Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts. 2026/10/13 03:11:16 parsed 1 programs [ 108.630781][ T4761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 110.094543][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.106253][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.124472][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.139446][ T4287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.149278][ T4287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.158418][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.710944][ T4951] chnl_net:caif_netlink_parms(): no params data found [ 112.752339][ T4951] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.759679][ T4951] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.768703][ T4951] device bridge_slave_0 entered promiscuous mode [ 112.777265][ T4951] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.784466][ T4951] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.792584][ T4951] device bridge_slave_1 entered promiscuous mode [ 112.815023][ T4951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.826214][ T4951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.851207][ T4951] team0: Port device team_slave_0 added [ 112.858743][ T4951] team0: Port device team_slave_1 added [ 112.878453][ T4951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.886036][ T4951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.912324][ T4951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.924878][ T4951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.931952][ T4951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.958329][ T4951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.008122][ T4951] device hsr_slave_0 entered promiscuous mode [ 113.015177][ T4951] device hsr_slave_1 entered promiscuous mode [ 113.598362][ T4951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.608556][ T4951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.619065][ T4951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.629284][ T4951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.674727][ T4951] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.681978][ T4951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.689786][ T4951] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.696981][ T4951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.712831][ T3022] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.720576][ T3022] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.804975][ T4951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.822050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.830435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.847219][ T4951] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.873978][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.891563][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.900199][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.907488][ T4287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.932359][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.952374][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.971966][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.979062][ T4287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.001888][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.021499][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.063007][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.073305][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.092245][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.112417][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.131485][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.151270][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.175883][ T4951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.202873][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.224610][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.233314][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.253077][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.465065][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.480980][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.495877][ T4951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.545033][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.554318][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.590738][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.611120][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.636690][ T4951] device veth0_vlan entered promiscuous mode [ 114.647394][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.662615][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.678060][ T4951] device veth1_vlan entered promiscuous mode [ 114.717748][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.727627][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.751951][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.763972][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.780040][ T4951] device veth0_macvtap entered promiscuous mode [ 114.793018][ T4951] device veth1_macvtap entered promiscuous mode [ 114.814185][ T4951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.822065][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.832190][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.852023][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.874816][ T4951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.891998][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.902378][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.916577][ T4951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.925921][ T4951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.935042][ T4951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.945727][ T4951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/10/13 03:11:29 executed programs: 0 [ 116.272169][ T5048] chnl_net:caif_netlink_parms(): no params data found [ 116.298270][ T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.380115][ T5048] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.390495][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.399416][ T5048] device bridge_slave_0 entered promiscuous mode [ 116.411009][ T5048] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.418442][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.427446][ T5048] device bridge_slave_1 entered promiscuous mode [ 116.454807][ T5048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.467172][ T5048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.499914][ T5048] team0: Port device team_slave_0 added [ 116.508745][ T5048] team0: Port device team_slave_1 added [ 116.541141][ T5048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.548147][ T5048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.574560][ T5048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.587543][ T5048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.596064][ T5048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.624943][ T5048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.666562][ T5048] device hsr_slave_0 entered promiscuous mode [ 116.676057][ T5048] device hsr_slave_1 entered promiscuous mode [ 116.683408][ T5048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.693002][ T5048] Cannot create hsr debugfs directory [ 118.111006][ T4942] Bluetooth: hci0: command 0x0409 tx timeout [ 119.590108][ T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.937663][ T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.000500][ T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.201104][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 120.817526][ T5048] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.831212][ T5048] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.843985][ T5048] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.857564][ T5048] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.972116][ T5048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.987970][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.997548][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.009975][ T5048] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.020231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.032202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.042630][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.049754][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.062515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.099601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.109247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.120649][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.127799][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.144267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.162524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.193038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.203226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.215347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.242836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.252668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.297356][ T5048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.307962][ T5048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.331085][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.340057][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.352030][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.371402][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.401622][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.422728][ T155] device hsr_slave_0 left promiscuous mode [ 121.445710][ T155] device hsr_slave_1 left promiscuous mode [ 121.453832][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.464117][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.472907][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.480343][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.490876][ T155] device bridge_slave_1 left promiscuous mode [ 121.497239][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.506741][ T155] device bridge_slave_0 left promiscuous mode [ 121.513223][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.526063][ T155] device veth1_macvtap left promiscuous mode [ 121.532429][ T155] device veth0_macvtap left promiscuous mode [ 121.538492][ T155] device veth1_vlan left promiscuous mode [ 121.544496][ T155] device veth0_vlan left promiscuous mode [ 121.698095][ T155] team0 (unregistering): Port device team_slave_1 removed [ 121.710495][ T155] team0 (unregistering): Port device team_slave_0 removed [ 121.726563][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.740867][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.799104][ T155] bond0 (unregistering): Released all slaves [ 121.870077][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.878218][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.903053][ T5048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.923294][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.932449][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.953274][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.961850][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.971729][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.979465][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.988655][ T5048] device veth0_vlan entered promiscuous mode [ 122.016134][ T5048] device veth1_vlan