Warning: Permanently added '10.128.1.80' (ED25519) to the list of known hosts. 2025/07/29 18:14:45 ignoring optional flag "sandboxArg"="0" 2025/07/29 18:14:46 parsed 1 programs [ 64.490530][ T4190] cgroup: Unknown subsys name 'net' [ 64.652487][ T4190] cgroup: Unknown subsys name 'rlimit' [ 66.180609][ T4190] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.869119][ T4200] syz-executor (4200) used greatest stack depth: 21056 bytes left [ 68.711906][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.731854][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.750503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.770319][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.779566][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.789527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.534046][ T4246] chnl_net:caif_netlink_parms(): no params data found [ 69.591347][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.599375][ T4246] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.607435][ T4246] device bridge_slave_0 entered promiscuous mode [ 69.616659][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.623812][ T4246] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.631981][ T4246] device bridge_slave_1 entered promiscuous mode [ 69.660510][ T4246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.672060][ T4246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.702250][ T4246] team0: Port device team_slave_0 added [ 69.710927][ T4246] team0: Port device team_slave_1 added [ 69.736310][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.743289][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.769741][ T4246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.783703][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.791783][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.817920][ T4246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.859647][ T4246] device hsr_slave_0 entered promiscuous mode [ 69.872602][ T4246] device hsr_slave_1 entered promiscuous mode [ 70.080699][ T4246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.091260][ T4246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.100649][ T4246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.110163][ T4246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.136253][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.143425][ T4246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.151353][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.158459][ T4246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.201028][ T4246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.215441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.225055][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.235130][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.243209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 70.256238][ T4246] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.268010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.276735][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.283813][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.295783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.305064][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.312193][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.332604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.341640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.356129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.369505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.402153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.413341][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.530546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.538133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.551244][ T4246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.568446][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.578597][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.619445][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.628339][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.637460][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.645257][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.658608][ T4246] device veth0_vlan entered promiscuous mode [ 70.687934][ T4246] device veth1_vlan entered promiscuous mode [ 70.709886][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.718251][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.726983][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.735567][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.747133][ T4246] device veth0_macvtap entered promiscuous mode [ 70.778931][ T4246] device veth1_macvtap entered promiscuous mode [ 70.793765][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.801479][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.810652][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.818670][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.827581][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.839352][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.851754][ T4246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.860825][ T4246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.870408][ T4246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.879400][ T4246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.890012][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.898870][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.260202][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.268262][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 2025/07/29 18:14:56 executed programs: 0 [ 71.963636][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 72.036748][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.043928][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.054949][ T4284] device bridge_slave_0 entered promiscuous mode [ 72.068506][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.082653][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.095169][ T4284] device bridge_slave_1 entered promiscuous mode [ 72.132694][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.147720][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.184346][ T4284] team0: Port device team_slave_0 added [ 72.193425][ T4284] team0: Port device team_slave_1 added [ 72.220249][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.227399][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.254221][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.268102][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.275074][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.301535][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.340455][ T4284] device hsr_slave_0 entered promiscuous mode [ 72.347457][ T4284] device hsr_slave_1 entered promiscuous mode [ 72.354128][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.363430][ T4284] Cannot create hsr debugfs directory [ 72.457076][ T4284] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.886823][ T2856] Bluetooth: hci0: command 0x0409 tx timeout [ 75.643064][ T4284] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.922739][ T4284] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.976358][ T4247] Bluetooth: hci0: command 0x041b tx timeout [ 76.014335][ T4284] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.139413][ T4284] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.151523][ T4284] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.166137][ T4284] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.175281][ T4284] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.238437][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.264664][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.272661][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.283110][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.293276][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.302471][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.311490][ T3031] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.318628][ T3031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.327670][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.349460][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.358141][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.368368][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.375441][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.387047][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.399034][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.423074][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.433046][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.442641][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.454962][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.464032][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.486559][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.494891][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.506884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.515257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.526008][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.544731][ T154] device hsr_slave_0 left promiscuous mode [ 76.552570][ T154] device hsr_slave_1 left promiscuous mode [ 76.559969][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.567785][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.576956][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.584379][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.592600][ T154] device bridge_slave_1 left promiscuous mode [ 76.600298][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.614322][ T154] device bridge_slave_0 left promiscuous mode [ 76.621631][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.640375][ T154] device veth1_macvtap left promiscuous mode [ 76.646686][ T154] device veth0_macvtap left promiscuous mode [ 76.652723][ T154] device veth1_vlan left promiscuous mode [ 76.659132][ T154] device veth0_vlan left promiscuous mode [ 76.814404][ T154] team0 (unregistering): Port device team_slave_1 removed [ 76.827212][ T154] team0 (unregistering): Port device team_slave_0 removed [ 76.841738][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.861995][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.921107][ T154] bond0 (unregistering): Released all slaves [ 77.013539][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.021111][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.035792][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.059047][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.069714][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.086833][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.095072][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.104019][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.112141][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.123665][ T4284] device veth0_vlan entered promiscuous mode [ 77.141861][ T4284] device veth1_vlan entered promiscuous mode [ 77.163649][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.172098][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.182211][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.190880][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.202060][ T4284] device veth0_macvtap entered promiscuous mode [ 77.218062][ T4284] device veth1_macvtap entered promiscuous mode [ 77.239583][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.247669][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.255759][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.264406][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.273387][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.284846][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.295002][ T4284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.304281][ T4284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.313143][ T4284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.322553][ T4284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.332787][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.341622][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.407186][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.415295][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.433274][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.449504][ T3031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/07/29 18:15:01 executed programs: 2 [ 77.459596][ T3031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.469803][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.046864][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 78.697229][ T4260] [ 78.699742][ T4260] ====================================================== [ 78.706752][ T4260] WARNING: possible circular locking dependency detected [ 78.713776][ T4260] 5.15.189-syzkaller #0 Not tainted [ 78.718966][ T4260] ------------------------------------------------------ [ 78.725978][ T4260] kworker/1:8/4260 is trying to acquire lock: [ 78.732038][ T4260] ffff8880b9127e78 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x186/0x7c0 [ 78.740681][ T4260] [ 78.740681][ T4260] but task is already holding lock: [ 78.748043][ T4260] ffff88802268f9b8 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 78.756927][ T4260] [ 78.756927][ T4260] which lock already depends on the new lock. [ 78.756927][ T4260] [ 78.767324][ T4260] [ 78.767324][ T4260] the existing dependency chain (in reverse order) is: [ 78.776344][ T4260] [ 78.776344][ T4260] -> #2 (&trie->lock){....}-{2:2}: [ 78.783641][ T4260] _raw_spin_lock_irqsave+0xa4/0xf0 [ 78.789367][ T4260] trie_delete_elem+0x90/0x710 [ 78.794649][ T4260] bpf_prog_2c29ac5cdc6b1842+0x3a/0x61c [ 78.800712][ T4260] bpf_trace_run3+0x17e/0x320 [ 78.805911][ T4260] enqueue_timer+0x394/0x520 [ 78.811032][ T4260] __mod_timer+0x8e1/0xd20 [ 78.815971][ T4260] mod_delayed_work_on+0xc3/0x1a0 [ 78.821634][ T4260] ipv6_mc_dad_complete+0x10a/0x210 [ 78.827349][ T4260] addrconf_dad_completed+0x6c7/0xca0 [ 78.833241][ T4260] addrconf_dad_work+0xc70/0x1520 [ 78.838782][ T4260] process_one_work+0x863/0x1000 [ 78.844261][ T4260] worker_thread+0xaa8/0x12a0 [ 78.849463][ T4260] kthread+0x436/0x520 [ 78.854584][ T4260] ret_from_fork+0x1f/0x30 [ 78.859519][ T4260] [ 78.859519][ T4260] -> #1 (&base->lock){-.-.}-{2:2}: [ 78.866815][ T4260] _raw_spin_lock_irqsave+0xa4/0xf0 [ 78.872578][ T4260] lock_timer_base+0x123/0x270 [ 78.877872][ T4260] __mod_timer+0x117/0xd20 [ 78.882810][ T4260] queue_delayed_work_on+0x126/0x1e0 [ 78.888621][ T4260] kvfree_call_rcu+0x4a9/0x7c0 [ 78.893907][ T4260] rtnl_register_internal+0x44e/0x540 [ 78.899803][ T4260] rtnl_register+0x2e/0x70 [ 78.904744][ T4260] ip_rt_init+0x2e0/0x3a0 [ 78.909602][ T4260] ip_init+0xa/0x20 [ 78.913928][ T4260] inet_init+0x28b/0x3a0 [ 78.918692][ T4260] do_one_initcall+0x1ee/0x680 [ 78.923982][ T4260] do_initcall_level+0x137/0x1f0 [ 78.929445][ T4260] do_initcalls+0x4b/0x90 [ 78.934304][ T4260] kernel_init_freeable+0x3ce/0x560 [ 78.940046][ T4260] kernel_init+0x19/0x1b0 [ 78.944909][ T4260] ret_from_fork+0x1f/0x30 [ 78.949858][ T4260] [ 78.949858][ T4260] -> #0 (krc.lock){..-.