Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts. 2026/06/24 09:52:09 parsed 1 programs [ 91.696697][ T4845] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 94.025363][ T4906] chnl_net:caif_netlink_parms(): no params data found [ 94.119707][ T4906] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.128739][ T4906] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.137688][ T4906] device bridge_slave_0 entered promiscuous mode [ 94.146287][ T4906] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.153886][ T4906] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.162237][ T4906] device bridge_slave_1 entered promiscuous mode [ 94.209820][ T4906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.221821][ T4906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.278633][ T4906] team0: Port device team_slave_0 added [ 94.286697][ T4906] team0: Port device team_slave_1 added [ 94.331064][ T4906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.348093][ T4906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.408093][ T4906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.437126][ T4906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.444623][ T4906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.483870][ T4906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.559733][ T4906] device hsr_slave_0 entered promiscuous mode [ 94.566759][ T4906] device hsr_slave_1 entered promiscuous mode [ 95.234863][ T4906] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.246887][ T4906] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.256814][ T4906] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.266554][ T4906] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.369852][ T4906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.384547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.396199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.407988][ T4906] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.419986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.429550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.439250][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.446334][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.468434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.477298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.486106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.496300][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.503496][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.515071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.524909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.535854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.546536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.566501][ T4906] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.580558][ T4906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.605842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.614944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.629928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.641083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.650234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.661842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.670881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.680933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.837345][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.845257][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.860739][ T4906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.890880][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.900088][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.930426][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.939692][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.950713][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.959217][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.972096][ T4906] device veth0_vlan entered promiscuous mode [ 95.996494][ T4906] device veth1_vlan entered promiscuous mode [ 96.020751][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.032416][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.044091][ T4906] device veth0_macvtap entered promiscuous mode [ 96.063803][ T4906] device veth1_macvtap entered promiscuous mode [ 96.083007][ T4906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.095690][ T4906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.104800][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.113729][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.122226][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.131821][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.141477][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.151063][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.163557][ T4906] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.173503][ T4906] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.182934][ T4906] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.194370][ T4906] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.096628][ T1284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.114559][ T1284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.124005][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.142830][ T1284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.151951][ T1284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.159970][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.413711][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/06/24 09:52:19 executed programs: 0 [ 99.044380][ T5142] chnl_net:caif_netlink_parms(): no params data found [ 99.104701][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.112333][ T5142] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.120951][ T5142] device bridge_slave_0 entered promiscuous mode [ 99.129865][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.137556][ T5142] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.146036][ T5142] device bridge_slave_1 entered promiscuous mode [ 99.178689][ T5142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.191898][ T5142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.224782][ T5142] team0: Port device team_slave_0 added [ 99.236063][ T5142] team0: Port device team_slave_1 added [ 99.261608][ T5142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.269009][ T5142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.298643][ T5142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.318846][ T5142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.325819][ T5142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.354794][ T5142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.394615][ T5142] device hsr_slave_0 entered promiscuous mode [ 99.404005][ T5142] device hsr_slave_1 entered promiscuous mode [ 99.411261][ T5142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.421828][ T5142] Cannot create hsr debugfs directory [ 100.942704][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.977252][ T4388] Bluetooth: hci0: command 0x0409 tx timeout [ 100.992954][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.055100][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.940910][ T5142] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.950106][ T5142] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.960142][ T5142] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.973621][ T5142] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.016890][ T5142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.044089][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.053019][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.063528][ T5142] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.073637][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.082488][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.092541][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.099829][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.108659][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.138890][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.150284][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.159573][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.166629][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.178703][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.193858][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.203459][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.212882][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.221806][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.248045][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.256700][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.268449][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.278722][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.289729][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.298579][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.325390][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.409118][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.416735][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.431832][ T5142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.458361][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.468185][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.484885][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.494868][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.504162][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.512276][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.531108][ T5142] device veth0_vlan entered promiscuous mode [ 102.554787][ T5142] device veth1_vlan entered promiscuous mode [ 102.575660][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.584139][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.593308][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.602140][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.617442][ T5142] device veth0_macvtap entered promiscuous mode [ 102.635370][ T9] device hsr_slave_0 left promiscuous mode [ 102.643092][ T9] device hsr_slave_1 left promiscuous mode [ 102.649818][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.657732][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.665638][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.673659][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.681756][ T9] device bridge_slave_1 left promiscuous mode [ 102.688418][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.696674][ T9] device bridge_slave_0 left promiscuous mode [ 102.703695][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.714192][ T9] device veth1_macvtap left promiscuous mode [ 102.720618][ T9] device veth0_macvtap left promiscuous mode [ 102.726847][ T9] device veth1_vlan left promiscuous mode [ 102.732870][ T9] device veth0_vlan left promiscuous mode [ 102.863318][ T9] team0 (unregistering): Port device team_slave_1 removed [ 102.876012][ T9] team0 (unregistering): Port device team_slave_0 removed [ 102.888215][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.902173][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.952791][ T9] bond0 (unregistering): Released all slaves [ 102.991928][ T5142] device veth1_macvtap entered promiscuous mode [ 103.009828][ T5142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.017587][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.025794][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.034252][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.042955][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.055523][ T5142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.063751][ T5320] Bluetooth: hci0: command 0x041b tx timeout [ 103.069031][ T5142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.079671][ T5142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.089278][ T5142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.098049][ T5142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.108974][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.118397][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.183884][ T4509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.197311][ T4509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.205001][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.230556][ T1284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.239476][ T1284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.249448][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.291594][ T5353] [ 103.293959][ T5353] ====================================================== [ 103.301315][ T5353] WARNING: possible circular locking dependency detected [ 103.308404][ T5353] syzkaller #0 Not tainted [ 103.312890][ T5353] ------------------------------------------------------ [ 103.320487][ T5353] syz.0.17/5353 is trying to acquire lock: [ 103.326369][ T5353] ffff8880b9027eb8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x18d/0x7f0 [ 103.334983][ T5353] [ 103.334983][ T5353] but task is already holding lock: [ 103.342503][ T5353] ffff88807bd12238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x8f/0x690 [ 103.351437][ T5353] [ 103.351437][ T5353] which lock already depends on the new lock. [ 103.351437][ T5353] [ 103.361815][ T5353] [ 103.361815][ T5353] the existing dependency chain (in reverse order) is: [ 103.370987][ T5353] [ 103.370987][ T5353] -> #2 (&trie->lock){....