Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. 2026/05/04 15:07:43 parsed 1 programs [ 86.383221][ T4289] cgroup: Unknown subsys name 'net' [ 86.492203][ T4289] cgroup: Unknown subsys name 'rlimit' [ 86.767425][ T26] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 88.234909][ T4289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 89.646662][ T4298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.654694][ T4298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.665938][ T4298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.674563][ T4298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.682664][ T4298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.690159][ T4298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.062054][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 91.122786][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.130651][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.139245][ T4326] device bridge_slave_0 entered promiscuous mode [ 91.154498][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.161775][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.169942][ T4326] device bridge_slave_1 entered promiscuous mode [ 91.200432][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.211593][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.235559][ T4326] team0: Port device team_slave_0 added [ 91.252121][ T4326] team0: Port device team_slave_1 added [ 91.271684][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.278866][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.304916][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.317930][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.324906][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.350889][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.387787][ T4326] device hsr_slave_0 entered promiscuous mode [ 91.394995][ T4326] device hsr_slave_1 entered promiscuous mode [ 91.513422][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.524177][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.533751][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.543638][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.574593][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.581869][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.590174][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.597459][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.667361][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.682967][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.694740][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.704279][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.713313][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 91.728517][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.741374][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.750035][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.757207][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.789825][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.798875][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.806059][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.827541][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.836729][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.850001][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.860959][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.873598][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.889437][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.083815][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.092388][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.106793][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.133760][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.143317][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.165519][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.174397][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.183694][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.191765][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.204866][ T4326] device veth0_vlan entered promiscuous mode [ 92.217779][ T4326] device veth1_vlan entered promiscuous mode [ 92.242373][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.250679][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.259234][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.268488][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.281188][ T4326] device veth0_macvtap entered promiscuous mode [ 92.294770][ T4326] device veth1_macvtap entered promiscuous mode [ 92.314187][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.323575][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.334283][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.342488][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.351856][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.364818][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.382804][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.392430][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.402764][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.412497][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.424982][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.438675][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.578789][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.645205][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.657441][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.679344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.692601][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.701770][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.710124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/05/04 15:07:54 executed programs: 0 [ 94.662021][ T4298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.671959][ T4298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.680080][ T4298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.689031][ T4298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.697050][ T4298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.704354][ T4298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.757459][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.857390][ T4377] chnl_net:caif_netlink_parms(): no params data found [ 94.908706][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.916043][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.923994][ T4377] device bridge_slave_0 entered promiscuous mode [ 