Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. 2026/04/02 15:37:12 parsed 1 programs [ 91.124404][ T4615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 92.873207][ T4643] chnl_net:caif_netlink_parms(): no params data found [ 92.914323][ T4643] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.921775][ T4643] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.930362][ T4643] device bridge_slave_0 entered promiscuous mode [ 92.939800][ T4643] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.947272][ T4643] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.955302][ T4643] device bridge_slave_1 entered promiscuous mode [ 92.982750][ T4643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.994388][ T4643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.025336][ T4643] team0: Port device team_slave_0 added [ 93.034292][ T4643] team0: Port device team_slave_1 added [ 93.059550][ T4643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.066568][ T4643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.093186][ T4643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.105488][ T4643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.112482][ T4643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.138582][ T4643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.176444][ T4643] device hsr_slave_0 entered promiscuous mode [ 93.183264][ T4643] device hsr_slave_1 entered promiscuous mode [ 93.649399][ T4643] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.668843][ T4643] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.689410][ T4643] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.708659][ T4643] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.733775][ T4643] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.741135][ T4643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.748618][ T4643] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.755695][ T4643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.831286][ T4643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.847442][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.869241][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.882031][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.891420][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 93.921475][ T4643] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.946691][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.956981][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.977060][ T855] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.984259][ T855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.007451][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.024731][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.035300][ T855] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.042726][ T855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.070103][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.089580][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.117385][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.128202][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.156855][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.165310][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.177431][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.187437][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.195988][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.205787][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.214945][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.232820][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.417198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.424833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.436572][ T4643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.455859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.477200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.507309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.523362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.539579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.547488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.557338][ T4643] device veth0_vlan entered promiscuous mode [ 94.571190][ T4643] device veth1_vlan entered promiscuous mode [ 94.593909][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.603712][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.612243][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.622267][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.641877][ T4643] device veth0_macvtap entered promiscuous mode [ 94.652592][ T4643] device veth1_macvtap entered promiscuous mode [ 94.669631][ T4643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.691209][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.700223][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.708869][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.718870][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.729824][ T4643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.739111][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.749382][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.761328][ T4643] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.771940][ T4643] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.781526][ T4643] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.791982][ T4643] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.039647][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.060874][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.078060][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.117988][ T4273] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.138899][ T855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.147978][ T855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.155693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/04/02 15:37:21 executed programs: 0 [ 97.855940][ T4835] chnl_net:caif_netlink_parms(): no params data found [ 97.915314][ T4835] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.924070][ T4835] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.932101][ T4835] device bridge_slave_0 entered promiscuous mode [ 97.940253][ T4835] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.947710][ T4835] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.955448][ T4835] device bridge_slave_1 entered promiscuous mode [ 97.977632][ T4835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.990433][ T4835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.020236][ T4835] team0: Port device team_slave_0 added [ 98.028531][ T4835] team0: Port device team_slave_1 added [ 98.052083][ T4835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.059639][ T4835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.088806][ T4835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.102831][ T4835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.112352][ T4835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.141353][ T4835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.185572][ T4835] device hsr_slave_0 entered promiscuous mode [ 98.193395][ T4835] device hsr_slave_1 entered promiscuous mode [ 98.202719][ T4835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.210995][ T4835] Cannot create hsr debugfs directory [ 99.756629][ T4250] Bluetooth: hci0: command 0x0409 tx timeout [ 100.294763][ T4273] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.352409][ T4273] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.415926][ T4273] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.226053][ T4835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.235871][ T4835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.245419][ T4835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.255636][ T4835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.321847][ T4835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.333584][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.342287][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.365565][ T4835] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.374961][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.384046][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.393115][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.400223][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.432323][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.440851][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.450418][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.459448][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.466634][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.476114][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.504208][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.515921][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.525563][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.535568][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.550961][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.559683][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.570386][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.579043][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.605252][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.614166][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.624983][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.715346][ T4273] device hsr_slave_0 left promiscuous mode [ 101.723082][ T4273] device hsr_slave_1 left promiscuous mode [ 101.729802][ T4273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.737518][ T4273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.745078][ T4273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.752799][ T4273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.760909][ T4273] device bridge_slave_1 left promiscuous mode [ 101.767547][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.776066][ T4273] device bridge_slave_0 left promiscuous mode [ 101.782701][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.793793][ T4273] device veth1_macvtap left promiscuous mode [ 101.800665][ T4273] device veth0_macvtap left promiscuous mode [ 101.806960][ T4273] device veth1_vlan left promiscuous mode [ 101.813165][ T4273] device veth0_vlan left promiscuous mode [ 101.836551][ T4243] Bluetooth: hci0: command 0x041b tx timeout [ 101.944957][ T4273] team0 (unregistering): Port device team_slave_1 removed [ 101.958459][ T4273] team0 (unregistering): Port device team_slave_0 removed [ 101.970500][ T4273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.982876][ T4273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.033467][ T4273] bond0 (unregistering): Released all slaves [ 102.071393][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.080950][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.094895][ T4835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.112061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.121291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.142495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.151540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.162026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.170627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.180560][ T4835] device veth0_vlan entered promiscuous mode [ 102.191174][ T4835] device veth1_vlan entered promiscuous mode [ 102.212379][ T4835] device veth0_macvtap entered promiscuous mode [ 102.223904][ T4835] device veth1_macvtap entered promiscuous mode [ 102.232091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.240879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.249393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.258752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.268004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.276070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.292425][ T4835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.301590][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.310796][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.324453][ T4835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.345803][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.355147][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.366137][ T4835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.375718][ T4835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.384705][ T4835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.394097][ T4835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.443402][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.453876][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.469179][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.488691][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.497045][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.505328][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/04/02 15:37:26 executed programs: 6 [ 102.697987][ T4592] [ 102.700356][ T4592] ====================================================== [ 102.707362][ T4592] WARNING: possible circular locking dependency detected [ 102.714377][ T4592] syzkaller #0 Not tainted [ 102.718866][ T4592] ------------------------------------------------------ [ 102.725962][ T4592] syz-execprog/4592 is trying to acquire lock: [ 102.732123][ T4592] ffff8880756ec238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 102.741138][ T4592] [ 102.741138][ T4592] but task is already holding lock: [ 102.748506][ T4592] ffff8880b90280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 102.757499][ T4592] [ 102.757499][ T4592] which lock already depends on the new lock. [ 102.757499][ T4592] [ 102.767891][ T4592] [ 102.767891][ T4592] the existing dependency chain (in reverse order) is: [ 102.776980][ T4592] [ 102.776980][ T4592] -> #2 (&base->lock){-.-.}-{2:2}: [ 102.784360][ T4592] _raw_spin_lock_irqsave+0xb0/0x100 [ 102.790159][ T4592] lock_timer_base+0x123/0x270 [ 102.795516][ T4592] __mod_timer+0xfe/0xd00 [ 102.800352][ T4592] queue_delayed_work_on+0x12d/0x1f0 [ 102.806143][ T4592] kvfree_call_rcu+0x4bc/0x7d0 [ 102.811422][ T4592] rtnl_register_internal+0x489/0x590 [ 102.817391][ T4592] rtnl_register+0x2e/0x70 [ 102.822319][ T4592] ip_rt_init+0x2e0/0x3a0 [ 102.827442][ T4592] ip_init+0xa/0x20 [ 102.831784][ T4592] inet_init+0x28b/0x3a0 [ 102.836605][ T4592] do_one_initcall+0x272/0x730 [ 102.841983][ T4592] do_initcall_level+0x137/0x1f0 [ 102.847604][ T4592] do_initcalls+0x4b/0x90 [ 102.852529][ T4592] kernel_init_freeable+0x3e9/0x570 [ 102.858240][ T4592] kernel_init+0x19/0x1b0 [ 102.863310][ T4592] ret_from_fork+0x1f/0x30 [ 102.868245][ T4592] [ 102.868245][ T4592] -> #1 (krc.lock){..-.}-{2:2}: [ 102.875706][ T4592] _raw_spin_lock+0x2a/0x40 [ 102.880724][ T4592] kvfree_call_rcu+0x18d/0x7d0 [ 102.886263][ T4592] trie_update_elem+0x86c/0xc50 [ 102.891646][ T4592] bpf_map_update_value+0x57d/0x650 [ 102.897369][ T4592] generic_map_update_batch+0x52d/0x7d0 [ 102.903556][ T4592] bpf_map_do_batch+0x466/0x600 [ 102.908931][ T4592] __sys_bpf+0x671/0x6f0 [ 102.913694][ T4592] __x64_sys_bpf+0x78/0x90 [ 102.918621][ T4592] do_syscall_64+0x4c/0xa0 [ 102.923543][ T4592] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.929954][ T4592] [ 102.929954][ T4592] -> #0 (&trie->lock){....