Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. 1970/01/01 00:00:31 parsed 1 programs 1970/01/01 00:00:31 serving rpc on tcp://40017 [ 32.452049][ T4340] cgroup: Unknown subsys name 'net' [ 32.740523][ T4340] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.004517][ T4340] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 37.018482][ T4357] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.020578][ T4357] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.022814][ T4357] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.024713][ T4357] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.026452][ T4357] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.028797][ T4357] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.741011][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.742640][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.744977][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.753696][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.755476][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.757449][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.931359][ T4408] chnl_net:caif_netlink_parms(): no params data found [ 37.949511][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.951041][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.952786][ T4408] device bridge_slave_0 entered promiscuous mode [ 37.955406][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.956793][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.962236][ T4408] device bridge_slave_1 entered promiscuous mode [ 37.969240][ T4408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.972106][ T4408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.979480][ T4408] team0: Port device team_slave_0 added [ 37.981555][ T4408] team0: Port device team_slave_1 added [ 37.986854][ T4408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.992540][ T4408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.999725][ T4408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.002940][ T4408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.004462][ T4408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.010797][ T4408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.069141][ T4408] device hsr_slave_0 entered promiscuous mode [ 38.107880][ T4408] device hsr_slave_1 entered promiscuous mode [ 38.198664][ T4408] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.267448][ T4408] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.318182][ T4408] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.369225][ T4408] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.421191][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.422712][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.424425][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.425942][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.443755][ T4408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.448386][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.451239][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.453317][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.459668][ T4408] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.473427][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.475426][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.476865][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.480988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.482875][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.484361][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.491578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.493582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.497119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.501370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.504379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.507037][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.575834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.577481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.582232][ T4408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.589298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.600626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.602958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.604642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.607140][ T4408] device veth0_vlan entered promiscuous mode [ 38.612400][ T4408] device veth1_vlan entered promiscuous mode [ 38.620457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.622278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.624192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.626885][ T4408] device veth0_macvtap entered promiscuous mode [ 38.643589][ T4408] device veth1_macvtap entered promiscuous mode [ 38.651400][ T4408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.653131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.655394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.659232][ T4408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.661168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.664304][ T4408] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.666157][ T4408] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.668119][ T4408] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.669932][ T4408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.510033][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:39 executed programs: 0 [ 39.645253][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.647191][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.649180][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.651022][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.652629][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.654186][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.699210][ T4437] chnl_net:caif_netlink_parms(): no params data found [ 39.714568][ T4437] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.716180][ T4437] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.719076][ T4437] device bridge_slave_0 entered promiscuous mode [ 39.721228][ T4437] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.722636][ T4437] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.724392][ T4437] device bridge_slave_1 entered promiscuous mode [ 39.731832][ T4437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.734603][ T4437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.742397][ T4437] team0: Port device team_slave_0 added [ 39.744371][ T4437] team0: Port device team_slave_1 added [ 39.750388][ T4437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.751829][ T4437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.757290][ T4437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.761588][ T4437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.763071][ T4437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.768696][ T4437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.808874][ T4437] device hsr_slave_0 entered promiscuous mode [ 39.837817][ T4437] device hsr_slave_1 entered promiscuous mode [ 39.877756][ T4437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.879416][ T4437] Cannot create hsr debugfs directory [ 41.629149][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.678103][ T4357] Bluetooth: hci0: command 0x0409 tx timeout [ 43.757774][ T4357] Bluetooth: hci0: command 0x041b tx timeout [ 43.978807][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.080000][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.066794][ T4437] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.152387][ T4437] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.188897][ T4437] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.309412][ T4437] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.421326][ T4437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.425063][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.426821][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.455138][ T4437] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.457915][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.459912][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.461883][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.463437][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.465359][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.468390][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.470332][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.472197][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.473543][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.476232][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.479329][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.482244][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.484436][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.486299][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.490336][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.492226][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.495141][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.497449][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.501760][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.503519][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.506193][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.577493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.579622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.637820][ T4437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.644272][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.646302][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.652500][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.654344][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.656201][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.658264][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.660655][ T4437] device veth0_vlan entered promiscuous mode [ 45.664075][ T4437] device veth1_vlan entered promiscuous mode [ 45.671399][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.673144][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.674998][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.676862][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.680293][ T4437] device veth0_macvtap entered promiscuous mode [ 45.682989][ T4437] device veth1_macvtap entered promiscuous mode [ 45.687514][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.691929][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.694541][ T4437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.741185][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.743064][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.744800][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.746708][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.750398][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.752712][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.755374][ T4437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.756931][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.759511][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.762561][ T4437] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.764419][ T4437] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.766238][ T4437] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.768380][ T4437] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.787289][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.790698][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.793390][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.802755][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.804289][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.806025][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.845745][ T4488] [ 45.846273][ T4488] ====================================================== [ 