94.933274][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.940630][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.948836][ T4377] device bridge_slave_1 entered promiscuous mode [ 94.971270][ T4377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.982797][ T4377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.009398][ T4377] team0: Port device team_slave_0 added [ 95.018029][ T4377] team0: Port device team_slave_1 added [ 95.037146][ T4377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.044134][ T4377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.070661][ T4377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.083379][ T4377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.090697][ T4377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.116839][ T4377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.150665][ T4377] device hsr_slave_0 entered promiscuous mode [ 95.157516][ T4377] device hsr_slave_1 entered promiscuous mode [ 95.164304][ T4377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.172521][ T4377] Cannot create hsr debugfs directory [ 96.766805][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 97.197753][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.259764][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.093645][ T4377] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.104233][ T4377] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.117025][ T4377] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.146620][ T4377] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.254530][ T4377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.274250][ T9] device hsr_slave_0 left promiscuous mode [ 98.284956][ T9] device hsr_slave_1 left promiscuous mode [ 98.294095][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.304084][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.314841][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.324947][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.333686][ T9] device bridge_slave_1 left promiscuous mode [ 98.343704][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.360122][ T9] device bridge_slave_0 left promiscuous mode [ 98.366678][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.398952][ T9] device veth1_macvtap left promiscuous mode [ 98.405395][ T9] device veth0_macvtap left promiscuous mode [ 98.411916][ T9] device veth1_vlan left promiscuous mode [ 98.420381][ T9] device veth0_vlan left promiscuous mode [ 98.819796][ T9] team0 (unregistering): Port device team_slave_1 removed [ 98.845792][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 98.854094][ T9] team0 (unregistering): Port device team_slave_0 removed [ 98.883272][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.913336][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.111409][ T9] bond0 (unregistering): Released all slaves [ 99.221187][ T4377] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.229723][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.237803][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.259136][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.268849][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.277469][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.284555][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.292821][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.302252][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.310921][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.318078][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.327083][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.347174][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.356905][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.377440][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.389973][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.399108][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.411377][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.420737][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.451374][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.460287][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.469246][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.478222][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.489570][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.709461][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.718619][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.733812][ T4377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.762951][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.772463][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.815033][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.825188][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.839038][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.850789][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.861539][ T4377] device veth0_vlan entered promiscuous mode [ 99.874576][ T4377] device veth1_vlan entered promiscuous mode [ 99.914601][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.926428][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.934723][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.943731][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.955553][ T4377] device veth0_macvtap entered promiscuous mode [ 99.972850][ T4377] device veth1_macvtap entered promiscuous mode [ 100.000489][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.008523][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.024773][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.033984][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.044607][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.058018][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.065362][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.074601][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.090480][ T4377] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.100290][ T4377] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.109166][ T4377] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.118039][ T4377] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.173877][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.183434][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.198471][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.219647][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.227577][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.235409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.285579][ C0] [ 100.285585][ C0] ================================ [ 