Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts. 2025/12/08 01:08:59 parsed 1 programs [ 72.094427][ T4272] cgroup: Unknown subsys name 'net' [ 72.229379][ T4272] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.514816][ T4272] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.727020][ T4319] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.735279][ T4319] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.742620][ T4319] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.750836][ T4319] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.759416][ T4319] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.766964][ T4319] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.940343][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.951283][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.970751][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.984242][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.992147][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.000175][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.076630][ T4353] chnl_net:caif_netlink_parms(): no params data found [ 77.129210][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.136763][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.144989][ T4353] device bridge_slave_0 entered promiscuous mode [ 77.163152][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.170283][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.178237][ T4353] device bridge_slave_1 entered promiscuous mode [ 77.198922][ T4353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.209517][ T4353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.242234][ T4353] team0: Port device team_slave_0 added [ 77.249307][ T4353] team0: Port device team_slave_1 added [ 77.267083][ T4353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.274137][ T4353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.300296][ T4353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.319172][ T4353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.326200][ T4353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.352384][ T4353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.382172][ T4353] device hsr_slave_0 entered promiscuous mode [ 77.389687][ T4353] device hsr_slave_1 entered promiscuous mode [ 77.509148][ T4353] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.518535][ T4353] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.529127][ T4353] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.540994][ T4353] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.588147][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.595408][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.603322][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.610521][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.659984][ T4353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.682081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.691856][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.700263][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.708750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 77.721450][ T4353] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.745158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.754388][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.761477][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.769533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.778325][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.785459][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.803280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.811913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.821024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.834843][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.850318][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.863230][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.050781][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.058344][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.074484][ T4353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.090625][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.099371][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.121357][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.129911][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.139601][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.147493][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.156701][ T4353] device veth0_vlan entered promiscuous mode [ 78.172094][ T4353] device veth1_vlan entered promiscuous mode [ 78.189493][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.198094][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.206268][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.216208][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.226324][ T4353] device veth0_macvtap entered promiscuous mode [ 78.239767][ T4353] device veth1_macvtap entered promiscuous mode [ 78.253759][ T4353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.262319][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.270870][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.279801][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.288930][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.299553][ T4353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.310847][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.319485][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.330329][ T4353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.339330][ T4353] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.348890][ T4353] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.357683][ T4353] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.701572][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/08 01:09:08 executed programs: 0 [ 78.865014][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.873924][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.881314][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.889508][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.897276][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.904777][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.015450][ T4375] chnl_net:caif_netlink_parms(): no params data found [ 79.059342][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.066683][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.074513][ T4375] device bridge_slave_0 entered promiscuous mode [ 79.082530][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.089747][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.098286][ T4375] device bridge_slave_1 entered promiscuous mode [ 79.124187][ T4375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.134939][ T4375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.158607][ T4375] team0: Port device team_slave_0 added [ 79.165821][ T4375] team0: Port device team_slave_1 added [ 79.186731][ T4375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.193836][ T4375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.219785][ T4375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.232175][ T4375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.239317][ T4375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.265683][ T4375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.298283][ T4375] device hsr_slave_0 entered promiscuous mode [ 79.305373][ T4375] device hsr_slave_1 entered promiscuous mode [ 79.311942][ T4375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.319976][ T4375] Cannot create hsr debugfs directory [ 80.703186][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.933196][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 81.334351][ T951] cfg80211: failed to load regulatory.db [ 83.012802][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 83.231914][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.281562][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.091368][ T4375] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.107994][ T41] device hsr_slave_0 left promiscuous mode [ 84.117262][ T41] device hsr_slave_1 left promiscuous mode [ 84.124045][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.131474][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.142399][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.150255][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.159892][ T41] device bridge_slave_1 left promiscuous mode [ 84.166707][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.179855][ T41] device bridge_slave_0 left promiscuous mode [ 84.187053][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.212173][ T41] device veth1_macvtap left promiscuous mode [ 84.219070][ T41] device veth0_macvtap left promiscuous mode [ 84.225208][ T41] device veth1_vlan left promiscuous mode [ 84.231063][ T41] device veth0_vlan left promiscuous mode [ 84.480415][ T41] team0 (unregistering): Port device team_slave_1 removed [ 84.503514][ T41] team0 (unregistering): Port device team_slave_0 removed [ 84.526345][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.551214][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.765555][ T41] bond0 (unregistering): Released all slaves [ 84.839583][ T4375] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.848448][ T4375] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.858272][ T4375] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.921146][ T4375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.933365][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.941040][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.951409][ T4375] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.967675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.976962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.985634][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.992741][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.001024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.010179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.018619][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.025691][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.033873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.047170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.059299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.070837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.080053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.088845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.096503][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 85.111416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.120476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.129124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.137687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.149488][ T4375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.160906][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.170117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.179051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.358980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.366837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.381104][ T4375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.396540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.405422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.427859][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.436217][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.445044][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.452739][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.465718][ T4375] device veth0_vlan entered promiscuous mode [ 85.475782][ T4375] device veth1_vlan entered promiscuous mode [ 85.494649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.503108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.511314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.520599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.529905][ T4375] device veth0_macvtap entered promiscuous mode [ 85.541376][ T4375] device veth1_macvtap entered promiscuous mode [ 85.555047][ T4375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.562339][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.570615][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.578687][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.587482][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.598180][ T4375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.610183][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.618895][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.629140][ T4375] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.638035][ T4375] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.646909][ T4375] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.656119][ T4375] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.699726][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.709553][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.728871][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.740800][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/12/08 01:09:15 executed programs: 2 [ 85.749098][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.757435][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.125144][ T4267] [ 86.127509][ T4267] ====================================================== [ 86.134517][ T4267] WARNING: possible circular locking dependency detected [ 86.141553][ T4267] syzkaller #0 Not tainted [ 86.145956][ T4267] ------------------------------------------------------ [ 86.152965][ T4267] syz-execprog/4267 is trying to acquire lock: [ 86.159108][ T4267] ffff8880b8f281d8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x184/0x870 [ 86.167751][ T4267] [ 86.167751][ T4267] but task is already holding lock: [ 86.175109][ T4267] ffff8880b8f28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 86.184003][ T4267] [ 86.184003][ T4267] which lock already depends on the new lock. [ 86.184003][ T4267] [ 86.194412][ T4267] [ 86.194412][ T4267] the existing dependency chain (in reverse order) is: [ 86.203419][ T4267] [ 86.203419][ T4267] -> #1 (&base->lock){-.-.}-{2:2}: [ 86.210710][ T4267] _raw_spin_lock_irqsave+0xa4/0xf0 [ 86.216434][ T4267] lock_timer_base+0x123/0x270 [ 86.221723][ T4267] __mod_timer+0xfe/0xd00 [ 86.226576][ T4267] queue_delayed_work_on+0x126/0x1e0 [ 86.232385][ T4267] kvfree_call_rcu+0x4cb/0x870 [ 86.237676][ T4267] rtnl_register_internal+0x489/0x590 [ 86.243607][ T4267] rtnl_register+0x2e/0x70 [ 86.248550][ T4267] ip_rt_init+0x323/0x3b5 [ 86.253401][ T4267] ip_init+0xa/0x14 [ 86.257736][ T4267] inet_init+0x2bd/0x3cf [ 86.262494][ T4267] do_one_initcall+0x214/0x7a0 [ 86.267780][ T4267] do_initcall_level+0x137/0x1e4 [ 86.273242][ T4267] do_initcalls+0x4b/0x8a [ 86.278093][ T4267] kernel_init_freeable+0x3fa/0x5ac [ 86.283811][ T4267] kernel_init+0x19/0x1b0 [ 86.288655][ T4267] ret_from_fork+0x1f/0x30 [ 86.293593][ T4267] [ 86.293593][ T4267] -> #0 (krc.lock){..-.}-{2:2}: [ 86.300623][ T4267] __lock_acquire+0x2cf8/0x7c50 [ 86.306001][ T4267] lock_acquire+0x1b4/0x490 [ 86.311024][ T4267] _raw_spin_lock+0x2a/0x40 [ 86.316044][ T4267] kvfree_call_rcu+0x184/0x870 [ 86.321329][ T4267] trie_delete_elem+0x52d/0x690 [ 86.326699][ T4267] bpf_prog_41385012b43a9f2e+0x40/0x44 [ 86.332704][ T4267] bpf_trace_run3+0x1e3/0x400 [ 86.337909][ T4267] enqueue_timer+0x411/0x5c0 [ 86.343020][ T4267] __mod_timer+0x8b8/0xd00 [ 86.347970][ T4267] sk_reset_timer+0x1f/0xb0 [ 86.352995][ T4267] tcp_event_new_data_sent+0x20e/0x370 [ 86.358991][ T4267] tcp_write_xmit+0x178c/0x6300 [ 86.364356][ T4267] __tcp_push_pending_frames+0x93/0x340 [ 86.370420][ T4267] tcp_sendmsg_locked+0x3689/0x3f10 [ 86.376135][ T4267] tcp_sendmsg+0x2b/0x40 [ 86.380902][ T4267] sock_write_iter+0x2b5/0x3a0 [ 86.386190][ T4267] vfs_write+0x44c/0x960 [ 86.390959][ T4267] ksys_write+0x143/0x240 [ 86.395811][ T4267] do_syscall_64+0x4c/0xa0 [ 86.400759][ T4267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.407172][ T4267] [ 86.407172][ T4267] other info that might help us debug this: [ 86.407172][ T4267] [ 86.417418][ T4267] Possible unsafe locking scenario: [ 86.417418][ T4267] [ 86.424864][ T4267] CPU0 CPU1 [ 86.430225][ T4267] ---- ---- [ 86.435583][ T4267] lock(&base->lock); [ 86.439655][ T4267] lock(krc.lock); [ 86.445978][ T4267] lock(&base->lock); [ 86.452560][ T4267] lock(krc.lock); [ 86.456370][ T4267] [ 86.456370][ T4267] *** DEADLOCK *** [ 86.456370][ T4267] [ 