Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. 2026/09/18 10:10:20 parsed 1 programs 2026/09/18 10:10:20 serving rpc on tcp://38653 [ 88.787507][ T5625] cgroup: Unknown subsys name 'net' [ 88.895925][ T5625] cgroup: Unknown subsys name 'cpuset' [ 88.899383][ T5625] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.658454][ T5625] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.903423][ T985] cfg80211: failed to load regulatory.db [ 93.892838][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.892860][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.935035][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.935057][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.986843][ T5640] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.480342][ T5660] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.480432][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.480537][ T5660] bridge_slave_0: entered allmulticast mode [ 95.482464][ T5660] bridge_slave_0: entered promiscuous mode [ 95.495368][ T5660] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.495642][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.495965][ T5660] bridge_slave_1: entered allmulticast mode [ 95.499846][ T5660] bridge_slave_1: entered promiscuous mode [ 95.551625][ T5660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.554113][ T5660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.592019][ T5660] team0: Port device team_slave_0 added [ 95.594266][ T5660] team0: Port device team_slave_1 added [ 95.625074][ T5660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.625087][ T5660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.625109][ T5660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.626918][ T5660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.626933][ T5660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.626962][ T5660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.738158][ T5660] hsr_slave_0: entered promiscuous mode [ 95.738992][ T5660] hsr_slave_1: entered promiscuous mode [ 95.900494][ T5660] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.907503][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.908300][ T5660] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.926698][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.934943][ T5660] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.949525][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.952493][ T5660] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.967941][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.056598][ T5660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.077253][ T5660] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.090462][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.090699][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.097948][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.098067][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.491316][ T5660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.539872][ T5660] veth0_vlan: entered promiscuous mode [ 96.547639][ T5660] veth1_vlan: entered promiscuous mode [ 96.584461][ T5660] veth0_macvtap: entered promiscuous mode [ 96.588323][ T5660] veth1_macvtap: entered promiscuous mode [ 96.609642][ T5660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.625415][ T5660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.680202][ T27] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.680531][ T27] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.680829][ T27] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.694302][ T27] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.867533][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.929144][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.023182][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.097792][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.571449][ T4931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.572084][ T4931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.572598][ T4931] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.573705][ T4931] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.574465][ T4931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.319751][ T59] bridge_slave_1: left allmulticast mode [ 99.319793][ T59] bridge_slave_1: left promiscuous mode [ 99.334698][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.350082][ T59] bridge_slave_0: left allmulticast mode [ 99.350109][ T59] bridge_slave_0: left promiscuous mode [ 99.350330][ T59] bridge0: port 1(bridge_slave_0) entered disabled state 2026/09/18 10:10:35 executed programs: 0 [ 99.615255][ T4931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.617464][ T4931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.618273][ T4931] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.619485][ T4931] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.639859][ T4931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.706413][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.729590][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.737886][ T59] bond0 (unregistering): Released all slaves [ 99.882660][ T59] hsr_slave_0: left promiscuous mode [ 99.883497][ T59] hsr_slave_1: left promiscuous mode [ 