[ 76.469367][ T1111] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. 2026/03/02 19:07:14 ignoring optional flag "type"="gce" 2026/03/02 19:07:15 parsed 1 programs [ 81.759783][ T4578] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 82.254596][ T4636] chnl_net:caif_netlink_parms(): no params data found [ 82.294072][ T4636] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.301383][ T4636] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.309230][ T4636] device bridge_slave_0 entered promiscuous mode [ 82.318013][ T4636] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.325125][ T4636] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.333462][ T4636] device bridge_slave_1 entered promiscuous mode [ 82.355267][ T4636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.366202][ T4636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.386525][ T4636] team0: Port device team_slave_0 added [ 82.393565][ T4636] team0: Port device team_slave_1 added [ 82.411449][ T4636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.418766][ T4636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.445400][ T4636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.457855][ T4636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.464844][ T4636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.491249][ T4636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.526514][ T4636] device hsr_slave_0 entered promiscuous mode [ 82.533397][ T4636] device hsr_slave_1 entered promiscuous mode [ 83.175145][ T4636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.199411][ T4636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.220295][ T4636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.239943][ T4636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.364315][ T4636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.395142][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.404442][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.431555][ T4636] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.442227][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.470081][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.479178][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.486268][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.526756][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.539054][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.555407][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.565486][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.572621][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.583967][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.593053][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.603403][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.616535][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.631507][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.642201][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.657554][ T4636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.669594][ T4636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.687673][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.696350][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.712295][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.725770][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.735168][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.749165][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.959378][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.966874][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.979650][ T4636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.006491][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.017500][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.035459][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.046779][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.061012][ T4636] device veth0_vlan entered promiscuous mode [ 84.075268][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.083974][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.093726][ T4636] device veth1_vlan entered promiscuous mode [ 84.119020][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.128015][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.136283][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.145792][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.156496][ T4636] device veth0_macvtap entered promiscuous mode [ 84.169359][ T4636] device veth1_macvtap entered promiscuous mode [ 84.191885][ T4636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.200273][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.209832][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.218517][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.227534][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.239361][ T4636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.256032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.265682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.279928][ T4636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.289453][ T4636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.298543][ T4636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.307951][ T4636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.439432][ T4636] syz-executor.0 (4636) used greatest stack depth: 21048 bytes left [ 85.211941][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.224900][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.248222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.286533][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.294707][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.311513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/03/02 19:07:20 executed programs: 0 [ 85.941263][ T4781] chnl_net:caif_netlink_parms(): no params data found [ 86.048609][ T4781] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.055707][ T4781] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.078157][ T4781] device bridge_slave_0 entered promiscuous mode [ 86.098659][ T4781] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.117993][ T4781] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.126211][ T4781] device bridge_slave_1 entered promiscuous mode [ 86.177226][ T4781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.189236][ T4781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.232723][ T4781] team0: Port device team_slave_0 added [ 86.249730][ T4781] team0: Port device team_slave_1 added [ 86.309119][ T4781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.316096][ T4781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.354757][ T4781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.378314][ T4781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.385299][ T4781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.447348][ T4781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.520057][ T4781] device hsr_slave_0 entered promiscuous mode [ 86.533341][ T4781] device hsr_slave_1 entered promiscuous mode [ 86.541418][ T4781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.550181][ T4781] Cannot create hsr debugfs directory [ 86.690609][ T4781] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.750022][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 89.551423][ T4781] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.597142][ T4781] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.641619][ T4781] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.706594][ T4781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.715471][ T4781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.724449][ T4781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.733063][ T4781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.788301][ T4781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.813807][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.822073][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.827198][ T4258] Bluetooth: hci0: command 0x041b tx timeout [ 89.834219][ T4781] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.856027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.865243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.874573][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.881734][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.890184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.902036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.910851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.919486][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.926536][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.941311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.952335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.963389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.973436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.994564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.002831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.011734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.022955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.031652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.056635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.066375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.079715][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.172259][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.180008][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.192099][ T4781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.208263][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.217967][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.233696][ T4781] device veth0_vlan entered promiscuous mode [ 90.242251][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.250873][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.260076][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.268170][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.291012][ T4781] device veth1_vlan entered promiscuous mode [ 90.308190][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.316428][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.325126][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.334531][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.346437][ T4781] device veth0_macvtap entered promiscuous mode [ 90.357834][ T4781] device veth1_macvtap entered promiscuous mode [ 90.379584][ T4781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.390876][ T4781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.401945][ T4781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.411363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.419763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.428176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.436704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.450304][ T4781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.460959][ T4781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.472793][ T4781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.481985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.490661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.508935][ T4781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.517842][ T4781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.526562][ T4781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.535931][ T4781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.563863][ T145] device hsr_slave_0 left promiscuous mode [ 90.570582][ T145] device hsr_slave_1 left promiscuous mode [ 90.576969][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.584732][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.592604][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.600272][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.609050][ T145] device bridge_slave_1 left promiscuous mode [ 90.615339][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.623491][ T145] device bridge_slave_0 left promiscuous mode [ 90.631033][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.641973][ T145] device veth1_macvtap left promiscuous mode [ 90.648157][ T145] device veth0_macvtap left promiscuous mode [ 90.654219][ T145] device veth1_vlan left promiscuous mode [ 90.660063][ T145] device veth0_vlan left promiscuous mode [ 90.780734][ T145] team0 (unregistering): Port device team_slave_1 removed [ 90.793670][ T145] team0 (unregistering): Port device team_slave_0 removed [ 90.804693][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.817542][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.866204][ T145] bond0 (unregistering): Released all slaves [ 90.958520][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.966366][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.977190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.996974][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/03/02 19:07:26 executed programs: 1 [ 91.005038][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.013745][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.529143][ T144] [ 91.531532][ T144] ====================================================== [ 91.538682][ T144] WARNING: possible circular locking dependency detected [ 91.545713][ T144] syzkaller #0 Not tainted [ 91.550116][ T144] ------------------------------------------------------ [ 91.557139][ T144] kworker/u4:1/144 is trying to acquire lock: [ 91.563203][ T144] ffff8880b9027eb8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x18d/0x7d0 [ 91.571825][ T144] [ 91.571825][ T144] but task is already holding lock: [ 91.579177][ T144] ffff888023ba5a38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 91.588050][ T144] [ 91.588050][ T144] which lock already depends on the new lock. [ 91.588050][ T144] [ 91.598535][ T144] [ 91.598535][ T144] the existing dependency chain (in reverse order) is: [ 91.607553][ T144] [ 91.607553][ T144] -> #2 (&trie->lock){....}-{2:2}: [ 91.614936][ T144] _raw_spin_lock_irqsave+0xb0/0x100 [ 91.620764][ T144] trie_delete_elem+0x90/0x710 [ 91.626047][ T144] bpf_prog_2c29ac5cdc6b1842+0x3a/0x58c [ 91.632113][ T144] bpf_trace_run3+0x19e/0x350 [ 91.637316][ T144] enqueue_timer+0x394/0x520 [ 91.642434][ T144] __mod_timer+0x911/0xd00 [ 91.647368][ T144] queue_delayed_work_on+0x12d/0x1f0 [ 91.653171][ T144] process_one_work+0x85f/0x1010 [ 91.658628][ T144] worker_thread+0xaa6/0x1290 [ 91.663885][ T144] kthread+0x436/0x520 [ 91.668469][ T144] ret_from_fork+0x1f/0x30 [ 91.673409][ T144] [ 91.673409][ T144] -> #1 (&base->lock){-.-.}-{2:2}: [ 91.680800][ T144] _raw_spin_lock_irqsave+0xb0/0x100 [ 91.686601][ T144] lock_timer_base+0x123/0x270 [ 91.691877][ T144] __mod_timer+0xfe/0xd00 [ 91.696737][ T144] queue_delayed_work_on+0x12d/0x1f0 [ 91.702544][ T144] kvfree_call_rcu+0x4bc/0x7d0 [ 91.707826][ T144] rtnl_register_internal+0x489/0x590 [ 91.713728][ T144] rtnl_register+0x2e/0x70 [ 91.718661][ T144] ip_rt_init+0x2e0/0x3a0 [ 91.723580][ T144] ip_init+0xa/0x20 [ 91.727888][ T144] inet_init+0x28b/0x3a0 [ 91.732633][ T144] do_one_initcall+0x272/0x730 [ 91.737916][ T144] do_initcall_level+0x137/0x1f0 [ 91.743352][ T144] do_initcalls+0x4b/0x90 [ 91.748187][ T144] kernel_init_freeable+0x3e9/0x570 [ 91.753902][ T144] kernel_init+0x19/0x1b0 [ 91.758737][ T144] ret_from_fork+0x1f/0x30 [ 91.763652][ T144] [ 91.763652][ T144] -> #0 (krc.lock){..-.