[ 91.801857][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.816592][ T154] device veth1_macvtap left promiscuous mode [ 91.823264][ T154] device veth0_macvtap left promiscuous mode [ 91.831213][ T154] device veth1_vlan left promiscuous mode [ 91.837053][ T154] device veth0_vlan left promiscuous mode [ 92.066258][ T154] team0 (unregistering): Port device team_slave_1 removed [ 92.083370][ T154] team0 (unregistering): Port device team_slave_0 removed [ 92.100191][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.117482][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.202260][ T154] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. 2026/06/24 10:07:15 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 105.330491][ T4501] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 108.354141][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.370033][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.382097][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.404854][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.413511][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.422342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.836101][ T4686] chnl_net:caif_netlink_parms(): no params data found [ 109.879293][ T4686] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.886442][ T4686] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.894657][ T4686] device bridge_slave_0 entered promiscuous mode [ 109.903016][ T4686] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.910311][ T4686] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.918618][ T4686] device bridge_slave_1 entered promiscuous mode [ 109.939617][ T4686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.950666][ T4686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.973006][ T4686] team0: Port device team_slave_0 added [ 109.980593][ T4686] team0: Port device team_slave_1 added [ 109.997664][ T4686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.004787][ T4686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.031004][ T4686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.042924][ T4686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.049974][ T4686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.076006][ T4686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.108253][ T4686] device hsr_slave_0 entered promiscuous mode [ 110.115546][ T4686] device hsr_slave_1 entered promiscuous mode [ 110.782456][ T4686] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.792414][ T4686] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.833644][ T4686] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.843462][ T4686] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.868406][ T4686] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.875532][ T4686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.883069][ T4686] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.890209][ T4686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.901798][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.910113][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.990473][ T4686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.030692][ T4686] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.037667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.047640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.069292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.079759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.088572][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.095678][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.107029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.119857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.128861][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.136046][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.145099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.161503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.176621][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.187147][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.198412][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.218031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.227372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.246080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.263985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.286388][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.295920][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.310179][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.494352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.508685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.522068][ T4686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.545433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.555402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.576011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.585098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.597336][ T4686] device veth0_vlan entered promiscuous mode [ 111.605314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.617470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.636270][ T4686] device veth1_vlan entered promiscuous mode [ 111.663115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 111.672874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 