Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. 2026/06/06 14:25:34 parsed 1 programs [ 83.580998][ T5642] cgroup: Unknown subsys name 'net' [ 83.694788][ T5642] cgroup: Unknown subsys name 'cpuset' [ 83.703649][ T5642] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.349532][ T5642] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.695815][ T5658] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.119388][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.128917][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.193172][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.202654][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.592714][ T5709] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.601010][ T5709] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.608216][ T5709] bridge_slave_0: entered allmulticast mode [ 91.615543][ T5709] bridge_slave_0: entered promiscuous mode [ 91.625605][ T5709] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.632915][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.640069][ T5709] bridge_slave_1: entered allmulticast mode [ 91.647914][ T5709] bridge_slave_1: entered promiscuous mode [ 91.682503][ T5709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.693917][ T5709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.723705][ T5709] team0: Port device team_slave_0 added [ 91.731743][ T5709] team0: Port device team_slave_1 added [ 91.755471][ T5709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.762537][ T5709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.788477][ T5709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.801350][ T5709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.808303][ T5709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.834369][ T5709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.878387][ T5709] hsr_slave_0: entered promiscuous mode [ 91.884878][ T5709] hsr_slave_1: entered promiscuous mode [ 92.026431][ T2174] cfg80211: failed to load regulatory.db [ 92.039935][ T5709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.053421][ T5709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.062494][ T5709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.072907][ T5709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.081415][ T5709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.091384][ T5709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.099418][ T5709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.113350][ T5709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.141365][ T5709] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.148615][ T5709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.156677][ T5709] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.163880][ T5709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.223535][ T5709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.247056][ T1029] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.255323][ T1029] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.267760][ T5709] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.283484][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.290670][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.305277][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.312533][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.647508][ T5709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.700162][ T5709] veth0_vlan: entered promiscuous mode [ 92.715645][ T5709] veth1_vlan: entered promiscuous mode [ 92.746461][ T5709] veth0_macvtap: entered promiscuous mode [ 92.756794][ T5709] veth1_macvtap: entered promiscuous mode [ 92.776865][ T5709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.794794][ T5709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.812002][ T1029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.823905][ T1029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.835460][ T1029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.846275][ T1029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.004034][ T1025] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.126929][ T1025] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.210766][ T5753] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.223109][ T5753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.232113][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.240296][ T5753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.249527][ T1025] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.249739][ T5753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.293859][ T1025] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/06/06 14:25:47 executed programs: 0 [ 94.306880][ T4949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.314762][ T4949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.323197][ T4949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.333727][ T4949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.342652][ T4949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.783465][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.790651][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.798526][ T5768] bridge_slave_0: entered allmulticast mode [ 94.805894][ T5768] bridge_slave_0: entered promiscuous mode [ 94.815368][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.822938][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.830240][ T5768] bridge_slave_1: entered allmulticast mode [ 94.838096][ T5768] bridge_slave_1: entered promiscuous mode [ 94.867025][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.879228][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.922678][ T5768] team0: Port device team_slave_0 added [ 94.930391][ T5768] team0: Port device team_slave_1 added [ 94.956031][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.963274][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.990068][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.003129][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.010089][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.036717][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.092782][ T5768] hsr_slave_0: entered promiscuous mode [ 95.099676][ T5768] hsr_slave_1: entered promiscuous mode [ 95.106485][ T5768] debugfs: 'hsr0' already exists in 'hsr' [ 95.112349][ T5768] Cannot create hsr debugfs directory [ 95.340208][ T1025] bridge_slave_1: left allmulticast mode [ 95.348076][ T1025] bridge_slave_1: left promiscuous mode [ 95.356395][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.372219][ T1025] bridge_slave_0: left allmulticast mode [ 95.378011][ T1025] bridge_slave_0: left promiscuous mode [ 95.384551][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.512615][ T1025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.524430][ T1025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.536100][ T1025] bond0 (unregistering): Released all slaves [ 95.656472][ T1025] hsr_slave_0: left promiscuous mode [ 95.663509][ T1025] hsr_slave_1: left promiscuous mode [ 95.669834][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.677430][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.689246][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.705822][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.723870][ T1025] veth1_macvtap: left promiscuous mode [ 95.729944][ T1025] veth0_macvtap: left promiscuous mode [ 95.736113][ T1025] veth1_vlan: left promiscuous mode [ 95.741805][ T1025] veth0_vlan: left promiscuous mode [ 96.103692][ T1025] team0 (unregistering): Port device team_slave_1 removed [ 96.127352][ T1025] team0 (unregistering): Port device team_slave_0 removed [ 96.280870][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 96.425007][ T5753] Bluetooth: hci0: command tx timeout [ 96.615081][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.628683][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.648966][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.674518][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.686471][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.700777][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.709928][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.722469][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.160300][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.195329][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.223967][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.231211][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.279500][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.286736][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.889511][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.957136][ T5768] veth0_vlan: entered promiscuous mode [ 97.975574][ T5768] veth1_vlan: entered promiscuous mode [ 98.026516][ T5768] veth0_macvtap: entered promiscuous mode [ 98.038882][ T5768] veth1_macvtap: entered promiscuous mode [ 98.069810][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.088913][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.112688][ T1025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.133545][ T1025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.154437][ T1025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.171121][ T1025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.249037][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.257138][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.286669][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.295916][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.491330][ T5753] Bluetooth: hci0: command tx timeout 2026/06/06 14:25:52 executed programs: 29 [ 100.574494][ T5753] Bluetooth: hci0: command tx timeout [ 100.966219][ T5939] [ 100.968608][ T5939] ====================================================== [ 100.977968][ T5939] WARNING: possible circular locking dependency detected [ 100.984981][ T5939] syzkaller #0 Not tainted [ 100.989382][ T5939] ------------------------------------------------------ [ 100.996414][ T5939] syz.0.99/5939 is trying to acquire lock: [ 101.002208][ T5939] ffff88806af4fae8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x100/0xc50 [ 101.013683][ T5939] [ 101.013683][ T5939] but task is already holding lock: [ 101.021053][ T5939] ffff88807e280260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 101.030010][ T5939] [ 101.030010][ T5939] which lock already depends on the new lock. [ 101.030010][ T5939] [ 101.040433][ T5939] [ 101.040433][ T5939] the existing dependency chain (in