Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. 1970/01/01 00:01:00 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:01 parsed 1 programs 1970/01/01 00:01:01 executed programs: 0 [ 61.348982][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.351734][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.354039][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.356465][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.358666][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.361327][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.431616][ T6440] chnl_net:caif_netlink_parms(): no params data found [ 61.458693][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.460618][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.462496][ T6440] bridge_slave_0: entered allmulticast mode [ 61.464574][ T6440] bridge_slave_0: entered promiscuous mode [ 61.467458][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.469388][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.471893][ T6440] bridge_slave_1: entered allmulticast mode [ 61.473912][ T6440] bridge_slave_1: entered promiscuous mode [ 61.486297][ T6440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.490293][ T6440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.502672][ T6440] team0: Port device team_slave_0 added [ 61.506149][ T6440] team0: Port device team_slave_1 added [ 61.516481][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.518394][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.525550][ T6440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.529503][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.531442][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.538008][ T6440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.602237][ T6440] hsr_slave_0: entered promiscuous mode [ 61.651103][ T6440] hsr_slave_1: entered promiscuous mode [ 62.404417][ T6440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.442588][ T6440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.476014][ T6440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.523484][ T6440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.598513][ T6440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.608618][ T6440] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.614350][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.616223][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.634575][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.636444][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.719435][ T6440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.742514][ T6440] veth0_vlan: entered promiscuous mode [ 62.747808][ T6440] veth1_vlan: entered promiscuous mode [ 62.764284][ T6440] veth0_macvtap: entered promiscuous mode [ 62.767369][ T6440] veth1_macvtap: entered promiscuous mode [ 62.776730][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.783744][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.788134][ T6440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.790384][ T6440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.793869][ T6440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.796357][ T6440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.825982][ T517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.828185][ T517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.844963][ T517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.847262][ T517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.013487][ T6532] [ 63.014152][ T6532] ====================================================== [ 63.016016][ T6532] WARNING: possible circular locking dependency detected [ 63.017848][ T6532] 6.6.0-rc7-syzkaller-00089-g8de1e7afcc1c #0 Not tainted [ 63.019854][ T6532] ------------------------------------------------------ [ 63.021706][ T6532] syz-executor.0/6532 is trying to acquire lock: [ 63.023414][ T6532] ffff0000e1fe50b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_rfkill_set_block+0xe8/0x20c [ 63.025986][ T6532] [ 63.025986][ T6532] but task is already holding lock: [ 63.027989][ T6532] ffff800090ff20c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x234/0x734 [ 63.030656][ T6532] [ 63.030656][ T6532] which lock already depends on the new lock. [ 63.030656][ T6532] [ 63.033508][ T6532] [ 63.033508][ T6532] the existing dependency chain (in reverse order) is: [ 63.035899][ T6532] [ 63.035899][ T6532] -> #3 (rfkill_global_mutex){+.+.