Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. 1970/01/01 00:01:18 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:19 parsed 1 programs [ 81.825628][ T4464] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 89.389021][ T4507] chnl_net:caif_netlink_parms(): no params data found [ 89.478540][ T4507] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.479627][ T4507] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.481382][ T4507] device bridge_slave_0 entered promiscuous mode [ 89.483761][ T4507] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.484850][ T4507] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.486613][ T4507] device bridge_slave_1 entered promiscuous mode [ 89.502083][ T4507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.505492][ T4507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.520225][ T4507] team0: Port device team_slave_0 added [ 89.522859][ T4507] team0: Port device team_slave_1 added [ 89.535589][ T4507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.536532][ T4507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.540595][ T4507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.543313][ T4507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.544339][ T4507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.547760][ T4507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.600200][ T4507] device hsr_slave_0 entered promiscuous mode [ 89.638657][ T4507] device hsr_slave_1 entered promiscuous mode [ 90.383698][ T4507] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.430031][ T4507] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.460863][ T4507] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.518763][ T4507] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.650228][ T4507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.655845][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.657427][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.663316][ T4507] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.668017][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.671622][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.673277][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.674212][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.676129][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.679623][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.681121][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.682697][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.683784][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.687005][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.690993][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.702699][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.705154][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.714206][ T4507] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.715626][ T4507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.719707][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.723556][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.725298][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.730742][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.732394][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.734137][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.736048][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.751117][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.834249][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.835440][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.842531][ T4507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.853728][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.855497][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.870975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.872463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.874154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.875624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.879602][ T4507] device veth0_vlan entered promiscuous mode [ 90.885382][ T4507] device veth1_vlan entered promiscuous mode [ 90.900802][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.902355][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.903897][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.905621][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.912000][ T4507] device veth0_macvtap entered promiscuous mode [ 90.915574][ T4507] device veth1_macvtap entered promiscuous mode [ 90.946840][ T4507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.947965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.949944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.951456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.953296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.959012][ T4507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.960201][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.961859][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.965742][ T4507] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.967137][ T4507] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.969833][ T4507] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.971215][ T4507] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.733641][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.734865][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.736681][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.756641][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.757836][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.761837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:32 executed programs: 0 [ 92.311864][ T4695] chnl_net:caif_netlink_parms(): no params data found [ 92.342532][ T4695] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.343725][ T4695] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.345362][ T4695] device bridge_slave_0 entered promiscuous mode [ 92.347994][ T4695] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.349724][ T4695] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.351359][ T4695] device bridge_slave_1 entered promiscuous mode [ 92.367095][ T4695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.370598][ T4695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.384823][ T4695] team0: Port device team_slave_0 added [ 92.387386][ T4695] team0: Port device team_slave_1 added [ 92.402883][ T4695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.403841][ T4695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.407530][ T4695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.410383][ T4695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.411364][ T4695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.415116][ T4695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.461016][ T4695] device hsr_slave_0 entered promiscuous mode [ 92.517094][ T4695] device hsr_slave_1 entered promiscuous mode [ 92.568445][ T4695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.569628][ T4695] Cannot create hsr debugfs directory [ 92.671257][ T4695] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.271043][ T4580] Bluetooth: hci0: command 0x0409 tx timeout [ 95.813605][ T4695] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.348615][ T1983] Bluetooth: hci0: command 0x041b tx timeout [ 96.463573][ T4695] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.516497][ T4695] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.712989][ T4695] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.740023][ T4695] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.770510][ T4695] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.810803][ T4695] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.927707][ T4695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.933971][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.935604][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.939384][ T4695] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.942769][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.944306][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.945786][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.946927][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.949090][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.954288][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.955990][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.957475][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.958586][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.962796][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.966660][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.971505][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.973305][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.977803][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.980724][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.982493][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.989436][ T4695] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.990975][ T4695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.994937][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.996744][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.999372][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.002324][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.005732][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.077679][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.078973][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.084633][ T4695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.098113][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.100437][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.129963][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.132791][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.135493][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.137025][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.140725][ T4695] device veth0_vlan entered promiscuous mode [ 97.145985][ T4695] device veth1_vlan entered promiscuous mode [ 97.157938][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.160470][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.162086][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.163830][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.167119][ T4695] device veth0_macvtap entered promiscuous mode [ 97.172042][ T4695] device veth1_macvtap entered promiscuous mode [ 97.181377][ T4695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.182834][ T4695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.185276][ T4695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.186479][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.188106][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.191094][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.192856][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.196446][ T4695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.198044][ T4695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.201143][ T4695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.202483][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.204201][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.208447][ T4695] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.209722][ T4695] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.210975][ T4695] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.212331][ T4695] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.250275][ T285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.255949][ T285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.261829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.267424][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.268882][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.270479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:37 