Warning: Permanently added '10.128.10.16' (ED25519) to the list of known hosts. 2025/10/26 10:23:20 parsed 1 programs [ 52.567432][ T4188] cgroup: Unknown subsys name 'net' [ 52.702653][ T4188] cgroup: Unknown subsys name 'rlimit' [ 53.965358][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.164233][ T1216] ODEBUG: Out of memory. ODEBUG disabled [ 57.200982][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 57.347232][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.354626][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.363007][ T4250] device bridge_slave_0 entered promiscuous mode [ 57.379827][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.386970][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.395719][ T4250] device bridge_slave_1 entered promiscuous mode [ 57.427625][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.438356][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.459101][ T4250] team0: Port device team_slave_0 added [ 57.465908][ T4250] team0: Port device team_slave_1 added [ 57.480730][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.487741][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.513975][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.526568][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.533570][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.559508][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.598958][ T4250] device hsr_slave_0 entered promiscuous mode [ 57.605504][ T4250] device hsr_slave_1 entered promiscuous mode [ 57.713894][ T4250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.724258][ T4250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.733066][ T4250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.741683][ T4250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.779249][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.786572][ T4250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.794225][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.801326][ T4250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.811696][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.819965][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.874420][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.885481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.895225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.906455][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.931750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.941194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.949715][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.956768][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.968435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.976975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.985796][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.992894][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.002410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.015079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.047083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.056494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.065785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.075292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.084157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.094756][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.103287][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.127779][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.136258][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.146400][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.228052][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.235554][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.249273][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.282701][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.293027][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.309722][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.318089][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.326344][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.335371][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.345805][ T4250] device veth0_vlan entered promiscuous mode [ 58.358493][ T4250] device veth1_vlan entered promiscuous mode [ 58.379264][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.398507][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.406588][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.416823][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.428060][ T4250] device veth0_macvtap entered promiscuous mode [ 58.437058][ T4250] device veth1_macvtap entered promiscuous mode [ 