}-{2:2}: [ 103.378256][ T5353] _raw_spin_lock_irqsave+0xb0/0x100 [ 103.384046][ T5353] trie_delete_elem+0x8f/0x690 [ 103.389326][ T5353] bpf_prog_2c29ac5cdc6b1842+0x3a/0x6e8 [ 103.395501][ T5353] bpf_trace_run2+0x163/0x2e0 [ 103.400693][ T5353] enqueue_hrtimer+0x314/0x370 [ 103.406277][ T5353] hrtimer_start_range_ns+0xaba/0xc40 [ 103.412153][ T5353] futex_wait_queue_me+0x182/0x440 [ 103.418290][ T5353] futex_wait+0x256/0x680 [ 103.423118][ T5353] do_futex+0xdc2/0x12b0 [ 103.428122][ T5353] __se_sys_futex+0x389/0x420 [ 103.433298][ T5353] do_syscall_64+0x4c/0xa0 [ 103.438215][ T5353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.444670][ T5353] [ 103.444670][ T5353] -> #1 (hrtimer_bases.lock){-.-.}-{2:2}: [ 103.452953][ T5353] _raw_spin_lock_irqsave+0xb0/0x100 [ 103.458860][ T5353] hrtimer_start_range_ns+0xf1/0xc40 [ 103.465603][ T5353] kvfree_call_rcu+0x63e/0x7f0 [ 103.471244][ T5353] rtnl_register_internal+0x485/0x590 [ 103.477467][ T5353] rtnl_register+0x2e/0x70 [ 103.482622][ T5353] ip_rt_init+0x2e3/0x3a0 [ 103.487659][ T5353] ip_init+0xa/0x20 [ 103.492062][ T5353] inet_init+0x28b/0x3a0 [ 103.497549][ T5353] do_one_initcall+0x272/0x730 [ 103.503234][ T5353] do_initcall_level+0x13d/0x1f0 [ 103.508765][ T5353] do_initcalls+0x4b/0x90 [ 103.513713][ T5353] kernel_init_freeable+0x3d5/0x560 [ 103.519689][ T5353] kernel_init+0x19/0x1b0 [ 103.524608][ T5353] ret_from_fork+0x1f/0x30 [ 103.529556][ T5353] [ 103.529556][ T5353] -> #0 (krc.lock){..-.}-{2:2}: [ 103.537059][ T5353] __lock_acquire+0x2c66/0x7b50 [ 103.542720][ T5353] lock_acquire+0x19e/0x400 [ 103.548027][ T5353] _raw_spin_lock+0x2a/0x40 [ 103.553310][ T5353] kvfree_call_rcu+0x18d/0x7f0 [ 103.558943][ T5353] trie_delete_elem+0x509/0x690 [ 103.564557][ T5353] bpf_prog_8c8ab8634bca3061+0x3a/0xdcc [ 103.570872][ T5353] bpf_trace_run2+0x163/0x2e0 [ 103.576066][ T5353] __bpf_trace_sys_enter+0x60/0x70 [ 103.581693][ T5353] trace_sys_enter+0x65/0x80 [ 103.587410][ T5353] syscall_trace_enter+0x115/0x180 [ 103.593483][ T5353] do_syscall_64+0x24/0xa0 [ 103.599830][ T5353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.606986][ T5353] [ 103.606986][ T5353] other info that might help us debug this: [ 103.606986][ T5353] [ 103.618024][ T5353] Chain exists of: [ 103.618024][ T5353] krc.lock --> hrtimer_bases.lock --> &trie->lock [ 103.618024][ T5353] [ 103.630637][ T5353] Possible unsafe locking scenario: [ 103.630637][ T5353] [ 103.638422][ T5353] CPU0 CPU1 [ 103.643955][ T5353] ---- ---- [ 103.649330][ T5353] lock(&trie->lock); [ 103.653489][ T5353] lock(hrtimer_bases.lock); [ 103.660790][ T5353] lock(&trie->lock); [ 103.667380][ T5353] lock(krc.lock); [ 103.671170][ T5353] [ 103.671170][ T5353] *** DEADLOCK *** [ 103.671170][ T5353] [ 103.679299][ T5353] 2 locks held by syz.0.17/5353: [ 103.684401][ T5353] #0: ffffffff8c31ef20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 103.694260][ T5353] #1: ffff88807bd12238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x8f/0x690 [ 103.703679][ T5353] [ 103.703679][ T5353] stack backtrace: [ 103.709664][ T5353] CPU: 0 PID: 5353 Comm: syz.0.17 Not tainted syzkaller #0 [ 103.717087][ T5353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.727966][ T5353] Call Trace: [ 103.731820][ T5353] [ 103.734842][ T5353] dump_stack_lvl+0x188/0x250 [ 103.739646][ T5353] ? load_image+0x410/0x410 [ 103.744249][ T5353] ? show_regs_print_info+0x20/0x20 [ 103.749433][ T5353] ? print_circular_bug+0x12b/0x1a0 [ 103.754710][ T5353] check_noncircular+0x296/0x330 [ 103.759648][ T5353] ? add_chain_block+0x9b0/0x9b0 [ 103.764855][ T5353] ? lockdep_lock+0xf1/0x1f0 [ 103.769529][ T5353] ? mark_lock+0x94/0x320 [ 103.774230][ T5353] ? _find_first_zero_bit+0xd1/0xf0 [ 103.779603][ T5353] __lock_acquire+0x2c66/0x7b50 [ 103.784465][ T5353] ? verify_lock_unused+0x140/0x140 [ 103.789955][ T5353] lock_acquire+0x19e/0x400 [ 103.794719][ T5353] ? kvfree_call_rcu+0x18d/0x7f0 [ 103.799752][ T5353] ? read_lock_is_recursive+0x10/0x10 [ 103.805265][ T5353] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 103.811295][ T5353] ? _raw_spin_unlock+0x40/0x40 [ 103.816133][ T5353] ? debug_object_active_state+0x6b/0x380 [ 103.822536][ T5353] _raw_spin_lock+0x2a/0x40 [ 103.827478][ T5353] ? kvfree_call_rcu+0x18d/0x7f0 [ 103.832863][ T5353] kvfree_call_rcu+0x18d/0x7f0 [ 103.837814][ T5353] ? call_rcu+0x900/0x900 [ 103.842215][ T5353] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 103.848347][ T5353] ? _raw_spin_lock+0x40/0x40 [ 103.853116][ T5353] ? longest_prefix_match+0x4c6/0x660 [ 103.859626][ T5353] trie_delete_elem+0x509/0x690 [ 103.864695][ T5353] bpf_prog_8c8ab8634bca3061+0x3a/0xdcc [ 103.870239][ T5353] bpf_trace_run2+0x163/0x2e0 [ 103.875035][ T5353] ? bpf_trace_run1+0x2e0/0x2e0 [ 103.879878][ T5353] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 103.886295][ T5353] ? lock_chain_count+0x20/0x20 [ 103.891229][ T5353] __bpf_trace_sys_enter+0x60/0x70 [ 103.896628][ T5353] trace_sys_enter+0x65/0x80 [ 103.901265][ T5353] syscall_trace_enter+0x115/0x180 [ 103.906477][ T5353] do_syscall_64+0x24/0xa0 [ 103.910876][ T5353] ? clear_bhb_loop+0x30/0x80 [ 103.915673][ T5353] ? clear_bhb_loop+0x30/0x80 [ 103.920448][ T5353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.926340][ T5353] RIP: 0033:0x7f9ce18522f9 [ 103.930769][ T5353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.952597][ T5353] RSP: 002b:00007f9ce0ab60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 103.961174][ T5353] RAX: ffffffffffffffda RBX: 00007f9ce1a8dfa8 RCX: 00007f9ce18522f9 [ 103.969190][ T5353] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9ce1a8dfac [ 103.977442][ T5353] RBP: 00007f9ce1a8dfa0 R08: 000f5a11544695e8 R09: 0000000000000000 [ 103.985491][ T5353] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f9ce1a8dfac [ 103.993672][ T5353] R13: 0000000000000000 R14: 00007ffe12567db0 R15: 00007ffe12567e98 [ 104.001901][ T5353] 2026/06/24 09:52:24 executed programs: 3 [ 105.137198][ T5320] Bluetooth: hci0: command 0x040f tx timeout [ 107.217113][ T5320] Bluetooth: hci0: command 0x0419 tx timeout 2026/06/24 09:52:29 executed programs: 238