86.464589][ T4267] 3 locks held by syz-execprog/4267: [ 86.469861][ T4267] #0: ffff8880796f8130 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x1d/0x40 [ 86.479260][ T4267] #1: ffff8880b8f28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 86.488571][ T4267] #2: ffffffff8c92b120 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf0/0x400 [ 86.497881][ T4267] [ 86.497881][ T4267] stack backtrace: [ 86.503778][ T4267] CPU: 1 PID: 4267 Comm: syz-execprog Not tainted syzkaller #0 [ 86.511330][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.521390][ T4267] Call Trace: [ 86.524667][ T4267] [ 86.527598][ T4267] dump_stack_lvl+0x168/0x22e [ 86.532289][ T4267] ? load_image+0x3b0/0x3b0 [ 86.536789][ T4267] ? show_regs_print_info+0x12/0x12 [ 86.541995][ T4267] ? print_circular_bug+0x12b/0x1a0 [ 86.547201][ T4267] check_noncircular+0x274/0x310 [ 86.552151][ T4267] ? add_chain_block+0x940/0x940 [ 86.557092][ T4267] ? lockdep_lock+0xdc/0x1e0 [ 86.561776][ T4267] ? _find_first_zero_bit+0xcf/0x100 [ 86.567054][ T4267] __lock_acquire+0x2cf8/0x7c50 [ 86.571904][ T4267] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 86.577802][ T4267] ? verify_lock_unused+0x140/0x140 [ 86.583004][ T4267] ? kasan_save_stack+0x4c/0x60 [ 86.587857][ T4267] ? kasan_save_stack+0x3a/0x60 [ 86.592715][ T4267] ? __kasan_record_aux_stack+0xb2/0xc0 [ 86.598260][ T4267] ? kvfree_call_rcu+0x108/0x870 [ 86.603205][ T4267] ? trie_delete_elem+0x52d/0x690 [ 86.608230][ T4267] ? bpf_prog_41385012b43a9f2e+0x40/0x44 [ 86.613857][ T4267] ? bpf_trace_run3+0x1e3/0x400 [ 86.618713][ T4267] ? enqueue_timer+0x411/0x5c0 [ 86.623561][ T4267] ? __mod_timer+0x8b8/0xd00 [ 86.628149][ T4267] ? sk_reset_timer+0x1f/0xb0 [ 86.632827][ T4267] ? tcp_event_new_data_sent+0x20e/0x370 [ 86.638453][ T4267] ? tcp_write_xmit+0x178c/0x6300 [ 86.643474][ T4267] ? __tcp_push_pending_frames+0x93/0x340 [ 86.649190][ T4267] ? tcp_sendmsg_locked+0x3689/0x3f10 [ 86.654555][ T4267] ? tcp_sendmsg+0x2b/0x40 [ 86.658969][ T4267] ? sock_write_iter+0x2b5/0x3a0 [ 86.663898][ T4267] ? vfs_write+0x44c/0x960 [ 86.668313][ T4267] ? ksys_write+0x143/0x240 [ 86.672813][ T4267] ? do_syscall_64+0x4c/0xa0 [ 86.677402][ T4267] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.683472][ T4267] lock_acquire+0x1b4/0x490 [ 86.687975][ T4267] ? kvfree_call_rcu+0x184/0x870 [ 86.692920][ T4267] ? read_lock_is_recursive+0x10/0x10 [ 86.698300][ T4267] ? __phys_addr+0xb6/0x170 [ 86.702802][ T4267] _raw_spin_lock+0x2a/0x40 [ 86.707299][ T4267] ? kvfree_call_rcu+0x184/0x870 [ 86.712240][ T4267] kvfree_call_rcu+0x184/0x870 [ 86.717012][ T4267] ? rcu_leak_callback+0x10/0x10 [ 86.721957][ T4267] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 86.727847][ T4267] ? _raw_spin_unlock+0x40/0x40 [ 86.732703][ T4267] trie_delete_elem+0x52d/0x690 [ 86.737560][ T4267] bpf_prog_41385012b43a9f2e+0x40/0x44 [ 86.743015][ T4267] bpf_trace_run3+0x1e3/0x400 [ 86.747699][ T4267] ? asm_exc_int3+0x35/0x40 [ 86.752205][ T4267] ? bpf_trace_run3+0xf0/0x400 [ 86.756974][ T4267] ? bpf_trace_run2+0x3b0/0x3b0 [ 86.761854][ T4267] ? enqueue_timer+0x108/0x5c0 [ 86.766641][ T4267] ? enqueue_timer+0x33f/0x5c0 [ 86.771400][ T4267] enqueue_timer+0x411/0x5c0 [ 86.776012][ T4267] __mod_timer+0x8b8/0xd00 [ 86.780437][ T4267] sk_reset_timer+0x1f/0xb0 [ 86.784941][ T4267] tcp_event_new_data_sent+0x20e/0x370 [ 86.790396][ T4267] tcp_write_xmit+0x178c/0x6300 [ 86.795255][ T4267] __tcp_push_pending_frames+0x93/0x340 [ 86.800799][ T4267] ? tcp_push+0x414/0x660 [ 86.805128][ T4267] tcp_sendmsg_locked+0x3689/0x3f10 [ 86.810329][ T4267] ? verify_lock_unused+0x140/0x140 [ 86.815543][ T4267] ? lock_chain_count+0x20/0x20 [ 86.820396][ T4267] ? tcp_set_state+0x520/0x520 [ 86.825160][ T4267] ? lock_sock_nested+0x66/0x100 [ 86.830100][ T4267] tcp_sendmsg+0x2b/0x40 [ 86.834345][ T4267] sock_write_iter+0x2b5/0x3a0 [ 86.839118][ T4267] ? sock_read_iter+0x370/0x370 [ 86.843972][ T4267] ? common_file_perm+0x171/0x1c0 [ 86.849001][ T4267] ? fsnotify_perm+0x5a/0x550 [ 86.853675][ T4267] vfs_write+0x44c/0x960 [ 86.857923][ T4267] ? file_end_write+0x250/0x250 [ 86.862779][ T4267] ? __fget_files+0x44a/0x4d0 [ 86.867459][ T4267] ? __fdget_pos+0x1d4/0x360 [ 86.872050][ T4267] ? ksys_write+0x71/0x240 [ 86.876471][ T4267] ksys_write+0x143/0x240 [ 86.880826][ T4267] ? __ia32_sys_read+0x80/0x80 [ 86.885597][ T4267] ? lockdep_hardirqs_on+0x94/0x140 [ 86.890801][ T4267] do_syscall_64+0x4c/0xa0 [ 86.895221][ T4267] ? clear_bhb_loop+0x60/0xb0 [ 86.899899][ T4267] ? clear_bhb_loop+0x60/0xb0 [ 86.904577][ T4267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.910467][ T4267] RIP: 0033:0x40dd0e [ 86.914361][ T4267] Code: 24 28 44 8b 44 24 2c e9 70 ff ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 89 f2 48 89 fa 48 89 ce 48 89 df 0f 05 <48> 3d 01 f0 ff ff 76 15 48 f7 d8 48 89 c1 48 c7 c0 ff ff ff ff 48 [ 86.933977][ T4267] RSP: 002b:000000c0001653e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000001 [ 86.942401][ T4267] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000040dd0e [ 86.950368][ T4267] RDX: 00000000000007e8 RSI: 000000c001316d18 RDI: 0000000000000006 [ 86.958334][ T4267] RBP: 000000c000165428 R08: 0000000000000000 R09: 0000000000000000 [ 86.966300][ T4267] R10: 0000000000000000 R11: 0000000000000206 R12: 000000c000165558 [ 86.974272][ T4267] R13: 00000000000002b6 R14: 000000c004268e00 R15: 000000c001316a80 [ 86.982243][ T4267] [ 87.172845][ T48] Bluetooth: hci0: command 0x0419 tx timeout 2025/12/08 01:09:20 executed programs: 203 2025/12/08 01:09:25 executed programs: 449