fput+0x340/0x75c [ 41.904462][ T6659] ____fput+0x20/0x58 [ 41.905035][ T6659] task_work_run+0x1dc/0x260 [ 41.905686][ T6659] do_exit+0x524/0x1a14 [ 41.906359][ T6659] do_group_exit+0x194/0x22c [ 41.907020][ T6659] pid_child_should_wake+0x0/0x1dc [ 41.907747][ T6659] invoke_syscall+0x98/0x2b8 [ 41.908444][ T6659] el0_svc_common+0x130/0x23c [ 41.909192][ T6659] do_el0_svc+0x48/0x58 [ 41.909869][ T6659] el0_svc+0x58/0x180 [ 41.910514][ T6659] el0t_64_sync_handler+0x84/0x12c [ 41.911413][ T6659] el0t_64_sync+0x198/0x19c