[ 77.398534][ T145] device veth1_macvtap left promiscuous mode [ 77.404611][ T145] device veth0_macvtap left promiscuous mode [ 77.412331][ T145] device veth1_vlan left promiscuous mode [ 77.418927][ T145] device veth0_vlan left promiscuous mode [ 77.544675][ T145] team0 (unregistering): Port device team_slave_1 removed [ 77.559701][ T145] team0 (unregistering): Port device team_slave_0 removed [ 77.571075][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.584170][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.629983][ T145] bond0 (unregistering): Released all slaves [ 81.609129][ T2857] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. 2026/04/13 17:07:27 parsed 1 programs [ 96.439775][ T4587] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 97.888684][ T4604] chnl_net:caif_netlink_parms(): no params data found [ 97.926312][ T4604] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.934653][ T4604] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.942712][ T4604] device bridge_slave_0 entered promiscuous mode [ 97.950804][ T4604] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.959122][ T4604] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.967354][ T4604] device bridge_slave_1 entered promiscuous mode [ 97.989596][ T4604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.001759][ T4604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.029325][ T4604] team0: Port device team_slave_0 added [ 98.036558][ T4604] team0: Port device team_slave_1 added [ 98.052878][ T4604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.060292][ T4604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.087427][ T4604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.102397][ T4604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.110305][ T4604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.137070][ T4604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.163705][ T4604] device hsr_slave_0 entered promiscuous mode [ 98.170844][ T4604] device hsr_slave_1 entered promiscuous mode [ 98.688940][ T4604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.709561][ T4604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.721853][ T4604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.737935][ T4604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.781736][ T4604] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.789143][ T4604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.796613][ T4604] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.803764][ T4604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.888903][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.908218][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.950712][ T4604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.968327][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.988307][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.012175][ T4604] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.030003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.041668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.055792][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.063124][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.081033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.091050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.099951][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.107323][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.119602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.138283][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.160396][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.178506][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.198232][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.237206][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.247877][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.267269][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.287176][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.307901][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.317319][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.343781][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.554402][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.577006][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.589664][ T4604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.639561][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.650257][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.690936][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.700063][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.719379][ T4604] device veth0_vlan entered promiscuous mode [ 99.728156][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.748384][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.779885][ T4604] device veth1_vlan entered promiscuous mode [ 99.822024][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.830875][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.840126][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.849830][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.861090][ T4604] device veth0_macvtap entered promiscuous mode [ 99.879196][ T4604] device veth1_macvtap entered promiscuous mode [ 99.902288][ T4604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.912234][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.922127][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.932168][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.941519][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.954558][ T4604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.965668][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.975414][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.986597][ T4604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.997194][ T4604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.006052][ T4604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.020700][ T4604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.282148][ T145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.648110][ T764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.656052][ T764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.691469][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.702645][ T764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.711362][ T764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.719898][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.113773][ T145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.241324][ T145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.322475][ T145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.303541][ T145] device hsr_slave_0 left promiscuous mode [ 105.318871][ T145] device hsr_slave_1 left promiscuous mode [ 105.349118][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.365985][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.376388][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.384651][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.393854][ T145] device bridge_slave_1 left promiscuous mode [ 105.401318][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.418451][ T145] device bridge_slave_0 left promiscuous mode [ 105.425006][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.449510][ T145] device veth1_macvtap left promiscuous mode [ 105.456115][ T145] device veth0_macvtap left promiscuous mode [ 105.470158][ T145] device veth1_vlan left promiscuous mode [ 105.476429][ T145] device veth0_vlan left promiscuous mode [ 105.677755][ T145] team0 (unregistering): Port device team_slave_1 removed [ 105.698240][ T145] team0 (unregistering): Port device team_slave_0 removed [ 105.715002][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.730999][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.779008][ T145] bond0 (unregistering): Released all slaves 2026/04/13 17:07:40 executed programs: 0 [ 106.621504][ T5065] chnl_net:caif_netlink_parms(): no params data found [ 106.721661][ T5065] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.729230][ T5065] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.737548][ T5065] device bridge_slave_0 entered promiscuous mode [ 106.758161][ T5065] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.777011][ T5065] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.785857][ T5065] device bridge_slave_1 entered promiscuous mode [ 106.816345][ T5065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.830193][ T5065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.871517][ T5065] team0: Port device team_slave_0 added [ 106.881034][ T5065] team0: Port device team_slave_1 added [ 106.918505][ T5065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.925659][ T5065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.957458][ T5065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.971830][ T5065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.979659][ T5065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.011806][ T5065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.084464][ T5065] device hsr_slave_0 entered promiscuous mode [ 107.092793][ T5065] device hsr_slave_1 entered promiscuous mode [ 107.651895][ T5065] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.668376][ T5065] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.695452][ T5065] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.720153][ T5065] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.831763][ T5065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.860701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.871084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.883089][ T5065] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.902819][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.912802][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.922244][ T764] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.929599][ T764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.938762][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.954394][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.974852][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.985262][ T764] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.992645][ T764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.012836][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.029239][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.039104][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.068654][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.086416][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.094661][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.103876][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.114246][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.123562][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.138349][ T5065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.159342][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.171473][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.181480][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.340869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.348538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.361160][ T5065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.381328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.392431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.412881][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.421676][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.431566][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.439935][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.450436][ T5065] device veth0_vlan entered promiscuous mode [ 108.466015][ T5065] device veth1_vlan entered promiscuous mode [ 108.490876][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 108.496915][ T1334] Bluetooth: hci0: command 0x0409 tx timeout [ 108.499736][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 108.513798][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.523432][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.534957][ T5065] device veth0_macvtap entered promiscuous mode [ 108.546233][ T5065] device veth1_macvtap entered promiscuous mode [ 108.565685][ T5065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.575548][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.585044][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.593505][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.604079][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.616614][ T5065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.624633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.633835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.645588][ T5065] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.656225][ T5065] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.665803][ T5065] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.677431][ T5065] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.775010][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.787970][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.800180][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.823413][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.841580][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.869688][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.139858][ T144] [ 109.142224][ T144] ====================================================== [ 109.149236][ T144] WARNING: possible circular locking dependency detected [ 109.156603][ T144] syzkaller #0 Not tainted [ 109.161004][ T144] ------------------------------------------------------ [ 109.168117][ T144] kworker/u4:1/144 is trying to acquire lock: [ 109.174310][ T144] ffff8880b9027eb8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x18d/0x7d0 [ 109.183212][ T144] [ 109.183212][ T144] but task is already holding lock: [ 109.190558][ T144] ffff888024bc4238 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 109.199412][ T144] [ 109.199412][ T144] which lock already depends on the new lock. [ 109.199412][ T144] [ 109.210224][ T144] [ 109.210224][ T144] the existing dependency chain (in reverse order) is: [ 109.219237][ T144] [ 109.219237][ T144] -> #2 (&trie->lock){..-.}-{2:2}: [ 109.226697][ T144] _raw_spin_lock_irqsave+0xb0/0x100 [ 109.232592][ T144] trie_delete_elem+0x90/0x710 [ 109.237893][ T144] bpf_prog_2c29ac5cdc6b1842+0x3a/0xe34 [ 109.243942][ T144] bpf_trace_run3+0x19e/0x350 [ 109.249125][ T144] enqueue_timer+0x394/0x520 [ 109.254222][ T144] __mod_timer+0x911/0xd00 [ 109.259141][ T144] queue_delayed_work_on+0x12d/0x1f0 [ 109.264935][ T144] srcu_gp_start_if_needed+0x60d/0x960 [ 109.270997][ T144] rcu_core+0x9d2/0x1670 [ 109.276004][ T144] handle_softirqs+0x339/0x830 [ 109.281764][ T144] __irq_exit_rcu+0x13b/0x230 [ 109.286960][ T144] irq_exit_rcu+0x5/0x20 [ 109.291741][ T144] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 109.297970][ T144] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 109.304543][ T144] debug_lockdep_rcu_enabled+0x0/0x30 [ 109.310503][ T144] count_memcg_event_mm+0x2a5/0x370 [ 109.317943][ T144] handle_mm_fault+0x134/0x4410 [ 109.323313][ T144] do_user_addr_fault+0x489/0xc80 [ 109.328887][ T144] exc_page_fault+0x60/0x100 [ 109.334159][ T144] asm_exc_page_fault+0x22/0x30 [ 109.339791][ T144] copy_user_enhanced_fast_string+0xe/0x40 [ 109.346715][ T144] _copy_from_user+0xfa/0x170 [ 109.351901][ T144] map_update_elem+0x5b8/0x770 [ 109.357311][ T144] __sys_bpf+0x46b/0x6f0 [ 109.362148][ T144] __x64_sys_bpf+0x78/0x90 [ 109.367182][ T144] do_syscall_64+0x4c/0xa0 [ 109.372101][ T144] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.378602][ T144] [ 109.378602][ T144] -> #1 (&base->lock){-.-.}-{2:2}: [ 109.385879][ T144] _raw_spin_lock_irqsave+0xb0/0x100 [ 109.391783][ T144] lock_timer_base+0x123/0x270 [ 109.397069][ T144] __mod_timer+0xfe/0xd00 [ 109.401916][ T144] queue_delayed_work_on+0x12d/0x1f0 [ 109.407766][ T144] kvfree_call_rcu+0x4bc/0x7d0 [ 109.413039][ T144] rtnl_register_internal+0x489/0x590 [ 109.419020][ T144] rtnl_register+0x2e/0x70 [ 109.424313][ T144] ip_rt_init+0x2e0/0x3a0 [ 109.429342][ T144] ip_init+0xa/0x20 [ 109.434014][ T144] inet_init+0x28b/0x3a0 [ 109.439122][ T144] do_one_initcall+0x272/0x730 [ 109.444399][ T144] do_initcall_level+0x137/0x1f0 [ 109.449937][ T144] do_initcalls+0x4b/0x90 [ 109.454861][ T144] kernel_init_freeable+0x3e9/0x570 [ 109.460650][ T144] kernel_init+0x19/0x1b0 [ 109.465593][ T144] ret_from_fork+0x1f/0x30 [ 109.470572][ T144] [ 109.470572][ T144] -> #0 (krc.lock){..