}-{2:2}: [ 91.770681][ T144] __lock_acquire+0x2c42/0x7d10 [ 91.776050][ T144] lock_acquire+0x19e/0x400 [ 91.781065][ T144] _raw_spin_lock+0x2a/0x40 [ 91.786185][ T144] kvfree_call_rcu+0x18d/0x7d0 [ 91.791647][ T144] trie_delete_elem+0x58c/0x710 [ 91.797100][ T144] bpf_prog_2c29ac5cdc6b1842+0x3a/0x58c [ 91.803172][ T144] bpf_trace_run3+0x19e/0x350 [ 91.808374][ T144] enqueue_timer+0x394/0x520 [ 91.813488][ T144] __mod_timer+0x911/0xd00 [ 91.818452][ T144] queue_delayed_work_on+0x12d/0x1f0 [ 91.824251][ T144] process_one_work+0x85f/0x1010 [ 91.829714][ T144] worker_thread+0xaa6/0x1290 [ 91.834904][ T144] kthread+0x436/0x520 [ 91.839485][ T144] ret_from_fork+0x1f/0x30 [ 91.844417][ T144] [ 91.844417][ T144] other info that might help us debug this: [ 91.844417][ T144] [ 91.854642][ T144] Chain exists of: [ 91.854642][ T144] krc.lock --> &base->lock --> &trie->lock [ 91.854642][ T144] [ 91.866360][ T144] Possible unsafe locking scenario: [ 91.866360][ T144] [ 91.873808][ T144] CPU0 CPU1 [ 91.879167][ T144] ---- ---- [ 91.884509][ T144] lock(&trie->lock); [ 91.888569][ T144] lock(&base->lock); [ 91.895160][ T144] lock(&trie->lock); [ 91.901823][ T144] lock(krc.lock); [ 91.905611][ T144] [ 91.905611][ T144] *** DEADLOCK *** [ 91.905611][ T144] [ 91.913740][ T144] 5 locks held by kworker/u4:1/144: [ 91.918920][ T144] #0: ffff88802cd0f138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 91.929598][ T144] #1: ffffc9000170fd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 91.942104][ T144] #2: ffff8880b90280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 91.951407][ T144] #3: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 91.960698][ T144] #4: ffff888023ba5a38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 91.969979][ T144] [ 91.969979][ T144] stack backtrace: [ 91.975868][ T144] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 91.983314][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.993364][ T144] Workqueue: bat_events batadv_nc_worker [ 91.999014][ T144] Call Trace: [ 92.002288][ T144] [ 92.005210][ T144] dump_stack_lvl+0x188/0x250 [ 92.009890][ T144] ? load_image+0x400/0x400 [ 92.014563][ T144] ? show_regs_print_info+0x20/0x20 [ 92.020159][ T144] ? print_circular_bug+0x12b/0x1a0 [ 92.026806][ T144] check_noncircular+0x296/0x330 [ 92.032769][ T144] ? add_chain_block+0x940/0x940 [ 92.037848][ T144] ? lockdep_lock+0xf1/0x1f0 [ 92.042454][ T144] ? mark_lock+0x94/0x320 [ 92.046819][ T144] ? _find_first_zero_bit+0xce/0xf0 [ 92.052040][ T144] __lock_acquire+0x2c42/0x7d10 [ 92.057040][ T144] ? stack_trace_save+0xa6/0xf0 [ 92.061978][ T144] ? stack_depot_save+0x404/0x440 [ 92.066985][ T144] ? verify_lock_unused+0x140/0x140 [ 92.072179][ T144] ? kasan_save_stack+0x4b/0x60 [ 92.077009][ T144] ? kasan_save_stack+0x35/0x60 [ 92.081871][ T144] ? kasan_record_aux_stack+0xb8/0x100 [ 92.087309][ T144] ? kvfree_call_rcu+0x105/0x7d0 [ 92.092225][ T144] ? trie_delete_elem+0x58c/0x710 [ 92.097229][ T144] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x58c [ 92.102925][ T144] ? bpf_trace_run3+0x19e/0x350 [ 92.107756][ T144] ? enqueue_timer+0x394/0x520 [ 92.112500][ T144] ? __mod_timer+0x911/0xd00 [ 92.117069][ T144] ? queue_delayed_work_on+0x12d/0x1f0 [ 92.122504][ T144] ? process_one_work+0x85f/0x1010 [ 92.127736][ T144] ? worker_thread+0xaa6/0x1290 [ 92.132590][ T144] ? kthread+0x436/0x520 [ 92.136834][ T144] ? ret_from_fork+0x1f/0x30 [ 92.141424][ T144] lock_acquire+0x19e/0x400 [ 92.145926][ T144] ? kvfree_call_rcu+0x18d/0x7d0 [ 92.150856][ T144] ? read_lock_is_recursive+0x10/0x10 [ 92.156219][ T144] _raw_spin_lock+0x2a/0x40 [ 92.160736][ T144] ? kvfree_call_rcu+0x18d/0x7d0 [ 92.165661][ T144] kvfree_call_rcu+0x18d/0x7d0 [ 92.170404][ T144] ? call_rcu+0x950/0x950 [ 92.174712][ T144] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 92.180146][ T144] ? _raw_spin_lock+0x40/0x40 [ 92.184828][ T144] ? longest_prefix_match+0x4c6/0x660 [ 92.190184][ T144] trie_delete_elem+0x58c/0x710 [ 92.195018][ T144] bpf_prog_2c29ac5cdc6b1842+0x3a/0x58c [ 92.200545][ T144] bpf_trace_run3+0x19e/0x350 [ 92.205290][ T144] ? do_raw_spin_unlock+0x11d/0x230 [ 92.210485][ T144] ? bpf_trace_run2+0x2e0/0x2e0 [ 92.215489][ T144] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 92.221361][ T144] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 92.226800][ T144] ? _raw_spin_lock+0x40/0x40 [ 92.231550][ T144] enqueue_timer+0x394/0x520 [ 92.236131][ T144] __mod_timer+0x911/0xd00 [ 92.240533][ T144] ? queue_delayed_work_on+0xcf/0x1f0 [ 92.245903][ T144] queue_delayed_work_on+0x12d/0x1f0 [ 92.251451][ T144] ? delayed_work_timer_fn+0x80/0x80 [ 92.256907][ T144] ? __msecs_to_jiffies+0x1a/0x40 [ 92.261932][ T144] ? batadv_nc_worker+0x4b2/0x5c0 [ 92.267064][ T144] process_one_work+0x85f/0x1010 [ 92.272011][ T144] ? worker_detach_from_pool+0x240/0x240 [ 92.278053][ T144] ? lockdep_hardirqs_off+0x70/0x100 [ 92.283571][ T144] ? _raw_spin_lock_irq+0xb7/0xf0 [ 92.288613][ T144] ? _raw_spin_lock_irqsave+0x100/0x100 [ 92.294209][ T144] ? wq_worker_running+0x97/0x170 [ 92.299699][ T144] worker_thread+0xaa6/0x1290 [ 92.304541][ T144] kthread+0x436/0x520 [ 92.308905][ T144] ? rcu_lock_release+0x20/0x20 [ 92.313759][ T144] ? kthread_blkcg+0xd0/0xd0 [ 92.318420][ T144] ret_from_fork+0x1f/0x30 [ 92.322839][ T144]