Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. 1970/01/01 00:00:44 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:45 parsed 1 programs [ 48.173125][ T4026] cgroup: Unknown subsys name 'net' [ 48.425309][ T4026] cgroup: Unknown subsys name 'rlimit' [ 48.767156][ T4026] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 56.284317][ T4033] chnl_net:caif_netlink_parms(): no params data found [ 56.323490][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.325433][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.328090][ T4033] device bridge_slave_0 entered promiscuous mode [ 56.333051][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.334923][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.337426][ T4033] device bridge_slave_1 entered promiscuous mode [ 56.353682][ T4033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.358033][ T4033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.372955][ T4033] team0: Port device team_slave_0 added [ 56.376006][ T4033] team0: Port device team_slave_1 added [ 56.389405][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.391117][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.397912][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.403300][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.405137][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.411962][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.470603][ T4033] device hsr_slave_0 entered promiscuous mode [ 56.528615][ T4033] device hsr_slave_1 entered promiscuous mode [ 56.641742][ T4033] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.691476][ T4033] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.731923][ T4033] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.790840][ T4033] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.866302][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.868293][ T4033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.870586][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.872496][ T4033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.914149][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.923517][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.927482][ T516] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.930816][ T516] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.933771][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 56.941915][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.947217][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.952336][ T516] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.954159][ T516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.960169][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.962712][ T516] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.964580][ T516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.979421][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.982299][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.988734][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.994077][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.000730][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.005480][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.075631][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.077745][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.085066][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.101287][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.114729][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.117595][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.120379][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.124488][ T4033] device veth0_vlan entered promiscuous mode [ 57.132047][ T4033] device veth1_vlan entered promiscuous mode [ 57.146320][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.149728][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.152310][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.156963][ T4033] device veth0_macvtap entered promiscuous mode [ 57.161908][ T4033] device veth1_macvtap entered promiscuous mode [ 57.174404][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.176594][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.180541][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.185633][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.187668][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.193342][ T4033] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.195609][ T4033] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.197796][ T4033] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.200623][ T4033] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.548153][ T136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.446021][ T136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.744780][ T136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.807748][ T136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.345837][ T516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.347990][ T516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.357056][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.375467][ T516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.377612][ T516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.380455][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:03 executed programs: 0 [ 64.017249][ T136] device hsr_slave_0 left promiscuous mode [ 64.061227][ T136] device hsr_slave_1 left promiscuous mode [ 64.148702][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.150482][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.154008][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.155867][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.159113][ T136] device bridge_slave_1 left promiscuous mode [ 64.161467][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.211958][ T136] device bridge_slave_0 left promiscuous mode [ 64.213785][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.348862][ T136] device veth1_macvtap left promiscuous mode [ 64.350531][ T136] device veth0_macvtap left promiscuous mode [ 64.352049][ T136] device veth1_vlan left promiscuous mode [ 64.353684][ T136] device veth0_vlan left promiscuous mode [ 64.549370][ T136] team0 (unregistering): Port device team_slave_1 removed [ 64.558840][ T136] team0 (unregistering): Port device team_slave_0 removed [ 64.568714][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.607401][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.765692][ T136] bond0 (unregistering): Released all slaves [ 64.962350][ T4160] chnl_net:caif_netlink_parms(): no params data found [ 65.005584][ T4160] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.007431][ T4160] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.011329][ T4160] device bridge_slave_0 entered promiscuous mode [ 65.015014][ T4160] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.016928][ T4160] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.020933][ T4160] device bridge_slave_1 entered promiscuous mode [ 65.037904][ T4160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.048014][ T4160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.067267][ T4160] team0: Port device team_slave_0 added [ 65.072823][ T4160] team0: Port device team_slave_1 added [ 65.087751][ T4160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.091371][ T4160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.097726][ T4160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.102992][ T4160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.104819][ T4160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.113180][ T4160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.171578][ T4160] device hsr_slave_0 entered promiscuous mode [ 65.189802][ T4160] device hsr_slave_1 entered promiscuous mode [ 65.872995][ T4160] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.910350][ T4160] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.960285][ T4160] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.006309][ T4160] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.119092][ T25] Bluetooth: hci0: command 0x0409 tx timeout [ 66.126565][ T4160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.138160][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.141677][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.147164][ T4160] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.156785][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.161414][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.166784][ T1601] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.168722][ T1601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.180445][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.182964][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.185518][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.187998][ T1601] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.190015][ T1601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.210307][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.230022][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.232909][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.242386][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.244978][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.261031][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.272406][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.275798][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.287050][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.290735][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.293352][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.299092][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.492105][ T4160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.510775][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.512914][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.532528][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.535486][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.559622][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.562480][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.566533][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.600725][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.605340][ T4160] device veth0_vlan entered promiscuous mode [ 66.619480][ T4160] device veth1_vlan entered promiscuous mode [ 66.664624][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.667467][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.678135][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.700651][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.711190][ T4160] device veth0_macvtap entered promiscuous mode [ 66.715819][ T4160] device veth1_macvtap entered promiscuous mode [ 66.747833][ T4160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.750619][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.753154][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.755694][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.759403][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.772758][ T4160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.776870][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.791654][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.810564][ T4160] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.812765][ T4160] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.815004][ T4160] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.817124][ T4160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.901217][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.903430][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.906386][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.949486][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.951644][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.954800][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.134646][ T4270] [ 67.135303][ T4270] ====================================================== [ 67.137227][ T4270] WARNING: possible circular locking dependency detected [ 67.139148][ T4270] 5.15.178-syzkaller #0 Not tainted [ 67.140480][ T4270] ------------------------------------------------------ [ 67.142385][ T4270] syz.0.16/4270 is trying to acquire lock: [ 67.143916][ T4270] ffff0000d89ccc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 67.146730][ T4270] [ 67.146730][ T4270] but task is already holding lock: [ 67.148616][ T4270] ffff800016f39608 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 67.151164][ T4270] [ 67.151164][ T4270] which lock already depends on the new lock. [ 67.151164][ T4270] [ 67.153936][ T4270] [ 67.153936][ T4270] the existing dependency chain (in reverse order) is: [ 67.156248][ T4270] [ 67.156248][ T4270] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 67.158390][ T4270] __mutex_lock_common+0x194/0x2154 [ 67.159900][ T4270] mutex_lock_nested+0xa4/0xf8 [ 67.161299][ T4270] rfkill_register+0x44/0x7a4 [ 67.162593][ T4270] hci_register_dev+0x3e0/0x880 [ 67.163926][ T4270] vhci_create_device+0x2c4/0x568 [ 67.165369][ T4270] vhci_write+0x318/0x3b8 [ 67.166654][ T4270] vfs_write+0x884/0xb44 [ 67.167826][ T4270] ksys_write+0x15c/0x26c [ 67.169107][ T4270] __arm64_sys_write+0x7c/0x90 [ 67.170508][ T4270] invoke_syscall+0x98/0x2b8 [ 67.171796][ T4270] el0_svc_common+0x138/0x258 [ 67.173196][ T4270] do_el0_svc+0x58/0x14c [ 67.174438][ T4270] el0_svc+0x7c/0x1f0 [ 67.175616][ T4270] el0t_64_sync_handler+0x84/0xe4 [ 67.177016][ T4270] el0t_64_sync+0x1a0/0x1a4 [ 67.178329][ T4270] [ 67.178329][ T4270] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 67.180388][ T4270] __mutex_lock_common+0x194/0x2154 [ 67.181779][ T4270] mutex_lock_nested+0xa4/0xf8 [ 67.183170][ T4270] vhci_send_frame+0x8c/0x10c [ 67.184558][ T4270] hci_send_frame+0x194/0x2f0 [ 67.186023][ T4270] hci_tx_work+0x9ac/0x16cc [ 67.187399][ T4270] process_one_work+0x790/0x11b8 [ 67.188807][ T4270] worker_thread+0x910/0x1034 [ 67.190162][ T4270] kthread+0x37c/0x45c [ 67.191353][ T4270] ret_from_fork+0x10/0x20 [ 67.192471][ T4270] [ 67.192471][ T4270] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 67.194873][ T4270] __flush_work+0xf8/0x1c0 [ 67.196143][ T4270] flush_work+0x24/0x38 [ 67.197420][ T4270] hci_dev_do_close+0x16c/0x1060 [ 67.198863][ T4270] hci_unregister_dev+0x248/0x4d4 [ 67.200336][ T4270] vhci_release+0x74/0xc4 [ 67.201489][ T4270] __fput+0x1c4/0x800 [ 67.202573][ T4270] ____fput+0x20/0x30 [ 67.203768][ T4270] task_work_run+0x130/0x1e4 [ 67.205105][ T4270] do_exit+0x670/0x20bc [ 67.206338][ T4270] do_group_exit+0x110/0x268 [ 67.207638][ T4270] get_signal+0x634/0x1550 [ 67.208933][ T4270] do_notify_resume+0x3d0/0x32b8 [ 67.210341][ T4270] el0_svc+0xfc/0x1f0 [ 67.211530][ T4270] el0t_64_sync_handler+0x84/0xe4 [ 67.212936][ T4270] el0t_64_sync+0x1a0/0x1a4 [ 67.214305][ T4270] [ 67.214305][ T4270] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 67.216148][ T4270] __mutex_lock_common+0x194/0x2154 [ 67.217666][ T4270] mutex_lock_nested+0xa4/0xf8 [ 67.219005][ T4270] bg_scan_update+0x9c/0x470 [ 67.220357][ T4270] process_one_work+0x790/0x11b8 [ 67.221728][ T4270] worker_thread+0x910/0x1034 [ 67.223145][ T4270] kthread+0x37c/0x45c [ 67.224314][ T4270] ret_from_fork+0x10/0x20 [ 67.225714][ T4270] [ 67.225714][ T4270] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 67.228066][ T4270] __lock_acquire+0x32d4/0x7638 [ 67.229325][ T4270] lock_acquire+0x240/0x77c [ 67.230457][ T4270] __flush_work+0xf8/0x1c0 [ 67.231545][ T4270] __cancel_work_timer+0x3ec/0x548 [ 67.232904][ T4270] cancel_work_sync+0x24/0x38 [ 67.234272][ T4270] hci_request_cancel_all+0xcc/0x2d0 [ 67.235722][ T4270] hci_dev_do_close+0x54/0x1060 [ 67.237095][ T4270] hci_rfkill_set_block+0xdc/0x1d0 [ 67.238557][ T4270] rfkill_set_block+0x18c/0x37c [ 67.239922][ T4270] rfkill_fop_write+0x594/0x750 [ 67.241360][ T4270] vfs_write+0x280/0xb44 [ 67.242622][ T4270] ksys_write+0x15c/0x26c [ 67.243965][ T4270] __arm64_sys_write+0x7c/0x90 [ 67.245349][ T4270] invoke_syscall+0x98/0x2b8 [ 67.246627][ T4270] el0_svc_common+0x138/0x258 [ 67.247891][ T4270] do_el0_svc+0x58/0x14c [ 67.249154][ T4270] el0_svc+0x7c/0x1f0 [ 67.250319][ T4270] el0t_64_sync_handler+0x84/0xe4 [ 67.251911][ T4270] el0t_64_sync+0x1a0/0x1a4 [ 67.253149][ T4270] [ 67.253149][ T4270] other info that might help us debug this: [ 67.253149][ T4270] [ 67.255814][ T4270] Chain exists of: [ 67.255814][ T4270] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 67.255814][ T4270] [ 67.259791][ T4270] Possible unsafe locking scenario: [ 67.259791][ T4270] [ 67.261773][ T4270] CPU0 CPU1 [ 67.263180][ T4270] ---- ---- [ 67.264597][ T4270] lock(rfkill_global_mutex); [ 67.265726][ T4270] lock(&data->open_mutex); [ 67.267540][ T4270] lock(rfkill_global_mutex); [ 67.269399][ T4270] lock((work_completion)(&hdev->bg_scan_update)); [ 67.271042][ T4270] [ 67.271042][ T4270] *** DEADLOCK *** [ 67.271042][ T4270] [ 67.273094][ T4270] 1 lock held by syz.0.16/4270: [ 67.274360][ T4270] #0: ffff800016f39608 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 67.277004][ T4270] [ 67.277004][ T4270] stack backtrace: [ 67.278475][ T4270] CPU: 0 PID: 4270 Comm: syz.0.16 Not tainted 5.15.178-syzkaller #0 [ 67.280444][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 67.282868][ T4270] Call trace: [ 67.283666][ T4270] dump_backtrace+0x0/0x530 [ 67.284724][ T4270] show_stack+0x2c/0x3c [ 67.285644][ T4270] dump_stack_lvl+0x108/0x170 [ 67.286661][ T4270] dump_stack+0x1c/0x58 [ 67.287572][ T4270] print_circular_bug+0x150/0x1b8 [ 67.288703][ T4270] check_noncircular+0x2cc/0x378 [ 67.289885][ T4270] __lock_acquire+0x32d4/0x7638 [ 67.291048][ T4270] lock_acquire+0x240/0x77c [ 67.292212][ T4270] __flush_work+0xf8/0x1c0 [ 67.293358][ T4270] __cancel_work_timer+0x3ec/0x548 [ 67.294652][ T4270] cancel_work_sync+0x24/0x38 [ 67.295803][ T4270] hci_request_cancel_all+0xcc/0x2d0 [ 67.297095][ T4270] hci_dev_do_close+0x54/0x1060 [ 67.298291][ T4270] hci_rfkill_set_block+0xdc/0x1d0 [ 67.299417][ T4270] rfkill_set_block+0x18c/0x37c [ 67.300549][ T4270] rfkill_fop_write+0x594/0x750 [ 67.301755][ T4270] vfs_write+0x280/0xb44 [ 67.302812][ T4270] ksys_write+0x15c/0x26c [ 67.303891][ T4270] __arm64_sys_write+0x7c/0x90 [ 67.305157][ T4270] invoke_syscall+0x98/0x2b8 [ 67.306330][ T4270] el0_svc_common+0x138/0x258 [ 67.307535][ T4270] do_el0_svc+0x58/0x14c [ 67.308692][ T4270] el0_svc+0x7c/0x1f0 [ 67.309702][ T4270] el0t_64_sync_handler+0x84/0xe4 [ 67.310897][ T4270] el0t_64_sync+0x1a0/0x1a4