last executing test programs: 0s ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000004c0), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='timer_start\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 64.939882][ T5772] cgroup: Unknown subsys name 'net' [ 65.076439][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.448553][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.666697][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.675832][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.688174][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.696120][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.704664][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.712448][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.714495][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.722750][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.728671][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.736230][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.741051][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.749016][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.755975][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.763043][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.777166][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.777270][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.791390][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.804164][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.811803][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.822346][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.830056][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.837915][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.863628][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.875566][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.217264][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 69.324772][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 69.426270][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 69.440223][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 69.454904][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.462836][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.470503][ T5782] bridge_slave_0: entered allmulticast mode [ 69.477430][ T5782] bridge_slave_0: entered promiscuous mode [ 69.490887][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.498179][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.505681][ T5782] bridge_slave_1: entered allmulticast mode [ 69.512630][ T5782] bridge_slave_1: entered promiscuous mode [ 69.602091][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.610295][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.617506][ T5786] bridge_slave_0: entered allmulticast mode [ 69.624502][ T5786] bridge_slave_0: entered promiscuous mode [ 69.638092][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.654109][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.661489][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.668632][ T5786] bridge_slave_1: entered allmulticast mode [ 69.675523][ T5786] bridge_slave_1: entered promiscuous mode [ 69.687453][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.766941][ T5782] team0: Port device team_slave_0 added [ 69.776303][ T5782] team0: Port device team_slave_1 added [ 69.806147][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.844895][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.852938][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.861051][ T5783] bridge_slave_0: entered allmulticast mode [ 69.867791][ T5783] bridge_slave_0: entered promiscuous mode [ 69.876858][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.897548][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.904946][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.912224][ T5788] bridge_slave_0: entered allmulticast mode [ 69.919001][ T5788] bridge_slave_0: entered promiscuous mode [ 69.927744][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.934992][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.961704][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.974123][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.981378][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.988565][ T5783] bridge_slave_1: entered allmulticast mode [ 69.996245][ T5783] bridge_slave_1: entered promiscuous mode [ 70.022456][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.030111][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.037268][ T5788] bridge_slave_1: entered allmulticast mode [ 70.044457][ T5788] bridge_slave_1: entered promiscuous mode [ 70.063488][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.070653][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.096728][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.125489][ T5786] team0: Port device team_slave_0 added [ 70.147133][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.158451][ T5786] team0: Port device team_slave_1 added [ 70.179240][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.203136][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.230620][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.266987][ T5782] hsr_slave_0: entered promiscuous mode [ 70.273336][ T5782] hsr_slave_1: entered promiscuous mode [ 70.289924][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.297353][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.324357][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.338013][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.345821][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.372249][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.396388][ T5788] team0: Port device team_slave_0 added [ 70.417953][ T5783] team0: Port device team_slave_0 added [ 70.440036][ T5788] team0: Port device team_slave_1 added [ 70.459648][ T5783] team0: Port device team_slave_1 added [ 