pyswitch race condition loop under spanning tree, even with path-level non-interference lemmas