Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. 2025/07/23 05:19:58 ignoring optional flag "sandboxArg"="0" 2025/07/23 05:19:59 parsed 1 programs syzkaller login: [ 62.983529][ T4189] cgroup: Unknown subsys name 'net' [ 63.097536][ T4189] cgroup: Unknown subsys name 'rlimit' [ 64.557046][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.089786][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.105213][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.124619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.142281][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.151174][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.160609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.398898][ T4259] chnl_net:caif_netlink_parms(): no params data found [ 68.445391][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.453369][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.461413][ T4259] device bridge_slave_0 entered promiscuous mode [ 68.470568][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.477798][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.485880][ T4259] device bridge_slave_1 entered promiscuous mode [ 68.508892][ T4259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.520782][ T4259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.544901][ T4259] team0: Port device team_slave_0 added [ 68.552699][ T4259] team0: Port device team_slave_1 added [ 68.572063][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.579049][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.605151][ T4259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.618474][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.625551][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.651742][ T4259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.683812][ T4259] device hsr_slave_0 entered promiscuous mode [ 68.690858][ T4259] device hsr_slave_1 entered promiscuous mode [ 68.804999][ T4259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.815810][ T4259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.826261][ T4259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.836394][ T4259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.879779][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.887080][ T4259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.895074][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.902176][ T4259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.969658][ T4259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.001509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.011750][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.020502][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.034582][ T4259] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.064300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.073077][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.080258][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.087923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.097000][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.104168][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.125544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.134560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.148575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.184775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.198941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.212056][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.327338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.336020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.363753][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.381891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.391493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.427043][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.436153][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.445045][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.453198][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.466247][ T4259] device veth0_vlan entered promiscuous mode [ 69.489865][ T4259] device veth1_vlan entered promiscuous mode [ 69.518975][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.527572][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.535946][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.546188][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.558564][ T4259] device veth0_macvtap entered promiscuous mode [ 69.596856][ T4259] device veth1_macvtap entered promiscuous mode [ 69.614661][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.623572][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.632063][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.639974][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.648864][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.663747][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.671517][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.681432][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.693894][ T4259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.703431][ T4259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.712724][ T4259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.721753][ T4259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/07/23 05:20:09 executed programs: 0 [ 70.578548][ T4291] chnl_net:caif_netlink_parms(): no params data found [ 70.643860][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.653283][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.661922][ T4291] device bridge_slave_0 entered promiscuous mode [ 70.674172][ T4291] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.681392][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.689540][ T4291] device bridge_slave_1 entered promiscuous mode [ 70.723466][ T4291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.737405][ T4291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.782682][ T4291] team0: Port device team_slave_0 added [ 70.794253][ T4291] team0: Port device team_slave_1 added [ 70.817793][ T4291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.826204][ T4291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.855984][ T4291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.869051][ T4291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.878651][ T4291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.904962][ T4291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.944412][ T4291] device hsr_slave_0 entered promiscuous mode [ 70.951435][ T4291] device hsr_slave_1 entered promiscuous mode [ 70.957992][ T4291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.966329][ T4291] Cannot create hsr debugfs directory [ 71.075669][ T4291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.223939][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.230634][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.500968][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 74.428033][ T4291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.580837][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 74.966156][ T4291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.023581][ T4291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.142548][ T4291] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.152399][ T4291] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.162119][ T4291] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.172277][ T4291] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.228726][ T4291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.253129][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.261850][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.272958][ T4291] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.300888][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.309626][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.319861][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.326975][ T4278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.335066][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.344401][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.353208][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.360347][ T4278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.368409][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.379269][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.403855][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.417479][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.426762][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.435517][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.459355][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.468521][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.482093][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.490950][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.505062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.514211][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.523427][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.586801][ T1234] device hsr_slave_0 left promiscuous mode [ 75.596403][ T1234] device hsr_slave_1 left promiscuous mode [ 75.604655][ T1234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.615830][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.627799][ T1234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.635855][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.643689][ T1234] device bridge_slave_1 left promiscuous mode [ 75.650838][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.664441][ T1234] device bridge_slave_0 left promiscuous mode [ 75.672999][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.689990][ T1234] device veth1_macvtap left promiscuous mode [ 75.697108][ T1234] device veth0_macvtap left promiscuous mode [ 75.704794][ T1234] device veth1_vlan left promiscuous mode [ 75.712492][ T1234] device veth0_vlan left promiscuous mode [ 75.868098][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 75.882426][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 75.897153][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.914541][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.972831][ T1234] bond0 (unregistering): Released all slaves [ 76.027922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.035538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.051786][ T4291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.074467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.084593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.102789][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.111515][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.120921][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.128763][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.139587][ T4291] device veth0_vlan entered promiscuous mode [ 76.152970][ T4291] device veth1_vlan entered promiscuous mode [ 76.172196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.181320][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.189310][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.199483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.210159][ T4291] device veth0_macvtap entered promiscuous