Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. 1970/01/01 00:01:28 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:28 parsed 1 programs [ 91.349551][ T4574] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 98.629851][ T4595] chnl_net:caif_netlink_parms(): no params data found [ 98.668749][ T4595] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.669865][ T4595] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.671590][ T4595] device bridge_slave_0 entered promiscuous mode [ 98.674621][ T4595] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.675725][ T4595] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.677523][ T4595] device bridge_slave_1 entered promiscuous mode [ 98.695245][ T4595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.698771][ T4595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.713988][ T4595] team0: Port device team_slave_0 added [ 98.716384][ T4595] team0: Port device team_slave_1 added [ 98.732890][ T4595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.734000][ T4595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.737882][ T4595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.740788][ T4595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.741811][ T4595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.745612][ T4595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.819754][ T4595] device hsr_slave_0 entered promiscuous mode [ 98.868066][ T4595] device hsr_slave_1 entered promiscuous mode [ 99.614561][ T4595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.674305][ T4595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.719486][ T4595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.749948][ T4595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.935554][ T4595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.944601][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.946322][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.953264][ T4595] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.960693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.962315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.963775][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.965016][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.966779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.983171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.985096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.986754][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.987947][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.997816][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.999850][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.002985][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.005316][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.021109][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.022809][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.024733][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.033380][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.035059][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.042923][ T4595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.045103][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.059817][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.061516][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.219868][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.221134][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.241110][ T4595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.259201][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.260999][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.287078][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.288679][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.290753][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.292279][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.294518][ T4595] device veth0_vlan entered promiscuous mode [ 100.311341][ T4595] device veth1_vlan entered promiscuous mode [ 100.333548][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.335276][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.336977][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.340508][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.346066][ T4595] device veth0_macvtap entered promiscuous mode [ 100.351468][ T4595] device veth1_macvtap entered promiscuous mode [ 100.375128][ T4595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.376420][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.379888][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.381476][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.388428][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.392440][ T4595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.395542][ T4595] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.396736][ T4595] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.408484][ T4595] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.409782][ T4595] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.412431][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.414228][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.099604][ T289] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.903505][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.904838][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.906751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.924699][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.925976][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.928461][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:42 executed programs: 0 [ 103.058828][ T4841] chnl_net:caif_netlink_parms(): no params data found [ 103.095795][ T4841] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.097182][ T4841] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.099870][ T4841] device bridge_slave_0 entered promiscuous mode [ 103.103213][ T4841] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.104344][ T4841] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.106312][ T4841] device bridge_slave_1 entered promiscuous mode [ 103.122248][ T4841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.125741][ T4841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.141937][ T4841] team0: Port device team_slave_0 added [ 103.144840][ T4841] team0: Port device team_slave_1 added [ 103.159553][ T4841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.160679][ T4841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.164382][ T4841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.167281][ T4841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.169293][ T4841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.173294][ T4841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.249945][ T4841] device hsr_slave_0 entered promiscuous mode [ 103.271667][ T4841] device hsr_slave_1 entered promiscuous mode [ 103.307973][ T4841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.309068][ T4841] Cannot create hsr debugfs directory [ 103.547123][ T289] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.998832][ T4100] Bluetooth: hci0: command 0x0409 tx timeout [ 105.944375][ T289] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.994614][ T289] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.965153][ T4841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.991677][ T4841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.060769][ T4841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.068179][ T25] Bluetooth: hci0: command 0x041b tx timeout [ 107.100241][ T4841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.193173][ T4841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.203240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.205110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.209569][ T4841] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.213467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.215279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.216871][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.217964][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.219497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.243024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.244877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.246453][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.247623][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.249201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.254019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.261903][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.263947][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.268527][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.270443][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.272359][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.276136][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.280179][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.285731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.287513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.290555][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.372930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.374128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.380739][ T4841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.394041][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.396361][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.424569][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.426567][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.428981][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.430906][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.434614][ T4841] device veth0_vlan entered promiscuous mode [ 107.441886][ T4841] device veth1_vlan entered promiscuous mode [ 107.463292][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.465144][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.466939][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.469745][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.473632][ T4841] device veth0_macvtap entered promiscuous mode [ 107.481683][ T4841] device veth1_macvtap entered promiscuous mode [ 107.491540][ T4841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.493129][ T4841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.495639][ T4841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.498790][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.500604][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.502284][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.504005][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.507070][ T4841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.508880][ T4841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.511468][ T4841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.512745][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.514609][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.518682][ T4841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.520049][ T4841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.521291][ T4841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.522482][ T4841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.577418][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.584536][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.588961][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.594571][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.595793][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.598422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.650955][ T5050] [ 107.651350][ T5050] ====================================================== [ 107.652288][ T5050] WARNING: possible circular locking dependency detected [ 107.653354][ T5050] 5.15.189-syzkaller #0 Not tainted [ 107.653995][ T5050] ------------------------------------------------------ [ 107.654838][ T5050] syz.0.16/5050 is trying to acquire lock: [ 107.655758][ T5050] ffff0000c2d59450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 107.657397][ T5050] [ 107.657397][ T5050] but task is already holding lock: [ 107.658521][ T5050] ffff0000c2d58120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1f4/0x568 [ 107.660011][ T5050] [ 107.660011][ T5050] which lock already depends on the new lock. [ 107.660011][ T5050] [ 107.661490][ T5050] [ 107.661490][ T5050] the existing dependency chain (in reverse order) is: [ 107.662898][ T5050] [ 107.662898][ T5050] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 107.664091][ T5050] lock_sock_nested+0xd8/0x1d4 [ 107.665004][ T5050] smc_listen_out+0x11c/0x3e8 [ 107.665787][ T5050] smc_listen_work+0x1d0/0xd2c [ 107.666555][ T5050] process_one_work+0x79c/0x1140 [ 107.667332][ T5050] worker_thread+0x8f4/0x101c [ 107.668118][ T5050] kthread+0x374/0x454 [ 107.668807][ T5050] ret_from_fork+0x10/0x20 [ 107.669554][ T5050] [ 107.669554][ T5050] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 107.671016][ T5050] __lock_acquire+0x2928/0x651c [ 107.671852][ T5050] lock_acquire+0x1f4/0x620 [ 107.672723][ T5050] __flush_work+0xf4/0x1bc [ 107.673696][ T5050] __cancel_work_timer+0x2ec/0x448 [ 107.674646][ T5050] cancel_work_sync+0x24/0x38 [ 107.675684][ T5050] smc_clcsock_release+0x64/0xe8 [ 107.677068][ T5050] __smc_release+0x3bc/0x530 [ 107.678115][ T5050] smc_close_non_accepted+0xdc/0x298 [ 107.679381][ T5050] smc_close_active+0x890/0xc20 [ 107.680567][ T5050] __smc_release+0x2dc/0x530 [ 107.681646][ T5050] smc_release+0x264/0x568 [ 107.682517][ T5050] sock_close+0xb4/0x1f8 [ 107.683200][ T5050] __fput+0x1c0/0x7f8 [ 107.684110][ T5050] ____fput+0x20/0x30 [ 107.684862][ T5050] task_work_run+0x12c/0x1e0 [ 107.685861][ T5050] do_notify_resume+0x24b4/0x3128 [ 107.686831][ T5050] el0_svc+0xf0/0x1e0 [ 107.687668][ T5050] el0t_64_sync_handler+0xcc/0xe4 [ 107.688598][ T5050] el0t_64_sync+0x1a0/0x1a4 [ 107.689444][ T5050] [ 107.689444][ T5050] other info that might help us debug this: [ 107.689444][ T5050] [ 107.691344][ T5050] Possible unsafe locking scenario: [ 107.691344][ T5050] [ 107.692724][ T5050] CPU0 CPU1 [ 107.693716][ T5050] ---- ---- [ 107.694618][ T5050] lock(sk_lock-AF_SMC/1); [ 107.695347][ T5050] lock((work_completion)(&new_smc->smc_listen_work)); [ 107.696911][ T5050] lock(sk_lock-AF_SMC/1); [ 107.697999][ T5050] lock((work_completion)(&new_smc->smc_listen_work)); [ 107.699077][ T5050] [ 107.699077][ T5050] *** DEADLOCK *** [ 107.699077][ T5050] [ 107.700378][ T5050] 2 locks held by syz.0.16/5050: [ 107.701178][ T5050] #0: ffff0000e2737a10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 [ 107.702611][ T5050] #1: ffff0000c2d58120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1f4/0x568 [ 107.704088][ T5050] [ 107.704088][ T5050] stack backtrace: [ 107.705014][ T5050] CPU: 0 PID: 5050 Comm: syz.0.16 Not tainted 5.15.189-syzkaller #0 [ 107.706281][ T5050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.707708][ T5050] Call trace: [ 107.708208][ T5050] dump_backtrace+0x0/0x43c [ 107.708844][ T5050] show_stack+0x2c/0x3c [ 107.709387][ T5050] __dump_stack+0x30/0x40 [ 107.710074][ T5050] dump_stack_lvl+0xf8/0x160 [ 107.710883][ T5050] dump_stack+0x1c/0x5c [ 107.711496][ T5050] print_circular_bug+0x148/0x1b0 [ 107.712286][ T5050] check_noncircular+0x240/0x2d4 [ 107.712969][ T5050] __lock_acquire+0x2928/0x651c [ 107.713645][ T5050] lock_acquire+0x1f4/0x620 [ 107.714337][ T5050] __flush_work+0xf4/0x1bc [ 107.714984][ T5050] __cancel_work_timer+0x2ec/0x448 [ 107.715746][ T5050] cancel_work_sync+0x24/0x38 [ 107.716617][ T5050] smc_clcsock_release+0x64/0xe8 [ 107.717334][ T5050] __smc_release+0x3bc/0x530 [ 107.718009][ T5050] smc_close_non_accepted+0xdc/0x298 [ 107.718838][ T5050] smc_close_active+0x890/0xc20 [ 107.719480][ T5050] __smc_release+0x2dc/0x530 [ 107.720296][ T5050] smc_release+0x264/0x568 [ 107.721047][ T5050] sock_close+0xb4/0x1f8 [ 107.721648][ T5050] __fput+0x1c0/0x7f8 [ 107.722224][ T5050] ____fput+0x20/0x30 [ 107.722846][ T5050] task_work_run+0x12c/0x1e0 [ 107.723554][ T5050] do_notify_resume+0x24b4/0x3128 [ 107.724397][ T5050] el0_svc+0xf0/0x1e0 [ 107.725121][ T5050] el0t_64_sync_handler+0xcc/0xe4 [ 107.725880][ T5050] el0t_64_sync+0x1a0/0x1a4 1970/01/01 00:01:47 executed programs: 12 [ 108.441064][ T289] device hsr_slave_0 left promiscuous mode [ 108.478974][ T289] device hsr_slave_1 left promiscuous mode [ 108.529605][ T289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.530808][ T289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.537251][ T289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.539331][ T289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.545093][ T289] device bridge_slave_1 left promiscuous mode [ 108.546058][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.591671][ T289] device bridge_slave_0 left promiscuous mode [ 108.592738][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.708097][ T289] device veth1_macvtap left promiscuous mode [ 108.709107][ T289] device veth0_macvtap left promiscuous mode [ 108.710101][ T289] device veth1_vlan left promiscuous mode [ 108.711138][ T289] device veth0_vlan left promiscuous mode [ 109.006055][ T289] team0 (unregistering): Port device team_slave_1 removed [ 109.015355][ T289] team0 (unregistering): Port device team_slave_0 removed [ 109.021620][ T289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.082440][ T289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.147646][ T5015] Bluetooth: hci0: command 0x040f tx timeout [ 109.209193][ T289] bond0 (unregistering): Released all slaves [ 111.227776][ T5364] Bluetooth: hci0: command 0x0419 tx timeout 1970/01/01 00:01:52 executed programs: 253