}-{2:2}: [ 102.937248][ T4592] __lock_acquire+0x2c42/0x7d10 [ 102.942626][ T4592] lock_acquire+0x19e/0x400 [ 102.947836][ T4592] _raw_spin_lock_irqsave+0xb0/0x100 [ 102.953760][ T4592] trie_delete_elem+0x90/0x710 [ 102.959065][ T4592] bpf_prog_2c29ac5cdc6b1842+0x3a/0xb20 [ 102.965143][ T4592] bpf_trace_run3+0x19e/0x350 [ 102.970348][ T4592] enqueue_timer+0x394/0x520 [ 102.975536][ T4592] __mod_timer+0x8b8/0xd00 [ 102.980588][ T4592] sk_reset_timer+0x1f/0xb0 [ 102.985602][ T4592] tcp_schedule_loss_probe+0x3d0/0x7e0 [ 102.991566][ T4592] tcp_write_xmit+0x3f54/0x6580 [ 102.996925][ T4592] __tcp_push_pending_frames+0x92/0x250 [ 103.002982][ T4592] tcp_sendmsg_locked+0x2be6/0x3320 [ 103.008680][ T4592] tcp_sendmsg+0x2b/0x40 [ 103.013425][ T4592] sock_write_iter+0x2a6/0x3a0 [ 103.018695][ T4592] vfs_write+0x745/0xd60 [ 103.023539][ T4592] ksys_write+0x152/0x260 [ 103.028376][ T4592] do_syscall_64+0x4c/0xa0 [ 103.033297][ T4592] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.039696][ T4592] [ 103.039696][ T4592] other info that might help us debug this: [ 103.039696][ T4592] [ 103.049912][ T4592] Chain exists of: [ 103.049912][ T4592] &trie->lock --> krc.lock --> &base->lock [ 103.049912][ T4592] [ 103.061623][ T4592] Possible unsafe locking scenario: [ 103.061623][ T4592] [ 103.069053][ T4592] CPU0 CPU1 [ 103.074485][ T4592] ---- ---- [ 103.079832][ T4592] lock(&base->lock); [ 103.083883][ T4592] lock(krc.lock); [ 103.090188][ T4592] lock(&base->lock); [ 103.096757][ T4592] lock(&trie->lock); [ 103.100807][ T4592] [ 103.100807][ T4592] *** DEADLOCK *** [ 103.100807][ T4592] [ 103.108959][ T4592] 3 locks held by syz-execprog/4592: [ 103.114292][ T4592] #0: ffff88807d639aa0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x1d/0x40 [ 103.123495][ T4592] #1: ffff8880b90280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 103.132884][ T4592] #2: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 103.142269][ T4592] [ 103.142269][ T4592] stack backtrace: [ 103.148244][ T4592] CPU: 0 PID: 4592 Comm: syz-execprog Not tainted syzkaller #0 [ 103.155771][ T4592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.165818][ T4592] Call Trace: [ 103.169084][ T4592] [ 103.172013][ T4592] dump_stack_lvl+0x188/0x250 [ 103.176696][ T4592] ? load_image+0x400/0x400 [ 103.181387][ T4592] ? show_regs_print_info+0x20/0x20 [ 103.186662][ T4592] ? print_circular_bug+0x12b/0x1a0 [ 103.192121][ T4592] check_noncircular+0x296/0x330 [ 103.197186][ T4592] ? add_chain_block+0x940/0x940 [ 103.202140][ T4592] ? lockdep_lock+0xf1/0x1f0 [ 103.206738][ T4592] ? mark_lock+0x94/0x320 [ 103.211065][ T4592] __lock_acquire+0x2c42/0x7d10 [ 103.215908][ T4592] ? mark_lock+0x94/0x320 [ 103.220224][ T4592] ? __lock_acquire+0x12e8/0x7d10 [ 103.225337][ T4592] ? verify_lock_unused+0x140/0x140 [ 103.230660][ T4592] ? __lock_acquire+0x13bc/0x7d10 [ 103.235714][ T4592] lock_acquire+0x19e/0x400 [ 103.240239][ T4592] ? trie_delete_elem+0x90/0x710 [ 103.245305][ T4592] ? verify_lock_unused+0x140/0x140 [ 103.250798][ T4592] ? ip_finish_output2+0x8f7/0x10a0 [ 103.256002][ T4592] ? read_lock_is_recursive+0x10/0x10 [ 103.261731][ T4592] _raw_spin_lock_irqsave+0xb0/0x100 [ 103.267039][ T4592] ? trie_delete_elem+0x90/0x710 [ 103.271993][ T4592] ? _raw_spin_lock+0x40/0x40 [ 103.276852][ T4592] trie_delete_elem+0x90/0x710 [ 103.281629][ T4592] ? __rwlock_init+0x140/0x140 [ 103.286397][ T4592] bpf_prog_2c29ac5cdc6b1842+0x3a/0xb20 [ 103.291951][ T4592] bpf_trace_run3+0x19e/0x350 [ 103.296727][ T4592] ? bpf_trace_run2+0x2e0/0x2e0 [ 103.301566][ T4592] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 103.307586][ T4592] enqueue_timer+0x394/0x520 [ 103.312183][ T4592] __mod_timer+0x8b8/0xd00 [ 103.316603][ T4592] sk_reset_timer+0x1f/0xb0 [ 103.321098][ T4592] tcp_schedule_loss_probe+0x3d0/0x7e0 [ 103.326551][ T4592] tcp_write_xmit+0x3f54/0x6580 [ 103.331396][ T4592] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 103.336768][ T4592] __tcp_push_pending_frames+0x92/0x250 [ 103.342327][ T4592] tcp_sendmsg_locked+0x2be6/0x3320 [ 103.347532][ T4592] ? tcp_free_fastopen_req+0x70/0x70 [ 103.352812][ T4592] tcp_sendmsg+0x2b/0x40 [ 103.357039][ T4592] sock_write_iter+0x2a6/0x3a0 [ 103.361792][ T4592] ? sock_read_iter+0x380/0x380 [ 103.366629][ T4592] ? memset+0x1e/0x40 [ 103.370689][ T4592] ? iov_iter_init+0xb4/0x170 [ 103.375528][ T4592] vfs_write+0x745/0xd60 [ 103.379783][ T4592] ? file_end_write+0x250/0x250 [ 103.384618][ T4592] ? __fget_files+0x40f/0x480 [ 103.389295][ T4592] ? __fdget_pos+0x1e2/0x370 [ 103.394144][ T4592] ? ksys_write+0x71/0x260 [ 103.398543][ T4592] ksys_write+0x152/0x260 [ 103.402860][ T4592] ? __ia32_sys_read+0x80/0x80 [ 103.407609][ T4592] ? lockdep_hardirqs_on+0x94/0x140 [ 103.412791][ T4592] do_syscall_64+0x4c/0xa0 [ 103.417199][ T4592] ? clear_bhb_loop+0x30/0x80 [ 103.421893][ T4592] ? clear_bhb_loop+0x30/0x80 [ 103.426560][ T4592] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.432462][ T4592] RIP: 0033:0x40d3ce [ 103.436352][ T4592] Code: ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 89 f2 48 89 fa 48 89 ce 48 89 df 0f 05 <48> 3d 01 f0 ff ff 76 15 48 f7 d8 48 89 c1 48 c7 c0 ff ff ff ff 48 [ 103.455951][ T4592] RSP: 002b:00003fb50f9bd3b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000001 [ 103.464355][ T4592] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000040d3ce [ 103.472312][ T4592] RDX: 0000000000000568 RSI: 00003fb50cec6518 RDI: 0000000000000006 [ 103.480266][ T4592] RBP: 00003fb50f9bd3f8 R08: 0000000000000000 R09: 0000000000000000 [ 103.488402][ T4592] R10: 0000000000000000 R11: 0000000000000206 R12: 00003fb50f9bd528 [ 103.496370][ T4592] R13: 0000000000000548 R14: 00003fb50f998780 R15: 000000000000054a [ 103.504338][ T4592] [ 103.916355][ T4248] Bluetooth: hci0: command 0x040f tx timeout [ 105.997206][ T4242] Bluetooth: hci0: command 0x0419 tx timeout 2026/04/02 15:37:31 executed programs: 200 2026/04/02 15:37:36 executed programs: 444