}-{3:3}: [ 63.038009][ T6532] __mutex_lock_common+0x190/0x21a0 [ 63.039572][ T6532] mutex_lock_nested+0x2c/0x38 [ 63.040962][ T6532] rfkill_register+0x44/0x7d4 [ 63.042332][ T6532] hci_register_dev+0x3e0/0x954 [ 63.043735][ T6532] vhci_create_device+0x358/0x6c4 [ 63.045194][ T6532] vhci_write+0x318/0x3b8 [ 63.046448][ T6532] vfs_write+0x628/0x93c [ 63.047712][ T6532] ksys_write+0x15c/0x26c [ 63.049004][ T6532] __arm64_sys_write+0x7c/0x90 [ 63.050348][ T6532] invoke_syscall+0x98/0x2b8 [ 63.051747][ T6532] el0_svc_common+0x130/0x23c [ 63.053115][ T6532] do_el0_svc+0x48/0x58 [ 63.054357][ T6532] el0_svc+0x54/0x158 [ 63.055630][ T6532] el0t_64_sync_handler+0x84/0xfc [ 63.057112][ T6532] el0t_64_sync+0x190/0x194 [ 63.058508][ T6532] [ 63.058508][ T6532] -> #2 (&data->open_mutex){+.+.}-{3:3}: [ 63.060651][ T6532] __mutex_lock_common+0x190/0x21a0 [ 63.062218][ T6532] mutex_lock_nested+0x2c/0x38 [ 63.063678][ T6532] vhci_send_frame+0x8c/0x10c [ 63.065012][ T6532] hci_send_frame+0x1c4/0x35c [ 63.066352][ T6532] hci_tx_work+0xba0/0x18e4 [ 63.067686][ T6532] process_one_work+0x694/0x1204 [ 63.069208][ T6532] worker_thread+0x938/0xef4 [ 63.070572][ T6532] kthread+0x288/0x310 [ 63.071818][ T6532] ret_from_fork+0x10/0x20 [ 63.073169][ T6532] [ 63.073169][ T6532] -> #1 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 63.075592][ T6532] __flush_work+0xf8/0x1c0 [ 63.076860][ T6532] flush_work+0x24/0x38 [ 63.078156][ T6532] hci_dev_close_sync+0x1c8/0xf2c [ 63.079627][ T6532] hci_unregister_dev+0x1e8/0x4ac [ 63.081140][ T6532] vhci_release+0x7c/0xd0 [ 63.082486][ T6532] __fput+0x324/0x7f8 [ 63.083676][ T6532] ____fput+0x20/0x30 [ 63.084882][ T6532] task_work_run+0x230/0x2e0 [ 63.086226][ T6532] do_exit+0x63c/0x1f58 [ 63.087441][ T6532] do_group_exit+0x194/0x22c [ 63.088818][ T6532] get_signal+0x1500/0x15ec [ 63.090190][ T6532] do_notify_resume+0x3bc/0x393c [ 63.091638][ T6532] el0_svc+0x9c/0x158 [ 63.092903][ T6532] el0t_64_sync_handler+0x84/0xfc [ 63.094355][ T6532] el0t_64_sync+0x190/0x194 [ 63.095691][ T6532] [ 63.095691][ T6532] -> #0 (&hdev->req_lock){+.+.}-{3:3}: [ 63.097712][ T6532] __lock_acquire+0x3370/0x75e8 [ 63.099219][ T6532] lock_acquire+0x23c/0x71c [ 63.100605][ T6532] __mutex_lock_common+0x190/0x21a0 [ 63.102163][ T6532] mutex_lock_nested+0x2c/0x38 [ 63.103584][ T6532] hci_rfkill_set_block+0xe8/0x20c [ 63.105096][ T6532] rfkill_set_block+0x18c/0x37c [ 63.106567][ T6532] rfkill_fop_write+0x578/0x734 [ 63.107987][ T6532] vfs_write+0x2a0/0x93c [ 63.109237][ T6532] ksys_write+0x15c/0x26c [ 63.110550][ T6532] __arm64_sys_write+0x7c/0x90 [ 63.111961][ T6532] invoke_syscall+0x98/0x2b8 [ 63.113382][ T6532] el0_svc_common+0x130/0x23c [ 63.114781][ T6532] do_el0_svc+0x48/0x58 [ 63.116045][ T6532] el0_svc+0x54/0x158 [ 63.117251][ T6532] el0t_64_sync_handler+0x84/0xfc [ 63.118809][ T6532] el0t_64_sync+0x190/0x194 [ 63.120100][ T6532] [ 63.120100][ T6532] other info that might help us debug this: [ 63.120100][ T6532] [ 63.122776][ T6532] Chain exists of: [ 63.122776][ T6532] &hdev->req_lock --> &data->open_mutex --> rfkill_global_mutex [ 63.122776][ T6532] [ 63.126306][ T6532] Possible unsafe locking scenario: [ 63.126306][ T6532] [ 63.128279][ T6532] CPU0 CPU1 [ 63.129719][ T6532] ---- ---- [ 63.131125][ T6532] lock(rfkill_global_mutex); [ 63.132380][ T6532] lock(&data->open_mutex); [ 63.134285][ T6532] lock(rfkill_global_mutex); [ 63.136352][ T6532] lock(&hdev->req_lock); [ 63.137501][ T6532] [ 63.137501][ T6532] *** DEADLOCK *** [ 63.137501][ T6532] [ 63.139617][ T6532] 1 lock held by syz-executor.0/6532: [ 63.141056][ T6532] #0: ffff800090ff20c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x234/0x734 [ 63.143827][ T6532] [ 63.143827][ T6532] stack backtrace: [ 63.145411][ T6532] CPU: 1 PID: 6532 Comm: syz-executor.0 Not tainted 6.6.0-rc7-syzkaller-00089-g8de1e7afcc1c #0 [ 63.148105][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 63.150661][ T6532] Call trace: [ 63.151530][ T6532] dump_backtrace+0x1b8/0x1e4 [ 63.152758][ T6532] show_stack+0x2c/0x44 [ 63.153888][ T6532] dump_stack_lvl+0xd0/0x124 [ 63.155153][ T6532] dump_stack+0x1c/0x28 [ 63.156310][ T6532] print_circular_bug+0x150/0x1b8 [ 63.157740][ T6532] check_noncircular+0x310/0x404 [ 63.159098][ T6532] __lock_acquire+0x3370/0x75e8 [ 63.160386][ T6532] lock_acquire+0x23c/0x71c [ 63.161582][ T6532] __mutex_lock_common+0x190/0x21a0 [ 63.163021][ T6532] mutex_lock_nested+0x2c/0x38 [ 63.164282][ T6532] hci_rfkill_set_block+0xe8/0x20c [ 63.165617][ T6532] rfkill_set_block+0x18c/0x37c [ 63.166907][ T6532] rfkill_fop_write+0x578/0x734 [ 63.168243][ T6532] vfs_write+0x2a0/0x93c [ 63.169368][ T6532] ksys_write+0x15c/0x26c [ 63.170536][ T6532] __arm64_sys_write+0x7c/0x90 [ 63.171858][ T6532] invoke_syscall+0x98/0x2b8 [ 63.173071][ T6532] el0_svc_common+0x130/0x23c [ 63.174285][ T6532] do_el0_svc+0x48/0x58 [ 63.175369][ T6532] el0_svc+0x54/0x158 [ 63.176451][ T6532] el0t_64_sync_handler+0x84/0xfc [ 63.177833][ T6532] el0t_64_sync+0x190/0x194 [ 64.551673][ T2210] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.553404][ T2210] ieee802154 phy1 wpan1: encryption failed: -22 1970/01/01 00:01:06 executed programs: 177 [ 69.670878][ T1361] cfg80211: failed to load regulatory.db