70.524728][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.531782][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.558202][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.571757][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.578725][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.605455][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.628396][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.636014][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.662325][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.679013][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.686184][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.712256][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.751161][ T5786] hsr_slave_0: entered promiscuous mode [ 70.757788][ T5786] hsr_slave_1: entered promiscuous mode [ 70.764369][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.774199][ T5786] Cannot create hsr debugfs directory [ 70.799712][ T5792] Bluetooth: hci0: command tx timeout [ 70.844841][ T5783] hsr_slave_0: entered promiscuous mode [ 70.851477][ T5783] hsr_slave_1: entered promiscuous mode [ 70.857677][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.865473][ T5783] Cannot create hsr debugfs directory [ 70.875020][ T5788] hsr_slave_0: entered promiscuous mode [ 70.879858][ T5792] Bluetooth: hci1: command tx timeout [ 70.880864][ T5787] Bluetooth: hci2: command tx timeout [ 70.892108][ T5788] hsr_slave_1: entered promiscuous mode [ 70.898377][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.906081][ T5788] Cannot create hsr debugfs directory [ 70.959576][ T5787] Bluetooth: hci3: command tx timeout [ 71.246808][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.258759][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.268579][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.290035][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.353571][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.383430][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.406882][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.442128][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.515584][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.525953][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.536907][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.546681][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.636054][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.643746][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.653707][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.665818][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.686434][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.697769][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.698064][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.777707][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.787835][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.837315][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.844674][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.864488][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.888306][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.895559][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.924703][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.931871][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.976681][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.984059][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.077602][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.094698][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.148270][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.166267][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.186804][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.193983][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.219002][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.226597][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.238860][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.246095][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.272828][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.280008][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.446432][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.578619][ T5782] veth0_vlan: entered promiscuous mode [ 72.606921][ T5782] veth1_vlan: entered promiscuous mode [ 72.702777][ T5782] veth0_macvtap: entered promiscuous mode [ 72.728645][ T5782] veth1_macvtap: entered promiscuous mode [ 72.766751][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.827137][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.842575][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.865852][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.882456][ T5787] Bluetooth: hci0: command tx timeout [ 72.894807][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.904500][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.914059][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.923284][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.959724][ T5787] Bluetooth: hci2: command tx timeout [ 72.965197][ T5787] Bluetooth: hci1: command tx timeout [ 72.970501][ T5786] veth0_vlan: entered promiscuous mode [ 72.981307][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.018292][ T5786] veth1_vlan: entered promiscuous mode [ 73.040521][ T5787] Bluetooth: hci3: command tx timeout [ 73.128464][ T5783] veth0_vlan: entered promiscuous mode [ 73.143364][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.157674][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.186636][ T5788] veth0_vlan: entered promiscuous mode [ 73.208051][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.212087][ T5786] veth0_macvtap: entered promiscuous mode [ 73.221913][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.237112][ T5783] veth1_vlan: entered promiscuous mode [ 73.248887][ T5788] veth1_vlan: entered promiscuous mode [ 73.257696][ T5786] veth1_macvtap: entered promiscuous