111.682003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.691041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.704449][ T4686] device veth0_macvtap entered promiscuous mode [ 111.715526][ T4686] device veth1_macvtap entered promiscuous mode [ 111.744160][ T4686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.768708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.777575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.792424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.809703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.832629][ T4686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.840547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.868149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.879519][ T4686] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.888784][ T4686] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.897500][ T4686] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.907079][ T4686] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/06/24 10:07:27 executed programs: 0 [ 113.824198][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.886939][ T4805] chnl_net:caif_netlink_parms(): no params data found [ 113.952394][ T4805] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.961957][ T4805] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.970530][ T4805] device bridge_slave_0 entered promiscuous mode [ 113.982338][ T4805] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.989975][ T4805] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.000981][ T4805] device bridge_slave_1 entered promiscuous mode [ 114.028657][ T4805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.042733][ T4805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.073364][ T4805] team0: Port device team_slave_0 added [ 114.085053][ T4805] team0: Port device team_slave_1 added [ 114.109910][ T4805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.116938][ T4805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.143359][ T4805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.155842][ T4805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.163228][ T4805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.189949][ T4805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.226031][ T4805] device hsr_slave_0 entered promiscuous mode [ 114.233418][ T4805] device hsr_slave_1 entered promiscuous mode [ 114.240665][ T4805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.248603][ T4805] Cannot create hsr debugfs directory [ 115.748437][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 116.414534][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.465033][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.506651][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.384060][ T4805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.413051][ T4805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.423810][ T4805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.436028][ T4805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.537035][ T4805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.553239][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.561873][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.576368][ T4805] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.592204][ T144] device hsr_slave_0 left promiscuous mode [ 117.599373][ T144] device hsr_slave_1 left promiscuous mode [ 117.605971][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.614803][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.622909][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.630994][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.639276][ T144] device bridge_slave_1 left promiscuous mode [ 117.645564][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.654828][ T144] device bridge_slave_0 left promiscuous mode [ 117.661649][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.676287][ T144] device veth1_macvtap left promiscuous mode [ 117.683306][ T144] device veth0_macvtap left promiscuous mode [ 117.689844][ T144] device veth1_vlan left promiscuous mode [ 117.695697][ T144] device veth0_vlan left promiscuous mode [ 117.828059][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 117.865200][ T144] team0 (unregistering): Port device team_slave_1 removed [ 117.879733][ T144] team0 (unregistering): Port device team_slave_0 removed [ 117.894388][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.912381][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.970277][ T144] bond0 (unregistering): Released all slaves [ 118.027088][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.035873][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.044528][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.051638][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.060048][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.069178][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.077605][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.084894][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.093635][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.102533][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.111889][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.123375][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.135839][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.145077][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.174765][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.194822][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.204584][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.215930][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.224784][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.237095][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.249880][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.460091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.467640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.494309][ T4805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.540357][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.560572][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.590566][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.609356][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.629395][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.648161][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.661142][ T4805] device veth0_vlan entered promiscuous mode [ 118.685064][ T4805] device veth1_vlan entered promiscuous mode [ 118.739549][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.748715][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.769520][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.799722][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.810938][ T4805] device veth0_macvtap entered promiscuous mode [ 118.833054][ T4805] device veth1_macvtap entered promiscuous mode [ 118.870365][ T4805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.888201][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.900038][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.919979][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.939932][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.971633][ T4805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.982825][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.000373][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.022209][ T4805] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.039234][ T4805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.058958][ T4805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.079212][ T4805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.206866][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.226535][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.249691][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.275611][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.293699][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.308291][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/06/24 10:07:33 executed programs: 2 [ 119.435474][ T5066] [ 119.437885][ T5066] ====================================================== [ 119.444925][ T5066] WARNING: possible circular locking dependency detected [ 119.451969][ T5066] syzkaller #0 Not tainted [ 119.456398][ T5066] ------------------------------------------------------ [ 119.463889][ T5066] syz.0.17/5066 is trying to acquire lock: [ 119.469716][ T5066] ffff88801dcd1a38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x8f/0x690 [ 119.478651][ T5066] [ 119.478651][ T5066] but task is already holding lock: [ 119.486042][ T5066] ffffffff9657ed38 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x63/0x380 [ 119.496092][ T5066] [ 119.496092][ T5066] which lock already depends on the new lock. [ 119.496092][ T5066] [ 119.506525][ T5066] [ 119.506525][ T5066] the existing dependency chain (in reverse order) is: [ 119.515555][ T5066] [ 119.515555][ T5066] -> #1 (&obj_hash[i].lock){-.-.}-{2:2}: [ 119.523425][ T5066] _raw_spin_lock_irqsave+0xb0/0x100 [ 119.529257][ T5066] debug_object_activate+0x63/0x4e0 [ 119.535005][ T5066] kvfree_call_rcu+0xb0/0x7f0 [ 119.540226][ T5066] trie_update_elem+0x948/0xd50 [ 119.545632][ T5066] bpf_map_update_value+0x57c/0x650 [ 119.551379][ T5066] generic_map_update_batch+0x52c/0x7d0 [ 119.557481][ T5066] bpf_map_do_batch+0x475/0x5f0 [ 119.562884][ T5066] __sys_bpf+0x671/0x6f0 [ 119.567677][ T5066] __x64_sys_bpf+0x78/0x90 [ 119.572658][ T5066] do_syscall_64+0x4c/0xa0 [ 119.577633][ T5066] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.584086][ T5066] [ 119.584086][ T5066] -> #0 (&trie->lock){....}-{2:2}: [ 119.591420][ T5066] __lock_acquire+0x2c66/0x7b50 [ 119.596828][ T5066] lock_acquire+0x19e/0x400 [ 119.601887][ T5066] _raw_spin_lock_irqsave+0xb0/0x100 [ 119.607738][ T5066] trie_delete_elem+0x8f/0x690 [ 119.613056][ T5066] bpf_prog_2c29ac5cdc6b1842+0x3a/0xb6c [ 119.619233][ T5066] trace_call_bpf+0x2b1/0x5b0 [ 119.624468][ T5066] perf_trace_run_bpf_submit+0x79/0x1c0 [ 119.630580][ T5066] perf_trace_lock+0x301/0x390 [ 119.635916][ T5066] lock_release+0x84a/0x8a0 [ 119.640981][ T5066] _raw_spin_unlock_irqrestore+0x6d/0x120 [ 119.647338][ T5066] debug_deactivate+0x1d/0x1c0 [ 119.652748][ T5066] hrtimer_try_to_cancel+0x302/0x420 [ 119.658595][ T5066] hrtimer_cancel+0x12/0x50 [ 119.663666][ T5066] futex_wait+0x54d/0x680 [ 119.668724][ T5066] do_futex+0xdc2/0x12b0 [ 119.673535][ T5066] __se_sys_futex+0x389/0x420 [ 119.678774][ T5066] do_syscall_64+0x4c/0xa0 [ 119.683751][ T5066] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.690206][ T5066] [ 119.690206][ T5066] other info that might help us debug this: [ 119.690206][ T5066] [ 119.700475][ T5066] Possible unsafe locking scenario: [ 119.700475][ T5066] [ 119.707958][ T5066] CPU0 CPU1 [ 119.713351][ T5066] ---- ---- [ 119.718742][ T5066] lock(&obj_hash[i].lock); [ 