Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. 1970/01/01 00:01:31 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:31 parsed 1 programs [ 94.210495][ T4612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 101.532223][ T1848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.533384][ T1848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.535612][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.546679][ T1848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.547922][ T1848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.550945][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.995420][ T4662] chnl_net:caif_netlink_parms(): no params data found [ 102.033333][ T4662] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.034557][ T4662] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.036576][ T4662] device bridge_slave_0 entered promiscuous mode [ 102.041488][ T4662] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.042622][ T4662] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.044545][ T4662] device bridge_slave_1 entered promiscuous mode [ 102.062055][ T4662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.065619][ T4662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.083977][ T4662] team0: Port device team_slave_0 added [ 102.086953][ T4662] team0: Port device team_slave_1 added [ 102.102120][ T4662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.103184][ T4662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.107059][ T4662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.110917][ T4662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.111833][ T4662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.115670][ T4662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.170379][ T4662] device hsr_slave_0 entered promiscuous mode [ 102.208588][ T4662] device hsr_slave_1 entered promiscuous mode [ 102.908659][ T4662] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.941937][ T4662] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.002186][ T4662] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.030382][ T4662] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.111918][ T4662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.122282][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.123826][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.127392][ T4662] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.131419][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.133340][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.134940][ T1848] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.135910][ T1848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.138773][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.156893][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.158825][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.160372][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.161377][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.162802][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.164551][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.180918][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.183477][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.185219][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.187063][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.193381][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.195213][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.196978][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.201364][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.204105][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.265426][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.321183][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.322505][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.327342][ T4662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.341902][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.344126][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.356232][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.358074][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.360559][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.362158][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.365165][ T4662] device veth0_vlan entered promiscuous mode [ 103.374136][ T4662] device veth1_vlan entered promiscuous mode [ 103.395501][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.397305][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.401319][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.403161][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.410896][ T4662] device veth0_macvtap entered promiscuous mode [ 103.416223][ T4662] device veth1_macvtap entered promiscuous mode [ 103.427265][ T4662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.430617][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.432498][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.434258][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.435977][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.442014][ T4662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.443317][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.445371][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.450018][ T4662] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.451221][ T4662] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.452412][ T4662] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.453906][ T4662] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:44 executed programs: 0 [ 104.583249][ T4801] chnl_net:caif_netlink_parms(): no params data found [ 104.654051][ T4801] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.655211][ T4801] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.657105][ T4801] device bridge_slave_0 entered promiscuous mode [ 104.661494][ T4801] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.662615][ T4801] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.664597][ T4801] device bridge_slave_1 entered promiscuous mode [ 104.683204][ T4801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.686792][ T4801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.704570][ T4801] team0: Port device team_slave_0 added [ 104.707247][ T4801] team0: Port device team_slave_1 added [ 104.720111][ T4801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.721161][ T4801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.725071][ T4801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.728178][ T4801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.729386][ T4801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.733645][ T4801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.810534][ T4801] device hsr_slave_0 entered promiscuous mode [ 104.851398][ T4801] device hsr_slave_1 entered promiscuous mode [ 104.880893][ T4801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.882138][ T4801] Cannot create hsr debugfs directory [ 104.962770][ T4801] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.508354][ T4691] Bluetooth: hci0: command 0x0409 tx timeout [ 108.051459][ T4801] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.588384][ T4691] Bluetooth: hci0: command 0x041b tx timeout [ 109.167399][ T4801] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.219113][ T4801] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.386290][ T4801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.401926][ T4801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.453216][ T4801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.480944][ T4801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.580698][ T4801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.587368][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.590496][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.595098][ T4801] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.599619][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.602618][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.604480][ T1848] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.605640][ T1848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.607261][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.612160][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.614112][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.615828][ T1848] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.616998][ T1848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.635413][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.637525][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.641160][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.643160][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.645008][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.648091][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.650121][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.652017][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.676512][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.679620][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.681559][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.684925][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.762939][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.764155][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.770556][ T4801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.783120][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.785310][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.797096][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.800933][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.802912][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.804522][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.807958][ T4801] device veth0_vlan entered promiscuous mode [ 109.815680][ T4801] device veth1_vlan entered promiscuous mode [ 109.831443][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.833204][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.834902][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.836516][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.842596][ T4801] device veth0_macvtap entered promiscuous mode [ 109.846376][ T4801] device veth1_macvtap entered promiscuous mode [ 109.855349][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.856801][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.859568][ T4801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.861233][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.863140][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.864917][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.866631][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.872149][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.873612][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.876207][ T4801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.898618][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.900529][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.904413][ T4801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.905657][ T4801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.907122][ T4801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.911951][ T4801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.973830][ T381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.981319][ T381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.984570][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.991329][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.992744][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.001329][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:50 executed programs: 2 [ 110.047842][ T5053] [ 110.048286][ T5053] ====================================================== [ 110.049554][ T5053] WARNING: possible circular locking dependency detected [ 110.050572][ T5053] 5.15.189-syzkaller #0 Not tainted [ 110.051367][ T5053] ------------------------------------------------------ [ 110.052443][ T5053] syz.0.16/5053 is trying to acquire lock: [ 110.053330][ T5053] ffff0000c9741450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 110.055198][ T5053] [ 110.055198][ T5053] but task is already holding lock: [ 110.056294][ T5053] ffff0000c9740120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1f4/0x568 [ 110.057758][ T5053] [ 110.057758][ T5053] which lock already depends on the new lock. [ 110.057758][ T5053] [ 110.059331][ T5053] [ 110.059331][ T5053] the existing dependency chain (in reverse order) is: [ 110.060699][ T5053] [ 110.060699][ T5053] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 110.062000][ T5053] lock_sock_nested+0xd8/0x1d4 [ 110.062939][ T5053] smc_listen_out+0x11c/0x3e8 [ 110.063806][ T5053] smc_listen_work+0x1d0/0xd2c [ 110.064541][ T5053] process_one_work+0x79c/0x1140 [ 110.065349][ T5053] worker_thread+0x8f4/0x101c [ 110.066289][ T5053] kthread+0x374/0x454 [ 110.067016][ T5053] ret_from_fork+0x10/0x20 [ 110.067776][ T5053] [ 110.067776][ T5053] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 110.069493][ T5053] __lock_acquire+0x2928/0x651c [ 110.070311][ T5053] lock_acquire+0x1f4/0x620 [ 110.071129][ T5053] __flush_work+0xf4/0x1bc [ 110.071909][ T5053] __cancel_work_timer+0x2ec/0x448 [ 110.072756][ T5053] cancel_work_sync+0x24/0x38 [ 110.073523][ T5053] smc_clcsock_release+0x64/0xe8 [ 110.074377][ T5053] __smc_release+0x3bc/0x530 [ 110.075258][ T5053] smc_close_non_accepted+0xdc/0x298 [ 110.076214][ T5053] smc_close_active+0x890/0xc20 [ 110.077078][ T5053] __smc_release+0x2dc/0x530 [ 110.077849][ T5053] smc_release+0x264/0x568 [ 110.078565][ T5053] sock_close+0xb4/0x1f8 [ 110.079284][ T5053] __fput+0x1c0/0x7f8 [ 110.079943][ T5053] ____fput+0x20/0x30 [ 110.080664][ T5053] task_work_run+0x12c/0x1e0 [ 110.081469][ T5053] do_notify_resume+0x24b4/0x3128 [ 110.082314][ T5053] el0_svc+0xf0/0x1e0 [ 110.082994][ T5053] el0t_64_sync_handler+0xcc/0xe4 [ 110.083983][ T5053] el0t_64_sync+0x1a0/0x1a4 [ 110.084819][ T5053] [ 110.084819][ T5053] other info that might help us debug this: [ 110.084819][ T5053] [ 110.086360][ T5053] Possible unsafe locking scenario: [ 110.086360][ T5053] [ 110.087459][ T5053] CPU0 CPU1 [ 110.088316][ T5053] ---- ---- [ 110.089181][ T5053] lock(sk_lock-AF_SMC/1); [ 110.089917][ T5053] lock((work_completion)(&new_smc->smc_listen_work)); [ 110.091460][ T5053] lock(sk_lock-AF_SMC/1); [ 110.092603][ T5053] lock((work_completion)(&new_smc->smc_listen_work)); [ 110.093768][ T5053] [ 110.093768][ T5053] *** DEADLOCK *** [ 110.093768][ T5053] [ 110.095108][ T5053] 2 locks held by syz.0.16/5053: [ 110.095850][ T5053] #0: ffff0000e2a38810 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 [ 110.097483][ T5053] #1: ffff0000c9740120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1f4/0x568 [ 110.099017][ T5053] [ 110.099017][ T5053] stack backtrace: [ 110.099978][ T5053] CPU: 1 PID: 5053 Comm: syz.0.16 Not tainted 5.15.189-syzkaller #0 [ 110.101214][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.102939][ T5053] Call trace: [ 110.103481][ T5053] dump_backtrace+0x0/0x43c [ 110.104285][ T5053] show_stack+0x2c/0x3c [ 110.104917][ T5053] __dump_stack+0x30/0x40 [ 110.105594][ T5053] dump_stack_lvl+0xf8/0x160 [ 110.106315][ T5053] dump_stack+0x1c/0x5c [ 110.106927][ T5053] print_circular_bug+0x148/0x1b0 [ 110.107648][ T5053] check_noncircular+0x240/0x2d4 [ 110.108497][ T5053] __lock_acquire+0x2928/0x651c [ 110.109303][ T5053] lock_acquire+0x1f4/0x620 [ 110.110036][ T5053] __flush_work+0xf4/0x1bc [ 110.110779][ T5053] __cancel_work_timer+0x2ec/0x448 [ 110.111596][ T5053] cancel_work_sync+0x24/0x38 [ 110.112407][ T5053] smc_clcsock_release+0x64/0xe8 [ 110.113175][ T5053] __smc_release+0x3bc/0x530 [ 110.113977][ T5053] smc_close_non_accepted+0xdc/0x298 [ 110.114849][ T5053] smc_close_active+0x890/0xc20 [ 110.115575][ T5053] __smc_release+0x2dc/0x530 [ 110.116314][ T5053] smc_release+0x264/0x568 [ 110.117067][ T5053] sock_close+0xb4/0x1f8 [ 110.117740][ T5053] __fput+0x1c0/0x7f8 [ 110.118347][ T5053] ____fput+0x20/0x30 [ 110.118922][ T5053] task_work_run+0x12c/0x1e0 [ 110.119700][ T5053] do_notify_resume+0x24b4/0x3128 [ 110.120504][ T5053] el0_svc+0xf0/0x1e0 [ 110.121151][ T5053] el0t_64_sync_handler+0xcc/0xe4 [ 110.121992][ T5053] el0t_64_sync+0x1a0/0x1a4 [ 110.668955][ T4135] Bluetooth: hci0: command 0x040f tx timeout [ 111.223397][ T136] device hsr_slave_0 left promiscuous mode [ 111.259014][ T136] device hsr_slave_1 left promiscuous mode [ 111.319497][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.320638][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.322423][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.323654][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.325369][ T136] device bridge_slave_1 left promiscuous mode [ 111.326354][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.373742][ T136] device bridge_slave_0 left promiscuous mode [ 111.374762][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.490043][ T136] device veth1_macvtap left promiscuous mode [ 111.491000][ T136] device veth0_macvtap left promiscuous mode [ 111.491921][ T136] device veth1_vlan left promiscuous mode [ 111.492750][ T136] device veth0_vlan left promiscuous mode [ 111.766981][ T136] team0 (unregistering): Port device team_slave_1 removed [ 111.791587][ T136] team0 (unregistering): Port device team_slave_0 removed [ 111.799956][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.846085][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.974851][ T136] bond0 (unregistering): Released all slaves [ 112.750796][ T4131] Bluetooth: hci0: command 0x0419 tx timeout 1970/01/01 00:01:55 executed programs: 238