Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. 2025/04/23 21:38:28 ignoring optional flag "sandboxArg"="0" 2025/04/23 21:38:28 parsed 1 programs [ 105.357867][ T4554] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 107.200381][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.215882][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.226969][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.240093][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.248959][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.258804][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.258996][ T4604] chnl_net:caif_netlink_parms(): no params data found [ 108.321410][ T4604] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.328632][ T4604] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.337221][ T4604] device bridge_slave_0 entered promiscuous mode [ 108.346576][ T4604] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.354088][ T4604] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.362257][ T4604] device bridge_slave_1 entered promiscuous mode [ 108.387298][ T4604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.399036][ T4604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.431616][ T4604] team0: Port device team_slave_0 added [ 108.439931][ T4604] team0: Port device team_slave_1 added [ 108.463506][ T4604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.470665][ T4604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.496975][ T4604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.509735][ T4604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.516808][ T4604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.543416][ T4604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.584628][ T4604] device hsr_slave_0 entered promiscuous mode [ 108.591775][ T4604] device hsr_slave_1 entered promiscuous mode [ 109.330922][ T4604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.348930][ T4604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.363456][ T4604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.373863][ T4604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.470344][ T4604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.513630][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.525536][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.538274][ T4604] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.551228][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.561257][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.571883][ T1189] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.579060][ T1189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.619339][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.631385][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.643681][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.652450][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.659749][ T1189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.697433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.717744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.727970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.742493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.780568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.791111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.803332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.812213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.824964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.833949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.846844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.857671][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.017861][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.027523][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.063934][ T4604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.087642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.099228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.145147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.158505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.167330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.179572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.191658][ T4604] device veth0_vlan entered promiscuous mode [ 110.221294][ T4604] device veth1_vlan entered promiscuous mode [ 110.246814][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.260859][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.271176][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.281800][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.296582][ T4604] device veth0_macvtap entered promiscuous mode [ 110.350619][ T4604] device veth1_macvtap entered promiscuous mode [ 110.372448][ T4604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.390275][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.400094][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.413088][ T4604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.421927][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.434213][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.449756][ T4604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.461337][ T4604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.470904][ T4604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.481041][ T4604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/04/23 21:38:39 executed programs: 0 [ 112.002566][ T4739] chnl_net:caif_netlink_parms(): no params data found [ 112.145580][ T4739] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.156734][ T4739] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.174205][ T4739] device bridge_slave_0 entered promiscuous mode [ 112.194588][ T4739] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.210171][ T4739] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.224224][ T4739] device bridge_slave_1 entered promiscuous mode [ 112.271574][ T4739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.285377][ T4739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.331001][ T4739] team0: Port device team_slave_0 added [ 112.355330][ T4739] team0: Port device team_slave_1 added [ 112.389762][ T4739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.397085][ T4739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.423961][ T4739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.448650][ T4739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.474491][ T4739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.533459][ T4739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.594961][ T4739] device hsr_slave_0 entered promiscuous mode [ 112.602236][ T4739] device hsr_slave_1 entered promiscuous mode [ 112.613491][ T4739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.621189][ T4739] Cannot create hsr debugfs directory [ 112.759074][ T4739] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.814056][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 114.978231][ T4739] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.043211][ T4739] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.157260][ T4739] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.342045][ T4739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.353774][ T4739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.364539][ T4739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.377177][ T4739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.496612][ T4739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.531472][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.546945][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.560880][ T4739] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.606412][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.616114][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.628952][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.636105][ T4254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.647694][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.657739][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.669141][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.676379][ T4254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.706022][ T4206] device hsr_slave_0 left promiscuous mode [ 115.713496][ T4206] device hsr_slave_1 left promiscuous mode [ 115.720009][ T4206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.731188][ T4206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.741231][ T4206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.749569][ T4206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.758527][ T4206] device bridge_slave_1 left promiscuous mode [ 115.765118][ T4206] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.775575][ T4206] device bridge_slave_0 left promiscuous mode [ 115.781809][ T4206] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.798598][ T4206] device veth1_macvtap left promiscuous mode [ 115.807565][ T4206] device veth0_macvtap left promiscuous mode [ 115.814371][ T4206] device veth1_vlan left promiscuous mode [ 115.820209][ T4206] device veth0_vlan left promiscuous mode [ 115.903497][ T4243] Bluetooth: hci0: command 0x041b tx timeout [ 116.047449][ T4206] team0 (unregistering): Port device team_slave_1 removed [ 116.060248][ T4206] team0 (unregistering): Port device team_slave_0 removed [ 116.075830][ T4206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.090297][ T4206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.145688][ T4206] bond0 (unregistering): Released all slaves [ 116.190478][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.200138][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.209781][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.220353][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.230543][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.239770][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.253981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.263796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.272455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.281205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.299253][ T4739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.324203][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.332070][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.343334][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.427771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.435461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.450421][ T4739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.475986][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.491301][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.508448][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.516953][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.528025][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.536143][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.546181][ T4739] device veth0_vlan entered promiscuous mode [ 116.564052][ T4739] device veth1_vlan entered promiscuous mode [ 116.584078][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.592667][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.604040][ T4739] device veth0_macvtap entered promiscuous mode [ 116.627485][ T4739] device veth1_macvtap entered promiscuous mode [ 116.645930][ T4739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.653557][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.674485][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.682662][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.695100][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.708294][ T4739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.717406][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.728309][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.740676][ T4739] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.752076][ T4739] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.761253][ T4739] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.772328][ T4739] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.840807][ T1189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.859633][ T1189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.873431][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.881453][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.885255][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2025/04/23 21:38:44 executed programs: 2 [ 116.913549][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.983674][ T4243] Bluetooth: hci0: command 0x040f tx timeout [ 118.564740][ T5066] [ 118.567212][ T5066] ====================================================== [ 118.574220][ T5066] WARNING: possible circular locking dependency detected [ 118.581230][ T5066] 5.15.180-syzkaller #0 Not tainted [ 118.586425][ T5066] ------------------------------------------------------ [ 118.593541][ T5066] syz.0.56/5066 is trying to acquire lock: [ 118.599350][ T5066] ffff88805e7dfdb8 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 118.608333][ T5066] [ 118.608333][ T5066] but task is already holding lock: [ 118.615821][ T5066] ffff8880b8e35c68 (lock){..-.}-{2:2}, at: local_lock_acquire+0x7/0x130 [ 118.624196][ T5066] [ 118.624196][ T5066] which lock already depends on the new lock. [ 118.624196][ T5066] [ 118.634700][ T5066] [ 118.634700][ T5066] the existing dependency chain (in reverse order) is: [ 118.643710][ T5066] [ 118.643710][ T5066] -> #1 (lock){..-.}-{2:2}: [ 118.650420][ T5066] lock_acquire+0x1db/0x4f0 [ 118.655455][ T5066] local_lock_acquire+0x23/0x130 [ 118.661018][ T5066] get_page_from_freelist+0x3227/0x3d40 [ 118.667157][ T5066] __alloc_pages+0x272/0x700 [ 118.672347][ T5066] new_slab+0xbb/0x4b0 [ 118.676992][ T5066] ___slab_alloc+0x6f6/0xe10 [ 118.682110][ T5066] __kmalloc_node+0x1fa/0x390 [ 118.687557][ T5066] bpf_map_kmalloc_node+0xdb/0x160 [ 118.693198][ T5066] trie_update_elem+0x1d7/0xca0 [ 118.698586][ T5066] bpf_map_update_value+0x5d7/0x6c0 [ 118.704304][ T5066] generic_map_update_batch+0x54d/0x8b0 [ 118.710453][ T5066] bpf_map_do_batch+0x4d0/0x620 [ 118.715825][ T5066] __sys_bpf+0x55c/0x670 [ 118.720605][ T5066] __x64_sys_bpf+0x78/0x90 [ 118.725550][ T5066] do_syscall_64+0x3b/0x80 [ 118.730507][ T5066] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.736920][ T5066] [ 118.736920][ T5066] -> #0 (&trie->lock){....}-{2:2}: [ 118.744306][ T5066] validate_chain+0x1649/0x5930 [ 118.749679][ T5066] __lock_acquire+0x1295/0x1ff0 [ 118.755048][ T5066] lock_acquire+0x1db/0x4f0 [ 118.760154][ T5066] _raw_spin_lock_irqsave+0xd1/0x120 [ 118.765953][ T5066] trie_delete_elem+0x90/0x690 [ 118.771333][ T5066] bpf_prog_1c0c44170264bb34+0x3d/0xaf4 [ 118.777395][ T5066] bpf_trace_run1+0x168/0x2f0 [ 118.782611][ T5066] __bpf_trace_mm_page_free_batched+0x41/0x60 [ 118.789204][ T5066] free_unref_page_list+0x79b/0x8e0 [ 118.794925][ T5066] release_pages+0x1bb9/0x1f40 [ 118.800264][ T5066] __pagevec_lru_add+0x1584/0x18d0 [ 118.805891][ T5066] lru_cache_add+0x556/0x7e0 [ 118.811040][ T5066] handle_mm_fault+0x4ac5/0x5960 [ 118.816581][ T5066] exc_page_fault+0x271/0x700 [ 118.822398][ T5066] asm_exc_page_fault+0x22/0x30 [ 118.827779][ T5066] [ 118.827779][ T5066] other info that might help us debug this: [ 118.827779][ T5066] [ 118.838005][ T5066] Possible unsafe locking scenario: [ 118.838005][ T5066] [ 118.845548][ T5066] CPU0 CPU1 [ 118.850903][ T5066] ---- ---- [ 118.856340][ T5066] lock(lock); [ 118.859910][ T5066] lock(&trie->lock); [ 118.866622][ T5066] lock(lock); [ 118.872704][ T5066] lock(&trie->lock); [ 118.876971][ T5066] [ 118.876971][ T5066] *** DEADLOCK *** [ 118.876971][ T5066] [ 118.885109][ T5066] 5 locks held by syz.0.56/5066: [ 118.890052][ T5066] #0: ffff88802b08b228 (&mm->mmap_lock){++++}-{3:3}, at: exc_page_fault+0x181/0x700 [ 118.899628][ T5066] #1: ffff888075650318 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: handle_mm_fault+0x48bc/0x5960 [ 118.909728][ T5066] #2: ffff8880b8e354e0 (lock#5){+.+.}-{2:2}, at: local_lock_acquire+0xd/0x170 [ 118.918980][ T5066] #3: ffff8880b8e35c68 (lock){..-.}-{2:2}, at: local_lock_acquire+0x7/0x130 [ 118.928037][ T5066] #4: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 118.937693][ T5066] [ 118.937693][ T5066] stack backtrace: [ 118.943585][ T5066] CPU: 0 PID: 5066 Comm: syz.0.56 Not tainted 5.15.180-syzkaller #0 [ 118.951666][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.961720][ T5066] Call Trace: [ 118.965007][ T5066] [ 118.967932][ T5066] dump_stack_lvl+0x1e3/0x2d0 [ 118.972701][ T5066] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 118.978345][ T5066] ? print_circular_bug+0x12b/0x1a0 [ 118.983539][ T5066] check_noncircular+0x2f8/0x3b0 [ 118.988583][ T5066] ? add_chain_block+0x850/0x850 [ 118.993522][ T5066] ? lockdep_lock+0x11f/0x2a0 [ 118.998204][ T5066] ? validate_chain+0x112/0x5930 [ 119.003333][ T5066] validate_chain+0x1649/0x5930 [ 119.008225][ T5066] ? reacquire_held_locks+0x660/0x660 [ 119.013702][ T5066] ? reacquire_held_locks+0x660/0x660 [ 119.019081][ T5066] ? look_up_lock_class+0x77/0x120 [ 119.024307][ T5066] ? register_lock_class+0x100/0x9a0 [ 119.029620][ T5066] ? validate_chain+0x112/0x5930 [ 119.034605][ T5066] ? is_dynamic_key+0x1f0/0x1f0 [ 119.039663][ T5066] ? mark_lock+0x98/0x340 [ 119.044020][ T5066] __lock_acquire+0x1295/0x1ff0 [ 119.048907][ T5066] lock_acquire+0x1db/0x4f0 [ 119.053498][ T5066] ? trie_delete_elem+0x90/0x690 [ 119.058452][ T5066] ? mark_lock+0x98/0x340 [ 119.062877][ T5066] ? read_lock_is_recursive+0x10/0x10 [ 119.068283][ T5066] ? __lock_acquire+0x1295/0x1ff0 [ 119.073329][ T5066] _raw_spin_lock_irqsave+0xd1/0x120 [ 119.078650][ T5066] ? trie_delete_elem+0x90/0x690 [ 119.083595][ T5066] ? _raw_spin_lock+0x40/0x40 [ 119.088370][ T5066] ? read_lock_is_recursive+0x10/0x10 [ 119.093818][ T5066] trie_delete_elem+0x90/0x690 [ 119.098619][ T5066] ? __cant_sleep+0x270/0x270 [ 119.103483][ T5066] ? read_lock_is_recursive+0x10/0x10 [ 119.108866][ T5066] bpf_prog_1c0c44170264bb34+0x3d/0xaf4 [ 119.114420][ T5066] bpf_trace_run1+0x168/0x2f0 [ 119.119116][ T5066] ? bpf_put_raw_tracepoint+0x60/0x60 [ 119.124503][ T5066] __bpf_trace_mm_page_free_batched+0x41/0x60 [ 119.130591][ T5066] free_unref_page_list+0x79b/0x8e0 [ 119.135828][ T5066] ? uncharge_page+0x1f7/0x400 [ 119.140693][ T5066] ? free_unref_page_commit+0x500/0x500 [ 119.146343][ T5066] ? __mem_cgroup_uncharge_list+0xf8/0x150 [ 119.152148][ T5066] ? uncharge_batch+0x490/0x490 [ 119.156996][ T5066] ? _raw_spin_unlock+0x40/0x40 [ 119.161951][ T5066] ? __mod_zone_page_state+0x8a/0xc0 [ 119.167344][ T5066] release_pages+0x1bb9/0x1f40 [ 119.172146][ T5066] ? lru_cache_disable+0x30/0x30 [ 119.177113][ T5066] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 119.183017][ T5066] ? _raw_spin_unlock+0x40/0x40 [ 119.187875][ T5066] __pagevec_lru_add+0x1584/0x18d0 [ 119.192987][ T5066] ? lru_cache_add+0x7e0/0x7e0 [ 119.197918][ T5066] ? __mod_lruvec_page_state+0x218/0x340 [ 119.203555][ T5066] lru_cache_add+0x556/0x7e0 [ 119.208237][ T5066] handle_mm_fault+0x4ac5/0x5960 [ 119.213179][ T5066] ? numa_migrate_prep+0x1a0/0x1a0 [ 119.218306][ T5066] ? vmacache_find+0x4ed/0x590 [ 119.223073][ T5066] ? vmacache_update+0x9f/0xf0 [ 119.227878][ T5066] exc_page_fault+0x271/0x700 [ 119.232740][ T5066] asm_exc_page_fault+0x22/0x30 [ 119.237612][ T5066] RIP: 0033:0x7fc38238b1bc [ 119.242023][ T5066] Code: 7c 10 8a 0e 74 0a 0f b7 74 16 fe 66 89 74 17 fe 88 0f c3 8b 4c 16 fc 8b 36 89 4c 17 fc 89 37 c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 fa 7f 07 c5 fa 7f 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b [ 119.261639][ T5066] RSP: 002b:00007ffe0dec6718 EFLAGS: 00010202 [ 119.267706][ T5066] RAX: 0000000020001e80 RBX: 0000000000000004 RCX: ffffffffffffffee [ 119.275703][ T5066] RDX: 0000000000000011 RSI: 00007fc381e45301 RDI: 0000000020001e80 [ 119.283692][ T5066] RBP: 00007fc38257ca80 R08: 00007fc382245000 R09: 0000000000000022 [ 119.291708][ T5066] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000001d125 [ 119.299782][ T5066] R13: 00007ffe0dec6820 R14: 0000000000000226 R15: fffffffffffffffe [ 119.307987][ T5066] [ 120.052992][ T4248] Bluetooth: hci0: command 0x0419 tx timeout 2025/04/23 21:38:49 executed programs: 167 2025/04/23 21:38:54 executed programs: 395