Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. 2026/05/23 23:05:01 parsed 1 programs [ 62.869159][ T4200] cgroup: Unknown subsys name 'net' [ 63.029270][ T4200] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.234431][ T4200] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.999374][ T4228] chnl_net:caif_netlink_parms(): no params data found [ 66.039545][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.047310][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.055517][ T4228] device bridge_slave_0 entered promiscuous mode [ 66.065994][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.073070][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.080874][ T4228] device bridge_slave_1 entered promiscuous mode [ 66.098300][ T4228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.108978][ T4228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.130079][ T4228] team0: Port device team_slave_0 added [ 66.137159][ T4228] team0: Port device team_slave_1 added [ 66.151863][ T4228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.158946][ T4228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.185547][ T4228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.198019][ T4228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.205035][ T4228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.231011][ T4228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.259454][ T4228] device hsr_slave_0 entered promiscuous mode [ 66.266339][ T4228] device hsr_slave_1 entered promiscuous mode [ 66.389014][ T4228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.400445][ T4228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.411282][ T4228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.420878][ T4228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.448436][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.455680][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.463611][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.470773][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.527035][ T4228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.541540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.551826][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.562476][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.576829][ T4228] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.589072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.597936][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.605035][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.627573][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.638532][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.645643][ T427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.656804][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.678989][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.687568][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.697994][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.707584][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.719484][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.842474][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.850642][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.866289][ T4228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.888412][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.912296][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.923859][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.932442][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.943927][ T4228] device veth0_vlan entered promiscuous mode [ 66.959013][ T4228] device veth1_vlan entered promiscuous mode [ 66.986860][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.998843][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.009637][ T4228] device veth0_macvtap entered promiscuous mode [ 67.021241][ T4228] device veth1_macvtap entered promiscuous mode [ 67.040671][ T4228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.049454][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.059555][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.069516][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.080337][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.093030][ T4228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.101957][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.111256][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.125153][ T4228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.133954][ T4228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.151019][ T4228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.160182][ T4228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.274410][ T4228] syz-executor (4228) used greatest stack depth: 21104 bytes left [ 67.431713][ T1432] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.779650][ T1432] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.226681][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.233108][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.189700][ T1432] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.240402][ T1432] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.579471][ T427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.598319][ T427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.621432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.660854][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.669910][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.679516][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.299653][ T1432] device hsr_slave_0 left promiscuous mode [ 73.316228][ T1432] device hsr_slave_1 left promiscuous mode [ 73.322841][ T1432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.331086][ T1432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.340330][ T1432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.348459][ T1432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.357420][ T1432] device bridge_slave_1 left promiscuous mode [ 73.364402][ T1432] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.380526][ T1432] device bridge_slave_0 left promiscuous mode [ 73.388107][ T1432] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.410180][ T1432] device veth1_macvtap left promiscuous mode [ 73.417614][ T1432] device veth0_macvtap left promiscuous mode [ 73.423699][ T1432] device veth1_vlan left promiscuous mode [ 73.430127][ T1432] device veth0_vlan left promiscuous mode [ 73.588372][ T1432] team0 (unregistering): Port device team_slave_1 removed [ 73.600340][ T1432] team0 (unregistering): Port device team_slave_0 removed [ 73.612512][ T1432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.626096][ T1432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.672181][ T1432] bond0 (unregistering): Released all slaves 2026/05/23 23:05:14 executed programs: 0 [ 75.083138][ T4367] chnl_net:caif_netlink_parms(): no params data found [ 75.199199][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.207820][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.221172][ T4367] device bridge_slave_0 entered promiscuous mode [ 75.230946][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.238341][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.247773][ T4367] device bridge_slave_1 entered promiscuous mode [ 75.272329][ T4367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.284947][ T4367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.313840][ T4367] team0: Port device team_slave_0 added [ 75.323092][ T4367] team0: Port device team_slave_1 added [ 75.345786][ T4367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.352764][ T4367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.379890][ T4367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.392463][ T4367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.399638][ T4367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.426751][ T4367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.471687][ T4367] device hsr_slave_0 entered promiscuous mode [ 75.484966][ T4367] device hsr_slave_1 entered promiscuous mode [ 76.137231][ T4367] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.147212][ T4367] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.158258][ T4367] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.167739][ T4367] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.225975][ T4367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.241872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.250672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.262273][ T4367] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.272770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.283668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.292639][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.299747][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.320227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.330997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.340143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.350817][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.357930][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.368386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.377767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.400135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.409984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.420361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.429923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.438950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.447695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.459800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.469152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.477994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.489486][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.626132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.633597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.648203][ T4367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.695672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.707623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.729101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.738843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.772750][ T4367] device veth0_vlan entered promiscuous mode [ 76.782210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.790417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.804215][ T4367] device veth1_vlan entered promiscuous mode [ 76.857180][ T4367] device veth0_macvtap entered promiscuous mode [ 76.867655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.876671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.885813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.894620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.903805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.942929][ T4367] device veth1_macvtap entered promiscuous mode [ 76.959703][ T4367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.967486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.978204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.987187][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 76.996286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.008695][ T4367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.017580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.027522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.040190][ T4367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.050004][ T4367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.060286][ T4367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.069658][ T4367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.188813][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.200658][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.209514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.240796][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.248906][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.267619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.359652][ T4482] [ 77.362011][ T4482] ====================================================== [ 77.369003][ T4482] WARNING: possible circular locking dependency detected [ 77.376000][ T4482] syzkaller #0 Not tainted [ 77.380407][ T4482] ------------------------------------------------------ [ 77.387394][ T4482] syz.0.17/4482 is trying to acquire lock: [ 77.393165][ T4482] ffff888020b90a38 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 77.402015][ T4482] [ 77.402015][ T4482] but task is already holding lock: [ 77.409352][ T4482] ffffffff8c9375d8 (depot_lock){-.-.}-{2:2}, at: stack_depot_save+0x1d2/0x440 [ 77.418192][ T4482] [ 77.418192][ T4482] which lock already depends on the new lock. [ 77.418192][ T4482] [ 77.428566][ T4482] [ 77.428566][ T4482] the existing dependency chain (in reverse order) is: [ 77.437554][ T4482] [ 77.437554][ T4482] -> #1 (depot_lock){-.-.}-{2:2}: [ 77.444732][ T4482] _raw_spin_lock_irqsave+0xb0/0x100 [ 77.450514][ T4482] stack_depot_save+0x1d2/0x440 [ 77.455860][ T4482] __kasan_kmalloc+0xcc/0xf0 [ 77.460946][ T4482] bpf_map_kmalloc_node+0xba/0x140 [ 77.466569][ T4482] trie_update_elem+0x1cc/0xc50 [ 77.471914][ T4482] bpf_map_update_value+0x57d/0x650 [ 77.477604][ T4482] generic_map_update_batch+0x52d/0x7d0 [ 77.483648][ T4482] bpf_map_do_batch+0x466/0x600 [ 77.488995][ T4482] __sys_bpf+0x671/0x6f0 [ 77.493732][ T4482] __x64_sys_bpf+0x78/0x90 [ 77.498642][ T4482] do_syscall_64+0x4c/0xa0 [ 77.503551][ T4482] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.510112][ T4482] [ 77.510112][ T4482] -> #0 (&trie->lock){..-.}-{2:2}: [ 77.517375][ T4482] __lock_acquire+0x2c42/0x7d10 [ 77.522725][ T4482] lock_acquire+0x19e/0x400 [ 77.527719][ T4482] _raw_spin_lock_irqsave+0xb0/0x100 [ 77.533501][ T4482] trie_delete_elem+0x90/0x710 [ 77.538763][ T4482] bpf_prog_2c29ac5cdc6b1842+0x3a/0x1e8 [ 77.544805][ T4482] trace_call_bpf+0x2b1/0x5b0 [ 77.549973][ T4482] perf_trace_run_bpf_submit+0x79/0x1c0 [ 77.556013][ T4482] perf_trace_lock+0x301/0x390 [ 77.561267][ T4482] lock_release+0x84a/0x8a0 [ 77.566263][ T4482] _raw_spin_unlock_irqrestore+0x6d/0x120 [ 77.572475][ T4482] stack_depot_save+0x404/0x440 [ 77.577819][ T4482] kasan_save_stack+0x4b/0x60 [ 77.582997][ T4482] kasan_record_aux_stack+0xb8/0x100 [ 77.588777][ T4482] task_work_add+0x2f/0x1d0 [ 77.593778][ T4482] fput_many+0xde/0x1a0 [ 77.598428][ T4482] filp_close+0x10e/0x150 [ 77.603248][ T4482] __close_range+0x24f/0x510 [ 77.608329][ T4482] __x64_sys_close_range+0x76/0x80 [ 77.613950][ T4482] do_syscall_64+0x4c/0xa0 [ 77.618861][ T4482] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.625248][ T4482] [ 77.625248][ T4482] other info that might help us debug this: [ 77.625248][ T4482] [ 77.635446][ T4482] Possible unsafe locking scenario: [ 77.635446][ T4482] [ 77.642874][ T4482] CPU0 CPU1 [ 77.648209][ T4482] ---- ---- [ 77.653541][ T4482] lock(depot_lock); [ 77.657498][ T4482] lock(&trie->lock); [ 77.664055][ T4482] lock(depot_lock); [ 77.670526][ T4482] lock(&trie->lock); [ 77.674570][ T4482] [ 77.674570][ T4482] *** DEADLOCK *** [ 77.674570][ T4482] [ 77.682685][ T4482] 2 locks held by syz.0.17/4482: [ 77.687592][ T4482] #0: ffffffff8c9375d8 (depot_lock){-.