Warning: Permanently added '10.128.1.193' (ED25519) to the list of known hosts. 2025/08/11 04:20:14 ignoring optional flag "sandboxArg"="0" 2025/08/11 04:20:15 parsed 1 programs [ 108.554709][ T4284] cgroup: Unknown subsys name 'net' [ 108.677283][ T4284] cgroup: Unknown subsys name 'rlimit' [ 110.224162][ T4284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 111.939017][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.947222][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.958558][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.983081][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.991304][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.999871][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.593951][ T4328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.603145][ T4328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.610786][ T4328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.619353][ T4328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.627259][ T4328] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 112.641300][ T4328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.438743][ T4341] chnl_net:caif_netlink_parms(): no params data found [ 113.508815][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.516341][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.525476][ T4341] device bridge_slave_0 entered promiscuous mode [ 113.538674][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.546062][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.555012][ T4341] device bridge_slave_1 entered promiscuous mode [ 113.587460][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.600252][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.626209][ T4341] team0: Port device team_slave_0 added [ 113.633684][ T4341] team0: Port device team_slave_1 added [ 113.656823][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.663964][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.690324][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.703645][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.710634][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.738049][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.790766][ T4341] device hsr_slave_0 entered promiscuous mode [ 113.798337][ T4341] device hsr_slave_1 entered promiscuous mode [ 113.899032][ T4341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.912248][ T4341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.922775][ T4341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.932437][ T4341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.963928][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.971233][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.979029][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.986349][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.026527][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.035420][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.063302][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.080563][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.092275][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.104863][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.125613][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.135445][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.144459][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.151726][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.170326][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.179221][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.187838][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.194995][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.212263][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.224600][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.235825][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.246611][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.271841][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.279880][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.289151][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.298257][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.307397][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.316427][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.324954][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.344882][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.548193][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.555823][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.568839][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.586608][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.596142][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.621136][ T4341] device veth0_vlan entered promiscuous mode [ 114.629209][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.639030][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.648694][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.657244][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.669904][ T4341] device veth1_vlan entered promiscuous mode [ 114.694949][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.705036][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.714457][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.723375][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.735324][ T4341] device veth0_macvtap entered promiscuous mode [ 114.749382][ T4341] device veth1_macvtap entered promiscuous mode [ 114.769415][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.778552][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.787846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.797474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.806280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.817357][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.829240][ T4341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.838375][ T4341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.847484][ T4341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.856688][ T4341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.868343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.877623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.015302][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/08/11 04:20:25 executed programs: 0 [ 116.180254][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.188500][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.197235][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.206411][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.215043][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 116.222766][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.359745][ T4382] chnl_net:caif_netlink_parms(): no params data found [ 116.407151][ T4382] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.414597][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.423454][ T4382] device bridge_slave_0 entered promiscuous mode [ 116.431963][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.439125][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.447624][ T4382] device bridge_slave_1 entered promiscuous mode [ 116.471005][ T4382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.482921][ T4382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.510304][ T4382] team0: Port device team_slave_0 added [ 116.517822][ T4382] team0: Port device team_slave_1 added [ 116.538251][ T4382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.545379][ T4382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.571521][ T4382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.587399][ T4382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.594491][ T4382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.620588][ T4382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.656516][ T4382] device hsr_slave_0 entered promiscuous mode [ 116.663974][ T4382] device hsr_slave_1 entered promiscuous mode [ 116.670553][ T4382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.678642][ T4382] Cannot create hsr debugfs directory [ 117.432699][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.261864][ T4328] Bluetooth: hci0: command 0x0409 tx timeout [ 119.621444][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.694477][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.351591][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 120.556792][ T4382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.569301][ T4382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.579518][ T4382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.590700][ T4382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.609955][ T46] device hsr_slave_0 left promiscuous mode [ 120.617026][ T46] device hsr_slave_1 left promiscuous mode [ 120.624162][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.631983][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.640397][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.648504][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.656956][ T46] device bridge_slave_1 left promiscuous mode [ 120.664510][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.677159][ T46] device bridge_slave_0 left promiscuous mode [ 120.684758][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.712808][ T46] device veth1_macvtap left promiscuous mode [ 120.719223][ T46] device veth0_macvtap left promiscuous mode [ 120.725848][ T46] device veth1_vlan left promiscuous mode [ 120.731997][ T46] device veth0_vlan left promiscuous mode [ 121.109688][ T46] team0 (unregistering): Port device team_slave_1 removed [ 121.137483][ T46] team0 (unregistering): Port device team_slave_0 removed [ 121.165690][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.194711][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.452074][ T46] bond0 (unregistering): Released all slaves [ 121.605960][ T4382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.623475][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.631494][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.642760][ T4382] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.653330][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.662656][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.672203][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.679482][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.688037][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.704044][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.714415][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.723377][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.730582][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.754168][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.763039][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.772049][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.784662][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.793759][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.802991][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.811708][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.820072][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.828805][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.855550][ T4382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.868131][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.877228][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.888509][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.107506][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.115371][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.133538][ T4382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.159914][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.170068][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.188641][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.197708][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.207283][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.215871][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.226168][ T4382] device veth0_vlan entered promiscuous mode [ 122.237001][ T4382] device veth1_vlan entered promiscuous mode [ 122.257821][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.266056][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 122.275005][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.283968][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.294722][ T4382] device veth0_macvtap entered promiscuous mode [ 122.314798][ T4382] device veth1_macvtap entered promiscuous mode [ 122.330347][ T4382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.338770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.347082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.355657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.364638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.386576][ T4382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.394034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.402994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.414393][ T4382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.423471][ T4382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.431036][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 122.432329][ T4382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.447455][ T4382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.518336][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.527843][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.542790][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.554770][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/08/11 