Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. 2026/05/23 21:10:16 ignoring optional flag "type"="gce" 2026/05/23 21:10:16 parsed 1 programs 2026/05/23 21:10:18 executed programs: 0 [ 80.581600][ T4502] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 80.727347][ T4527] chnl_net:caif_netlink_parms(): no params data found [ 80.766161][ T4527] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.773642][ T4527] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.782068][ T4527] device bridge_slave_0 entered promiscuous mode [ 80.790863][ T4527] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.798651][ T4527] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.807351][ T4527] device bridge_slave_1 entered promiscuous mode [ 80.829881][ T4527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.841981][ T4527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.866205][ T4527] team0: Port device team_slave_0 added [ 80.874476][ T4527] team0: Port device team_slave_1 added [ 80.892049][ T4527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.899426][ T4527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.926507][ T4527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.939454][ T4527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.946668][ T4527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.973555][ T4527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.002532][ T4527] device hsr_slave_0 entered promiscuous mode [ 81.010123][ T4527] device hsr_slave_1 entered promiscuous mode [ 81.532462][ T4527] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.543682][ T4527] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.554057][ T4527] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.564430][ T4527] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.590768][ T4527] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.598112][ T4527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.605789][ T4527] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.614074][ T4527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.624995][ T13] cfg80211: failed to load regulatory.db [ 81.707401][ T4527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.722940][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.748307][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.764040][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.779783][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 81.811132][ T4527] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.837644][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.852922][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.869717][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.877075][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.908866][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.925327][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.939238][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.946606][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.967845][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.978850][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.989432][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.017570][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.027210][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.050987][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.063517][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.090387][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.107023][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.129031][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.138060][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.159343][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.360195][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.377301][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.390539][ T4527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.449332][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.461076][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.482130][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.491972][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.504523][ T4527] device veth0_vlan entered promiscuous mode [ 82.514733][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.523907][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.534554][ T4527] device veth1_vlan entered promiscuous mode [ 82.558751][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.568490][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.577725][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.587615][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.600948][ T4527] device veth0_macvtap entered promiscuous mode [ 82.612521][ T4527] device veth1_macvtap entered promiscuous mode [ 82.630593][ T4527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.638675][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.647967][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.656425][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.658892][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 82.665362][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.686428][ T4527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.695332][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.705384][ T1467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.717454][ T4527] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.727819][ T4527] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.738334][ T4527] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.748793][ T4527] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.127915][ T144] [ 83.130383][ T144] ====================================================== [ 83.137935][ T144] WARNING: possible circular locking dependency detected [ 83.145315][ T144] syzkaller #0 Not tainted [ 83.149745][ T144] ------------------------------------------------------ [ 83.156882][ T144] kworker/u4:1/144 is trying to acquire lock: [ 83.163033][ T144] ffff8880b9027eb8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x18d/0x7d0 [ 83.171654][ T144] [ 83.171654][ T144] but task is already holding lock: [ 83.179405][ T144] ffff8880259ab238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 83.188378][ T144] [ 83.188378][ T144] which lock already depends on the new lock. [ 83.188378][ T144] [ 83.198978][ T144] [ 83.198978][ T144] the existing dependency chain (in reverse order) is: [ 83.208180][ T144] [ 83.208180][ T144] -> #2 (&trie->lock){....}-{2:2}: [ 83.215744][ T144] _raw_spin_lock_irqsave+0xb0/0x100 [ 83.222075][ T144] trie_delete_elem+0x90/0x710 [ 83.227624][ T144] bpf_prog_2c29ac5cdc6b1842+0x3a/0xab4 [ 83.233905][ T144] bpf_trace_run3+0x19e/0x350 [ 83.239198][ T144] enqueue_timer+0x394/0x520 [ 83.244308][ T144] __mod_timer+0x911/0xd00 [ 83.249415][ T144] queue_delayed_work_on+0x12d/0x1f0 [ 83.255482][ T144] process_one_work+0x85f/0x1010 [ 83.261372][ T144] worker_thread+0xaa6/0x1290 [ 83.266744][ T144] kthread+0x436/0x520 [ 83.271370][ T144] ret_from_fork+0x1f/0x30 [ 83.276588][ T144] [ 83.276588][ T144] -> #1 (&base->lock){-.-.}-{2:2}: [ 83.284491][ T144] _raw_spin_lock_irqsave+0xb0/0x100 [ 83.290484][ T144] lock_timer_base+0x123/0x270 [ 83.295868][ T144] __mod_timer+0xfe/0xd00 [ 83.301013][ T144] queue_delayed_work_on+0x12d/0x1f0 [ 83.306914][ T144] kvfree_call_rcu+0x4bc/0x7d0 [ 83.312532][ T144] rtnl_register_internal+0x489/0x590 [ 83.318643][ T144] rtnl_register+0x2e/0x70 [ 83.323842][ T144] ip_rt_init+0x2e0/0x3a0 [ 83.328868][ T144] ip_init+0xa/0x20 [ 83.333381][ T144] inet_init+0x28b/0x3a0 [ 83.338317][ T144] do_one_initcall+0x272/0x730 [ 83.343860][ T144] do_initcall_level+0x137/0x1f0 [ 83.349318][ T144] do_initcalls+0x4b/0x90 [ 83.354563][ T144] kernel_init_freeable+0x3e9/0x570 [ 83.360541][ T144] kernel_init+0x19/0x1b0 [ 83.365491][ T144] ret_from_fork+0x1f/0x30 [ 83.370425][ T144] [ 83.370425][ T144] -> #0 (krc.lock){..-.