99.884817][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.884849][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.886378][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.886398][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.942137][ T59] veth1_macvtap: left promiscuous mode [ 99.942202][ T59] veth0_macvtap: left promiscuous mode [ 99.942378][ T59] veth1_vlan: left promiscuous mode [ 99.942477][ T59] veth0_vlan: left promiscuous mode [ 100.247233][ T59] team0 (unregistering): Port device team_slave_1 removed [ 100.273652][ T59] team0 (unregistering): Port device team_slave_0 removed [ 100.381632][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 101.519195][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 101.741612][ T52] Bluetooth: hci0: command tx timeout [ 101.817992][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.818159][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.818310][ T5751] bridge_slave_0: entered allmulticast mode [ 101.844730][ T5751] bridge_slave_0: entered promiscuous mode [ 101.858483][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.858663][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.858795][ T5751] bridge_slave_1: entered allmulticast mode [ 101.881058][ T5751] bridge_slave_1: entered promiscuous mode [ 101.926744][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.939351][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.980003][ T5751] team0: Port device team_slave_0 added [ 101.983034][ T5751] team0: Port device team_slave_1 added [ 102.025850][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.025870][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.025897][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.027851][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.027866][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.027892][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.181806][ T5751] hsr_slave_0: entered promiscuous mode [ 102.182948][ T5751] hsr_slave_1: entered promiscuous mode [ 102.837814][ T5751] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.852450][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.853179][ T5751] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.856334][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.857193][ T5751] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.886635][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.893420][ T5751] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.911890][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.029535][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.056929][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.073091][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.073234][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.081883][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.081991][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.639670][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.705113][ T5751] veth0_vlan: entered promiscuous mode [ 103.724072][ T5751] veth1_vlan: entered promiscuous mode [ 103.766165][ T5751] veth0_macvtap: entered promiscuous mode [ 103.778059][ T5751] veth1_macvtap: entered promiscuous mode [ 103.804213][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.811597][ T52] Bluetooth: hci0: command tx timeout [ 103.826195][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.868287][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.868347][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.868385][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.868421][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.991485][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.991509][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.047024][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.047047][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/18 10:10:40 executed programs: 10 [ 105.890393][ T52] Bluetooth: hci0: command tx timeout [ 107.970315][ T52] Bluetooth: hci0: command tx timeout 2026/09/18 10:10:45 executed programs: 209 2026/09/18 10:10:50 executed programs: 453 [ 117.585421][ T4931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.587679][ T4931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.589067][ T4931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.614303][ T4931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.616706][ T4931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.847756][ T27] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.935867][ T27] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.018523][ T27] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.080958][ T27] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.269449][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.269558][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.269998][ T6466] bridge_slave_0: entered allmulticast mode [ 118.288524][ T6466] bridge_slave_0: entered promiscuous mode [ 118.301160][ T27] bridge_slave_1: left allmulticast mode [ 118.301179][ T27] bridge_slave_1: left promiscuous mode [ 118.302034][ T27] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.304331][ T27] bridge_slave_0: left allmulticast mode [ 118.304347][ T27] bridge_slave_0: left promiscuous mode [ 118.304504][ T27] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.463750][ T27] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.465967][ T27] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.467213][ T27] bond0 (unregistering): Released all slaves [ 118.497118][ T6466] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.497205][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.497312][ T6466] bridge_slave_1: entered allmulticast mode [ 118.498629][ T6466] bridge_slave_1: entered promiscuous mode [ 118.567217][ T6466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.595321][ T6466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.679569][ T6466] team0: Port device team_slave_0 added [ 118.689836][ T6466] team0: Port device team_slave_1 added [ 118.739627][ T6466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.739646][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.739674][ T6466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.788068][ T6466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.788086][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.788115][ T6466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.844614][ T27] hsr_slave_0: left promiscuous mode [ 118.845395][ T27] hsr_slave_1: left promiscuous mode [ 118.846342][ T27] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.846363][ T27] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.847218][ T27] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.847237][ T27] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.886133][ T27] veth1_macvtap: left promiscuous mode [ 118.886234][ T27] veth0_macvtap: left promiscuous mode [ 118.886498][ T27] veth1_vlan: left promiscuous mode [ 118.886681][ T27] veth0_vlan: left promiscuous mode [ 119.204857][ T27] team0 (unregistering): Port device team_slave_1 removed [ 119.223924][ T27] team0 (unregistering): Port device team_slave_0 removed [ 119.412485][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 119.448669][ T6466] hsr_slave_0: entered promiscuous mode [ 119.449431][ T6466] hsr_slave_1: entered promiscuous mode [ 119.651079][ T52] Bluetooth: hci1: command tx timeout [ 120.176078][ T6466] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.190153][ T6466] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.191396][ T6466] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.194979][ T6466] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.196094][ T6466] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.232927][ T6466] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.234746][ T6466] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.255074][ T6466] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.367223][ T6466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.404809][ T6466] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.411221][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.411312][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.445288][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.445403][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.997550][ T6466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.049508][ T6466] veth0_vlan: entered promiscuous mode [ 121.064743][ T6466] veth1_vlan: entered promiscuous mode [ 121.104881][ T6466] veth0_macvtap: entered promiscuous mode [ 121.113872][ T6466] veth1_macvtap: entered promiscuous mode [ 121.141798][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.153370][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.202593][ T27] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.204968][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.205347][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.205388][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.292605][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.292643][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/18 10:10:57 executed programs: 602 [ 121.351556][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.351579][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.730944][ T52] Bluetooth: hci1: command tx timeout [ 123.130921][ T6648] [ 123.133310][ T6648] ====================================================== [ 123.140344][ T6648] WARNING: possible circular locking dependency detected [ 123.147367][ T6648] syzkaller #0 Not tainted [ 123.151782][ T6648] ------------------------------------------------------ [ 123.158796][ T6648] syz.0.690/6648 is trying to acquire lock: [ 123.164692][ T6648] ffff8880256216e8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xca0 [ 123.176202][ T6648] [ 123.176202][ T6648] but task is already holding lock: [ 123.183573][ T6648] ffff88807ce88ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 123.192599][ T6648] [ 123.192599][ T6648] which lock already depends on the new lock. [ 123.192599][ T6648] [ 123.203021][ T6648] [ 123.203021][ T6648] the existing dependency chain (in reverse order) is: [ 123.212227][ T6648] [ 123.212227][ T6648] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 123.219987][ T6648] lock_sock_nested+0x41/0x100 [ 123.225288][ T6648] smc_listen_out+0xd4/0x3d0 [ 123.230430][ T6648] smc_listen_work+0x81d/0x1410 [ 123.235834][ T6648] process_scheduled_works+0xc3d/0x1630 [ 123.241924][ T6648] worker_thread+0xa47/0xfb0 [ 123.247062][ T6648] kthread+0x38b/0x480 [ 123.251662][ T6648] ret_from_fork+0x514/0xb70 [ 