-.}-{2:2}: [ 109.477586][ T144] __lock_acquire+0x2c42/0x7d10 [ 109.483036][ T144] lock_acquire+0x19e/0x400 [ 109.488137][ T144] _raw_spin_lock+0x2a/0x40 [ 109.493250][ T144] kvfree_call_rcu+0x18d/0x7d0 [ 109.498710][ T144] trie_delete_elem+0x58c/0x710 [ 109.504187][ T144] bpf_prog_2c29ac5cdc6b1842+0x3a/0xe34 [ 109.510413][ T144] bpf_trace_run3+0x19e/0x350 [ 109.515596][ T144] enqueue_timer+0x394/0x520 [ 109.520692][ T144] __mod_timer+0x911/0xd00 [ 109.525613][ T144] queue_delayed_work_on+0x12d/0x1f0 [ 109.531703][ T144] batadv_forw_packet_queue+0x221/0x260 [ 109.538163][ T144] batadv_iv_ogm_schedule+0x81c/0xec0 [ 109.544037][ T144] batadv_iv_send_outstanding_bat_ogm_packet+0x72f/0x840 [ 109.551566][ T144] process_one_work+0x85f/0x1010 [ 109.557008][ T144] worker_thread+0xaa6/0x1290 [ 109.562291][ T144] kthread+0x436/0x520 [ 109.566861][ T144] ret_from_fork+0x1f/0x30 [ 109.571797][ T144] [ 109.571797][ T144] other info that might help us debug this: [ 109.571797][ T144] [ 109.582003][ T144] Chain exists of: [ 109.582003][ T144] krc.lock --> &base->lock --> &trie->lock [ 109.582003][ T144] [ 109.593724][ T144] Possible unsafe locking scenario: [ 109.593724][ T144] [ 109.601152][ T144] CPU0 CPU1 [ 109.606496][ T144] ---- ---- [ 109.611844][ T144] lock(&trie->lock); [ 109.615914][ T144] lock(&base->lock); [ 109.622485][ T144] lock(&trie->lock); [ 109.629052][ T144] lock(krc.lock); [ 109.632846][ T144] [ 109.632846][ T144] *** DEADLOCK *** [ 109.632846][ T144] [ 109.640971][ T144] 7 locks held by kworker/u4:1/144: [ 109.646320][ T144] #0: ffff88814ccb0938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 109.657180][ T144] #1: ffffc900016bfd00 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 109.670903][ T144] #2: ffff888077bda108 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{3:3}, at: batadv_iv_ogm_schedule+0xe1/0xec0 [ 109.683530][ T144] #3: ffff88807b36cd18 (&bat_priv->forw_bat_list_lock){+...}-{2:2}, at: batadv_forw_packet_queue+0x33/0x260 [ 109.695195][ T144] #4: ffff8880b90280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 109.704852][ T144] #5: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 109.714231][ T144] #6: ffff888024bc4238 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 109.723521][ T144] [ 109.723521][ T144] stack backtrace: [ 109.729421][ T144] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 109.736869][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 109.747173][ T144] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 109.754981][ T144] Call Trace: [ 109.758630][ T144] [ 109.761562][ T144] dump_stack_lvl+0x188/0x250 [ 109.766242][ T144] ? load_image+0x400/0x400 [ 109.770821][ T144] ? show_regs_print_info+0x20/0x20 [ 109.776159][ T144] ? print_circular_bug+0x12b/0x1a0 [ 109.781694][ T144] check_noncircular+0x296/0x330 [ 109.786717][ T144] ? add_chain_block+0x940/0x940 [ 109.791642][ T144] ? lockdep_lock+0xf1/0x1f0 [ 109.796224][ T144] ? mark_lock+0x94/0x320 [ 109.800537][ T144] __lock_acquire+0x2c42/0x7d10 [ 109.805383][ T144] ? verify_lock_unused+0x140/0x140 [ 109.810588][ T144] lock_acquire+0x19e/0x400 [ 109.815192][ T144] ? kvfree_call_rcu+0x18d/0x7d0 [ 109.820124][ T144] ? read_lock_is_recursive+0x10/0x10 [ 109.825665][ T144] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 109.831570][ T144] ? _raw_spin_unlock+0x40/0x40 [ 109.836429][ T144] ? debug_object_active_state+0x6a/0x380 [ 109.842410][ T144] _raw_spin_lock+0x2a/0x40 [ 109.846908][ T144] ? kvfree_call_rcu+0x18d/0x7d0 [ 109.851915][ T144] kvfree_call_rcu+0x18d/0x7d0 [ 109.856752][ T144] ? call_rcu+0x950/0x950 [ 109.861075][ T144] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 109.867190][ T144] ? _raw_spin_lock+0x40/0x40 [ 109.871967][ T144] ? longest_prefix_match+0x452/0x660 [ 109.877531][ T144] trie_delete_elem+0x58c/0x710 [ 109.882473][ T144] bpf_prog_2c29ac5cdc6b1842+0x3a/0xe34 [ 109.888102][ T144] bpf_trace_run3+0x19e/0x350 [ 109.892894][ T144] ? do_raw_spin_unlock+0x11d/0x230 [ 109.898152][ T144] ? bpf_trace_run2+0x2e0/0x2e0 [ 109.903135][ T144] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 109.909032][ T144] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 109.914602][ T144] ? _raw_spin_lock+0x40/0x40 [ 109.919565][ T144] enqueue_timer+0x394/0x520 [ 109.924329][ T144] __mod_timer+0x911/0xd00 [ 109.928737][ T144] ? queue_delayed_work_on+0xcf/0x1f0 [ 109.934619][ T144] queue_delayed_work_on+0x12d/0x1f0 [ 109.939905][ T144] ? delayed_work_timer_fn+0x80/0x80 [ 109.945198][ T144] ? __rwlock_init+0x140/0x140 [ 109.950072][ T144] ? batadv_iv_ogm_queue_add+0xa06/0xcf0 [ 109.955806][ T144] ? batadv_forw_packet_queue+0x33/0x260 [ 109.961996][ T144] batadv_forw_packet_queue+0x221/0x260 [ 109.967597][ T144] batadv_iv_ogm_schedule+0x81c/0xec0 [ 109.973226][ T144] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 109.980688][ T144] batadv_iv_send_outstanding_bat_ogm_packet+0x72f/0x840 [ 109.987903][ T144] ? try_to_wake_up+0x6cf/0x1050 [ 109.992944][ T144] process_one_work+0x85f/0x1010 [ 109.997959][ T144] ? worker_detach_from_pool+0x240/0x240 [ 110.003595][ T144] ? lockdep_hardirqs_off+0x70/0x100 [ 110.009108][ T144] ? _raw_spin_lock_irq+0xb7/0xf0 [ 110.014224][ T144] ? _raw_spin_lock_irqsave+0x100/0x100 [ 110.020199][ T144] ? wq_worker_running+0x97/0x170 [ 110.025546][ T144] worker_thread+0xaa6/0x1290 [ 110.030317][ T144] kthread+0x436/0x520 [ 110.034376][ T144] ? rcu_lock_release+0x20/0x20 [ 110.039211][ T144] ? kthread_blkcg+0xd0/0xd0 [ 110.043815][ T144] ret_from_fork+0x1f/0x30 [ 110.048224][ T144]