58.458902][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.466432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.476833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.485592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.495964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.508067][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.517028][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.526131][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.540518][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.549664][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.559715][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.568579][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.652724][ T4250] syz-executor (4250) used greatest stack depth: 20288 bytes left [ 58.749680][ T453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.761766][ T453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.778499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.791814][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.800169][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.810676][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/10/26 10:23:28 executed programs: 0 [ 59.506467][ T4300] chnl_net:caif_netlink_parms(): no params data found [ 59.552158][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.559724][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.567960][ T4300] device bridge_slave_0 entered promiscuous mode [ 59.578994][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.586101][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.593891][ T4300] device bridge_slave_1 entered promiscuous mode [ 59.615771][ T4300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.627518][ T4300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.654828][ T4300] team0: Port device team_slave_0 added [ 59.671676][ T4300] team0: Port device team_slave_1 added [ 59.693601][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.700668][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.727053][ T4300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.740970][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.748133][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.774331][ T4300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.809163][ T4300] device hsr_slave_0 entered promiscuous mode [ 59.815829][ T4300] device hsr_slave_1 entered promiscuous mode [ 59.822836][ T4300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.830939][ T4300] Cannot create hsr debugfs directory [ 59.903961][ T4300] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.398574][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 62.912526][ T4300] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.477969][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 63.962479][ T4300] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.013642][ T4300] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.208604][ T4300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.217430][ T4300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.226426][ T4300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.235800][ T4300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.283315][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.294860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.303148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.318533][ T4300] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.330581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.339669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.348683][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.355732][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.363649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.386307][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.395002][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.403720][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.410815][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.421899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.445662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.462563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.471805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.480627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.491930][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.500859][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.515353][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.525088][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.541976][ T1216] device hsr_slave_0 left promiscuous mode [ 64.548349][ T1216] device hsr_slave_1 left promiscuous mode [ 64.554583][ T1216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.562336][ T1216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.570375][ T1216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.577818][ T1216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.585311][ T1216] device bridge_slave_1 left promiscuous mode [ 