entered promiscuous mode [ 122.037243][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.046587][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.066334][ T5048] device veth0_macvtap entered promiscuous mode [ 122.082900][ T5048] device veth1_macvtap entered promiscuous mode [ 122.103202][ T5048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.110642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.122138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.130197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.139379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.152438][ T5048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.160513][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.171480][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.182746][ T5048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.192049][ T5048] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.202432][ T5048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.211329][ T5048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.272654][ T4942] Bluetooth: hci0: command 0x040f tx timeout [ 122.287736][ T4287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.304465][ T4287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.313595][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/10/13 03:11:35 executed programs: 2 [ 122.336763][ T3022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.346040][ T3022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.354801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.970789][ C1] [ 123.973170][ C1] ====================================================== [ 123.980184][ C1] WARNING: possible circular locking dependency detected [ 123.987226][ C1] syzkaller #0 Not tainted [ 123.991651][ C1] ------------------------------------------------------ [ 123.998665][ C1] kworker/u4:3/155 is trying to acquire lock: [ 124.004738][ C1] ffff88802ccb5238 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x8e/0x620 [ 124.013620][ C1] [ 124.013620][ C1] but task is already holding lock: [ 124.020974][ C1] ffff8880b8f280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 124.029933][ C1] [ 124.029933][ C1] which lock already depends on the new lock. [ 124.029933][ C1] [ 124.040342][ C1] [ 124.040342][ C1] the existing dependency chain (in reverse order) is: [ 124.049441][ C1] [ 124.049441][ C1] -> #2 (&base->lock){-.-.}-{2:2}: [ 124.056742][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 124.062569][ C1] lock_timer_base+0x123/0x270 [ 124.067870][ C1] __mod_timer+0xf9/0xd20 [ 124.072755][ C1] queue_delayed_work_on+0x12d/0x1f0 [ 124.078563][ C1] kvfree_call_rcu+0x4d6/0x7f0 [ 124.083851][ C1] rtnl_register_internal+0x485/0x590 [ 124.089759][ C1] rtnl_register+0x2e/0x70 [ 124.094708][ C1] ip_rt_init+0x2e3/0x3a0 [ 124.099553][ C1] ip_init+0xa/0x20 [ 124.103876][ C1] inet_init+0x28b/0x3a0 [ 124.108651][ C1] do_one_initcall+0x272/0x730 [ 124.113932][ C1] do_initcall_level+0x13d/0x1f0 [ 124.119385][ C1] do_initcalls+0x4b/0x90 [ 124.124247][ C1] kernel_init_freeable+0x3d5/0x560 [ 124.129999][ C1] kernel_init+0x19/0x1b0 [ 124.134882][ C1] ret_from_fork+0x1f/0x30 [ 124.139814][ C1] [ 124.139814][ C1] -> #1 (krc.lock){..-.}-{2:2}: [ 124.146850][ C1] _raw_spin_lock+0x2a/0x40 [ 124.151890][ C1] kvfree_call_rcu+0x18d/0x7f0 [ 124.157254][ C1] trie_update_elem+0x858/0xc10 [ 124.162635][ C1] bpf_map_update_value+0x57c/0x650 [ 124.168347][ C1] generic_map_update_batch+0x52c/0x7d0 [ 124.174409][ C1] bpf_map_do_batch+0x475/0x5f0 [ 124.179774][ C1] __sys_bpf+0x671/0x6f0 [ 124.184531][ C1] __x64_sys_bpf+0x78/0x90 [ 124.189469][ C1] do_syscall_64+0x4c/0xa0 [ 124.194402][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.200835][ C1] [ 124.200835][ C1] -> #0 (&trie->lock){..-.}-{2:2}: [ 124.208631][ C1] __lock_acquire+0x38f7/0x7d40 [ 124.214119][ C1] lock_acquire+0x19f/0x400 [ 124.219159][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 124.224972][ C1] trie_delete_elem+0x8e/0x620 [ 124.230261][ C1] bpf_prog_5186c38a4019a4cb+0x42/0xfa0 [ 124.236336][ C1] bpf_trace_run3+0x19e/0x350 [ 124.241558][ C1] enqueue_timer+0x394/0x520 [ 124.246673][ C1] __mod_timer+0x918/0xd20 [ 124.251611][ C1] mrp_join_timer+0x142/0x180 [ 124.256808][ C1] call_timer_fn+0x17b/0x540 [ 124.262011][ C1] __run_timers+0x56c/0x810 [ 124.267028][ C1] run_timer_softirq+0x63/0xf0 [ 124.272395][ C1] handle_softirqs+0x336/0x830 [ 124.277760][ C1] __irq_exit_rcu+0x13b/0x230 [ 124.282949][ C1] irq_exit_rcu+0x5/0x20 [ 124.287721][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 124.293871][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 124.300366][ C1] __local_bh_enable_ip+0x13e/0x1c0 [ 124.306094][ C1] tcp_metrics_flush_all+0x280/0x330 [ 124.311916][ C1] cleanup_net+0x78e/0xba0 [ 124.316976][ C1] process_one_work+0x867/0xff0 [ 124.322346][ C1] worker_thread+0xad7/0x12a0 [ 124.327559][ C1] kthread+0x42e/0x520 [ 124.332149][ C1] ret_from_fork+0x1f/0x30 [ 124.337080][ C1] [ 124.337080][ C1] other info that might help us debug this: [ 124.337080][ C1] [ 124.347301][ C1] Chain exists of: [ 124.347301][ C1] &trie->lock --> krc.lock --> &base->lock [ 124.347301][ C1] [ 124.359022][ C1] Possible unsafe locking scenario: [ 124.359022][ C1] [ 124.366479][ C1] CPU0 CPU1 [ 124.371837][ C1] ---- ---- [ 124.377194][ C1] lock(&base->lock); [ 124.381258][ C1] lock(krc.lock); [ 124.387583][ C1] lock(&base->lock); [ 124.394176][ C1] lock(&trie->lock); [ 124.398251][ C1] [ 124.398251][ C1] *** DEADLOCK *** [ 124.398251][ C1] [ 124.406384][ C1] 7 locks held by kworker/u4:3/155: [ 124.411590][ C1] #0: ffff8880179cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 124.421779][ C1] #1: ffffc90002007d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 124.431606][ C1] #2: ffffffff8e241690 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 124.440994][ C1] #3: ffffc90000dd0bc0 ((&app->join_timer)#2){+.