Warning: Permanently added '10.128.0.158' (ED25519) to the list of known hosts. 2026/09/16 09:25:09 parsed 1 programs 2026/09/16 09:25:09 serving rpc on tcp://36383 [ 90.974433][ T5627] cgroup: Unknown subsys name 'net' [ 91.085482][ T5627] cgroup: Unknown subsys name 'cpuset' [ 91.088994][ T5627] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.916472][ T9] cfg80211: failed to load regulatory.db [ 92.818420][ T5627] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.892333][ T5641] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.896778][ T5641] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 95.899778][ T5641] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 95.906254][ T5641] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 95.959676][ T5641] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 97.238760][ T5657] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.239414][ T5657] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.239523][ T5657] bridge_slave_0: entered allmulticast mode [ 97.244280][ T5657] bridge_slave_0: entered promiscuous mode [ 97.261863][ T5657] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.261971][ T5657] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.262115][ T5657] bridge_slave_1: entered allmulticast mode [ 97.265137][ T5657] bridge_slave_1: entered promiscuous mode [ 97.321505][ T5657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.324169][ T5657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.362852][ T5657] team0: Port device team_slave_0 added [ 97.365276][ T5657] team0: Port device team_slave_1 added [ 97.396363][ T5657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.396378][ T5657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.396400][ T5657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.398517][ T5657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.398534][ T5657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.398564][ T5657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.512336][ T5657] hsr_slave_0: entered promiscuous mode [ 97.513266][ T5657] hsr_slave_1: entered promiscuous mode [ 97.682277][ T5657] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.688503][ T5657] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.689600][ T5657] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.713523][ T5657] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.714394][ T5657] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.718276][ T5657] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.719175][ T5657] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.730996][ T5657] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.784281][ T5657] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.784376][ T5657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.785003][ T5657] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.785098][ T5657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.868284][ T5657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.886622][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.887689][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.914618][ T5657] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.926825][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.927505][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.947675][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.947751][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.334082][ T5657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.384219][ T5657] veth0_vlan: entered promiscuous mode [ 98.398925][ T5657] veth1_vlan: entered promiscuous mode [ 98.433484][ T5657] veth0_macvtap: entered promiscuous mode [ 98.437952][ T5657] veth1_macvtap: entered promiscuous mode [ 98.465857][ T5657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.479220][ T5657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.532211][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.532635][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.532674][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.532710][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.721717][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.795871][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.893424][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.958846][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.491553][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.492455][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.493077][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.494179][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.494896][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.558207][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.558235][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.603533][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.603557][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.841907][ T12] bridge_slave_1: left allmulticast mode [ 100.841951][ T12] bridge_slave_1: left promiscuous mode [ 100.843113][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.850509][ T12] bridge_slave_0: left allmulticast mode [ 100.850536][ T12] bridge_slave_0: left promiscuous mode [ 100.850710][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.018997][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.031819][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.035289][ T12] bond0 (unregistering): Released all slaves [ 101.143358][ T12] hsr_slave_0: left promiscuous mode [ 101.144280][ T12] hsr_slave_1: left promiscuous mode [ 