}-{2:2}: [ 83.377998][ T144] __lock_acquire+0x2c42/0x7d10 [ 83.384115][ T144] lock_acquire+0x19e/0x400 [ 83.389253][ T144] _raw_spin_lock+0x2a/0x40 [ 83.394937][ T144] kvfree_call_rcu+0x18d/0x7d0 [ 83.400517][ T144] trie_delete_elem+0x58c/0x710 [ 83.405985][ T144] bpf_prog_2c29ac5cdc6b1842+0x3a/0xab4 [ 83.412433][ T144] bpf_trace_run3+0x19e/0x350 [ 83.418254][ T144] enqueue_timer+0x394/0x520 [ 83.423470][ T144] __mod_timer+0x911/0xd00 [ 83.429103][ T144] queue_delayed_work_on+0x12d/0x1f0 [ 83.435817][ T144] process_one_work+0x85f/0x1010 [ 83.441670][ T144] worker_thread+0xaa6/0x1290 [ 83.447219][ T144] kthread+0x436/0x520 [ 83.451825][ T144] ret_from_fork+0x1f/0x30 [ 83.457086][ T144] [ 83.457086][ T144] other info that might help us debug this: [ 83.457086][ T144] [ 83.468162][ T144] Chain exists of: [ 83.468162][ T144] krc.lock --> &base->lock --> &trie->lock [ 83.468162][ T144] [ 83.480110][ T144] Possible unsafe locking scenario: [ 83.480110][ T144] [ 83.488053][ T144] CPU0 CPU1 [ 83.493649][ T144] ---- ---- [ 83.499724][ T144] lock(&trie->lock); [ 83.503887][ T144] lock(&base->lock); [ 83.510929][ T144] lock(&trie->lock); [ 83.517717][ T144] lock(krc.lock); [ 83.521529][ T144] [ 83.521529][ T144] *** DEADLOCK *** [ 83.521529][ T144] [ 83.530110][ T144] 5 locks held by kworker/u4:1/144: [ 83.535703][ T144] #0: ffff88814cdd0938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 83.546625][ T144] #1: ffffc900016bfd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 83.559388][ T144] #2: ffff8880b90280d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6bf/0xd00 [ 83.568607][ T144] #3: ffffffff8c31f320 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 83.578271][ T144] #4: ffff8880259ab238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 83.587796][ T144] [ 83.587796][ T144] stack backtrace: [ 83.593832][ T144] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 83.601462][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 83.611999][ T144] Workqueue: bat_events batadv_nc_worker [ 83.617740][ T144] Call Trace: [ 83.621196][ T144] [ 83.624244][ T144] dump_stack_lvl+0x188/0x250 [ 83.629278][ T144] ? load_image+0x400/0x400 [ 83.633956][ T144] ? show_regs_print_info+0x20/0x20 [ 83.639455][ T144] ? print_circular_bug+0x12b/0x1a0 [ 83.645057][ T144] check_noncircular+0x296/0x330 [ 83.650253][ T144] ? add_chain_block+0x940/0x940 [ 83.655204][ T144] ? lockdep_lock+0xf1/0x1f0 [ 83.659988][ T144] ? mark_lock+0x94/0x320 [ 83.664456][ T144] __lock_acquire+0x2c42/0x7d10 [ 83.669775][ T144] ? verify_lock_unused+0x140/0x140 [ 83.675178][ T144] lock_acquire+0x19e/0x400 [ 83.679683][ T144] ? kvfree_call_rcu+0x18d/0x7d0 [ 83.684974][ T144] ? read_lock_is_recursive+0x10/0x10 [ 83.690527][ T144] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 83.696523][ T144] ? _raw_spin_unlock+0x40/0x40 [ 83.701562][ T144] ? debug_object_active_state+0x6a/0x380 [ 83.707372][ T144] _raw_spin_lock+0x2a/0x40 [ 83.711877][ T144] ? kvfree_call_rcu+0x18d/0x7d0 [ 83.716851][ T144] kvfree_call_rcu+0x18d/0x7d0 [ 83.721705][ T144] ? call_rcu+0x950/0x950 [ 83.727349][ T144] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 83.733433][ T144] ? _raw_spin_lock+0x40/0x40 [ 83.738251][ T144] ? longest_prefix_match+0x350/0x660 [ 83.744046][ T144] trie_delete_elem+0x58c/0x710 [ 83.748957][ T144] bpf_prog_2c29ac5cdc6b1842+0x3a/0xab4 [ 83.754680][ T144] bpf_trace_run3+0x19e/0x350 [ 83.759538][ T144] ? do_raw_spin_unlock+0x11d/0x230 [ 83.765027][ T144] ? bpf_trace_run2+0x2e0/0x2e0 [ 83.770080][ T144] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 83.776296][ T144] ? do_raw_spin_lock+0x128/0x2f0 [ 83.781738][ T144] enqueue_timer+0x394/0x520 [ 83.786619][ T144] __mod_timer+0x911/0xd00 [ 83.791384][ T144] ? queue_delayed_work_on+0xcf/0x1f0 [ 83.796961][ T144] queue_delayed_work_on+0x12d/0x1f0 [ 83.802814][ T144] ? delayed_work_timer_fn+0x80/0x80 [ 83.808213][ T144] ? __msecs_to_jiffies+0x1a/0x40 [ 83.813344][ T144] ? batadv_nc_worker+0x4b2/0x5c0 [ 83.818550][ T144] process_one_work+0x85f/0x1010 [ 83.823673][ T144] ? worker_detach_from_pool+0x240/0x240 [ 83.829401][ T144] ? lockdep_hardirqs_off+0x70/0x100 [ 83.835057][ T144] ? _raw_spin_lock_irq+0xb7/0xf0 [ 83.840255][ T144] ? _raw_spin_lock_irqsave+0x100/0x100 [ 83.845891][ T144] ? wq_worker_running+0x97/0x170 [ 83.851019][ T144] worker_thread+0xaa6/0x1290 [ 83.855973][ T144] kthread+0x436/0x520 [ 83.860131][ T144] ? rcu_lock_release+0x20/0x20 [ 83.864980][ T144] ? kthread_blkcg+0xd0/0xd0 [ 83.869654][ T144] ret_from_fork+0x1f/0x30 [ 83.874199][ T144]