45.847794][ T4488] WARNING: possible circular locking dependency detected [ 45.849286][ T4488] syzkaller #0 Not tainted [ 45.850269][ T4488] ------------------------------------------------------ [ 45.851796][ T4488] syz.0.17/4488 is trying to acquire lock: [ 45.853093][ T4488] ffff0000dbe3c428 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xd0/0xba0 [ 45.855187][ T4488] [ 45.855187][ T4488] but task is already holding lock: [ 45.856818][ T4488] ffff800017bb6ac8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0xa8/0xcf4 [ 45.858743][ T4488] [ 45.858743][ T4488] which lock already depends on the new lock. [ 45.858743][ T4488] [ 45.860956][ T4488] [ 45.860956][ T4488] the existing dependency chain (in reverse order) is: [ 45.862932][ T4488] [ 45.862932][ T4488] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 45.864575][ T4488] __mutex_lock_common+0x1a0/0x1f3c [ 45.865851][ T4488] mutex_lock_nested+0x38/0x44 [ 45.866992][ T4488] rfcomm_security_cfm+0x9c/0x674 [ 45.868169][ T4488] hci_encrypt_cfm+0x308/0x444 [ 45.869295][ T4488] hci_encrypt_change_evt+0x724/0xba4 [ 45.870543][ T4488] hci_event_packet+0x698/0xe60 [ 45.871706][ T4488] hci_rx_work+0x310/0xa70 [ 45.872754][ T4488] process_one_work+0x7e4/0x13bc [ 45.873932][ T4488] worker_thread+0x8cc/0xfe8 [ 45.875018][ T4488] kthread+0x254/0x2e0 [ 45.875978][ T4488] ret_from_fork+0x10/0x20 [ 45.877022][ T4488] [ 45.877022][ T4488] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 45.878647][ T4488] __mutex_lock_common+0x1a0/0x1f3c [ 45.879862][ T4488] mutex_lock_nested+0x38/0x44 [ 45.880999][ T4488] hci_remote_features_evt+0x410/0x840 [ 45.882257][ T4488] hci_event_packet+0x698/0xe60 [ 45.883411][ T4488] hci_rx_work+0x310/0xa70 [ 45.884463][ T4488] process_one_work+0x7e4/0x13bc [ 45.885630][ T4488] worker_thread+0x8cc/0xfe8 [ 45.886734][ T4488] kthread+0x254/0x2e0 [ 45.887733][ T4488] ret_from_fork+0x10/0x20 [ 45.888823][ T4488] [ 45.888823][ T4488] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 45.890397][ T4488] __lock_acquire+0x2808/0x6634 [ 45.891583][ T4488] lock_acquire+0x20c/0x638 [ 45.892692][ T4488] __mutex_lock_common+0x1a0/0x1f3c [ 45.893939][ T4488] mutex_lock_nested+0x38/0x44 [ 45.895062][ T4488] l2cap_chan_connect+0xd0/0xba0 [ 45.896193][ T4488] l2cap_sock_connect+0x414/0x600 [ 45.897340][ T4488] kernel_connect+0x124/0x190 [ 45.898438][ T4488] rfcomm_dlc_open+0x4f4/0xcf4 [ 45.899553][ T4488] rfcomm_sock_connect+0x25c/0x57c [ 45.900722][ T4488] __sys_connect+0x28c/0x2b4 [ 45.901804][ T4488] __arm64_sys_connect+0x7c/0x94 [ 45.903006][ T4488] invoke_syscall+0x98/0x290 [ 45.904114][ T4488] el0_svc_common+0x13c/0x258 [ 45.905224][ T4488] do_el0_svc+0x5c/0x134 [ 45.906239][ T4488] el0_svc+0x58/0x128 [ 45.907200][ T4488] el0t_64_sync_handler+0x84/0xf0 [ 45.908438][ T4488] el0t_64_sync+0x18c/0x190 [ 45.909517][ T4488] [ 45.909517][ T4488] other info that might help us debug this: [ 45.909517][ T4488] [ 45.911678][ T4488] Chain exists of: [ 45.911678][ T4488] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 45.911678][ T4488] [ 45.914288][ T4488] Possible unsafe locking scenario: [ 45.914288][ T4488] [ 45.915779][ T4488] CPU0 CPU1 [ 45.916868][ T4488] ---- ---- [ 45.917960][ T4488] lock(rfcomm_mutex); [ 45.918841][ T4488] lock(hci_cb_list_lock); [ 45.920334][ T4488] lock(rfcomm_mutex); [ 45.921718][ T4488] lock(&hdev->lock); [ 45.922608][ T4488] [ 45.922608][ T4488] *** DEADLOCK *** [ 45.922608][ T4488] [ 45.924341][ T4488] 1 lock held by syz.0.17/4488: [ 45.925368][ T4488] #0: ffff800017bb6ac8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0xa8/0xcf4 [ 45.927469][ T4488] [ 45.927469][ T4488] stack backtrace: [ 45.928759][ T4488] CPU: 1 PID: 4488 Comm: syz.0.17 Not tainted syzkaller #0 [ 45.930323][ T4488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 45.932469][ T4488] Call trace: [ 45.933181][ T4488] dump_backtrace+0x1c4/0x1f0 [ 45.934215][ T4488] show_stack+0x2c/0x3c [ 45.935127][ T4488] __dump_stack+0x30/0x40 [ 45.936082][ T4488] dump_stack_lvl+0xf4/0x15c [ 45.937113][ T4488] dump_stack+0x1c/0x5c [ 45.938030][ T4488] print_circular_bug+0x148/0x1b0 [ 45.939114][ T4488] check_noncircular+0x264/0x2f8 [ 45.940196][ T4488] __lock_acquire+0x2808/0x6634 [ 45.941249][ T4488] lock_acquire+0x20c/0x638 [ 45.942220][ T4488] __mutex_lock_common+0x1a0/0x1f3c [ 45.943350][ T4488] mutex_lock_nested+0x38/0x44 [ 45.944385][ T4488] l2cap_chan_connect+0xd0/0xba0 [ 45.945483][ T4488] l2cap_sock_connect+0x414/0x600 [ 45.946518][ T4488] kernel_connect+0x124/0x190 [ 45.947476][ T4488] rfcomm_dlc_open+0x4f4/0xcf4 [ 45.948470][ T4488] rfcomm_sock_connect+0x25c/0x57c [ 45.949531][ T4488] __sys_connect+0x28c/0x2b4 [ 45.950461][ T4488] __arm64_sys_connect+0x7c/0x94 [ 45.951485][ T4488] invoke_syscall+0x98/0x290 [ 45.952424][ T4488] el0_svc_common+0x13c/0x258 [ 45.953411][ T4488] do_el0_svc+0x5c/0x134 [ 45.954320][ T4488] el0_svc+0x58/0x128 [ 45.955134][ T4488] el0t_64_sync_handler+0x84/0xf0 [ 45.956221][ T4488] el0t_64_sync+0x18c/0x190 [ 45.957255][ T4357] Bluetooth: hci0: command 0x040f tx timeout [ 46.781418][ T11] device hsr_slave_0 left promiscuous mode [ 46.817858][ T11] device hsr_slave_1 left promiscuous mode [ 46.917694][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.919257][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.920923][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.922429][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.924074][ T11] device bridge_slave_1 left promiscuous mode [ 46.925413][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.968044][ T11] device bridge_slave_0 left promiscuous mode [ 46.969415][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.087734][ T11] device veth1_macvtap left promiscuous mode [ 47.088878][ T11] device veth0_macvtap left promiscuous mode [ 47.090088][ T11] device veth1_vlan left promiscuous mode [ 47.091429][ T11] device veth0_vlan left promiscuous mode [ 47.997690][ T48] Bluetooth: hci0: command 0x0419 tx timeout