Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. 2025/12/26 15:47:54 parsed 1 programs [ 73.947079][ T5832] cgroup: Unknown subsys name 'net' [ 74.079213][ T5832] cgroup: Unknown subsys name 'cpuset' [ 74.087783][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.498003][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.260588][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.185038][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 79.274231][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.282090][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.289412][ T5866] bridge_slave_0: entered allmulticast mode [ 79.297769][ T5866] bridge_slave_0: entered promiscuous mode [ 79.306618][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.314394][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.322231][ T5866] bridge_slave_1: entered allmulticast mode [ 79.329344][ T5866] bridge_slave_1: entered promiscuous mode [ 79.357012][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.368381][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.398982][ T5866] team0: Port device team_slave_0 added [ 79.407467][ T5866] team0: Port device team_slave_1 added [ 79.432783][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.439878][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.465952][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.478448][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.485395][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.511349][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.551824][ T5866] hsr_slave_0: entered promiscuous mode [ 79.558656][ T5866] hsr_slave_1: entered promiscuous mode [ 79.694073][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.707498][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.717946][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.728902][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.760497][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.767731][ T5866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.776154][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.783267][ T5866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.838945][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.856888][ T3654] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.865258][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.882141][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.900120][ T3886] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.907525][ T3886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.922368][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.929673][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.085185][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.132320][ T5866] veth0_vlan: entered promiscuous mode [ 80.144174][ T5866] veth1_vlan: entered promiscuous mode [ 80.172201][ T5866] veth0_macvtap: entered promiscuous mode [ 80.181269][ T5866] veth1_macvtap: entered promiscuous mode [ 80.200296][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.214905][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.231119][ T3654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.241904][ T3654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.258538][ T3654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.268398][ T3654] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.422649][ T3654] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.529148][ T3654] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.580731][ T3654] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.669254][ T3654] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.998647][ T3886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.010355][ T3886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.037187][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.045131][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.299790][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.308753][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.316806][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.325778][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.334174][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/12/26 15:48:05 executed programs: 0 [ 82.840170][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.848144][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.858031][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.867863][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.875678][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.021893][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 83.147430][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.155268][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.162562][ T5943] bridge_slave_0: entered allmulticast mode [ 83.169827][ T5943] bridge_slave_0: entered promiscuous mode [ 83.192242][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.200662][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.208531][ T5943] bridge_slave_1: entered allmulticast mode [ 83.215498][ T5943] bridge_slave_1: entered promiscuous mode [ 83.249026][ T3654] bridge_slave_1: left allmulticast mode [ 83.254950][ T3654] bridge_slave_1: left promiscuous mode [ 83.261621][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.273041][ T3654] bridge_slave_0: left allmulticast mode [ 83.279895][ T3654] bridge_slave_0: left promiscuous mode [ 83.285690][ T3654] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.515979][ T3654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.531575][ T3654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.541371][ T3654] bond0 (unregistering): Released all slaves [ 83.555450][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.569530][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.626698][ T5943] team0: Port device team_slave_0 added [ 83.637480][ T5943] team0: Port device team_slave_1 added [ 83.677321][ T3654] hsr_slave_0: left promiscuous mode [ 83.683259][ T3654] hsr_slave_1: left promiscuous mode [ 83.689424][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.697056][ T3654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.705093][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.712578][ T3654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.728299][ T3654] veth1_macvtap: left promiscuous mode [ 83.734294][ T3654] veth0_macvtap: left promiscuous mode [ 83.740194][ T3654] veth1_vlan: left promiscuous mode [ 83.745560][ T3654] veth0_vlan: left promiscuous mode [ 84.019439][ T3654] team0 (unregistering): Port device team_slave_1 removed [ 84.045486][ T3654] team0 (unregistering): Port device team_slave_0 removed [ 84.262444][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.269452][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.295497][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.308546][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.315978][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.342797][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.441425][ T5943] hsr_slave_0: entered promiscuous mode [ 84.448333][ T5943] hsr_slave_1: entered promiscuous mode [ 84.966313][ T52] Bluetooth: hci0: command tx timeout [ 85.660162][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.673112][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.688870][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.703297][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.826730][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.857788][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.872212][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.879439][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.898800][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.906013][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.230534][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.283968][ T5943] veth0_vlan: entered promiscuous mode [ 86.302154][ T5943] veth1_vlan: entered promiscuous mode [ 86.343321][ T5943] veth0_macvtap: entered promiscuous mode [ 86.358590][ T5943] veth1_macvtap: entered promiscuous mode [ 86.382039][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.401866][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.420348][ T3654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.433027][ T3654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.444872][ T3654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.467188][ T3654] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.540637][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.561661][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.593526][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.604480][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.723288][ T6012] [ 86.725649][ T6012] ====================================================== [ 86.732668][ T6012] WARNING: possible circular locking dependency detected [ 86.739689][ T6012] syzkaller #0 Not tainted [ 86.744092][ T6012] ------------------------------------------------------ [ 86.751099][ T6012] syz.0.17/6012 is trying to acquire lock: [ 86.756975][ T6012] ffff8880301416d8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0 [ 86.768372][ T6012] [ 86.768372][ T6012] but task is already holding lock: [ 86.775716][ T6012] ffff888030140260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 86.784692][ T6012] [ 86.784692][ T6012] which lock already depends on the new lock. [ 86.784692][ T6012] [ 86.795088][ T6012] [ 86.795088][ T6012] the existing dependency chain (in reverse order) is: [ 86.804095][ T6012] [ 86.804095][ T6012] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 86.811829][ T6012] lock_sock_nested+0x48/0x100 [ 86.817133][ T6012] smc_listen_out+0x109/0x3e0 [ 86.822324][ T6012] process_scheduled_works+0xad1/0x1770 [ 86.828381][ T6012] worker_thread+0x8a0/0xda0 [ 86.833493][ T6012] kthread+0x711/0x8a0 [ 86.838082][ T6012] ret_from_fork+0x599/0xb30 [ 86.843182][ T6012] ret_from_fork_asm+0x1a/0x30 [ 86.848551][ T6012] [ 86.848551][ T6012] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 86.858711][ T6012] __lock_acquire+0x15a6/0x2cf0 [ 86.864075][ T6012] lock_acquire+0x117/0x340 [ 86.869081][ T6012] __flush_work+0x6b8/0xbc0 [ 86.874177][ T6012] __cancel_work_sync+0xbe/0x110 [ 86.879620][ T6012] smc_clcsock_release+0x60/0xf0 [ 86.885069][ T6012] __smc_release+0x66b/0x7e0 [ 86.890169][ T6012] smc_close_non_accepted+0xd5/0x1f0 [ 86.896061][ T6012] smc_close_active+0xb68/0xf10 [ 86.901439][ T6012] __smc_release+0x8d/0x7e0 [ 86.906481][ T6012] smc_release+0x2ce/0x560 [ 86.911402][ T6012] sock_close+0xc3/0x240 [ 86.916153][ T6012] __fput+0x44c/0xa70 [ 86.920653][ T6012] task_work_run+0x1d4/0x260 [ 86.925767][ T6012] exit_to_user_mode_loop+0xff/0x4f0 [ 86.931560][ T6012] do_syscall_64+0x2d0/0xf80 [ 86.936655][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.943052][ T6012] [ 86.943052][ T6012] other info that might help us debug this: [ 86.943052][ T6012] [ 86.953299][ T6012] Possible unsafe locking scenario: [ 86.953299][ T6012] [ 86.960744][ T6012] CPU0 CPU1 [ 86.966090][ T6012] ---- ---- [ 86.971436][ T6012] lock(sk_lock-AF_SMC/1); [ 86.975930][ T6012] lock((work_completion)(&new_smc->smc_listen_work)); [ 86.985366][ T6012] lock(sk_lock-AF_SMC/1); [ 86.992476][ T6012] lock((work_completion)(&new_smc->smc_listen_work)); [ 86.999408][ T6012] [ 86.999408][ T6012] *** DEADLOCK *** [ 86.999408][ T6012] [ 87.007545][ T6012] 3 locks held by syz.0.17/6012: [ 87.012464][ T6012] #0: ffff888077683b88 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 87.022641][ T6012] #1: ffff888030140260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 87.032035][ T6012] #2: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0 [ 87.041164][ T6012] [ 87.041164][ T6012] stack backtrace: [ 87.047057][ T6012] CPU: 0 UID: 0 PID: 6012 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 87.047072][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.047089][ T6012] Call Trace: [ 87.047095][ T6012] [ 87.047101][ T6012] dump_stack_lvl+0x189/0x250 [ 87.047119][ T6012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.047133][ T6012] ? __pfx__printk+0x10/0x10 [ 87.047150][ T6012] ? print_lock_name+0xde/0x100 [ 87.047167][ T6012] print_circular_bug+0x2e2/0x300 [ 87.047183][ T6012] check_noncircular+0x12e/0x150 [ 87.047199][ T6012] __lock_acquire+0x15a6/0x2cf0 [ 87.047214][ T6012] ? do_raw_spin_unlock+0x122/0x240 [ 87.047230][ T6012] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 87.047249][ T6012] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 87.047268][ T6012] ? __flush_work+0xd2/0xbc0 [ 87.047281][ T6012] lock_acquire+0x117/0x340 [ 87.047292][ T6012] ? __flush_work+0xd2/0xbc0 [ 87.047308][ T6012] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.047325][ T6012] ? __flush_work+0xd2/0xbc0 [ 87.047338][ T6012] __flush_work+0x6b8/0xbc0 [ 87.047351][ T6012] ? __flush_work+0xd2/0xbc0 [ 87.047366][ T6012] ? __flush_work+0xd2/0xbc0 [ 87.047380][ T6012] ? __pfx___flush_work+0x10/0x10 [ 87.047393][ T6012] ? __pfx_wq_barrier_func+0x10/0x10 [ 87.047409][ T6012] ? __pfx___cancel_work+0x10/0x10 [ 87.047422][ T6012] ? __local_bh_enable_ip+0x12d/0x1c0 [ 87.047435][ T6012] ? lockdep_hardirqs_on+0x98/0x140 [ 87.047447][ T6012] ? __local_bh_enable_ip+0x12d/0x1c0 [ 87.047459][ T6012] ? __cancel_work_sync+0x5c/0x110 [ 87.047473][ T6012] __cancel_work_sync+0xbe/0x110 [ 87.047488][ T6012] smc_clcsock_release+0x60/0xf0 [ 87.047503][ T6012] __smc_release+0x66b/0x7e0 [ 87.047518][ T6012] ? do_raw_spin_unlock+0x122/0x240 [ 87.047535][ T6012] smc_close_non_accepted+0xd5/0x1f0 [ 87.047552][ T6012] smc_close_active+0xb68/0xf10 [ 87.047565][ T6012] ? __pfx_sock_def_readable+0x10/0x10 [ 87.047583][ T6012] __smc_release+0x8d/0x7e0 [ 87.047597][ T6012] ? do_raw_spin_unlock+0x122/0x240 [ 87.047614][ T6012] smc_release+0x2ce/0x560 [ 87.047630][ T6012] sock_close+0xc3/0x240 [ 87.047646][ T6012] ? __pfx_sock_close+0x10/0x10 [ 87.047661][ T6012] __fput+0x44c/0xa70 [ 87.047680][ T6012] task_work_run+0x1d4/0x260 [ 87.047697][ T6012] ? __pfx_task_work_run+0x10/0x10 [ 87.047712][ T6012] ? __se_sys_close_range+0x4ed/0x650 [ 87.047728][ T6012] ? exit_to_user_mode_loop+0x55/0x4f0 [ 87.047742][ T6012] exit_to_user_mode_loop+0xff/0x4f0 [ 87.047754][ T6012] ? rcu_is_watching+0x15/0xb0 [ 87.047770][ T6012] do_syscall_64+0x2d0/0xf80 [ 87.047783][ T6012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.047795][ T6012] ? clear_bhb_loop+0x60/0xb0 [ 87.047809][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.047820][ T6012] RIP: 0033:0x7f562238f749 [ 87.047837][ T6012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.047847][ T6012] RSP: 002b:00007ffc3248f5e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 87.047861][ T6012] RAX: 0000000000000000 RBX: 0000000000015260 RCX: 00007f562238f749 [ 87.047869][ T6012] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 87.047877][ T6012] RBP: 00007f56225e7da0 R08: 0000000000000001 R09: 000000083248f8df [ 87.047885][ T6012] R10: 0000001b2f620000 R11: 0000000000000246 R12: 00007f56225e609c [ 87.047893][ T6012] R13: 00007f56225e6090 R14: ffffffffffffffff R15: 00007ffc3248f700 [ 87.047907][ T6012] [ 87.048328][ T24] cfg80211: failed to load regulatory.db [ 87.067932][ T52] Bluetooth: hci0: command tx timeout 2025/12/26 15:48:10 executed programs: 13 [ 89.446568][ T52] Bluetooth: hci0: command tx timeout [ 91.526235][ T52] Bluetooth: hci0: command tx timeout 2025/12/26 15:48:15 executed programs: 94