}-{2:2}: [ 78.956906][ T4260] __lock_acquire+0x2c33/0x7c60 [ 78.962289][ T4260] lock_acquire+0x197/0x3f0 [ 78.967318][ T4260] _raw_spin_lock+0x2a/0x40 [ 78.972345][ T4260] kvfree_call_rcu+0x186/0x7c0 [ 78.977647][ T4260] trie_delete_elem+0x58c/0x710 [ 78.983186][ T4260] bpf_prog_2c29ac5cdc6b1842+0x3a/0x61c [ 78.989268][ T4260] bpf_trace_run3+0x17e/0x320 [ 78.994484][ T4260] enqueue_timer+0x394/0x520 [ 78.999604][ T4260] __mod_timer+0x8e1/0xd20 [ 79.004552][ T4260] mod_delayed_work_on+0xc3/0x1a0 [ 79.010109][ T4260] ipv6_mc_dad_complete+0x10a/0x210 [ 79.015834][ T4260] addrconf_dad_completed+0x6c7/0xca0 [ 79.021856][ T4260] addrconf_dad_work+0xc70/0x1520 [ 79.027419][ T4260] process_one_work+0x863/0x1000 [ 79.032906][ T4260] worker_thread+0xaa8/0x12a0 [ 79.038114][ T4260] kthread+0x436/0x520 [ 79.042706][ T4260] ret_from_fork+0x1f/0x30 [ 79.047652][ T4260] [ 79.047652][ T4260] other info that might help us debug this: [ 79.047652][ T4260] [ 79.057968][ T4260] Chain exists of: [ 79.057968][ T4260] krc.lock --> &base->lock --> &trie->lock [ 79.057968][ T4260] [ 79.069708][ T4260] Possible unsafe locking scenario: [ 79.069708][ T4260] [ 79.077160][ T4260] CPU0 CPU1 [ 79.082524][ T4260] ---- ---- [ 79.087892][ T4260] lock(&trie->lock); [ 79.091966][ T4260] lock(&base->lock); [ 79.098548][ T4260] lock(&trie->lock); [ 79.105136][ T4260] lock(krc.lock); [ 79.108946][ T4260] [ 79.108946][ T4260] *** DEADLOCK *** [ 79.108946][ T4260] [ 79.117088][ T4260] 7 locks held by kworker/1:8/4260: [ 79.122364][ T4260] #0: ffff88802abd9938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 79.133327][ T4260] #1: ffffc900030afd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 79.145591][ T4260] #2: ffffffff8d235f48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1520 [ 79.154990][ T4260] #3: ffff88802aa4d530 (&idev->mc_lock){+.+.}-{3:3}, at: ipv6_mc_dad_complete+0x2d/0x210 [ 79.164908][ T4260] #4: ffff8880b9128098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 79.174223][ T4260] #5: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 79.183673][ T4260] #6: ffff88802268f9b8 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 79.192990][ T4260] [ 79.192990][ T4260] stack backtrace: [ 79.198914][ T4260] CPU: 1 PID: 4260 Comm: kworker/1:8 Not tainted 5.15.189-syzkaller #0 [ 79.207167][ T4260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.217223][ T4260] Workqueue: ipv6_addrconf addrconf_dad_work [ 79.223224][ T4260] Call Trace: [ 79.226500][ T4260] [ 79.229428][ T4260] dump_stack_lvl+0x168/0x230 [ 79.234112][ T4260] ? load_image+0x3b0/0x3b0 [ 79.238616][ T4260] ? show_regs_print_info+0x20/0x20 [ 79.243817][ T4260] ? print_circular_bug+0x12b/0x1a0 [ 79.249058][ T4260] check_noncircular+0x274/0x310 [ 79.253993][ T4260] ? add_chain_block+0x940/0x940 [ 79.258937][ T4260] ? lockdep_lock+0xdc/0x1e0 [ 79.263534][ T4260] ? mark_lock+0x94/0x320 [ 79.267866][ T4260] __lock_acquire+0x2c33/0x7c60 [ 79.272734][ T4260] ? verify_lock_unused+0x140/0x140 [ 79.277939][ T4260] lock_acquire+0x197/0x3f0 [ 79.282445][ T4260] ? kvfree_call_rcu+0x186/0x7c0 [ 79.287387][ T4260] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 79.292765][ T4260] ? read_lock_is_recursive+0x10/0x10 [ 79.298147][ T4260] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 79.304053][ T4260] ? _raw_spin_unlock+0x40/0x40 [ 79.308904][ T4260] ? debug_object_active_state+0x6b/0x340 [ 79.314640][ T4260] _raw_spin_lock+0x2a/0x40 [ 79.319146][ T4260] ? kvfree_call_rcu+0x186/0x7c0 [ 79.324083][ T4260] kvfree_call_rcu+0x186/0x7c0 [ 79.328845][ T4260] ? call_rcu+0x930/0x930 [ 79.333190][ T4260] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 79.338582][ T4260] ? _raw_spin_lock+0x40/0x40 [ 79.343262][ T4260] ? longest_prefix_match+0x452/0x660 [ 79.348650][ T4260] trie_delete_elem+0x58c/0x710 [ 79.353505][ T4260] bpf_prog_2c29ac5cdc6b1842+0x3a/0x61c [ 79.359049][ T4260] bpf_trace_run3+0x17e/0x320 [ 79.363731][ T4260] ? bpf_trace_run2+0x2d0/0x2d0 [ 79.368589][ T4260] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 79.374481][ T4260] ? del_timer+0x11a/0x1b0 [ 79.378912][ T4260] ? lockdep_hardirqs_off+0x70/0x100 [ 79.384208][ T4260] enqueue_timer+0x394/0x520 [ 79.388814][ T4260] __mod_timer+0x8e1/0xd20 [ 79.393231][ T4260] mod_delayed_work_on+0xc3/0x1a0 [ 79.398255][ T4260] ? __queue_delayed_work+0x200/0x200 [ 79.403624][ T4260] ? prandom_u32+0x217/0x250 [ 79.408218][ T4260] ipv6_mc_dad_complete+0x10a/0x210 [ 79.413416][ T4260] addrconf_dad_completed+0x6c7/0xca0 [ 79.418788][ T4260] ? addrconf_dad_stop+0x430/0x430 [ 79.423898][ T4260] addrconf_dad_work+0xc70/0x1520 [ 79.428924][ T4260] ? rcu_lock_release+0x20/0x20 [ 79.433775][ T4260] ? read_lock_is_recursive+0x10/0x10 [ 79.439150][ T4260] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 79.445147][ T4260] ? _raw_spin_unlock+0x40/0x40 [ 79.450003][ T4260] ? _raw_spin_unlock_irq+0x1f/0x40 [ 79.455208][ T4260] process_one_work+0x863/0x1000 [ 79.460163][ T4260] ? worker_detach_from_pool+0x240/0x240 [ 79.465797][ T4260] ? lockdep_hardirqs_off+0x70/0x100 [ 79.471083][ T4260] ? _raw_spin_lock_irq+0xab/0xe0 [ 79.476113][ T4260] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 79.481484][ T4260] ? wq_worker_running+0x97/0x170 [ 79.486595][ T4260] worker_thread+0xaa8/0x12a0 [ 79.491277][ T4260] kthread+0x436/0x520 [ 79.495343][ T4260] ? rcu_lock_release+0x20/0x20 [ 79.500205][ T4260] ? kthread_blkcg+0xd0/0xd0 [ 79.504930][ T4260] ret_from_fork+0x1f/0x30 [ 79.509366][ T4260]