64.592207][ T1216] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.603106][ T1216] device bridge_slave_0 left promiscuous mode [ 64.610474][ T1216] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.625786][ T1216] device veth1_macvtap left promiscuous mode [ 64.632159][ T1216] device veth0_macvtap left promiscuous mode [ 64.638563][ T1216] device veth1_vlan left promiscuous mode [ 64.644417][ T1216] device veth0_vlan left promiscuous mode [ 64.746277][ T1216] team0 (unregistering): Port device team_slave_1 removed [ 64.760479][ T1216] team0 (unregistering): Port device team_slave_0 removed [ 64.771688][ T1216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.783589][ T1216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.825051][ T1216] bond0 (unregistering): Released all slaves [ 64.874308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.882913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.892292][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.975454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.983664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.996718][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.012132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.020874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.042334][ T4300] device veth0_vlan entered promiscuous mode [ 65.053203][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.061621][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.070703][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.079360][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.090586][ T4300] device veth1_vlan entered promiscuous mode [ 65.106139][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.114166][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.123097][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.131648][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.141879][ T4300] device veth0_macvtap entered promiscuous mode [ 65.151273][ T4300] device veth1_macvtap entered promiscuous mode [ 65.163777][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.172542][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.180959][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.189293][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.198156][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.209158][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.216433][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.225166][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.242889][ T4300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.251870][ T4300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.260891][ T4300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.269892][ T4300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.322871][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.347550][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.348858][ T453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.356015][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2025/10/26 10:23:34 executed programs: 2 [ 65.364925][ T453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.382241][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.557665][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 67.637595][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 67.828603][ C1] [ 67.831305][ C1] ====================================================== [ 67.838574][ C1] WARNING: possible circular locking dependency detected [ 67.845570][ C1] syzkaller #0 Not tainted [ 67.849956][ C1] ------------------------------------------------------ [ 67.856960][ C1] syz-execprog/4179 is trying to acquire lock: [ 67.863085][ C1] ffff888075625a38 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 67.871927][ C1] [ 67.871927][ C1] but task is already holding lock: [ 67.879259][ C1] ffff8880b91280d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x674/0xd20 [ 67.887829][ C1] [ 67.887829][ C1] which lock already depends on the new lock. [ 67.887829][ C1] [ 67.898203][ C1] [ 67.898203][ C1] the existing dependency chain (in reverse order) is: [ 67.907187][ C1] [ 67.907187][ C1] -> #2 (&base->lock){-.-.}-{2:2}: [ 67.914448][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 67.920145][ C1] lock_timer_base+0x123/0x270 [ 67.925420][ C1] __mod_timer+0x117/0xd20 [ 67.930332][ C1] queue_delayed_work_on+0x126/0x1e0 [ 67.936283][ C1] kvfree_call_rcu+0x4a9/0x7c0 [ 67.941537][ C1] rtnl_register_internal+0x44e/0x540 [ 67.947403][ C1] rtnl_register+0x2e/0x70 [ 67.952310][ C1] ip_rt_init+0x2e0/0x3a0 [ 67.957130][ C1] ip_init+0xa/0x20 [ 67.961425][ C1] inet_init+0x28b/0x3a0 [ 67.966155][ C1] do_one_initcall+0x1ee/0x680 [ 67.971409][ C1] do_initcall_level+0x137/0x1f0 [ 67.976841][ C1] do_initcalls+0x4b/0x90 [ 67.981662][ C1] kernel_init_freeable+0x3ce/0x560 [ 67.987353][ C1] kernel_init+0x19/0x1b0 [ 67.992263][ C1] ret_from_fork+0x1f/0x30 [ 67.997169][ C1] [ 67.997169][ C1] -> #1 (krc.lock){..