Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. 2025/10/26 20:24:39 parsed 1 programs [ 53.588727][ T4188] cgroup: Unknown subsys name 'net' [ 53.726980][ T4188] cgroup: Unknown subsys name 'rlimit' [ 55.002474][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.565581][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.574001][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.589544][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.599567][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.607925][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.618877][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.948402][ T4245] chnl_net:caif_netlink_parms(): no params data found [ 58.003633][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.011966][ T4245] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.020092][ T4245] device bridge_slave_0 entered promiscuous mode [ 58.029563][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.037045][ T4245] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.045180][ T4245] device bridge_slave_1 entered promiscuous mode [ 58.073925][ T4245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.086224][ T4245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.118265][ T4245] team0: Port device team_slave_0 added [ 58.126371][ T4245] team0: Port device team_slave_1 added [ 58.154402][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.161351][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.187562][ T4245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.200549][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.207818][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.233817][ T4245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.271268][ T4245] device hsr_slave_0 entered promiscuous mode [ 58.280412][ T4245] device hsr_slave_1 entered promiscuous mode [ 58.494922][ T4245] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.505016][ T4245] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.514697][ T4245] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.523960][ T4245] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.545582][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.552788][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.560643][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.568141][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.603626][ T4245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.617398][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.626736][ T1236] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.637005][ T1236] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.653147][ T4245] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.664406][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.673262][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.685010][ T809] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.692156][ T809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.707519][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.716384][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.725831][ T809] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.732940][ T809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.742207][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.753783][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.765076][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.774212][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.782783][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.794178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.803337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.814760][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.823256][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.835418][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.843723][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.854996][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.968071][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.976707][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.010015][ T4245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.026830][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.037739][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.070346][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.079528][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.088056][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.096219][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.107429][ T4245] device veth0_vlan entered promiscuous mode [ 59.131304][ T4245] device veth1_vlan entered promiscuous mode [ 59.150003][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.158255][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.166872][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.175646][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.186768][ T4245] device veth0_macvtap entered promiscuous mode [ 59.198744][ T4245] device veth1_macvtap entered promiscuous mode [ 59.233276][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.241666][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.250517][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.259774][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.268930][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.302961][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.310840][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.319750][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.348062][ T4245] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.357340][ T4245] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.366317][ T4245] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.375085][ T4245] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.480607][ T4245] syz-executor (4245) used greatest stack depth: 20544 bytes left 2025/10/26 20:24:48 executed programs: 0 [ 60.730038][ T4302] chnl_net:caif_netlink_parms(): no params data found [ 60.790692][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.799174][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.809181][ T4302] device bridge_slave_0 entered promiscuous mode [ 60.818741][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.827345][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.836631][ T4302] device bridge_slave_1 entered promiscuous mode [ 60.860192][ T4302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.871231][ T4302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.898450][ T4302] team0: Port device team_slave_0 added [ 60.906824][ T4302] team0: Port device team_slave_1 added [ 60.926350][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.933695][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.960027][ T4302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.972761][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.979719][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.006365][ T4302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.058184][ T4302] device hsr_slave_0 entered promiscuous mode [ 61.065961][ T4302] device hsr_slave_1 entered promiscuous mode [ 61.073265][ T4302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.081158][ T4302] Cannot create hsr debugfs directory [ 61.161241][ T4302] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.642978][ T4268] Bluetooth: hci0: command 0x0409 tx timeout [ 64.037978][ T4302] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.077981][ T4302] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.128497][ T4302] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.215307][ T4302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.239006][ T4302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.248279][ T4302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.257426][ T4302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.309868][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.330508][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.338571][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.348951][ T4302] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.358365][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.367408][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.376746][ T809] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.383848][ T809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.391784][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.414278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.423266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.433043][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.440120][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.460332][ T4302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.470837][ T4302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.484400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.493231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.502812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.511589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.520662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.529971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.538639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.548030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.557451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.565783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.574288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.582772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.669425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.677345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.696098][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.712098][ T4270] Bluetooth: hci0: command 0x041b tx timeout [ 64.719649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.728506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.743703][ T9] device hsr_slave_0 left promiscuous mode [ 64.750105][ T9] device hsr_slave_1 left promiscuous mode [ 64.756913][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.764747][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.773248][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.780634][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.788601][ T9] device bridge_slave_1 left promiscuous mode [ 64.796027][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.808284][ T9] device bridge_slave_0 left promiscuous mode [ 64.815558][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.830828][ T9] device veth1_macvtap left promiscuous mode [ 64.837310][ T9] device veth0_macvtap left promiscuous mode [ 64.843431][ T9] device veth1_vlan left promiscuous mode [ 64.849307][ T9] device veth0_vlan left promiscuous mode [ 64.977737][ T9] team0 (unregistering): Port device team_slave_1 removed [ 64.991494][ T9] team0 (unregistering): Port device team_slave_0 removed [ 65.005542][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.020209][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.068041][ T9] bond0 (unregistering): Released all slaves [ 65.129023][ T4302] device veth0_vlan entered promiscuous mode [ 65.137980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.146562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.156997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.165486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.175887][ T4302] device veth1_vlan entered promiscuous mode [ 65.207287][ T4302] device veth0_macvtap entered promiscuous mode [ 65.218177][ T4302] device veth1_macvtap entered promiscuous mode [ 65.225638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.234637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.242941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.251363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.260678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.270222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.286620][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.298007][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.306374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.316776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.326115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.334691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.346075][ T4302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.355659][ T4302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.364445][ T4302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.374095][ T4302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.431602][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.445908][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.455744][ T809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.471048][ T809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.479434][ T809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.488256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/10/26 20:24:53 executed programs: 3 [ 66.682029][ T4272] [ 66.684380][ T4272] ====================================================== [ 66.691379][ T4272] WARNING: possible circular locking dependency detected [ 66.698403][ T4272] syzkaller #0 Not tainted [ 66.702801][ T4272] ------------------------------------------------------ [ 66.709803][ T4272] kworker/1:22/4272 is trying to acquire lock: [ 66.715936][ T4272] ffff88807efd0238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 66.724801][ T4272] [ 66.724801][ T4272] but task is already holding lock: [ 66.732180][ T4272] ffff8880b9129198 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 66.741045][ T4272] [ 66.741045][ T4272] which lock already depends on the new lock. [ 66.741045][ T4272] [ 66.751436][ T4272] [ 66.751436][ T4272] the existing dependency chain (in reverse order) is: [ 66.760432][ T4272] [ 66.760432][ T4272] -> #2 (&base->lock){-.-.}-{2:2}: [ 66.767710][ T4272] _raw_spin_lock_irqsave+0xa4/0xf0 [ 66.773422][ T4272] lock_timer_base+0x123/0x270 [ 66.778688][ T4272] __mod_timer+0x117/0xd20 [ 66.783616][ T4272] queue_delayed_work_on+0x126/0x1e0 [ 66.789404][ T4272] kvfree_call_rcu+0x4a9/0x7c0 [ 66.794673][ T4272] rtnl_register_internal+0x44e/0x540 [ 66.800549][ T4272] rtnl_register+0x2e/0x70 [ 66.805467][ T4272] ip_rt_init+0x2e0/0x3a0 [ 66.810296][ T4272] ip_init+0xa/0x20 [ 66.814606][ T4272] inet_init+0x28b/0x3a0 [ 66.819352][ T4272] do_one_initcall+0x1ee/0x680 [ 66.824617][ T4272] do_initcall_level+0x137/0x1f0 [ 66.830318][ T4272] do_initcalls+0x4b/0x90 [ 66.835152][ T4272] kernel_init_freeable+0x3ce/0x560 [ 66.840858][ T4272] kernel_init+0x19/0x1b0 [ 66.845688][ T4272] ret_from_fork+0x1f/0x30 [ 66.850629][ T4272] [ 66.850629][ T4272] -> #1 (krc.lock){..-.