Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. 2026/05/06 03:04:11 parsed 1 programs [ 90.751786][ T4622] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 93.239867][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.250758][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.267553][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.279638][ T3063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.288165][ T3063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.296422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.976227][ T4690] chnl_net:caif_netlink_parms(): no params data found [ 94.009712][ T4690] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.017303][ T4690] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.025105][ T4690] device bridge_slave_0 entered promiscuous mode [ 94.033249][ T4690] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.040529][ T4690] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.048286][ T4690] device bridge_slave_1 entered promiscuous mode [ 94.065413][ T4690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.075994][ T4690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.095929][ T4690] team0: Port device team_slave_0 added [ 94.103719][ T4690] team0: Port device team_slave_1 added [ 94.118708][ T4690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.126074][ T4690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.152246][ T4690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.164152][ T4690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.171240][ T4690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.197267][ T4690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.221938][ T4690] device hsr_slave_0 entered promiscuous mode [ 94.228982][ T4690] device hsr_slave_1 entered promiscuous mode [ 94.752925][ T4690] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.762833][ T4690] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.773939][ T4690] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.783309][ T4690] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.807731][ T4690] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.814863][ T4690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.822595][ T4690] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.829731][ T4690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.906056][ T4690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.952550][ T4690] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.961958][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.970756][ T3063] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.979808][ T3063] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.989011][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 95.017560][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.028266][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.037510][ T3063] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.044735][ T3063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.055040][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.064120][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.072579][ T3063] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.079716][ T3063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.088552][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.097397][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.106969][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.116361][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.132641][ T4690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.145049][ T4690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.157770][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.166271][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.175906][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.187020][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.196039][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.205073][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.213335][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.221911][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.347329][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.356195][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.369220][ T4690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.398424][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.408413][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.442531][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.451207][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.469293][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.484154][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.492961][ T4690] device veth0_vlan entered promiscuous mode [ 95.510715][ T4690] device veth1_vlan entered promiscuous mode [ 95.559047][ T4690] device veth0_macvtap entered promiscuous mode [ 95.566757][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.576394][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.587764][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.596504][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.608704][ T4690] device veth1_macvtap entered promiscuous mode [ 95.642146][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.651618][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.668164][ T4690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.681969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.705402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.717416][ T4690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.730475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.742107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.762280][ T4690] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.783520][ T4690] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.792249][ T4690] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.814897][ T4690] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/06 03:04:19 executed programs: 0 [ 96.667682][ T4803] chnl_net:caif_netlink_parms(): no params data found [ 96.766759][ T4803] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.783558][ T4803] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.803561][ T4803] device bridge_slave_0 entered promiscuous mode [ 96.814514][ T4803] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.821676][ T4803] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.830374][ T4803] device bridge_slave_1 entered promiscuous mode [ 96.871755][ T4803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.887760][ T4803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.927476][ T4803] team0: Port device team_slave_0 added [ 96.937889][ T4803] team0: Port device team_slave_1 added [ 96.960015][ T4803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.967245][ T4803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.994564][ T4803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.007098][ T4803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.015012][ T4803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.041710][ T4803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.129531][ T4803] device hsr_slave_0 entered promiscuous mode [ 97.156307][ T4803] device hsr_slave_1 entered promiscuous mode [ 97.163184][ T4803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.185539][ T4803] Cannot create hsr debugfs directory [ 97.317872][ T4803] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.523661][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 99.846832][ T4803] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.247658][ T4803] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.307921][ T4803] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.388780][ T4803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.398256][ T4803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.411022][ T4803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.419484][ T4803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.458260][ T4803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.475630][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.483343][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.494780][ T4803] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.503946][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.512529][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.521281][ T3063] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.528369][ T3063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.538578][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.546734][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.555838][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.564488][ T3063] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.571631][ T3063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.587582][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.598610][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.606799][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 100.617319][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.627053][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.644102][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.651950][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.661034][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.671217][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.680450][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.699618][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.708095][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.718379][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.789925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.798293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.811208][ T9] device hsr_slave_0 left promiscuous mode [ 100.817728][ T9] device hsr_slave_1 left promiscuous mode [ 100.824507][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.831923][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.839798][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.847526][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.855388][ T9] device bridge_slave_1 left promiscuous mode [ 100.861560][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.869982][ T9] device bridge_slave_0 left promiscuous mode [ 100.876196][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.887838][ T9] device veth1_macvtap left promiscuous mode [ 100.894164][ T9] device veth0_macvtap left promiscuous mode [ 100.900195][ T9] device veth1_vlan left promiscuous mode [ 100.906741][ T9] device veth0_vlan left promiscuous mode [ 101.001544][ T9] team0 (unregistering): Port device team_slave_1 removed [ 101.013066][ T9] team0 (unregistering): Port device team_slave_0 removed [ 101.025656][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.038158][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.078940][ T9] bond0 (unregistering): Released all slaves [ 101.142986][ T4803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.159045][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.167922][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.192632][ T4803] device veth0_vlan entered promiscuous mode [ 101.204554][ T4803] device veth1_vlan entered promiscuous mode [ 101.211796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.220162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.228506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.237111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.246421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.278023][ T4803] device veth0_macvtap entered promiscuous mode [ 101.285827][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.294660][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.303144][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.312701][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.322341][ T4803] device veth1_macvtap entered promiscuous mode [ 101.341429][ T4803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.352306][ T4803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.360819][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.368982][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.378525][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.387216][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.396037][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.408343][ T4803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.417617][ T4803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.426477][ T4803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.436864][ T4803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.489164][ T3063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.500630][ T3063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.509866][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.529416][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/05/06 03:04:24 executed programs: 2 [ 101.538972][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.546799][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.695095][ T4259] Bluetooth: hci0: command 0x040f tx timeout [ 102.926844][ T4319] [ 102.929207][ T4319] ====================================================== [ 102.936199][ T4319] WARNING: possible circular locking dependency detected [ 102.943208][ T4319] syzkaller #0 Not tainted [ 102.947595][ T4319] ------------------------------------------------------ [ 102.954676][ T4319] kworker/u4:5/4319 is trying to acquire lock: [ 102.960978][ T4319] ffff88806fa5c238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 102.969848][ T4319] [ 102.969848][ T4319] but task is already holding lock: [ 102.977196][ T4319] ffff8880b90280d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6bf/0xd00 [ 102.985679][ T4319] [ 102.985679][ T4319] which lock already depends on the new lock. [ 102.985679][ T4319] [ 102.996056][ T4319] [ 102.996056][ T4319] the existing dependency chain (in reverse order) is: [ 103.005050][ T4319] [ 103.005050][ T4319] -> #2 (&base->lock){-.-.}-{2:2}: [ 103.012433][ T4319] _raw_spin_lock_irqsave+0xb0/0x100 [ 103.018225][ T4319] lock_timer_base+0x123/0x270 [ 103.023657][ T4319] __mod_timer+0xfe/0xd00 [ 103.028543][ T4319] queue_delayed_work_on+0x12d/0x1f0 [ 103.034635][ T4319] kvfree_call_rcu+0x4bc/0x7d0 [ 103.039996][ T4319] rtnl_register_internal+0x489/0x590 [ 103.045912][ T4319] rtnl_register+0x2e/0x70 [ 103.050848][ T4319] ip_rt_init+0x2e0/0x3a0 [ 103.055704][ T4319] ip_init+0xa/0x20 [ 103.060021][ T4319] inet_init+0x28b/0x3a0 [ 103.064766][ T4319] do_one_initcall+0x272/0x730 [ 103.070025][ T4319] do_initcall_level+0x137/0x1f0 [ 103.075472][ T4319] do_initcalls+0x4b/0x90 [ 103.080320][ T4319] kernel_init_freeable+0x3e9/0x570 [ 103.086029][ T4319] kernel_init+0x19/0x1b0 [ 103.090860][ T4319] ret_from_fork+0x1f/0x30 [ 103.095778][ T4319] [ 103.095778][ T4319] -> #1 (krc.lock){..-.}-{2:2}: [ 103.102790][ T4319] _raw_spin_lock+0x2a/0x40 [ 103.107877][ T4319] kvfree_call_rcu+0x18d/0x7d0 [ 103.113170][ T4319] trie_update_elem+0x86c/0xc50 [ 103.118538][ T4319] bpf_map_update_value+0x57d/0x650 [ 103.124261][ T4319] generic_map_update_batch+0x52d/0x7d0 [ 103.130307][ T4319] bpf_map_do_batch+0x466/0x600 [ 103.135658][ T4319] __sys_bpf+0x671/0x6f0 [ 103.140397][ T4319] __x64_sys_bpf+0x78/0x90 [ 103.145307][ T4319] do_syscall_64+0x4c/0xa0 [ 103.150234][ T4319] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.156664][ T4319] [ 103.156664][ T4319] -> #0 (&trie->lock){....