04:20:31 executed programs: 2 [ 122.564647][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.582493][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.712267][ T32] [ 122.714636][ T32] ====================================================== [ 122.721654][ T32] WARNING: possible circular locking dependency detected [ 122.728698][ T32] 6.1.147-syzkaller #0 Not tainted [ 122.733808][ T32] ------------------------------------------------------ [ 122.740832][ T32] kworker/u4:2/32 is trying to acquire lock: [ 122.746815][ T32] ffff8880b8f281d8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x184/0x870 [ 122.755472][ T32] [ 122.755472][ T32] but task is already holding lock: [ 122.762846][ T32] ffff8880b8f28418 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x674/0xd20 [ 122.771394][ T32] [ 122.771394][ T32] which lock already depends on the new lock. [ 122.771394][ T32] [ 122.781810][ T32] [ 122.781810][ T32] the existing dependency chain (in reverse order) is: [ 122.790833][ T32] [ 122.790833][ T32] -> #1 (&base->lock){-.-.}-{2:2}: [ 122.798137][ T32] _raw_spin_lock_irqsave+0xa4/0xf0 [ 122.803890][ T32] lock_timer_base+0x123/0x270 [ 122.809187][ T32] __mod_timer+0x117/0xd20 [ 122.814140][ T32] queue_delayed_work_on+0x126/0x1e0 [ 122.819967][ T32] kvfree_call_rcu+0x4cb/0x870 [ 122.825267][ T32] rtnl_register_internal+0x489/0x590 [ 122.831178][ T32] rtnl_register+0x2e/0x70 [ 122.836125][ T32] ip_rt_init+0x323/0x3b5 [ 122.840980][ T32] ip_init+0xa/0x14 [ 122.845328][ T32] inet_init+0x2bd/0x3cf [ 122.850099][ T32] do_one_initcall+0x214/0x7a0 [ 122.855393][ T32] do_initcall_level+0x137/0x1e4 [ 122.860865][ T32] do_initcalls+0x4b/0x8a [ 122.865718][ T32] kernel_init_freeable+0x3fa/0x5ac [ 122.871439][ T32] kernel_init+0x19/0x1b0 [ 122.876295][ T32] ret_from_fork+0x1f/0x30 [ 122.881250][ T32] [ 122.881250][ T32] -> #0 (krc.lock){..-.}-{2:2}: [ 122.888294][ T32] __lock_acquire+0x2cf8/0x7c50 [ 122.893675][ T32] lock_acquire+0x1b4/0x490 [ 122.898703][ T32] _raw_spin_lock+0x2a/0x40 [ 122.903731][ T32] kvfree_call_rcu+0x184/0x870 [ 122.909024][ T32] trie_delete_elem+0x52d/0x690 [ 122.914405][ T32] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 122.920401][ T32] bpf_trace_run3+0x1e3/0x400 [ 122.925625][ T32] enqueue_timer+0x411/0x5c0 [ 122.930913][ T32] __mod_timer+0x8e1/0xd20 [ 122.935861][ T32] queue_delayed_work_on+0x126/0x1e0 [ 122.941677][ T32] process_one_work+0x898/0x1160 [ 122.947145][ T32] worker_thread+0xaa2/0x1250 [ 122.952346][ T32] kthread+0x29d/0x330 [ 122.956944][ T32] ret_from_fork+0x1f/0x30 [ 122.961890][ T32] [ 122.961890][ T32] other info that might help us debug this: [ 122.961890][ T32] [ 122.972120][ T32] Possible unsafe locking scenario: [ 122.972120][ T32] [ 122.979584][ T32] CPU0 CPU1 [ 122.984952][ T32] ---- ---- [ 122.990314][ T32] lock(&base->lock); [ 122.994387][ T32] lock(krc.lock); [ 123.000730][ T32] lock(&base->lock); [ 123.007337][ T32] lock(krc.lock); [ 123.011169][ T32] [ 123.011169][ T32] *** DEADLOCK *** [ 123.011169][ T32] [ 123.019322][ T32] 4 locks held by kworker/u4:2/32: [ 123.024554][ T32] #0: ffff8880307bc138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 123.035364][ T32] #1: ffffc90000a8fd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 123.047988][ T32] #2: ffff8880b8f28418 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x674/0xd20 [ 123.056976][ T32] #3: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf0/0x400 [ 123.066307][ T32] [ 123.066307][ T32] stack backtrace: [ 123.072221][ T32] CPU: 1 PID: 32 Comm: kworker/u4:2 Not tainted 6.1.147-syzkaller #0 [ 123.080384][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.090530][ T32] Workqueue: bat_events batadv_nc_worker [ 123.096197][ T32] Call Trace: [ 123.099486][ T32] [ 123.102514][ T32] dump_stack_lvl+0x168/0x22e [ 123.107200][ T32] ? load_image+0x3b0/0x3b0 [ 123.111804][ T32] ? show_regs_print_info+0x12/0x12 [ 123.117017][ T32] ? print_circular_bug+0x12b/0x1a0 [ 123.122234][ T32] check_noncircular+0x274/0x310 [ 123.127186][ T32] ? add_chain_block+0x940/0x940 [ 123.132130][ T32] ? lockdep_lock+0xdc/0x1e0 [ 123.136733][ T32] ? __lock_acquire+0x12e5/0x7c50 [ 123.141766][ T32] ? _find_first_zero_bit+0xcf/0x100 [ 123.147097][ T32] __lock_acquire+0x2cf8/0x7c50 [ 123.151961][ T32] ? verify_lock_unused+0x140/0x140 [ 123.157176][ T32] lock_acquire+0x1b4/0x490 [ 123.161699][ T32] ? kvfree_call_rcu+0x184/0x870 [ 123.166647][ T32] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 123.172034][ T32] ? read_lock_is_recursive+0x10/0x10 [ 123.177429][ T32] ? __virt_addr_valid+0x188/0x540 [ 123.182639][ T32] ? __virt_addr_valid+0x188/0x540 [ 123.187772][ T32] ? __virt_addr_valid+0x465/0x540 [ 123.192932][ T32] ? __phys_addr+0xb6/0x170 [ 123.197442][ T32] _raw_spin_lock+0x2a/0x40 [ 123.201957][ T32] ? kvfree_call_rcu+0x184/0x870 [ 123.206925][ T32] kvfree_call_rcu+0x184/0x870 [ 123.211710][ T32] ? rcu_leak_callback+0x10/0x10 [ 123.216662][ T32] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 123.222590][ T32] ? _raw_spin_unlock+0x40/0x40 [ 123.227461][ T32] trie_delete_elem+0x52d/0x690 [ 123.232332][ T32] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 123.237795][ T32] bpf_trace_run3+0x1e3/0x400 [ 123.242497][ T32] ? bpf_trace_run3+0xf0/0x400 [ 123.247288][ T32] ? bpf_trace_run2+0x3b0/0x3b0 [ 123.252150][ T32] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 123.258059][ T32] ? _raw_spin_unlock+0x40/0x40 [ 123.262918][ T32] ? do_raw_spin_lock+0x11d/0x280 [ 123.267971][ T32] ? __rwlock_init+0x140/0x140 [ 123.272751][ T32] enqueue_timer+0x411/0x5c0 [ 123.277348][ T32] __mod_timer+0x8e1/0xd20 [ 123.281782][ T32] ? queue_delayed_work_on+0xc8/0x1e0 [ 123.287172][ T32] queue_delayed_work_on+0x126/0x1e0 [ 123.292471][ T32] ? delayed_work_timer_fn+0x80/0x80 [ 123.297767][ T32] ? batadv_nc_process_nc_paths+0xba/0x390 [ 123.303593][ T32] ? __msecs_to_jiffies+0x1a/0x40 [ 123.308626][ T32] ? batadv_nc_worker+0x4f4/0x600 [ 123.313658][ T32] ? process_one_work+0x7a1/0x1160 [ 123.318775][ T32] process_one_work+0x898/0x1160 [ 123.323725][ T32] ? worker_detach_from_pool+0x240/0x240 [ 123.329366][ T32] ? _raw_spin_lock_irq+0xab/0xe0 [ 123.334403][ T32] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 123.339790][ T32] ? kthread_data+0x4b/0xc0 [ 123.344302][ T32] worker_thread+0xaa2/0x1250 [ 123.348991][ T32] kthread+0x29d/0x330 [ 123.353074][ T32] ? worker_clr_flags+0x1a0/0x1a0 [ 123.358099][ T32] ? kthread_blkcg+0xd0/0xd0 [ 123.362702][ T32] ret_from_fork+0x1f/0x30 [ 123.367137][ T32] [ 124.500873][ T48] Bluetooth: hci0: command 0x0419 tx timeout 2025/08/11 04:20:36 executed programs: 211 2025/08/11 04:20:42 executed programs: 458