-.}-{2:2}: [ 68.004166][ C1] _raw_spin_lock+0x2a/0x40 [ 68.009464][ C1] kvfree_call_rcu+0x186/0x7c0 [ 68.014724][ C1] trie_update_elem+0x86e/0xc50 [ 68.020065][ C1] bpf_map_update_value+0x57d/0x650 [ 68.025754][ C1] generic_map_update_batch+0x525/0x7c0 [ 68.032064][ C1] bpf_map_do_batch+0x466/0x600 [ 68.037441][ C1] __sys_bpf+0x601/0x670 [ 68.042181][ C1] __x64_sys_bpf+0x78/0x90 [ 68.047090][ C1] do_syscall_64+0x4c/0xa0 [ 68.052098][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.058484][ C1] [ 68.058484][ C1] -> #0 (&trie->lock){..-.}-{2:2}: [ 68.065850][ C1] __lock_acquire+0x2c33/0x7c60 [ 68.071196][ C1] lock_acquire+0x197/0x3f0 [ 68.076195][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 68.082053][ C1] trie_delete_elem+0x90/0x710 [ 68.087322][ C1] bpf_prog_5186c38a4019a4cb+0x42/0x148 [ 68.093368][ C1] bpf_trace_run3+0x17e/0x320 [ 68.098543][ C1] enqueue_timer+0x394/0x520 [ 68.103650][ C1] __mod_timer+0x8e1/0xd20 [ 68.108555][ C1] sk_reset_timer+0x1f/0xb0 [ 68.113549][ C1] tcp_rcv_established+0x12bb/0x1cb0 [ 68.119324][ C1] tcp_v4_do_rcv+0x44b/0x9b0 [ 68.124404][ C1] tcp_v4_rcv+0x268f/0x2cb0 [ 68.129395][ C1] ip_protocol_deliver_rcu+0x3ad/0x770 [ 68.135346][ C1] ip_local_deliver_finish+0x1d5/0x320 [ 68.141294][ C1] NF_HOOK+0x2d6/0x360 [ 68.145852][ C1] NF_HOOK+0x2d6/0x360 [ 68.150417][ C1] __netif_receive_skb+0xcc/0x290 [ 68.155946][ C1] process_backlog+0x364/0x780 [ 68.161208][ C1] __napi_poll+0xc0/0x430 [ 68.166035][ C1] net_rx_action+0x4a8/0x9c0 [ 68.171121][ C1] handle_softirqs+0x328/0x820 [ 68.176377][ C1] do_softirq+0x13b/0x200 [ 68.181195][ C1] __local_bh_enable_ip+0x174/0x1b0 [ 68.186884][ C1] ip_finish_output2+0xd32/0x1080 [ 68.192418][ C1] __ip_queue_xmit+0x11c3/0x1c00 [ 68.197868][ C1] __tcp_transmit_skb+0x1ced/0x31c0 [ 68.203606][ C1] tcp_write_xmit+0x1907/0x6590 [ 68.209005][ C1] __tcp_push_pending_frames+0x92/0x250 [ 68.215045][ C1] tcp_sendmsg_locked+0x2d96/0x3590 [ 68.220736][ C1] tcp_sendmsg+0x2b/0x40 [ 68.225479][ C1] sock_write_iter+0x29c/0x380 [ 68.230751][ C1] vfs_write+0x712/0xd00 [ 68.235486][ C1] ksys_write+0x14d/0x250 [ 68.240306][ C1] do_syscall_64+0x4c/0xa0 [ 68.245218][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.251618][ C1] [ 68.251618][ C1] other info that might help us debug this: [ 68.251618][ C1] [ 68.261816][ C1] Chain exists of: [ 68.261816][ C1] &trie->lock --> krc.lock --> &base->lock [ 68.261816][ C1] [ 68.273507][ C1] Possible unsafe locking scenario: [ 68.273507][ C1] [ 68.280935][ C1] CPU0 CPU1 [ 68.286268][ C1] ---- ---- [ 68.291616][ C1] lock(&base->lock); [ 68.295655][ C1] lock(krc.lock); [ 68.301964][ C1] lock(&base->lock); [ 68.308526][ C1] lock(&trie->lock); [ 68.312567][ C1] [ 68.312567][ C1] *** DEADLOCK *** [ 68.312567][ C1] [ 68.320732][ C1] 7 locks held by syz-execprog/4179: [ 68.325998][ C1] #0: ffff888079388120 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x1d/0x40 [ 68.335705][ C1] #1: ffffffff8c11c720 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 68.344972][ C1] #2: ffffffff8c11c720 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 68.354238][ C1] #3: ffffffff8c11c720 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 68.363502][ C1] #4: ffff888024e10ca0 (slock-AF_INET/1){+.-.}-{2:2}, at: tcp_v4_rcv+0x261d/0x2cb0 [ 68.372857][ C1] #5: ffff8880b91280d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x674/0xd20 [ 68.381777][ C1] #6: ffffffff8c11c720 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 68.391044][ C1] [ 68.391044][ C1] stack backtrace: [ 68.396937][ C1] CPU: 1 PID: 4179 Comm: syz-execprog Not tainted syzkaller #0 [ 68.404453][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.414492][ C1] Call Trace: [ 68.417750][ C1] [ 68.420569][ C1] dump_stack_lvl+0x168/0x230 [ 68.425320][ C1] ? load_image+0x3b0/0x3b0 [ 68.429811][ C1] ? show_regs_print_info+0x20/0x20 [ 68.434987][ C1] ? print_circular_bug+0x12b/0x1a0 [ 68.440161][ C1] check_noncircular+0x274/0x310 [ 68.445074][ C1] ? add_chain_block+0x940/0x940 [ 68.449979][ C1] ? lockdep_lock+0xdc/0x1e0 [ 68.454560][ C1] ? mark_lock+0x94/0x320 [ 68.458865][ C1] __lock_acquire+0x2c33/0x7c60 [ 68.463694][ C1] ? __lock_acquire+0x12d9/0x7c60 [ 68.468694][ C1] ? verify_lock_unused+0x140/0x140 [ 68.473872][ C1] ? mark_lock+0x94/0x320 [ 68.478176][ C1] lock_acquire+0x197/0x3f0 [ 68.482654][ C1] ? trie_delete_elem+0x90/0x710 [ 68.487569][ C1] ? read_lock_is_recursive+0x10/0x10 [ 68.492915][ C1] ? kasan_set_track+0x62/0x70 [ 68.497649][ C1] ? slab_free_freelist_hook+0xea/0x170 [ 68.503170][ C1] ? verify_lock_unused+0x140/0x140 [ 68.508338][ C1] ? tcp_rcv_established+0xeae/0x1cb0 [ 68.513682][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 68.518858][ C1] ? trie_delete_elem+0x90/0x710 [ 68.523767][ C1] ? _raw_spin_lock+0x40/0x40 [ 68.528416][ C1] trie_delete_elem+0x90/0x710 [ 68.533306][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 68.538316][ C1] bpf_prog_5186c38a4019a4cb+0x42/0x148 [ 68.543837][ C1] bpf_trace_run3+0x17e/0x320 [ 68.548491][ C1] ? bpf_trace_run2+0x2d0/0x2d0 [ 68.553323][ C1] ? enqueue_timer+0x108/0x520 [ 68.558152][ C1] ? enqueue_timer+0x2e9/0x520 [ 68.562890][ C1] enqueue_timer+0x394/0x520 [ 68.567452][ C1] __mod_timer+0x8e1/0xd20 [ 68.571844][ C1] sk_reset_timer+0x1f/0xb0 [ 68.576322][ C1] tcp_rcv_established+0x12bb/0x1cb0 [ 68.581607][ C1] ? tcp_check_space+0x960/0x960 [ 68.587063][ C1] ? rt_is_expired+0x220/0x2a0 [ 68.591887][ C1] tcp_v4_do_rcv+0x44b/0x9b0 [ 68.596449][ C1] tcp_v4_rcv+0x268f/0x2cb0 [ 68.600931][ C1] ? nf_conntrack_in+0x195/0x16f0 [ 68.605975][ C1] ? tcp_filter+0x90/0x90 [ 68.610285][ C1] ip_protocol_deliver_rcu+0x3ad/0x770 [ 68.615726][ C1] ip_local_deliver_finish+0x1d5/0x320 [ 68.621163][ C1] ? NF_HOOK+0x360/0x360 [ 68.625384][ C1] NF_HOOK+0x2d6/0x360 [ 68.629428][ C1] ? NF_HOOK+0x360/0x360 [ 68.633828][ C1] ? ip_local_deliver+0x1a0/0x1a0 [ 68.638839][ C1] ? ip_rcv_finish_core+0xd8b/0x1bc0 [ 68.644110][ C1] ? NF_HOOK+0x360/0x360 [ 68.648329][ C1] ? ip_local_deliver+0x11e/0x1a0 [ 68.653860][ C1] ? ip_rcv_core+0xb60/0xb60 [ 68.658463][ C1] NF_HOOK+0x2d6/0x360 [ 68.662505][ C1] ? ip_rcv_core+0xb60/0xb60 [ 68.667066][ C1] ? ip_local_deliver+0x1a0/0x1a0 [ 68.672064][ C1] ? ip_rcv_core+0xb60/0xb60 [ 68.676625][ C1] ? ip_local_deliver_finish+0x320/0x320 [ 68.682255][ C1] ? ip_local_deliver_finish+0x320/0x320 [ 68.687888][ C1] __netif_receive_skb+0xcc/0x290 [ 68.692910][ C1] process_backlog+0x364/0x780 [ 68.697920][ C1] ? rps_trigger_softirq+0x210/0x210 [ 68.703212][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 68.709179][ C1] ? lock_chain_count+0x20/0x20 [ 68.714009][ C1] __napi_poll+0xc0/0x430 [ 68.718317][ C1] ? net_rx_action+0x2db/0x9c0 [ 68.723057][ C1] net_rx_action+0x4a8/0x9c0 [ 68.727706][ C1] ? lockdep_softirqs_on+0x570/0x570 [ 68.732986][ C1] ? net_tx_action+0x870/0x870 [ 68.737738][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 68.743731][ C1] ? lock_chain_count+0x20/0x20 [ 68.748556][ C1] handle_softirqs+0x328/0x820 [ 68.753297][ C1] ? do_softirq+0x13b/0x200 [ 68.757775][ C1] ? do_softirq+0x200/0x200 [ 68.762346][ C1] do_softirq+0x13b/0x200 [ 68.766660][ C1] [ 68.769566][ C1] [ 68.772487][ C1] ? __local_bh_enable_ip+0x1b0/0x1b0 [ 68.777835][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 68.783792][ C1] ? __local_bh_enable_ip+0xcb/0x1b0 [ 68.789048][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 68.794320][ C1] ? local_bh_enable+0x5/0x20 [ 68.798969][ C1] __local_bh_enable_ip+0x174/0x1b0 [ 68.804153][ C1] ? _local_bh_enable+0xa0/0xa0 [ 68.808992][ C1] ip_finish_output2+0xd32/0x1080 [ 68.813991][ C1] ? ip_fragment+0x210/0x210 [ 68.818557][ C1] ? ip_skb_dst_mtu+0x584/0x9b0 [ 68.823396][ C1] ? ip_finish_output+0x3e8/0x4b0 [ 68.828392][ C1] __ip_queue_xmit+0x11c3/0x1c00 [ 68.833306][ C1] __tcp_transmit_skb+0x1ced/0x31c0 [ 68.838588][ C1] ? __tcp_send_ack+0x5d0/0x5d0 [ 68.843434][ C1] ? tcp_small_queue_check+0x201/0x400 [ 68.848883][ C1] tcp_write_xmit+0x1907/0x6590 [ 68.853730][ C1] __tcp_push_pending_frames+0x92/0x250 [ 68.859361][ C1] tcp_sendmsg_locked+0x2d96/0x3590 [ 68.864548][ C1] ? tcp_free_fastopen_req+0x70/0x70 [ 68.869810][ C1] ? lock_sock_nested+0x68/0x100 [ 68.874722][ C1] tcp_sendmsg+0x2b/0x40 [ 68.878938][ C1] sock_write_iter+0x29c/0x380 [ 68.883679][ C1] ? sock_read_iter+0x340/0x340 [ 68.888536][ C1] ? memset+0x1e/0x40 [ 68.892493][ C1] ? iov_iter_init+0xb4/0x170 [ 68.897138][ C1] vfs_write+0x712/0xd00 [ 68.901349][ C1] ? file_end_write+0x250/0x250 [ 68.906170][ C1] ? __fget_files+0x40f/0x480 [ 68.910821][ C1] ? __fdget_pos+0x1e2/0x370 [ 68.915380][ C1] ? ksys_write+0x71/0x250 [ 68.919769][ C1] ksys_write+0x14d/0x250 [ 68.924067][ C1] ? __ia32_sys_read+0x80/0x80 [ 68.928824][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 68.933994][ C1] do_syscall_64+0x4c/0xa0 [ 68.938383][ C1] ? clear_bhb_loop+0x30/0x80 [ 68.943030][ C1] ? clear_bhb_loop+0x30/0x80 [ 68.947768][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.953645][ C1] RIP: 0033:0x40dd0e [ 68.957526][ C1] Code: 24 28 44 8b 44 24 2c e9 70 ff ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 89 f2 48 89 fa 48 89 ce 48 89 df 0f 05 <48> 3d 01 f0 ff ff 76 15 48 f7 d8 48 89 c1 48 c7 c0 ff ff ff ff 48 [ 68.977101][ C1] RSP: 002b:000000c003dbd3e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000001 [ 68.985583][ C1] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000040dd0e [ 68.993527][ C1] RDX: 00000000000004a8 RSI: 000000c004039058 RDI: 0000000000000006 [ 69.001468][ C1] RBP: 000000c003dbd428 R08: 0000000000000000 R09: 0000000000000000 [ 69.009505][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000000c003dbd558 [ 69.017446][ C1] R13: 00000000000005f6 R14: 000000c001b54e00 R15: 000000c004038a80 [ 69.025391][ C1]