executed programs: 2 [ 97.316121][ T4912] [ 97.316465][ T4912] ====================================================== [ 97.317419][ T4912] WARNING: possible circular locking dependency detected [ 97.318493][ T4912] 5.15.189-syzkaller #0 Not tainted [ 97.319275][ T4912] ------------------------------------------------------ [ 97.320321][ T4912] syz.0.16/4912 is trying to acquire lock: [ 97.321282][ T4912] ffff0000d8c11450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 97.323026][ T4912] [ 97.323026][ T4912] but task is already holding lock: [ 97.324160][ T4912] ffff0000d8c10120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1f4/0x568 [ 97.325550][ T4912] [ 97.325550][ T4912] which lock already depends on the new lock. [ 97.325550][ T4912] [ 97.327139][ T4912] [ 97.327139][ T4912] the existing dependency chain (in reverse order) is: [ 97.328502][ T4912] [ 97.328502][ T4912] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 97.329619][ T4912] lock_sock_nested+0xd8/0x1d4 [ 97.330403][ T4912] smc_listen_out+0x11c/0x3e8 [ 97.331242][ T4912] smc_listen_work+0x1d0/0xd2c [ 97.332005][ T4912] process_one_work+0x79c/0x1140 [ 97.332782][ T4912] worker_thread+0x8f4/0x101c [ 97.333606][ T4912] kthread+0x374/0x454 [ 97.334253][ T4912] ret_from_fork+0x10/0x20 [ 97.334934][ T4912] [ 97.334934][ T4912] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 97.336411][ T4912] __lock_acquire+0x2928/0x651c [ 97.337099][ T4912] lock_acquire+0x1f4/0x620 [ 97.337864][ T4912] __flush_work+0xf4/0x1bc [ 97.338633][ T4912] __cancel_work_timer+0x2ec/0x448 [ 97.339530][ T4912] cancel_work_sync+0x24/0x38 [ 97.340256][ T4912] smc_clcsock_release+0x64/0xe8 [ 97.341159][ T4912] __smc_release+0x3bc/0x530 [ 97.341968][ T4912] smc_close_non_accepted+0xdc/0x298 [ 97.342940][ T4912] smc_close_active+0x890/0xc20 [ 97.343730][ T4912] __smc_release+0x2dc/0x530 [ 97.344464][ T4912] smc_release+0x264/0x568 [ 97.345193][ T4912] sock_close+0xb4/0x1f8 [ 97.345988][ T4912] __fput+0x1c0/0x7f8 [ 97.346681][ T4912] ____fput+0x20/0x30 [ 97.347434][ T4912] task_work_run+0x12c/0x1e0 [ 97.348359][ T4912] do_notify_resume+0x24b4/0x3128 [ 97.349237][ T4912] el0_svc+0xf0/0x1e0 [ 97.349917][ T4912] el0t_64_sync_handler+0xcc/0xe4 [ 97.350732][ T4912] el0t_64_sync+0x1a0/0x1a4 [ 97.351506][ T4912] [ 97.351506][ T4912] other info that might help us debug this: [ 97.351506][ T4912] [ 97.353086][ T4912] Possible unsafe locking scenario: [ 97.353086][ T4912] [ 97.354187][ T4912] CPU0 CPU1 [ 97.355099][ T4912] ---- ---- [ 97.355863][ T4912] lock(sk_lock-AF_SMC/1); [ 97.356664][ T4912] lock((work_completion)(&new_smc->smc_listen_work)); [ 97.358171][ T4912] lock(sk_lock-AF_SMC/1); [ 97.359259][ T4912] lock((work_completion)(&new_smc->smc_listen_work)); [ 97.360321][ T4912] [ 97.360321][ T4912] *** DEADLOCK *** [ 97.360321][ T4912] [ 97.361579][ T4912] 2 locks held by syz.0.16/4912: [ 97.362313][ T4912] #0: ffff0000e2be7410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 [ 97.363931][ T4912] #1: ffff0000d8c10120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1f4/0x568 [ 97.365519][ T4912] [ 97.365519][ T4912] stack backtrace: [ 97.366391][ T4912] CPU: 1 PID: 4912 Comm: syz.0.16 Not tainted 5.15.189-syzkaller #0 [ 97.367662][ T4912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.369148][ T4912] Call trace: [ 97.369607][ T4912] dump_backtrace+0x0/0x43c [ 97.370302][ T4912] show_stack+0x2c/0x3c [ 97.370873][ T4912] __dump_stack+0x30/0x40 [ 97.371426][ T4912] dump_stack_lvl+0xf8/0x160 [ 97.372086][ T4912] dump_stack+0x1c/0x5c [ 97.372862][ T4912] print_circular_bug+0x148/0x1b0 [ 97.373623][ T4912] check_noncircular+0x240/0x2d4 [ 97.374510][ T4912] __lock_acquire+0x2928/0x651c [ 97.375222][ T4912] lock_acquire+0x1f4/0x620 [ 97.375977][ T4912] __flush_work+0xf4/0x1bc [ 97.376616][ T4912] __cancel_work_timer+0x2ec/0x448 [ 97.377460][ T4912] cancel_work_sync+0x24/0x38 [ 97.378167][ T4912] smc_clcsock_release+0x64/0xe8 [ 97.378876][ T4912] __smc_release+0x3bc/0x530 [ 97.379608][ T4912] smc_close_non_accepted+0xdc/0x298 [ 97.380486][ T4912] smc_close_active+0x890/0xc20 [ 97.381230][ T4912] __smc_release+0x2dc/0x530 [ 97.382071][ T4912] smc_release+0x264/0x568 [ 97.382807][ T4912] sock_close+0xb4/0x1f8 [ 97.383434][ T4912] __fput+0x1c0/0x7f8 [ 97.384064][ T4912] ____fput+0x20/0x30 [ 97.384713][ T4912] task_work_run+0x12c/0x1e0 [ 97.385399][ T4912] do_notify_resume+0x24b4/0x3128 [ 97.386115][ T4912] el0_svc+0xf0/0x1e0 [ 97.386753][ T4912] el0t_64_sync_handler+0xcc/0xe4 [ 97.387586][ T4912] el0t_64_sync+0x1a0/0x1a4 [ 98.438422][ T4138] Bluetooth: hci0: command 0x040f tx timeout [ 99.286320][ T148] device hsr_slave_0 left promiscuous mode [ 99.318725][ T148] device hsr_slave_1 left promiscuous mode [ 99.372348][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.373613][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.380221][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.381421][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.382984][ T148] device bridge_slave_1 left promiscuous mode [ 99.384052][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.400893][ T148] device bridge_slave_0 left promiscuous mode [ 99.401954][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.528364][ T148] device veth1_macvtap left promiscuous mode [ 99.529341][ T148] device veth0_macvtap left promiscuous mode [ 99.530313][ T148] device veth1_vlan left promiscuous mode [ 99.531115][ T148] device veth0_vlan left promiscuous mode [ 99.677877][ T148] team0 (unregistering): Port device team_slave_1 removed [ 99.684324][ T148] team0 (unregistering): Port device team_slave_0 removed [ 99.689012][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.723446][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.852910][ T148] bond0 (unregistering): Released all slaves [ 100.508468][ T4136] Bluetooth: hci0: command 0x0419 tx timeout 1970/01/01 00:01:42 executed programs: 266 1970/01/01 00:01:47 executed programs: 551