119.723403][ T5066] lock(&trie->lock); [ 119.730019][ T5066] lock(&obj_hash[i].lock); [ 119.737254][ T5066] lock(&trie->lock); [ 119.741368][ T5066] [ 119.741368][ T5066] *** DEADLOCK *** [ 119.741368][ T5066] [ 119.749539][ T5066] 3 locks held by syz.0.17/5066: [ 119.754506][ T5066] #0: ffff8880b902a258 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_try_to_cancel+0x22f/0x420 [ 119.764998][ T5066] #1: ffffffff9657ed38 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x63/0x380 [ 119.775475][ T5066] #2: ffffffff8c31ef20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 119.784824][ T5066] [ 119.784824][ T5066] stack backtrace: [ 119.790743][ T5066] CPU: 0 PID: 5066 Comm: syz.0.17 Not tainted syzkaller #0 [ 119.797976][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 119.808061][ T5066] Call Trace: [ 119.811397][ T5066] [ 119.814353][ T5066] dump_stack_lvl+0x188/0x250 [ 119.819072][ T5066] ? load_image+0x410/0x410 [ 119.823606][ T5066] ? show_regs_print_info+0x20/0x20 [ 119.828848][ T5066] ? print_circular_bug+0x12b/0x1a0 [ 119.834084][ T5066] check_noncircular+0x296/0x330 [ 119.839093][ T5066] ? add_chain_block+0x9b0/0x9b0 [ 119.844145][ T5066] ? lockdep_lock+0xf1/0x1f0 [ 119.848823][ T5066] ? mark_lock+0x94/0x320 [ 119.853278][ T5066] ? _find_first_zero_bit+0xd1/0xf0 [ 119.858508][ T5066] __lock_acquire+0x2c66/0x7b50 [ 119.863403][ T5066] ? mark_lock+0x94/0x320 [ 119.867755][ T5066] ? verify_lock_unused+0x140/0x140 [ 119.873501][ T5066] ? __lock_acquire+0x1305/0x7b50 [ 119.878566][ T5066] ? longest_prefix_match+0x350/0x660 [ 119.883977][ T5066] lock_acquire+0x19e/0x400 [ 119.888511][ T5066] ? trie_delete_elem+0x8f/0x690 [ 119.893486][ T5066] ? migrate_enable+0x13e/0x200 [ 119.898375][ T5066] ? read_lock_is_recursive+0x10/0x10 [ 119.903786][ T5066] ? trace_call_bpf+0x515/0x5b0 [ 119.908671][ T5066] _raw_spin_lock_irqsave+0xb0/0x100 [ 119.913994][ T5066] ? trie_delete_elem+0x8f/0x690 [ 119.918959][ T5066] ? _raw_spin_lock+0x40/0x40 [ 119.923673][ T5066] trie_delete_elem+0x8f/0x690 [ 119.928470][ T5066] bpf_prog_2c29ac5cdc6b1842+0x3a/0xb6c [ 119.934041][ T5066] trace_call_bpf+0x2b1/0x5b0 [ 119.938778][ T5066] ? __lock_acquire+0x13dc/0x7b50 [ 119.940547][ T4679] Bluetooth: hci0: command 0x040f tx timeout [ 119.943839][ T5066] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 119.955811][ T5066] ? verify_lock_unused+0x140/0x140 [ 119.961051][ T5066] perf_trace_run_bpf_submit+0x79/0x1c0 [ 119.966645][ T5066] perf_trace_lock+0x301/0x390 [ 119.971476][ T5066] ? trace_event_raw_event_lock+0x250/0x250 [ 119.977417][ T5066] lock_release+0x84a/0x8a0 [ 119.981964][ T5066] ? debug_deactivate+0x1d/0x1c0 [ 119.986936][ T5066] ? __lock_acquire+0x7b50/0x7b50 [ 119.991995][ T5066] ? do_raw_spin_lock+0x128/0x2f0 [ 119.997064][ T5066] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 120.002562][ T5066] ? _raw_spin_lock+0x40/0x40 [ 120.007272][ T5066] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 120.012764][ T5066] _raw_spin_unlock_irqrestore+0x6d/0x120 [ 120.018517][ T5066] ? _raw_spin_unlock+0x40/0x40 [ 120.023403][ T5066] ? debug_object_deactivate+0x63/0x380 [ 120.028980][ T5066] debug_deactivate+0x1d/0x1c0 [ 120.033771][ T5066] hrtimer_try_to_cancel+0x302/0x420 [ 120.039095][ T5066] hrtimer_cancel+0x12/0x50 [ 120.043634][ T5066] futex_wait+0x54d/0x680 [ 120.047996][ T5066] ? verify_lock_unused+0x140/0x140 [ 120.053235][ T5066] ? do_futex+0x12b0/0x12b0 [ 120.057767][ T5066] ? perf_trace_lock+0xe4/0x390 [ 120.062646][ T5066] ? __remove_hrtimer+0x3a0/0x3a0 [ 120.067695][ T5066] ? trace_event_raw_event_lock+0x250/0x250 [ 120.073716][ T5066] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.079756][ T5066] do_futex+0xdc2/0x12b0 [ 120.084030][ T5066] ? __lock_acquire+0x7b50/0x7b50 [ 120.089088][ T5066] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 120.095396][ T5066] ? lockdep_hardirqs_on+0x94/0x140 [ 120.100624][ T5066] ? ktime_get+0x7b/0x270 [ 120.104977][ T5066] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 120.111263][ T5066] ? ktime_get_real_ts64+0x440/0x440 [ 120.116578][ T5066] ? futex_exit_release+0x1c0/0x1c0 [ 120.121811][ T5066] ? get_timespec64+0x116/0x1b0 [ 120.126707][ T5066] ? timespec64_add_safe+0x1f0/0x1f0 [ 120.132028][ T5066] ? ktime_get+0x247/0x270 [ 120.136484][ T5066] __se_sys_futex+0x389/0x420 [ 120.141209][ T5066] ? __x64_sys_futex+0xf0/0xf0 [ 120.146017][ T5066] ? __x64_sys_futex+0x1d/0xf0 [ 120.150820][ T5066] do_syscall_64+0x4c/0xa0 [ 120.155274][ T5066] ? clear_bhb_loop+0x30/0x80 [ 120.159989][ T5066] ? clear_bhb_loop+0x30/0x80 [ 120.164697][ T5066] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.170637][ T5066] RIP: 0033:0x7f7243777e59 [ 120.175081][ T5066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.194885][ T5066] RSP: 002b:00007ffedb512038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.203340][ T5066] RAX: ffffffffffffffda RBX: 000000000001d257 RCX: 00007f7243777e59 [ 120.211336][ T5066] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f72439f0fac [ 120.219340][ T5066] RBP: 0000000000000032 R08: 001644b5638a481e R09: 0000000000000000 [ 120.227340][ T5066] R10: 00007ffedb512140 R11: 0000000000000246 R12: 00007ffedb512160 [ 120.235332][ T5066] R13: 00007f72439f0fac R14: 000000000001d289 R15: 00007ffedb512140 [ 120.243350][ T5066] [ 121.997858][ T4675] Bluetooth: hci0: command 0x0419 tx timeout 2026/06/24 10:07:38 executed programs: 82 2026/06/24 10:07:43 executed programs: 183