-.}-{0:0}, at: call_timer_fn+0xca/0x540 [ 124.450836][ C1] #4: ffff88814a3ac8c8 (&app->lock#2){+.-.}-{2:2}, at: mrp_join_timer+0xd2/0x180 [ 124.460056][ C1] #5: ffff8880b8f280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 124.469361][ C1] #6: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 124.478661][ C1] [ 124.478661][ C1] stack backtrace: [ 124.484654][ C1] CPU: 1 PID: 155 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 124.492198][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.502250][ C1] Workqueue: netns cleanup_net [ 124.507030][ C1] Call Trace: [ 124.510310][ C1] [ 124.513148][ C1] dump_stack_lvl+0x188/0x250 [ 124.517829][ C1] ? load_image+0x410/0x410 [ 124.522340][ C1] ? show_regs_print_info+0x20/0x20 [ 124.527544][ C1] ? print_circular_bug+0x12b/0x1a0 [ 124.532756][ C1] check_noncircular+0x2f8/0x400 [ 124.537700][ C1] ? print_deadlock_bug+0x5d0/0x5d0 [ 124.542894][ C1] ? lockdep_lock+0xf1/0x1f0 [ 124.547490][ C1] ? mark_lock+0x94/0x320 [ 124.551829][ C1] ? _find_first_zero_bit+0xd1/0xf0 [ 124.557024][ C1] __lock_acquire+0x38f7/0x7d40 [ 124.561897][ C1] ? __lock_acquire+0x12df/0x7d40 [ 124.566928][ C1] ? verify_lock_unused+0x140/0x140 [ 124.572138][ C1] ? __lock_acquire+0x13b3/0x7d40 [ 124.577195][ C1] lock_acquire+0x19f/0x400 [ 124.581708][ C1] ? trie_delete_elem+0x8e/0x620 [ 124.586650][ C1] ? verify_lock_unused+0x140/0x140 [ 124.591943][ C1] ? __lock_acquire+0x13b3/0x7d40 [ 124.596981][ C1] ? read_lock_is_recursive+0x10/0x10 [ 124.602354][ C1] ? __lock_acquire+0x13b3/0x7d40 [ 124.607381][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 124.612667][ C1] ? trie_delete_elem+0x8e/0x620 [ 124.617602][ C1] ? _raw_spin_lock+0x40/0x40 [ 124.622294][ C1] ? read_lock_is_recursive+0x10/0x10 [ 124.627664][ C1] trie_delete_elem+0x8e/0x620 [ 124.632425][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 124.637458][ C1] bpf_prog_5186c38a4019a4cb+0x42/0xfa0 [ 124.643000][ C1] bpf_trace_run3+0x19e/0x350 [ 124.647672][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 124.652870][ C1] ? bpf_trace_run2+0x2e0/0x2e0 [ 124.657721][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 124.663627][ C1] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 124.669084][ C1] ? _raw_spin_lock+0x40/0x40 [ 124.673863][ C1] enqueue_timer+0x394/0x520 [ 124.678456][ C1] __mod_timer+0x918/0xd20 [ 124.682891][ C1] mrp_join_timer+0x142/0x180 [ 124.687585][ C1] ? mrp_init_applicant+0x4e0/0x4e0 [ 124.692791][ C1] call_timer_fn+0x17b/0x540 [ 124.697383][ C1] ? mrp_init_applicant+0x4e0/0x4e0 [ 124.702594][ C1] ? __run_timers+0x810/0x810 [ 124.707287][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 124.712500][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 124.717710][ C1] ? mrp_init_applicant+0x4e0/0x4e0 [ 124.722904][ C1] __run_timers+0x56c/0x810 [ 124.727415][ C1] ? detach_timer+0x2b0/0x2b0 [ 124.732119][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.738116][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 124.742972][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 124.749242][ C1] run_timer_softirq+0x63/0xf0 [ 124.754024][ C1] handle_softirqs+0x336/0x830 [ 124.758787][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 124.763634][ C1] ? do_softirq+0x210/0x210 [ 124.768148][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 124.773283][ C1] __irq_exit_rcu+0x13b/0x230 [ 124.777957][ C1] ? irq_exit_rcu+0x20/0x20 [ 124.782460][ C1] irq_exit_rcu+0x5/0x20 [ 124.786711][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 124.792344][ C1] [ 124.795275][ C1] [ 124.798219][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 124.804211][ C1] RIP: 0010:__local_bh_enable_ip+0x13e/0x1c0 [ 124.810188][ C1] Code: 8a e8 16 f1 78 08 65 66 8b 05 ae 61 ba 7e 66 85 c0 75 54 bf 01 00 00 00 e8 df 21 09 00 e8 ca 17 36 00 fb 65 8b 05 5a 38 b9 7e <85> c0 75 05 e8 99 45 b7 ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 124.829790][ C1] RSP: 0018:ffffc90002007a80 EFLAGS: 00000282 [ 124.835853][ C1] RAX: 0000000080000000 RBX: 0000000000000201 RCX: 133e11d065dfb900 [ 124.843822][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4c00 [ 124.851788][ C1] RBP: ffffc90002007b08 R08: ffffffff910150cf R09: 1ffffffff2202a19 [ 124.859772][ C1] R10: dffffc0000000000 R11: fffffbfff2202a1a R12: ffffffff88747580 [ 124.867757][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000400f50 [ 124.875920][ C1] ? tcp_metrics_flush_all+0x280/0x330 [ 124.881394][ C1] ? _local_bh_enable+0xa0/0xa0 [ 124.886255][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 124.891622][ C1] ? tcp_metrics_flush_all+0x280/0x330 [ 124.897097][ C1] tcp_metrics_flush_all+0x280/0x330 [ 124.902394][ C1] ? tcp_net_metrics_init+0x150/0x150 [ 124.907782][ C1] cleanup_net+0x78e/0xba0 [ 124.912214][ C1] ? ops_free_list+0x330/0x330 [ 124.916975][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 124.922883][ C1] ? _raw_spin_unlock+0x40/0x40 [ 124.927768][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 124.932977][ C1] process_one_work+0x867/0xff0 [ 124.937837][ C1] ? worker_detach_from_pool+0x240/0x240 [ 124.943481][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 124.948792][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 124.953831][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 124.959394][ C1] ? wq_worker_running+0x97/0x170 [ 124.964425][ C1] worker_thread+0xad7/0x12a0 [ 124.969121][ C1] kthread+0x42e/0x520 [ 124.973209][ C1] ? rcu_lock_release+0x20/0x20 [ 124.978066][ C1] ? kthread_blkcg+0xd0/0xd0 [ 124.982663][ C1] ret_from_fork+0x1f/0x30 [ 124.987111][ C1] [ 124.992272][ T4942] Bluetooth: hci0: command 0x0419 tx timeout