}-{2:2}: [ 103.164112][ T4319] __lock_acquire+0x2c42/0x7d10 [ 103.169482][ T4319] lock_acquire+0x19e/0x400 [ 103.174483][ T4319] _raw_spin_lock_irqsave+0xb0/0x100 [ 103.180284][ T4319] trie_delete_elem+0x90/0x710 [ 103.185545][ T4319] bpf_prog_5186c38a4019a4cb+0x42/0xa3c [ 103.191584][ T4319] bpf_trace_run3+0x19e/0x350 [ 103.196755][ T4319] enqueue_timer+0x394/0x520 [ 103.201844][ T4319] __mod_timer+0x8b8/0xd00 [ 103.206754][ T4319] ieee80211_ibss_work+0x540/0x10e0 [ 103.212449][ T4319] cfg80211_wiphy_work+0x221/0x260 [ 103.218056][ T4319] process_one_work+0x85f/0x1010 [ 103.223592][ T4319] worker_thread+0xaa6/0x1290 [ 103.228769][ T4319] kthread+0x436/0x520 [ 103.233358][ T4319] ret_from_fork+0x1f/0x30 [ 103.238269][ T4319] [ 103.238269][ T4319] other info that might help us debug this: [ 103.238269][ T4319] [ 103.248566][ T4319] Chain exists of: [ 103.248566][ T4319] &trie->lock --> krc.lock --> &base->lock [ 103.248566][ T4319] [ 103.260271][ T4319] Possible unsafe locking scenario: [ 103.260271][ T4319] [ 103.267712][ T4319] CPU0 CPU1 [ 103.273049][ T4319] ---- ---- [ 103.278655][ T4319] lock(&base->lock); [ 103.282699][ T4319] lock(krc.lock); [ 103.288995][ T4319] lock(&base->lock); [ 103.295573][ T4319] lock(&trie->lock); [ 103.299615][ T4319] [ 103.299615][ T4319] *** DEADLOCK *** [ 103.299615][ T4319] [ 103.307730][ T4319] 6 locks held by kworker/u4:5/4319: [ 103.313003][ T4319] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 103.324149][ T4319] #1: ffffc9000327fd00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 103.335781][ T4319] #2: ffff88807d1e8688 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x31/0x260 [ 103.345772][ T4319] #3: ffff8880254acd40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xa8/0x10e0 [ 103.355508][ T4319] #4: ffff8880b90280d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6bf/0xd00 [ 103.364621][ T4319] #5: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 103.373923][ T4319] [ 103.373923][ T4319] stack backtrace: [ 103.379811][ T4319] CPU: 0 PID: 4319 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 103.387326][ T4319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.397355][ T4319] Workqueue: events_unbound cfg80211_wiphy_work [ 103.403644][ T4319] Call Trace: [ 103.407036][ T4319] [ 103.409958][ T4319] dump_stack_lvl+0x188/0x250 [ 103.414624][ T4319] ? load_image+0x400/0x400 [ 103.419125][ T4319] ? show_regs_print_info+0x20/0x20 [ 103.424300][ T4319] ? print_circular_bug+0x12b/0x1a0 [ 103.429471][ T4319] check_noncircular+0x296/0x330 [ 103.434385][ T4319] ? add_chain_block+0x940/0x940 [ 103.439294][ T4319] ? lockdep_lock+0xf1/0x1f0 [ 103.443875][ T4319] ? mark_lock+0x94/0x320 [ 103.448193][ T4319] __lock_acquire+0x2c42/0x7d10 [ 103.453044][ T4319] ? deref_stack_reg+0xd0/0x120 [ 103.457877][ T4319] ? unwind_next_frame+0x1548/0x1d90 [ 103.463139][ T4319] ? mark_lock+0x94/0x320 [ 103.467551][ T4319] ? __lock_acquire+0x12e8/0x7d10 [ 103.472553][ T4319] ? verify_lock_unused+0x140/0x140 [ 103.477728][ T4319] ? mark_lock+0x94/0x320 [ 103.482033][ T4319] ? mark_lock+0x94/0x320 [ 103.486339][ T4319] lock_acquire+0x19e/0x400 [ 103.490820][ T4319] ? trie_delete_elem+0x90/0x710 [ 103.495743][ T4319] ? read_lock_is_recursive+0x10/0x10 [ 103.501090][ T4319] ? mark_lock+0x94/0x320 [ 103.505408][ T4319] _raw_spin_lock_irqsave+0xb0/0x100 [ 103.510795][ T4319] ? trie_delete_elem+0x90/0x710 [ 103.515737][ T4319] ? _raw_spin_lock+0x40/0x40 [ 103.520430][ T4319] trie_delete_elem+0x90/0x710 [ 103.525189][ T4319] ? do_raw_spin_lock+0x128/0x2f0 [ 103.530280][ T4319] bpf_prog_5186c38a4019a4cb+0x42/0xa3c [ 103.535801][ T4319] bpf_trace_run3+0x19e/0x350 [ 103.540455][ T4319] ? bpf_trace_run2+0x2e0/0x2e0 [ 103.545291][ T4319] ? do_raw_spin_lock+0x128/0x2f0 [ 103.550471][ T4319] ? __rwlock_init+0x140/0x140 [ 103.555389][ T4319] enqueue_timer+0x394/0x520 [ 103.559956][ T4319] __mod_timer+0x8b8/0xd00 [ 103.564360][ T4319] ieee80211_ibss_work+0x540/0x10e0 [ 103.569553][ T4319] ? lockdep_hardirqs_on+0x94/0x140 [ 103.574743][ T4319] ? _raw_spin_unlock+0x40/0x40 [ 103.579574][ T4319] ? ieee80211_ibss_rx_queued_mgmt+0x2ab0/0x2ab0 [ 103.585880][ T4319] ? skb_dequeue+0x120/0x150 [ 103.590442][ T4319] ? ieee80211_iface_work+0x961/0xc60 [ 103.595807][ T4319] ? ieee80211_iface_work+0xb77/0xc60 [ 103.601172][ T4319] cfg80211_wiphy_work+0x221/0x260 [ 103.606396][ T4319] process_one_work+0x85f/0x1010 [ 103.611342][ T4319] ? worker_detach_from_pool+0x240/0x240 [ 103.616949][ T4319] ? lockdep_hardirqs_off+0x70/0x100 [ 103.622208][ T4319] ? _raw_spin_lock_irq+0xb7/0xf0 [ 103.627208][ T4319] ? _raw_spin_lock_irqsave+0x100/0x100 [ 103.632728][ T4319] ? wq_worker_running+0x97/0x170 [ 103.637726][ T4319] worker_thread+0xaa6/0x1290 [ 103.642381][ T4319] ? lockdep_hardirqs_on+0x94/0x140 [ 103.647567][ T4319] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 103.653434][ T4319] kthread+0x436/0x520 [ 103.657476][ T4319] ? rcu_lock_release+0x20/0x20 [ 103.662297][ T4319] ? kthread_blkcg+0xd0/0xd0 [ 103.666860][ T4319] ret_from_fork+0x1f/0x30 [ 103.671253][ T4319]