100.285589][ C0] WARNING: inconsistent lock state [ 100.285600][ C0] syzkaller #0 Not tainted [ 100.285606][ C0] -------------------------------- [ 100.285610][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 100.285616][ C0] syz.0.17/4431 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 100.285669][ C0] ffff88801fe61a38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 100.285743][ C0] {INITIAL USE} state was registered at: [ 100.285748][ C0] lock_acquire+0x1bb/0x4a0 [ 100.285767][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 100.285783][ C0] trie_delete_elem+0x90/0x690 [ 100.285801][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 100.285817][ C0] bpf_overflow_handler+0x522/0x7c0 [ 100.285833][ C0] __perf_event_overflow+0x448/0x610 [ 100.285853][ C0] perf_swevent_event+0x315/0x570 [ 100.285873][ C0] perf_bp_event+0x312/0x3f0 [ 100.285892][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 100.285912][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 100.285927][ C0] notify_die+0x141/0x1a0 [ 100.285940][ C0] notify_debug+0x20/0x30 [ 100.285956][ C0] noist_exc_debug+0x73/0x120 [ 100.285967][ C0] asm_exc_debug+0x2f/0x40 [ 100.285983][ C0] irq event stamp: 2380 [ 100.285987][ C0] hardirqs last enabled at (2379): [] _raw_spin_unlock_irq+0x1f/0x40 [ 100.286006][ C0] hardirqs last disabled at (2380): [] exc_debug+0x6e/0x130 [ 100.286021][ C0] softirqs last enabled at (2108): [] bpf_prog_load+0x1127/0x1560 [ 100.286044][ C0] softirqs last disabled at (2106): [] bpf_ksym_add+0x29/0x340 [ 100.286059][ C0] [ 100.286059][ C0] other info that might help us debug this: [ 100.286063][ C0] Possible unsafe locking scenario: [ 100.286063][ C0] [ 100.286065][ C0] CPU0 [ 100.286068][ C0] ---- [ 100.286070][ C0] lock(&trie->lock); [ 100.286077][ C0] [ 100.286080][ C0] lock(&trie->lock); [ 100.286087][ C0] [ 100.286087][ C0] *** DEADLOCK *** [ 100.286087][ C0] [ 100.286090][ C0] 1 lock held by syz.0.17/4431: [ 100.286097][ C0] #0: ffff88807dc45068 (&pipe->mutex/1){+.+.}-{3:3}, at: pipe_write+0x1ab/0x1b20 [ 100.286146][ C0] [ 100.286146][ C0] stack backtrace: [ 100.286157][ C0] CPU: 0 PID: 4431 Comm: syz.0.17 Not tainted syzkaller #0 [ 100.286170][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.286182][ C0] Call Trace: [ 100.286189][ C0] <#DB> [ 100.286194][ C0] dump_stack_lvl+0x188/0x24e [ 100.286218][ C0] ? show_regs_print_info+0x12/0x12 [ 100.286241][ C0] ? print_usage_bug+0x42a/0x690 [ 100.286262][ C0] ? verify_lock_unused+0x18/0x140 [ 100.286283][ C0] lock_acquire+0x2df/0x4a0 [ 100.286304][ C0] ? trie_delete_elem+0x90/0x690 [ 100.286325][ C0] ? read_lock_is_recursive+0x10/0x10 [ 100.286349][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 100.286364][ C0] ? trie_delete_elem+0x90/0x690 [ 100.286384][ C0] ? _raw_spin_lock+0x40/0x40 [ 100.286398][ C0] ? lock_acquire+0x2df/0x4a0 [ 100.286420][ C0] trie_delete_elem+0x90/0x690 [ 100.286440][ C0] ? __cant_sleep+0x220/0x220 [ 100.286456][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 100.286470][ C0] bpf_overflow_handler+0x522/0x7c0 [ 100.286487][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 100.286503][ C0] ? perf_swevent_overflow+0x230/0x230 [ 100.286521][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 100.286544][ C0] __perf_event_overflow+0x448/0x610 [ 100.286568][ C0] perf_swevent_event+0x315/0x570 [ 100.286591][ C0] ? perf_tp_event+0xc30/0xc30 [ 100.286616][ C0] perf_bp_event+0x312/0x3f0 [ 100.286639][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 100.286671][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 100.286688][ C0] ? read_lock_is_recursive+0x10/0x10 [ 100.286710][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 100.286733][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 100.286749][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 100.286766][ C0] notify_die+0x141/0x1a0 [ 100.286782][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 100.286803][ C0] notify_debug+0x20/0x30 [ 100.286820][ C0] exc_debug+0xd9/0x130 [ 100.286833][ C0] asm_exc_debug+0x1a/0x40 [ 100.286850][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 100.286873][ C0] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 100.286890][ C0] RSP: 0018:ffffc90003477998 EFLAGS: 00050206 [ 100.286901][ C0] RAX: ffffffff840f2901 RBX: ffff88807a5d4000 RCX: 0000000000000dc0 [ 100.286911][ C0] RDX: 0000000000001000 RSI: 0000200000000340 RDI: ffff88807a5d4240 [ 100.286921][ C0] RBP: ffffc90003477ad8 R08: ffff88807a5d4fff R09: 1ffff1100f4ba9ff [ 100.286931][ C0] R10: dffffc0000000000 R11: ffffed100f4baa00 R12: 1ffff9200068efb7 [ 100.286942][ C0] R13: 0000200000000100 R14: 0000000000001000 R15: 00007fffffffe000 [ 100.286954][ C0] ? _copy_from_iter+0x251/0x1130 [ 100.286970][ C0] [ 100.286973][ C0] [ 100.286977][ C0] _copy_from_iter+0x2a9/0x1130 [ 100.286993][ C0] ? copyout_mc+0x110/0x110 [ 100.287015][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 100.287036][ C0] ? lock_chain_count+0x20/0x20 [ 100.287054][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 100.287069][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 100.287085][ C0] ? page_copy_sane+0x4e/0x390 [ 100.287098][ C0] copy_page_from_iter+0x77/0x100 [ 100.287112][ C0] pipe_write+0x87f/0x1b20 [ 100.287146][ C0] ? pipe_read+0x1260/0x1260 [ 100.287167][ C0] ? end_current_label_crit_section+0x14b/0x170 [ 100.287184][ C0] ? common_file_perm+0x171/0x1c0 [ 100.287201][ C0] vfs_write+0x4b1/0xa30 [ 100.287224][ C0] ? file_end_write+0x250/0x250 [ 100.287245][ C0] ? __ia32_sys_get_robust_list+0x100/0x100 [ 100.287263][ C0] ? __fdget_pos+0x1d4/0x360 [ 100.287285][ C0] ksys_write+0x14c/0x250 [ 100.287306][ C0] ? __ia32_sys_read+0x80/0x80 [ 100.287328][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 100.287344][ C0] do_syscall_64+0x4c/0xa0 [ 100.287364][ C0] ? clear_bhb_loop+0x60/0xb0 [ 100.287382][ C0] ? clear_bhb_loop+0x60/0xb0 [ 100.287400][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.287418][ C0] RIP: 0033:0x7f366319cdd9 [ 100.287428][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.287439][ C0] RSP: 002b:00007fffee1e1428 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.287452][ C0] RAX: ffffffffffffffda RBX: 00007f3663415fa0 RCX: 00007f366319cdd9 [ 100.287462][ C0] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000000 [ 100.287470][ C0] RBP: 00007f3663232d69 R08: 0000000000000000 R09: 0000000000000000 [ 100.287478][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.287486][ C0] R13: 00007f3663415fac R14: 00007f3663415fa0 R15: 00007f3663415fa0 [ 100.287501][ C0] [ 100.979057][ T4298] Bluetooth: hci0: command 0x040f tx timeout