-.}-{2:2}, at: stack_depot_save+0x1d2/0x440 [ 77.696877][ T4482] #1: ffffffff8c31f320 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 77.706179][ T4482] [ 77.706179][ T4482] stack backtrace: [ 77.712065][ T4482] CPU: 1 PID: 4482 Comm: syz.0.17 Not tainted syzkaller #0 [ 77.719236][ T4482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 77.729285][ T4482] Call Trace: [ 77.732557][ T4482] [ 77.735481][ T4482] dump_stack_lvl+0x188/0x250 [ 77.740146][ T4482] ? load_image+0x400/0x400 [ 77.744629][ T4482] ? show_regs_print_info+0x20/0x20 [ 77.749811][ T4482] ? print_circular_bug+0x12b/0x1a0 [ 77.754985][ T4482] check_noncircular+0x296/0x330 [ 77.759899][ T4482] ? add_chain_block+0x940/0x940 [ 77.764809][ T4482] ? lockdep_lock+0x15c/0x1f0 [ 77.769468][ T4482] ? mark_lock+0x94/0x320 [ 77.773773][ T4482] __lock_acquire+0x2c42/0x7d10 [ 77.778606][ T4482] ? mark_lock+0x94/0x320 [ 77.782907][ T4482] ? __lock_acquire+0x12e8/0x7d10 [ 77.787905][ T4482] ? verify_lock_unused+0x140/0x140 [ 77.793079][ T4482] ? perf_swevent_get_recursion_context+0xda/0x150 [ 77.799558][ T4482] ? perf_trace_lock+0x197/0x390 [ 77.804479][ T4482] lock_acquire+0x19e/0x400 [ 77.808958][ T4482] ? trie_delete_elem+0x90/0x710 [ 77.813871][ T4482] ? read_lock_is_recursive+0x10/0x10 [ 77.819215][ T4482] ? rcu_lock_release+0x5/0x20 [ 77.823954][ T4482] _raw_spin_lock_irqsave+0xb0/0x100 [ 77.829211][ T4482] ? trie_delete_elem+0x90/0x710 [ 77.834121][ T4482] ? _raw_spin_lock+0x40/0x40 [ 77.838772][ T4482] trie_delete_elem+0x90/0x710 [ 77.843514][ T4482] bpf_prog_2c29ac5cdc6b1842+0x3a/0x1e8 [ 77.849035][ T4482] trace_call_bpf+0x2b1/0x5b0 [ 77.853701][ T4482] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 77.859588][ T4482] ? perf_trace_buf_alloc+0x12c/0x300 [ 77.864939][ T4482] perf_trace_run_bpf_submit+0x79/0x1c0 [ 77.870469][ T4482] perf_trace_lock+0x301/0x390 [ 77.875217][ T4482] ? trace_event_raw_event_lock+0x270/0x270 [ 77.881093][ T4482] ? __lock_acquire+0x7d10/0x7d10 [ 77.886100][ T4482] lock_release+0x84a/0x8a0 [ 77.890580][ T4482] ? stack_depot_save+0x404/0x440 [ 77.895578][ T4482] ? do_raw_spin_lock+0x128/0x2f0 [ 77.900575][ T4482] ? __lock_acquire+0x7d10/0x7d10 [ 77.905574][ T4482] ? __rwlock_init+0x140/0x140 [ 77.910308][ T4482] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 77.915745][ T4482] ? lockdep_hardirqs_off+0x70/0x100 [ 77.921006][ T4482] _raw_spin_unlock_irqrestore+0x6d/0x120 [ 77.926701][ T4482] ? _raw_spin_unlock+0x40/0x40 [ 77.931530][ T4482] ? stack_trace_save+0xa6/0xf0 [ 77.936355][ T4482] ? stack_trace_snprint+0xf0/0xf0 [ 77.941443][ T4482] stack_depot_save+0x404/0x440 [ 77.946273][ T4482] kasan_save_stack+0x4b/0x60 [ 77.950925][ T4482] ? kasan_save_stack+0x35/0x60 [ 77.955750][ T4482] ? kasan_record_aux_stack+0xb8/0x100 [ 77.961184][ T4482] ? task_work_add+0x2f/0x1d0 [ 77.965835][ T4482] ? fput_many+0xde/0x1a0 [ 77.970135][ T4482] ? filp_close+0x10e/0x150 [ 77.974611][ T4482] ? __close_range+0x24f/0x510 [ 77.979344][ T4482] ? __x64_sys_close_range+0x76/0x80 [ 77.984601][ T4482] ? do_syscall_64+0x4c/0xa0 [ 77.989164][ T4482] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.995241][ T4482] kasan_record_aux_stack+0xb8/0x100 [ 78.000504][ T4482] task_work_add+0x2f/0x1d0 [ 78.004985][ T4482] fput_many+0xde/0x1a0 [ 78.009113][ T4482] filp_close+0x10e/0x150 [ 78.013415][ T4482] __close_range+0x24f/0x510 [ 78.017979][ T4482] ? pick_file+0x220/0x220 [ 78.022365][ T4482] ? vtime_user_exit+0x2c8/0x3e0 [ 78.027277][ T4482] __x64_sys_close_range+0x76/0x80 [ 78.032362][ T4482] do_syscall_64+0x4c/0xa0 [ 78.036770][ T4482] ? clear_bhb_loop+0x30/0x80 [ 78.041423][ T4482] ? clear_bhb_loop+0x30/0x80 [ 78.046111][ T4482] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.052012][ T4482] RIP: 0033:0x7f5dda21ee59 [ 78.056418][ T4482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.076002][ T4482] RSP: 002b:00007ffc69253eb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 78.084391][ T4482] RAX: ffffffffffffffda RBX: 00007ffc69253fa0 RCX: 00007f5dda21ee59 [ 78.092339][ T4482] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 78.100291][ T4482] RBP: 0000000000012de4 R08: 0000000000000001 R09: 0000000000000000 [ 78.108237][ T4482] R10: 0000001b2cd20000 R11: 0000000000000246 R12: 0000000000000000 [ 78.116186][ T4482] R13: 00007f5dda497fac R14: 00007f5dda497fa8 R15: 00007f5dda497fa0 [ 78.124140][ T4482] [ 79.064745][ T21] Bluetooth: hci0: command 0x041b tx timeout 2026/05/23 23:05:19 executed programs: 37 [ 81.144426][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 81.464608][ T1717] cfg80211: failed to load regulatory.db [ 83.224498][ T1108] Bluetooth: hci0: command 0x0419 tx timeout 2026/05/23 23:05:24 executed programs: 151