123.256791][ T6648] ret_from_fork_asm+0x1a/0x30 [ 123.262100][ T6648] [ 123.262100][ T6648] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 123.272300][ T6648] __lock_acquire+0x164c/0x2de0 [ 123.277690][ T6648] lock_acquire+0x115/0x350 [ 123.282725][ T6648] __flush_work+0x74c/0xca0 [ 123.287780][ T6648] __cancel_work_sync+0xbf/0x110 [ 123.293270][ T6648] smc_clcsock_release+0x60/0xf0 [ 123.298748][ T6648] __smc_release+0x64e/0x7c0 [ 123.303977][ T6648] smc_close_non_accepted+0xd5/0x1f0 [ 123.309823][ T6648] smc_close_active+0xb30/0xf20 [ 123.315239][ T6648] __smc_release+0x9c/0x7c0 [ 123.320299][ T6648] smc_release+0x2c5/0x550 [ 123.325274][ T6648] __sock_release+0xa0/0x1f0 [ 123.330439][ T6648] sock_close+0x1c/0x30 [ 123.335158][ T6648] __fput+0x418/0xa50 [ 123.339705][ T6648] task_work_run+0x1d9/0x270 [ 123.344930][ T6648] exit_to_user_mode_loop+0x204/0x770 [ 123.350863][ T6648] do_syscall_64+0x328/0x520 [ 123.356002][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.362458][ T6648] [ 123.362458][ T6648] other info that might help us debug this: [ 123.362458][ T6648] [ 123.372727][ T6648] Possible unsafe locking scenario: [ 123.372727][ T6648] [ 123.380196][ T6648] CPU0 CPU1 [ 123.385588][ T6648] ---- ---- [ 123.390974][ T6648] lock(sk_lock-AF_SMC/1); [ 123.395512][ T6648] lock((work_completion)(&new_smc->smc_listen_work)); [ 123.404982][ T6648] lock(sk_lock-AF_SMC/1); [ 123.412034][ T6648] lock((work_completion)(&new_smc->smc_listen_work)); [ 123.418992][ T6648] [ 123.418992][ T6648] *** DEADLOCK *** [ 123.418992][ T6648] [ 123.427150][ T6648] locks held by syz.0.690/6648: 3, last CPU#0: [ 123.433323][ T6648] #0: ffff88805a8a52c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 123.443914][ T6648] #1: ffff88807ce88ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 123.453392][ T6648] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xca0 [ 123.462678][ T6648] [ 123.462678][ T6648] stack backtrace: [ 123.468597][ T6648] CPU: 0 UID: 0 PID: 6648 Comm: syz.0.690 Not tainted syzkaller #0 PREEMPT(full) [ 123.477807][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.487893][ T6648] Call Trace: [ 123.491204][ T6648] [ 123.494157][ T6648] dump_stack_lvl+0xe8/0x150 [ 123.498956][ T6648] print_circular_bug+0x2e2/0x300 [ 123.504029][ T6648] check_noncircular+0x12f/0x150 [ 123.508993][ T6648] __lock_acquire+0x164c/0x2de0 [ 123.513908][ T6648] ? do_raw_spin_unlock+0xf5/0x200 [ 123.519052][ T6648] lock_acquire+0x115/0x350 [ 123.523583][ T6648] ? __flush_work+0x101/0xca0 [ 123.528302][ T6648] ? __flush_work+0x101/0xca0 [ 123.533036][ T6648] __flush_work+0x74c/0xca0 [ 123.537664][ T6648] ? __flush_work+0x101/0xca0 [ 123.542373][ T6648] ? __flush_work+0x101/0xca0 [ 123.547083][ T6648] ? __pfx___flush_work+0x10/0x10 [ 123.552139][ T6648] ? __pfx_wq_barrier_func+0x10/0x10 [ 123.557453][ T6648] ? __cancel_work_sync+0x5c/0x110 [ 123.562599][ T6648] __cancel_work_sync+0xbf/0x110 [ 123.567565][ T6648] smc_clcsock_release+0x60/0xf0 [ 123.572527][ T6648] __smc_release+0x64e/0x7c0 [ 123.577145][ T6648] smc_close_non_accepted+0xd5/0x1f0 [ 123.582462][ T6648] smc_close_active+0xb30/0xf20 [ 123.587335][ T6648] ? __pfx_sock_def_readable+0x10/0x10 [ 123.592834][ T6648] __smc_release+0x9c/0x7c0 [ 123.597371][ T6648] ? __local_bh_enable_ip+0xd6/0x140 [ 123.602688][ T6648] smc_release+0x2c5/0x550 [ 123.607136][ T6648] __sock_release+0xa0/0x1f0 [ 123.611750][ T6648] ? __pfx_sock_close+0x10/0x10 [ 123.616628][ T6648] sock_close+0x1c/0x30 [ 123.620808][ T6648] __fput+0x418/0xa50 [ 123.624816][ T6648] task_work_run+0x1d9/0x270 [ 123.629450][ T6648] ? __pfx_task_work_run+0x10/0x10 [ 123.634586][ T6648] exit_to_user_mode_loop+0x204/0x770 [ 123.639981][ T6648] ? rcu_is_watching+0x16/0xb0 [ 123.644770][ T6648] do_syscall_64+0x328/0x520 [ 123.649388][ T6648] ? trace_irq_disable+0x3b/0x140 [ 123.654433][ T6648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.660514][ T6648] ? clear_bhb_loop+0x70/0xc0 [ 123.665233][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.671144][ T6648] RIP: 0033:0x7fda0719e159 [ 123.675586][ T6648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.695212][ T6648] RSP: 002b:00007ffc3a3b3688 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 123.703654][ T6648] RAX: 0000000000000000 RBX: 00007ffc3a3b3770 RCX: 00007fda0719e159 [ 123.711644][ T6648] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 123.719631][ T6648] RBP: 000000000001e0c4 R08: 0000000000000001 R09: 0000000000000000 [ 123.727618][ T6648] R10: 0000001b30120000 R11: 0000000000000246 R12: 0000000000000000 [ 123.735604][ T6648] R13: 00007fda07425fac R14: 00007fda07425fa8 R15: 00007fda07425fa0 [ 123.743621][ T6648] [ 123.811432][ T52] Bluetooth: hci1: command tx timeout [ 125.890327][ T52] Bluetooth: hci1: command tx timeout 2026/09/18 10:11:02 executed programs: 826 2026/09/18 10:11:07 executed programs: 1117 [ 132.850865][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.850916][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.964560][ T4931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.964859][ T4931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.965064][ T4931] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.965611][ T4931] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.966005][ T4931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2