mode [ 73.304469][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.316200][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.328050][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.338759][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.350023][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.363775][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.403210][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.413956][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.423868][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.440447][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.494581][ T5853] [ 73.496943][ T5853] ====================================================== [ 73.503941][ T5853] WARNING: possible circular locking dependency detected [ 73.510945][ T5853] syzkaller #0 Not tainted [ 73.515426][ T5853] ------------------------------------------------------ [ 73.522506][ T5853] kworker/0:4/5853 is trying to acquire lock: [ 73.528548][ T5853] ffff8880b8e29370 (krc.lock){....}-{2:2}, at: kvfree_call_rcu+0x15a/0x780 [ 73.537178][ T5853] [ 73.537178][ T5853] but task is already holding lock: [ 73.544526][ T5853] ffff8880b8e29598 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x73b/0xdb0 [ 73.553213][ T5853] [ 73.553213][ T5853] which lock already depends on the new lock. [ 73.553213][ T5853] [ 73.563604][ T5853] [ 73.563604][ T5853] the existing dependency chain (in reverse order) is: [ 73.572772][ T5853] [ 73.572772][ T5853] -> #1 (&base->lock){-.-.}-{2:2}: [ 73.580042][ T5853] _raw_spin_lock_irqsave+0xa8/0xf0 [ 73.585746][ T5853] lock_timer_base+0x123/0x270 [ 73.591034][ T5853] __mod_timer+0xf9/0xdb0 [ 73.595884][ T5853] queue_delayed_work_on+0x12a/0x1e0 [ 73.601671][ T5853] kvfree_call_rcu+0x541/0x780 [ 73.607300][ T5853] rtnl_register_internal+0x486/0x590 [ 73.613173][ T5853] rtnl_register+0x32/0x70 [ 73.618089][ T5853] ip_rt_init+0x2ec/0x390 [ 73.622920][ T5853] ip_init+0xe/0x20 [ 73.627242][ T5853] inet_init+0x2c1/0x3e0 [ 73.631994][ T5853] do_one_initcall+0x1fd/0x750 [ 73.637269][ T5853] do_initcall_level+0x137/0x1f0 [ 73.642883][ T5853] do_initcalls+0x69/0xd0 [ 73.647712][ T5853] kernel_init_freeable+0x3d2/0x570 [ 73.653497][ T5853] kernel_init+0x1d/0x1c0 [ 73.658326][ T5853] ret_from_fork+0x48/0x80 [ 73.663250][ T5853] ret_from_fork_asm+0x11/0x20 [ 73.668964][ T5853] [ 73.668964][ T5853] -> #0 (krc.lock){....}-{2:2}: [ 73.676181][ T5853] __lock_acquire+0x2ddb/0x7c80 [ 73.681560][ T5853] lock_acquire+0x197/0x410 [ 73.686559][ T5853] _raw_spin_lock+0x2e/0x40 [ 73.691565][ T5853] kvfree_call_rcu+0x15a/0x780 [ 73.696829][ T5853] trie_delete_elem+0x535/0x6a0 [ 73.702267][ T5853] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 73.708236][ T5853] bpf_trace_run3+0x1e7/0x400 [ 73.713420][ T5853] __bpf_trace_timer_start+0x14a/0x1b0 [ 73.719394][ T5853] enqueue_timer+0x398/0x530 [ 73.724600][ T5853] __mod_timer+0x977/0xdb0 [ 73.729519][ T5853] queue_delayed_work_on+0x12a/0x1e0 [ 73.735648][ T5853] process_scheduled_works+0xa45/0x15b0 [ 73.741695][ T5853] worker_thread+0xa55/0xfc0 [ 73.746812][ T5853] kthread+0x2fa/0x390 [ 73.751379][ T5853] ret_from_fork+0x48/0x80 [ 73.756418][ T5853] ret_from_fork_asm+0x11/0x20 [ 73.761700][ T5853] [ 73.761700][ T5853] other info that might help us debug this: [ 73.761700][ T5853] [ 73.771923][ T5853] Possible unsafe locking scenario: [ 73.771923][ T5853] [ 73.779389][ T5853] CPU0 CPU1 [ 73.784840][ T5853] ---- ---- [ 73.790281][ T5853] lock(&base->lock); [ 73.794362][ T5853] lock(krc.lock); [ 73.800682][ T5853] lock(&base->lock); [ 73.807268][ T5853] lock(krc.lock); [ 73.811069][ T5853] [ 73.811069][ T5853] *** DEADLOCK *** [ 73.811069][ T5853] [ 73.819303][ T5853] 4 locks held by kworker/0:4/5853: [ 73.824504][ T5853] #0: ffff888017871d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 73.836839][ T5853] #1: ffffc90004b47d00 ((check_lifetime_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 73.848246][ T5853] #2: ffff8880b8e29598 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x73b/0xdb0 [ 73.857215][ T5853] #3: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf4/0x400 [ 73.866506][ T5853] [ 73.866506][ T5853] stack backtrace: [ 73.872386][ T5853] CPU: 0 PID: 5853 Comm: kworker/0:4 Not tainted syzkaller #0 [ 73.879922][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 73.890240][ T5853] Workqueue: events_power_efficient check_lifetime [ 73.896740][ T5853] Call Trace: [ 73.900008][ T5853] [ 73.902930][ T5853] dump_stack_lvl+0x16c/0x230 [ 73.907592][ T5853] ? load_image+0x3b0/0x3b0 [ 73.912078][ T5853] ? show_regs_print_info+0x20/0x20 [ 73.917268][ T5853] ? print_circular_bug+0x12b/0x1a0 [ 73.922463][ T5853] check_noncircular+0x2bd/0x3c0 [ 73.927435][ T5853] ? print_deadlock_bug+0x5d0/0x5d0 [ 73.932625][ T5853] ? lockdep_lock+0xe0/0x220 [ 73.937239][ T5853] ? _find_first_zero_bit+0xd3/0x100 [ 73.942511][ T5853] __lock_acquire+0x2ddb/0x7c80 [ 73.947361][ T5853] ? stack_trace_snprint+0xf0/0xf0 [ 73.952463][ T5853] ? __stack_depot_save+0x560/0x630 [ 73.957643][ T5853] ? verify_lock_unused+0x140/0x140 [ 73.962822][ T5853] ? kasan_save_stack+0x4d/0x60 [ 73.967658][ T5853] ? kasan_save_stack+0x3e/0x60 [ 73.972685][ T5853] ? __kasan_record_aux_stack+0xaf/0xc0 [ 73.978228][ T5853] ? kvfree_call_rcu+0xee/0x780 [ 73.983151][ T5853] ? trie_delete_elem+0x535/0x6a0 [ 73.988160][ T5853] ? bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 73.993802][ T5853] ? bpf_trace_run3+0x1e7/0x400 [ 73.998631][ T5853] ? __bpf_trace_timer_start+0x14a/0x1b0 [ 74.004266][ T5853] ? enqueue_timer+0x398/0x530 [ 74.009041][ T5853] ? __mod_timer+0x977/0xdb0 [ 74.013720][ T5853] ? queue_delayed_work_on+0x12a/0x1e0 [ 74.019159][ T5853] ? process_scheduled_works+0xa45/0x15b0 [ 74.024860][ T5853] ? worker_thread+0xa55/0xfc0 [ 74.029602][ T5853] ? kthread+0x2fa/0x390 [ 74.033912][ T5853] ? ret_from_fork+0x48/0x80 [ 74.038483][ T5853] ? ret_from_fork_asm+0x11/0x20 [ 74.043408][ T5853] lock_acquire+0x197/0x410 [ 74.047892][ T5853] ? kvfree_call_rcu+0x15a/0x780 [ 74.052813][ T5853] ? read_lock_is_recursive+0x20/0x20 [ 74.058165][ T5853] ? __phys_addr+0xba/0x170 [ 74.062648][ T5853] _raw_spin_lock+0x2e/0x40 [ 74.067133][ T5853] ? kvfree_call_rcu+0x15a/0x780 [ 74.072054][ T5853] kvfree_call_rcu+0x15a/0x780 [ 74.076804][ T5853] ? call_rcu+0x930/0x930 [ 74.081406][ T5853] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 74.087286][ T5853] ? _raw_spin_unlock+0x40/0x40 [ 74.092121][ T5853] trie_delete_elem+0x535/0x6a0 [ 74.097049][ T5853] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 74.102576][ T5853] bpf_trace_run3+0x1e7/0x400 [ 74.107234][ T5853] ? bpf_trace_run3+0xf4/0x400 [ 74.112021][ T5853] ? bpf_trace_run2+0x3c0/0x3c0 [ 74.116883][ T5853] ? __bpf_trace_timer_start+0x133/0x1b0 [ 74.122687][ T5853] __bpf_trace_timer_start+0x14a/0x1b0 [ 74.128136][ T5853] ? __bpf_trace_timer_class+0x100/0x100 [ 74.133782][ T5853] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 74.139656][ T5853] ? _raw_spin_unlock+0x40/0x40 [ 74.144490][ T5853] ? do_raw_spin_lock+0x121/0x2c0 [ 74.149499][ T5853] enqueue_timer+0x398/0x530 [ 74.154070][ T5853] __mod_timer+0x977/0xdb0 [ 74.158556][ T5853] queue_delayed_work_on+0x12a/0x1e0 [ 74.163842][ T5853] ? delayed_work_timer_fn+0x80/0x80 [ 74.169108][ T5853] ? round_jiffies_up+0x7c/0x90 [ 74.173967][ T5853] ? check_lifetime+0x75/0x9a0 [ 74.178723][ T5853] ? process_scheduled_works+0x957/0x15b0 [ 74.184539][ T5853] process_scheduled_works+0xa45/0x15b0 [ 74.190072][ T5853] ? assign_work+0x400/0x400 [ 74.194646][ T5853] ? assign_work+0x39e/0x400 [ 74.199392][ T5853] worker_thread+0xa55/0xfc0 [ 74.203965][ T5853] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 74.209837][ T5853] ? _raw_spin_unlock+0x40/0x40 [ 74.214684][ T5853] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 74.220576][ T5853] kthread+0x2fa/0x390 [ 74.224630][ T5853] ? pr_cont_work+0x560/0x560 [ 74.229300][ T5853] ? kthread_blkcg+0xd0/0xd0 [ 74.233866][ T5853] ret_from_fork+0x48/0x80 [ 74.238271][ T5853] ? kthread_blkcg+0xd0/0xd0 [ 74.244705][ T5853] ret_from_fork_asm+0x11/0x20 [ 74.250074][ T5853] [ 74.261709][ T5788] veth0_macvtap: entered promiscuous mode [ 74.289004][ T5783] veth0_macvtap: entered promiscuous mode [ 74.314990][ T5788] veth1_macvtap: entered promiscuous mode [ 74.325238][ T5783] veth1_macvtap: entered promiscuous mode [ 74.346087][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.357362][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.367579][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.378431][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.389895][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.408356][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.419460][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.429948][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.440521][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.451683][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.462475][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.471870][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.480596][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.489643][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.500248][ T5786] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' [ 74.510048][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.520827][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.530962][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.541600][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.551511][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.562118][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.572966][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.582665][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.593684][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.603933][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.614910][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.625392][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.636054][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.646888][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.674497][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.683149][ T5786] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht' [ 74.689380][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.713041][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.723346][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.733146][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.741912][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.758510][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.770675][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.803263][ T5788] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 74.836838][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.844315][ T5783] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 74.849527][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.881408][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.895028][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.895800][ T5788] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 74.930966][ T5783] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 74.944814][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.954332][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.959228][ T5787] Bluetooth: hci0: command tx timeout [ 74.977666][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.000487][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.042585][ T5792] Bluetooth: hci2: command tx timeout [ 75.048093][ T5787] Bluetooth: hci1: command tx timeout [ 75.119373][ T5787] Bluetooth: hci3: command tx timeout [ 77.039822][ T5787] Bluetooth: hci0: command tx timeout [ 77.119590][ T5792] Bluetooth: hci2: command tx timeout [ 77.121356][ T5787] Bluetooth: hci1: command tx timeout [ 77.199572][ T5787] Bluetooth: hci3: command tx timeout [ 81.925393][ T27] cfg80211: failed to load regulatory.db