mode [ 76.222858][ T4291] device veth1_macvtap entered promiscuous mode [ 76.244363][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.253082][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.261587][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.269601][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.278339][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.291580][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.299263][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.308693][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.319754][ T4291] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.328917][ T4291] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.337951][ T4291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.347010][ T4291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.431555][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.439545][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/23 05:20:15 executed programs: 2 [ 76.474709][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.486006][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.495905][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.508524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.660447][ T4254] Bluetooth: hci0: command 0x040f tx timeout [ 78.350346][ C1] [ 78.352712][ C1] ====================================================== [ 78.359724][ C1] WARNING: possible circular locking dependency detected [ 78.366745][ C1] 5.15.189-syzkaller #0 Not tainted [ 78.371933][ C1] ------------------------------------------------------ [ 78.378943][ C1] kworker/u4:4/1234 is trying to acquire lock: [ 78.385088][ C1] ffff888021e299b8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 78.393972][ C1] [ 78.393972][ C1] but task is already holding lock: [ 78.401330][ C1] ffff8880b9128098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 78.410213][ C1] [ 78.410213][ C1] which lock already depends on the new lock. [ 78.410213][ C1] [ 78.420613][ C1] [ 78.420613][ C1] the existing dependency chain (in reverse order) is: [ 78.429625][ C1] [ 78.429625][ C1] -> #2 (&base->lock){-.-.}-{2:2}: [ 78.436922][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 78.442654][ C1] lock_timer_base+0x123/0x270 [ 78.447939][ C1] __mod_timer+0x117/0xd20 [ 78.452878][ C1] queue_delayed_work_on+0x126/0x1e0 [ 78.459116][ C1] kvfree_call_rcu+0x4a9/0x7c0 [ 78.464396][ C1] rtnl_register_internal+0x44e/0x540 [ 78.470286][ C1] rtnl_register+0x2e/0x70 [ 78.475219][ C1] ip_rt_init+0x2e0/0x3a0 [ 78.480069][ C1] ip_init+0xa/0x20 [ 78.484399][ C1] inet_init+0x28b/0x3a0 [ 78.489158][ C1] do_one_initcall+0x1ee/0x680 [ 78.494437][ C1] do_initcall_level+0x137/0x1f0 [ 78.499983][ C1] do_initcalls+0x4b/0x90 [ 78.504828][ C1] kernel_init_freeable+0x3ce/0x560 [ 78.510543][ C1] kernel_init+0x19/0x1b0 [ 78.515388][ C1] ret_from_fork+0x1f/0x30 [ 78.520317][ C1] [ 78.520317][ C1] -> #1 (krc.lock){..-.}-{2:2}: [ 78.527351][ C1] _raw_spin_lock+0x2a/0x40 [ 78.532375][ C1] kvfree_call_rcu+0x186/0x7c0 [ 78.537652][ C1] trie_update_elem+0x86e/0xc50 [ 78.543021][ C1] bpf_map_update_value+0x57d/0x650 [ 78.548739][ C1] generic_map_update_batch+0x525/0x7c0 [ 78.554800][ C1] bpf_map_do_batch+0x466/0x600 [ 78.560164][ C1] __sys_bpf+0x601/0x670 [ 78.564923][ C1] __x64_sys_bpf+0x78/0x90 [ 78.569874][ C1] do_syscall_64+0x4c/0xa0 [ 78.574812][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.581225][ C1] [ 78.581225][ C1] -> #0 (&trie->lock){..-.}-{2:2}: [ 78.588521][ C1] __lock_acquire+0x2c33/0x7c60 [ 78.593894][ C1] lock_acquire+0x197/0x3f0 [ 78.598915][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 78.604630][ C1] trie_delete_elem+0x90/0x710 [ 78.609913][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0xae4 [ 78.615974][ C1] bpf_trace_run3+0x17e/0x320 [ 78.621170][ C1] enqueue_timer+0x394/0x520 [ 78.626279][ C1] __mod_timer+0x8e1/0xd20 [ 78.631211][ C1] call_timer_fn+0x16c/0x530 [ 78.636317][ C1] __run_timers+0x525/0x7c0 [ 78.641338][ C1] run_timer_softirq+0x63/0xf0 [ 78.646621][ C1] handle_softirqs+0x328/0x820 [ 78.651906][ C1] __irq_exit_rcu+0x12f/0x220 [ 78.657099][ C1] irq_exit_rcu+0x5/0x20 [ 78.661861][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 78.668012][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 78.674509][ C1] lock_acquire+0x1f2/0x3f0 [ 78.679531][ C1] rcu_lock_acquire+0x2a/0x30 [ 78.684746][ C1] inet_twsk_purge+0x119/0x810 [ 78.690039][ C1] tcp_sk_exit_batch+0x28/0x90 [ 78.695316][ C1] cleanup_net+0x77b/0xb80 [ 78.700244][ C1] process_one_work+0x863/0x1000 [ 78.705697][ C1] worker_thread+0xaa8/0x12a0 [ 78.710892][ C1] kthread+0x436/0x520 [ 78.715490][ C1] ret_from_fork+0x1f/0x30 [ 78.720422][ C1] [ 78.720422][ C1] other info that might help us debug this: [ 78.720422][ C1] [ 78.730738][ C1] Chain exists of: [ 78.730738][ C1] &trie->lock --> krc.lock --> &base->lock [ 78.730738][ C1] [ 78.742467][ C1] Possible unsafe locking scenario: [ 78.742467][ C1] [ 78.749912][ C1] CPU0 CPU1 [ 78.755273][ C1] ---- ---- [ 78.760634][ C1] lock(&base->lock); [ 78.764700][ C1] lock(krc.lock); [ 78.771021][ C1] lock(&base->lock); [ 78.777601][ C1] lock(&trie->lock); [ 78.781664][ C1] [ 78.781664][ C1] *** DEADLOCK *** [ 78.781664][ C1] [ 78.789797][ C1] 7 locks held by kworker/u4:4/1234: [ 78.795073][ C1] #0: ffff8880169cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 78.805342][ C1] #1: ffffc90004ed7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 78.815260][ C1] #2: ffffffff8d22a2d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x132/0xb80 [ 78.824650][ C1] #3: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 78.833961][ C1] #4: ffffc90000dd0be0 ((&ops->cursor_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbb/0x530 [ 78.843823][ C1] #5: ffff8880b9128098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 78.853126][ C1] #6: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 78.862432][ C1] [ 78.862432][ C1] stack backtrace: [ 78.868319][ C1] CPU: 1 PID: 1234 Comm: kworker/u4:4 Not tainted 5.15.189-syzkaller #0 [ 78.876753][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.886816][ C1] Workqueue: netns cleanup_net [ 78.891696][ C1] Call Trace: [ 78.894982][ C1] [ 78.897825][ C1] dump_stack_lvl+0x168/0x230 [ 78.902505][ C1] ? load_image+0x3b0/0x3b0 [ 78.907008][ C1] ? show_regs_print_info+0x20/0x20 [ 78.912211][ C1] ? print_circular_bug+0x12b/0x1a0 [ 78.917414][ C1] check_noncircular+0x274/0x310 [ 78.922355][ C1] ? add_chain_block+0x940/0x940 [ 78.927289][ C1] ? lockdep_lock+0xdc/0x1e0 [ 78.931880][ C1] ? mark_lock+0x94/0x320 [ 78.936209][ C1] __lock_acquire+0x2c33/0x7c60 [ 78.941067][ C1] ? __lock_acquire+0x12d9/0x7c60 [ 78.946097][ C1] ? verify_lock_unused+0x140/0x140 [ 78.951298][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 78.956318][ C1] ? verify_lock_unused+0x140/0x140 [ 78.961521][ C1] lock_acquire+0x197/0x3f0 [ 78.966022][ C1] ? trie_delete_elem+0x90/0x710 [ 78.970954][ C1] ? verify_lock_unused+0x140/0x140 [ 78.976149][ C1] ? sysvec_apic_timer_interrupt+0xa0/0xc0 [ 78.981954][ C1] ? read_lock_is_recursive+0x10/0x10 [ 78.987344][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 78.992542][ C1] ? trie_delete_elem+0x90/0x710 [ 78.997485][ C1] ? _raw_spin_lock+0x40/0x40 [ 79.002176][ C1] trie_delete_elem+0x90/0x710 [ 79.006934][ C1] ? __rwlock_init+0x140/0x140 [ 79.011691][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0xae4 [ 79.017235][ C1] bpf_trace_run3+0x17e/0x320 [ 79.021916][ C1] ? bpf_trace_run2+0x2d0/0x2d0 [ 79.026767][ C1] ? enqueue_timer+0x2e9/0x520 [ 79.031529][ C1] enqueue_timer+0x394/0x520 [ 79.036116][ C1] __mod_timer+0x8e1/0xd20 [ 79.040529][ C1] ? fb_flashcursor+0x450/0x450 [ 79.045432][ C1] call_timer_fn+0x16c/0x530 [ 79.050116][ C1] ? fb_flashcursor+0x450/0x450 [ 79.054980][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 79.060988][ C1] ? __run_timers+0x7c0/0x7c0 [ 79.065681][ C1] ? rcu_is_watching+0x11/0xa0 [ 79.070540][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 79.075742][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 79.080938][ C1] ? fb_flashcursor+0x450/0x450 [ 79.085977][ C1] __run_timers+0x525/0x7c0 [ 79.090490][ C1] ? detach_timer+0x2b0/0x2b0 [ 79.095168][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 79.101154][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 79.106003][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 79.111290][ C1] run_timer_softirq+0x63/0xf0 [ 79.116055][ C1] handle_softirqs+0x328/0x820 [ 79.120817][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 79.125670][ C1] ? do_softirq+0x200/0x200 [ 79.130180][ C1] __irq_exit_rcu+0x12f/0x220 [ 79.134867][ C1] ? irq_exit_rcu+0x20/0x20 [ 79.139395][ C1] irq_exit_rcu+0x5/0x20 [ 79.143642][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 79.149280][ C1] [ 79.152207][ C1] [ 79.155132][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 79.161120][ C1] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 79.166416][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 79.186022][ C1] RSP: 0018:ffffc90004ed78e0 EFLAGS: 00000206 [ 79.192087][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 6ac2d277967adf00 [ 79.200055][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b2860 RDI: ffffffff8a599340 [ 79.208024][ C1] RBP: ffffc90004ed7a00 R08: dffffc0000000000 R09: fffffbfff1ff6e19 [ 79.216001][ C1] R10: fffffbfff1ff6e19 R11: 1ffffffff1ff6e18 R12: ffffffff8c11c360 [ 79.223984][ C1] R13: 1ffff920009daf28 R14: 0000000000000246 R15: dffffc0000000000 [ 79.231966][ C1] ? rcu_lock_release+0x5/0x20 [ 79.236735][ C1] ? read_lock_is_recursive+0x10/0x10 [ 79.242113][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 79.247142][ C1] rcu_lock_acquire+0x2a/0x30 [ 79.251817][ C1] ? rcu_lock_acquire+0x5/0x30 [ 79.256591][ C1] inet_twsk_purge+0x119/0x810 [ 79.261382][ C1] ? __might_sleep+0xf0/0xf0 [ 79.266005][ C1] ? __inet_twsk_schedule+0x130/0x130 [ 79.271374][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 79.276765][ C1] tcp_sk_exit_batch+0x28/0x90 [ 79.281532][ C1] ? tcp_sk_exit+0xa0/0xa0 [ 79.285945][ C1] cleanup_net+0x77b/0xb80 [ 79.290360][ C1] ? ops_free_list+0x330/0x330 [ 79.295120][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 79.301012][ C1] ? _raw_spin_unlock+0x40/0x40 [ 79.305861][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 79.311060][ C1] process_one_work+0x863/0x1000 [ 79.316001][ C1] ? worker_detach_from_pool+0x240/0x240 [ 79.321628][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 79.326912][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 79.331936][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 79.337311][ C1] ? wq_worker_running+0x97/0x170 [ 79.342330][ C1] worker_thread+0xaa8/0x12a0 [ 79.347005][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 79.352195][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 79.357393][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 79.363376][ C1] kthread+0x436/0x520 [ 79.367447][ C1] ? rcu_lock_release+0x20/0x20 [ 79.372296][ C1] ? kthread_blkcg+0xd0/0xd0 [ 79.376903][ C1] ret_from_fork+0x1f/0x30 [ 79.381323][ C1] [ 79.385631][ T4254] Bluetooth: hci0: command 0x0419 tx timeout [ 81.460791][ T1108] cfg80211: failed to load regulatory.db 2025/07/23 05:20:20 executed programs: 173 2025/07/23 05:20:25 executed programs: 406