}-{2:2}: [ 66.857674][ T4272] _raw_spin_lock+0x2a/0x40 [ 66.862690][ T4272] kvfree_call_rcu+0x186/0x7c0 [ 66.867963][ T4272] trie_update_elem+0x86e/0xc50 [ 66.873326][ T4272] bpf_map_update_value+0x57d/0x650 [ 66.879039][ T4272] generic_map_update_batch+0x525/0x7c0 [ 66.885268][ T4272] bpf_map_do_batch+0x466/0x600 [ 66.890635][ T4272] __sys_bpf+0x601/0x670 [ 66.895379][ T4272] __x64_sys_bpf+0x78/0x90 [ 66.900300][ T4272] do_syscall_64+0x4c/0xa0 [ 66.905219][ T4272] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.911612][ T4272] [ 66.911612][ T4272] -> #0 (&trie->lock){....}-{2:2}: [ 66.918888][ T4272] __lock_acquire+0x2c33/0x7c60 [ 66.924242][ T4272] lock_acquire+0x197/0x3f0 [ 66.929254][ T4272] _raw_spin_lock_irqsave+0xa4/0xf0 [ 66.934964][ T4272] trie_delete_elem+0x90/0x710 [ 66.940245][ T4272] bpf_prog_5186c38a4019a4cb+0x42/0x920 [ 66.946300][ T4272] bpf_trace_run3+0x17e/0x320 [ 66.951481][ T4272] enqueue_timer+0x394/0x520 [ 66.956576][ T4272] __mod_timer+0x8e1/0xd20 [ 66.961491][ T4272] queue_delayed_work_on+0x126/0x1e0 [ 66.967279][ T4272] process_one_work+0x863/0x1000 [ 66.972718][ T4272] worker_thread+0xaa8/0x12a0 [ 66.977899][ T4272] kthread+0x436/0x520 [ 66.982468][ T4272] ret_from_fork+0x1f/0x30 [ 66.987385][ T4272] [ 66.987385][ T4272] other info that might help us debug this: [ 66.987385][ T4272] [ 66.997596][ T4272] Chain exists of: [ 66.997596][ T4272] &trie->lock --> krc.lock --> &base->lock [ 66.997596][ T4272] [ 67.009311][ T4272] Possible unsafe locking scenario: [ 67.009311][ T4272] [ 67.016745][ T4272] CPU0 CPU1 [ 67.022184][ T4272] ---- ---- [ 67.027531][ T4272] lock(&base->lock); [ 67.031588][ T4272] lock(krc.lock); [ 67.037897][ T4272] lock(&base->lock); [ 67.044470][ T4272] lock(&trie->lock); [ 67.048534][ T4272] [ 67.048534][ T4272] *** DEADLOCK *** [ 67.048534][ T4272] [ 67.056659][ T4272] 4 locks held by kworker/1:22/4272: [ 67.061921][ T4272] #0: ffff888016871938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 67.073652][ T4272] #1: ffffc90003d2fd00 ((work_completion)(&(&cache_cleaner)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 67.085808][ T4272] #2: ffff8880b9129198 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 67.095102][ T4272] #3: ffffffff8c11c720 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 67.104392][ T4272] [ 67.104392][ T4272] stack backtrace: [ 67.110267][ T4272] CPU: 1 PID: 4272 Comm: kworker/1:22 Not tainted syzkaller #0 [ 67.117794][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 67.127847][ T4272] Workqueue: events_power_efficient do_cache_clean [ 67.134354][ T4272] Call Trace: [ 67.137619][ T4272] [ 67.140539][ T4272] dump_stack_lvl+0x168/0x230 [ 67.145293][ T4272] ? load_image+0x3b0/0x3b0 [ 67.149806][ T4272] ? show_regs_print_info+0x20/0x20 [ 67.155103][ T4272] ? print_circular_bug+0x12b/0x1a0 [ 67.160293][ T4272] check_noncircular+0x274/0x310 [ 67.165221][ T4272] ? add_chain_block+0x940/0x940 [ 67.170162][ T4272] ? lockdep_lock+0xdc/0x1e0 [ 67.174781][ T4272] ? __local_bh_enable_ip+0x12a/0x1b0 [ 67.180140][ T4272] ? mark_lock+0x94/0x320 [ 67.184461][ T4272] ? mark_lock+0x94/0x320 [ 67.188778][ T4272] __lock_acquire+0x2c33/0x7c60 [ 67.193627][ T4272] ? __lock_acquire+0x12d9/0x7c60 [ 67.198732][ T4272] ? verify_lock_unused+0x140/0x140 [ 67.203922][ T4272] ? __lock_acquire+0x13ad/0x7c60 [ 67.208944][ T4272] ? mark_lock+0x94/0x320 [ 67.213275][ T4272] lock_acquire+0x197/0x3f0 [ 67.217768][ T4272] ? trie_delete_elem+0x90/0x710 [ 67.222694][ T4272] ? verify_lock_unused+0x140/0x140 [ 67.227917][ T4272] ? read_lock_is_recursive+0x10/0x10 [ 67.234225][ T4272] ? is_dynamic_key+0x1f0/0x1f0 [ 67.239068][ T4272] _raw_spin_lock_irqsave+0xa4/0xf0 [ 67.244252][ T4272] ? trie_delete_elem+0x90/0x710 [ 67.249176][ T4272] ? _raw_spin_lock+0x40/0x40 [ 67.253838][ T4272] trie_delete_elem+0x90/0x710 [ 67.258589][ T4272] ? __rwlock_init+0x140/0x140 [ 67.263335][ T4272] ? mark_lock+0x94/0x320 [ 67.267648][ T4272] bpf_prog_5186c38a4019a4cb+0x42/0x920 [ 67.273174][ T4272] bpf_trace_run3+0x17e/0x320 [ 67.277834][ T4272] ? bpf_trace_run2+0x2d0/0x2d0 [ 67.282665][ T4272] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 67.288542][ T4272] ? __lock_acquire+0x7c60/0x7c60 [ 67.293548][ T4272] ? do_raw_spin_lock+0x11d/0x280 [ 67.298565][ T4272] enqueue_timer+0x394/0x520 [ 67.303141][ T4272] __mod_timer+0x8e1/0xd20 [ 67.307555][ T4272] queue_delayed_work_on+0x126/0x1e0 [ 67.312844][ T4272] ? delayed_work_timer_fn+0x80/0x80 [ 67.318209][ T4272] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 67.324089][ T4272] ? _raw_spin_unlock+0x40/0x40 [ 67.328936][ T4272] ? _raw_spin_unlock_irq+0x1f/0x40 [ 67.334166][ T4272] process_one_work+0x863/0x1000 [ 67.339093][ T4272] ? worker_detach_from_pool+0x240/0x240 [ 67.344712][ T4272] ? lockdep_hardirqs_off+0x70/0x100 [ 67.349983][ T4272] ? _raw_spin_lock_irq+0xab/0xe0 [ 67.354991][ T4272] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 67.360387][ T4272] ? wq_worker_running+0x97/0x170 [ 67.365398][ T4272] worker_thread+0xaa8/0x12a0 [ 67.370074][ T4272] kthread+0x436/0x520 [ 67.374138][ T4272] ? rcu_lock_release+0x20/0x20 [ 67.379000][ T4272] ? kthread_blkcg+0xd0/0xd0 [ 67.383577][ T4272] ret_from_fork+0x1f/0x30 [ 67.387981][ T4272] [ 67.412997][ T4272] Bluetooth: hci0: command 0x040f tx timeout