101.145320][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.145352][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.147257][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.147279][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.208737][ T12] veth1_macvtap: left promiscuous mode [ 101.208797][ T12] veth0_macvtap: left promiscuous mode [ 101.208913][ T12] veth1_vlan: left promiscuous mode [ 101.209071][ T12] veth0_vlan: left promiscuous mode [ 101.633958][ T12] team0 (unregistering): Port device team_slave_1 removed [ 101.665058][ T12] team0 (unregistering): Port device team_slave_0 removed [ 102.065606][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 103.139856][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 104.112166][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 2026/09/16 09:25:27 executed programs: 0 [ 104.338796][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.349396][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.358459][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.368271][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.369052][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.839562][ T5276] 8021q: adding VLAN 0 to HW filter on device eth4 [ 105.211699][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.211778][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.211878][ T5798] bridge_slave_0: entered allmulticast mode [ 105.213258][ T5798] bridge_slave_0: entered promiscuous mode [ 105.226634][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.226972][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.227363][ T5798] bridge_slave_1: entered allmulticast mode [ 105.232678][ T5798] bridge_slave_1: entered promiscuous mode [ 105.283698][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.287519][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.327132][ T5798] team0: Port device team_slave_0 added [ 105.329345][ T5798] team0: Port device team_slave_1 added [ 105.360204][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.360225][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.360250][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.368795][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.368812][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.368904][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.479474][ T5798] hsr_slave_0: entered promiscuous mode [ 105.480316][ T5798] hsr_slave_1: entered promiscuous mode [ 106.036975][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.047265][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.050160][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.065122][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.066069][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.070724][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.091352][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.110408][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.146370][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.147302][ T5798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.147604][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.147733][ T5798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.234445][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.235784][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.277758][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.308933][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.328643][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.328755][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.348525][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.348670][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.471907][ T4931] Bluetooth: hci0: command tx timeout [ 106.926360][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.997952][ T5798] veth0_vlan: entered promiscuous mode [ 107.012246][ T5798] veth1_vlan: entered promiscuous mode [ 107.071478][ T5798] veth0_macvtap: entered promiscuous mode [ 107.077419][ T5798] veth1_macvtap: entered promiscuous mode [ 107.119637][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.137434][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.180978][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.181027][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.181064][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.232716][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.326402][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.326426][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.387783][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.387807][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.551384][ T4931] Bluetooth: hci0: command tx timeout 2026/09/16 09:25:32 executed programs: 33 [ 110.637123][ T4931] Bluetooth: hci0: command tx timeout [ 112.711604][ T4931] Bluetooth: hci0: command tx timeout 2026/09/16 09:25:37 executed programs: 205 2026/09/16 09:25:42 executed programs: 411 [ 124.012899][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.014678][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.016310][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.049500][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.051285][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.240570][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.329357][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.420701][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.504718][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.722163][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.722270][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.722410][ T6562] bridge_slave_0: entered allmulticast mode [ 124.724321][ T6562] bridge_slave_0: entered promiscuous mode [ 124.731225][ T13] bridge_slave_1: left allmulticast mode [ 124.731260][ T13] bridge_slave_1: left promiscuous mode [ 124.731799][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.749984][ T13] bridge_slave_0: left allmulticast mode [ 124.750059][ T13] bridge_slave_0: left promiscuous mode [ 124.750654][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.921470][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.926353][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.927639][ T13] bond0 (unregistering): Released all slaves [ 124.958825][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.958932][ T6562] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.959112][ T6562] bridge_slave_1: entered allmulticast mode [ 124.979729][ T6562] bridge_slave_1: entered promiscuous mode [ 125.057565][ T6562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.072439][ T6562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.164195][ T6562] team0: Port device team_slave_0 added [ 125.167617][ T6562] team0: Port device team_slave_1 added [ 125.231506][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.231525][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.231552][ T6562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.236567][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.236585][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.236614][ T6562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.289427][ T13] hsr_slave_0: left promiscuous mode [ 125.323181][ T13] hsr_slave_1: left promiscuous mode [ 125.329434][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.329509][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.336943][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.337006][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.379490][ T13] veth1_macvtap: left promiscuous mode [ 125.379520][ T13] veth0_macvtap: left promiscuous mode [ 125.379590][ T13] veth1_vlan: left promiscuous mode [ 125.379636][ T13] veth0_vlan: left promiscuous mode [ 125.709049][ T13] team0 (unregistering): Port device team_slave_1 removed [ 125.732836][ T13] team0 (unregistering): Port device team_slave_0 removed [ 125.877686][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 125.919982][ T6562] hsr_slave_0: entered promiscuous mode [ 125.923275][ T6562] hsr_slave_1: entered promiscuous mode [ 126.079935][ T52] Bluetooth: hci1: command tx timeout [ 126.547333][ T6562] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.555595][ T6562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.558083][ T6562] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.582337][ T6562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.584490][ T6562] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.588091][ T6562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.589093][ T6562] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.602945][ T6562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.729214][ T6562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.769091][ T6562] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.783659][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.783772][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.803207][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.803528][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.350697][ T6562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.435162][ T6562] veth0_vlan: entered promiscuous mode [ 127.453232][ T6562] veth1_vlan: entered promiscuous mode [ 127.494116][ T6562] veth0_macvtap: entered promiscuous mode [ 127.500506][ T6562] veth1_macvtap: entered promiscuous mode [ 127.538465][ T6562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.554438][ T6562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.582474][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.582522][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.582559][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.582595][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.709804][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.709848][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.779920][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.779945][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/16 09:25:51 executed programs: 602 [ 128.151036][ T52] Bluetooth: hci1: command tx timeout [ 130.142838][ T6741] [ 130.145243][ T6741] ====================================================== [ 130.152291][ T6741] WARNING: possible circular locking dependency detected [ 130.159334][ T6741] syzkaller #0 Not tainted [ 130.163749][ T6741] ------------------------------------------------------ [ 130.170763][ T6741] syz.0.707/6741 is trying to acquire lock: [ 130.176661][ T6741] ffff88807d5ebc68 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xca0 [ 130.188173][ T6741] [ 130.188173][ T6741] but task is already holding lock: [ 130.195543][ T6741] ffff88807d5ee660 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 130.204533][ T6741] [ 130.204533][ T6741] which lock already depends on the new lock. [ 130.204533][ T6741] [ 130.214944][ T6741] [ 130.214944][ T6741] the existing dependency chain (in reverse order) is: [ 130.223973][ T6741] [ 130.223973][ T6741] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 130.231729][ T6741] lock_sock_nested+0x41/0x100 [ 130.237032][ T6741] smc_listen_out+0xd4/0x3d0 [ 130.242168][ T6741] smc_listen_work+0x81d/0x1410 [ 130.247542][ T6741] process_scheduled_works+0xc3d/0x1630 [ 130.251217][ T52] Bluetooth: hci1: command tx timeout [ 130.259004][ T6741] worker_thread+0xa47/0xfb0 [ 130.264142][ T6741] kthread+0x38b/0x480 [ 130.268760][ T6741] ret_from_fork+0x514/0xb70 [ 130.273963][ T6741] ret_from_fork_asm+0x1a/0x30 [ 130.279261][ T6741] [ 130.279261][ T6741] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 130.289427][ T6741] __lock_acquire+0x164c/0x2de0 [ 130.294805][ T6741] lock_acquire+0x115/0x350 [ 130.299857][ T6741] __flush_work+0x74c/0xca0 [ 130.304892][ T6741] __cancel_work_sync+0xbf/0x110 [ 130.310380][ T6741] smc_clcsock_release+0x60/0xf0 [ 130.315849][ T6741] __smc_release+0x64e/0x7c0 [ 130.320974][ T6741] smc_close_non_accepted+0xd5/0x1f0 [ 130.326793][ T6741] smc_close_active+0xb30/0xf20 [ 130.332175][ T6741] __smc_release+0x9c/0x7c0 [ 130.337210][ T6741] smc_release+0x2c5/0x550 [ 130.342171][ T6741] __sock_release+0xa0/0x1f0 [ 130.347288][ T6741] sock_close+0x1c/0x30 [ 130.352013][ T6741] __fput+0x418/0xa50 [ 130.356571][ T6741] task_work_run+0x1d9/0x270 [ 130.361698][ T6741] exit_to_user_mode_loop+0x204/0x770 [ 130.367620][ T6741] __do_fast_syscall_32+0x437/0x6a0 [ 130.373443][ T6741] do_fast_syscall_32+0x33/0x70 [ 130.378836][ T6741] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.385700][ T6741] [ 130.385700][ T6741] other info that might help us debug this: [ 130.385700][ T6741] [ 130.396046][ T6741] Possible unsafe locking scenario: [ 130.396046][ T6741] [ 130.403526][ T6741] CPU0 CPU1 [ 130.408919][ T6741] ---- ---- [ 130.414305][ T6741] lock(sk_lock-AF_SMC/1); [ 130.418826][ T6741] lock((work_completion)(&new_smc->smc_listen_work)); [ 130.428303][ T6741] lock(sk_lock-AF_SMC/1); [ 130.435336][ T6741] lock((work_completion)(&new_smc->smc_listen_work)); [ 130.442273][ T6741] [ 130.442273][ T6741] *** DEADLOCK *** [ 130.442273][ T6741] [ 130.450414][ T6741] locks held by syz.0.707/6741: 3, last CPU#0: [ 130.456843][ T6741] #0: ffff888056c6fb00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 130.467491][ T6741] #1: ffff88807d5ee660 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 130.476918][ T6741] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xca0 [ 130.486168][ T6741] [ 130.486168][ T6741] stack backtrace: [ 130.492082][ T6741] CPU: 0 UID: 0 PID: 6741 Comm: syz.0.707 Not tainted syzkaller #0 PREEMPT(full) [ 130.501288][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.511399][ T6741] Call Trace: [ 130.514709][ T6741] [ 130.517661][ T6741] dump_stack_lvl+0xe8/0x150 [ 130.522286][ T6741] print_circular_bug+0x2e2/0x300 [ 130.527336][ T6741] check_noncircular+0x12f/0x150 [ 130.532345][ T6741] __lock_acquire+0x164c/0x2de0 [ 130.537257][ T6741] ? do_raw_spin_unlock+0xf5/0x200 [ 130.542399][ T6741] lock_acquire+0x115/0x350 [ 130.546943][ T6741] ? __flush_work+0x101/0xca0 [ 130.551654][ T6741] ? __flush_work+0x101/0xca0 [ 130.556362][ T6741] __flush_work+0x74c/0xca0 [ 130.560909][ T6741] ? __flush_work+0x101/0xca0 [ 130.565629][ T6741] ? __flush_work+0x101/0xca0 [ 130.570333][ T6741] ? __pfx___flush_work+0x10/0x10 [ 130.575383][ T6741] ? __pfx_wq_barrier_func+0x10/0x10 [ 130.580779][ T6741] ? __cancel_work_sync+0x5c/0x110 [ 130.586080][ T6741] __cancel_work_sync+0xbf/0x110 [ 130.591052][ T6741] smc_clcsock_release+0x60/0xf0 [ 130.596013][ T6741] __smc_release+0x64e/0x7c0 [ 130.600624][ T6741] smc_close_non_accepted+0xd5/0x1f0 [ 130.605935][ T6741] smc_close_active+0xb30/0xf20 [ 130.610978][ T6741] ? __pfx_sock_def_readable+0x10/0x10 [ 130.616457][ T6741] __smc_release+0x9c/0x7c0 [ 130.620985][ T6741] ? __local_bh_enable_ip+0xd6/0x140 [ 130.626304][ T6741] smc_release+0x2c5/0x550 [ 130.630761][ T6741] __sock_release+0xa0/0x1f0 [ 130.635442][ T6741] ? __pfx_sock_close+0x10/0x10 [ 130.640318][ T6741] sock_close+0x1c/0x30 [ 130.644520][ T6741] __fput+0x418/0xa50 [ 130.648564][ T6741] task_work_run+0x1d9/0x270 [ 130.653185][ T6741] ? __pfx_task_work_run+0x10/0x10 [ 130.658426][ T6741] exit_to_user_mode_loop+0x204/0x770 [ 130.663819][ T6741] ? rcu_is_watching+0x16/0xb0 [ 130.668617][ T6741] ? do_fast_syscall_32+0x33/0x70 [ 130.673657][ T6741] __do_fast_syscall_32+0x437/0x6a0 [ 130.678869][ T6741] ? do_fast_syscall_32+0x33/0x70 [ 130.683907][ T6741] ? irqentry_exit+0x10f/0x910 [ 130.688689][ T6741] ? trace_irq_disable+0x3b/0x140 [ 130.693753][ T6741] do_fast_syscall_32+0x33/0x70 [ 130.698619][ T6741] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.704960][ T6741] RIP: 0023:0xf7f990ec [ 130.709050][ T6741] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 130.728778][ T6741] RSP: 002b:00000000fff7dfec EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 130.737214][ T6741] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 130.745204][ T6741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.753191][ T6741] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.761178][ T6741] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 130.769173][ T6741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.777169][ T6741] [ 132.312515][ T52] Bluetooth: hci1: command tx timeout 2026/09/16 09:25:56 executed programs: 804 [ 132.873283][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.873332][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 2026/09/16 09:26:01 executed programs: 1085 [ 140.008994][ T4931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.009230][ T4931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.009445][ T4931] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.010104][ T4931] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.010519][ T4931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2