reverse order) is: [ 101.049448][ T5939] [ 101.049448][ T5939] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 101.057192][ T5939] lock_sock_nested+0x41/0x100 [ 101.062478][ T5939] smc_listen_out+0x109/0x3e0 [ 101.067670][ T5939] smc_listen_work+0x813/0x13f0 [ 101.073054][ T5939] process_scheduled_works+0xb5d/0x1860 [ 101.079114][ T5939] worker_thread+0xa53/0xfc0 [ 101.084213][ T5939] kthread+0x389/0x470 [ 101.088824][ T5939] ret_from_fork+0x514/0xb70 [ 101.093950][ T5939] ret_from_fork_asm+0x1a/0x30 [ 101.099248][ T5939] [ 101.099248][ T5939] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 101.109443][ T5939] __lock_acquire+0x15a5/0x2cf0 [ 101.114811][ T5939] lock_acquire+0x106/0x350 [ 101.119840][ T5939] __flush_work+0x700/0xc50 [ 101.124876][ T5939] __cancel_work_sync+0xbe/0x110 [ 101.130339][ T5939] smc_clcsock_release+0x60/0xf0 [ 101.135794][ T5939] __smc_release+0x66b/0x7e0 [ 101.140907][ T5939] smc_close_non_accepted+0xd5/0x1f0 [ 101.146823][ T5939] smc_close_active+0xb67/0xf10 [ 101.152183][ T5939] __smc_release+0x8d/0x7e0 [ 101.157205][ T5939] smc_release+0x2ce/0x560 [ 101.162138][ T5939] sock_close+0xc3/0x240 [ 101.166996][ T5939] __fput+0x44f/0xa60 [ 101.171497][ T5939] task_work_run+0x1d9/0x270 [ 101.176622][ T5939] exit_to_user_mode_loop+0x193/0x680 [ 101.182512][ T5939] do_syscall_64+0x353/0x580 [ 101.187617][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.194018][ T5939] [ 101.194018][ T5939] other info that might help us debug this: [ 101.194018][ T5939] [ 101.204233][ T5939] Possible unsafe locking scenario: [ 101.204233][ T5939] [ 101.211670][ T5939] CPU0 CPU1 [ 101.217035][ T5939] ---- ---- [ 101.222387][ T5939] lock(sk_lock-AF_SMC/1); [ 101.226887][ T5939] lock((work_completion)(&new_smc->smc_listen_work)); [ 101.236360][ T5939] lock(sk_lock-AF_SMC/1); [ 101.243395][ T5939] lock((work_completion)(&new_smc->smc_listen_work)); [ 101.250323][ T5939] [ 101.250323][ T5939] *** DEADLOCK *** [ 101.250323][ T5939] [ 101.258454][ T5939] 3 locks held by syz.0.99/5939: [ 101.263383][ T5939] #0: ffff88806ddc5e40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 101.273646][ T5939] #1: ffff88807e280260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 101.283051][ T5939] #2: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x100/0xc50 [ 101.292266][ T5939] [ 101.292266][ T5939] stack backtrace: [ 101.298146][ T5939] CPU: 0 UID: 0 PID: 5939 Comm: syz.0.99 Not tainted syzkaller #0 PREEMPT(full) [ 101.298162][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.298170][ T5939] Call Trace: [ 101.298176][ T5939] [ 101.298182][ T5939] dump_stack_lvl+0xe8/0x150 [ 101.298197][ T5939] print_circular_bug+0x2e1/0x300 [ 101.298214][ T5939] check_noncircular+0x12e/0x150 [ 101.298230][ T5939] __lock_acquire+0x15a5/0x2cf0 [ 101.298243][ T5939] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.298263][ T5939] ? __flush_work+0x100/0xc50 [ 101.298275][ T5939] lock_acquire+0x106/0x350 [ 101.298287][ T5939] ? __flush_work+0x100/0xc50 [ 101.298302][ T5939] ? __flush_work+0x100/0xc50 [ 101.298314][ T5939] __flush_work+0x700/0xc50 [ 101.298332][ T5939] ? __flush_work+0x100/0xc50 [ 101.298345][ T5939] ? __flush_work+0x100/0xc50 [ 101.298358][ T5939] ? __pfx___flush_work+0x10/0x10 [ 101.298371][ T5939] ? __pfx_wq_barrier_func+0x10/0x10 [ 101.298387][ T5939] ? __cancel_work_sync+0x5c/0x110 [ 101.298401][ T5939] __cancel_work_sync+0xbe/0x110 [ 101.298415][ T5939] smc_clcsock_release+0x60/0xf0 [ 101.298429][ T5939] __smc_release+0x66b/0x7e0 [ 101.298445][ T5939] ? __local_bh_enable_ip+0xd0/0x130 [ 101.298458][ T5939] smc_close_non_accepted+0xd5/0x1f0 [ 101.298476][ T5939] smc_close_active+0xb67/0xf10 [ 101.298489][ T5939] ? __pfx_sock_def_readable+0x10/0x10 [ 101.298506][ T5939] __smc_release+0x8d/0x7e0 [ 101.298521][ T5939] ? __local_bh_enable_ip+0xd0/0x130 [ 101.298533][ T5939] smc_release+0x2ce/0x560 [ 101.298550][ T5939] sock_close+0xc3/0x240 [ 101.298565][ T5939] ? __pfx_sock_close+0x10/0x10 [ 101.298579][ T5939] __fput+0x44f/0xa60 [ 101.298595][ T5939] task_work_run+0x1d9/0x270 [ 101.298612][ T5939] ? __pfx_task_work_run+0x10/0x10 [ 101.298629][ T5939] exit_to_user_mode_loop+0x193/0x680 [ 101.298641][ T5939] ? rcu_is_watching+0x15/0xb0 [ 101.298654][ T5939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.298666][ T5939] do_syscall_64+0x353/0x580 [ 101.298678][ T5939] ? trace_irq_disable+0x3b/0x140 [ 101.298696][ T5939] ? clear_bhb_loop+0x40/0x90 [ 101.298708][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.298720][ T5939] RIP: 0033:0x7f476359ce59 [ 101.298732][ T5939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.298743][ T5939] RSP: 002b:00007ffcf00a4718 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 101.298756][ T5939] RAX: 0000000000000000 RBX: 00007ffcf00a4800 RCX: 00007f476359ce59 [ 101.298765][ T5939] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 101.298772][ T5939] RBP: 0000000000018a35 R08: 0000000000000001 R09: 0000000000000000 [ 101.298779][ T5939] R10: 0000001b2c720000 R11: 0000000000000246 R12: 0000000000000000 [ 101.298786][ T5939] R13: 00007f4763815fac R14: 00007f4763815fa8 R15: 00007f4763815fa0 [ 101.298798][ T5939] [ 102.650972][ T5753] Bluetooth: hci0: command tx timeout 2026/06/06 14:25:57 executed programs: 226 2026/06/06 14:26:02 executed programs: 499