Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. 2025/07/29 10:34:19 ignoring optional flag "sandboxArg"="0" 2025/07/29 10:34:20 parsed 1 programs syzkaller login: [ 72.035662][ T4189] cgroup: Unknown subsys name 'net' [ 72.180023][ T4189] cgroup: Unknown subsys name 'rlimit' [ 73.688402][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.338380][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.353644][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.362812][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.388423][ T1458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.397115][ T1458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.408258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.578521][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 77.630340][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.638177][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.646174][ T4271] device bridge_slave_0 entered promiscuous mode [ 77.655341][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.662966][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.670978][ T4271] device bridge_slave_1 entered promiscuous mode [ 77.694451][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.705701][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.730541][ T4271] team0: Port device team_slave_0 added [ 77.738958][ T4271] team0: Port device team_slave_1 added [ 77.758436][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.765446][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.791481][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.804215][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.811182][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.837242][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.889613][ T4271] device hsr_slave_0 entered promiscuous mode [ 77.896794][ T4271] device hsr_slave_1 entered promiscuous mode [ 78.035242][ T4271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.048082][ T4271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.076731][ T4271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.086167][ T4271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.114464][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.121688][ T4271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.129905][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.137024][ T4271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.199577][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.214265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.223688][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.232803][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.247984][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.280511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.290902][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.298057][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.311703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.320675][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.327804][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.370799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.380721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.398959][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.409770][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.422015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.430807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.439760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.449741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.458722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.468253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.477032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.486153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.598455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.606196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.639768][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.660318][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.669331][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.691588][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.700003][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.709964][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.717923][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.735939][ T4271] device veth0_vlan entered promiscuous mode [ 78.759378][ T4271] device veth1_vlan entered promiscuous mode [ 78.780134][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.788591][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.797102][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.805998][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.817097][ T4271] device veth0_macvtap entered promiscuous mode [ 78.836926][ T4271] device veth1_macvtap entered promiscuous mode [ 78.871653][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.883090][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.892270][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.901825][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.910174][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.919632][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.928818][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.938281][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.950729][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.960180][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.969373][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.979066][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.090275][ T4271] syz-executor (4271) used greatest stack depth: 20776 bytes left 2025/07/29 10:34:30 executed programs: 0 [ 79.737177][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 79.807815][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.815390][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.827016][ T4295] device bridge_slave_0 entered promiscuous mode [ 79.838513][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.848229][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.856784][ T4295] device bridge_slave_1 entered promiscuous mode [ 79.890186][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.901886][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.946380][ T4295] team0: Port device team_slave_0 added [ 79.955862][ T4295] team0: Port device team_slave_1 added [ 79.985362][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.992349][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.020837][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.038953][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.046199][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.075084][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.119824][ T4295] device hsr_slave_0 entered promiscuous mode [ 80.126769][ T4295] device hsr_slave_1 entered promiscuous mode [ 80.134617][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.142477][ T4295] Cannot create hsr debugfs directory [ 80.245532][ T4295] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.674927][ T4263] Bluetooth: hci0: command 0x0409 tx timeout [ 83.320447][ T4295] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.753538][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 84.111052][ T4295] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.213223][ T4295] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.330339][ T4295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.340751][ T4295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.349950][ T4295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.358945][ T4295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.436036][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.448309][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.456590][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.467749][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.489122][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.498586][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.507463][ T1458] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.514635][ T1458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.522746][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.536459][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.545364][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.554247][ T1458] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.561327][ T1458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.585987][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.597185][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.609886][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.618905][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.627690][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.647273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.657025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.668533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.677219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.692202][ T154] device hsr_slave_0 left promiscuous mode [ 84.699012][ T154] device hsr_slave_1 left promiscuous mode [ 84.705733][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.713172][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.723020][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.730488][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.738793][ T154] device bridge_slave_1 left promiscuous mode [ 84.745922][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.759743][ T154] device bridge_slave_0 left promiscuous mode [ 84.767019][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.784961][ T154] device veth1_macvtap left promiscuous mode [ 84.791427][ T154] device veth0_macvtap left promiscuous mode [ 84.798260][ T154] device veth1_vlan left promiscuous mode [ 84.804932][ T154] device veth0_vlan left promiscuous mode [ 84.962767][ T154] team0 (unregistering): Port device team_slave_1 removed [ 84.976698][ T154] team0 (unregistering): Port device team_slave_0 removed [ 84.990476][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.005462][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.063077][ T154] bond0 (unregistering): Released all slaves [ 85.121039][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.129829][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.142125][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.249048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.257562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.269798][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.288792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.297940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.320287][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.335401][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.344738][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.352537][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.362362][ T4295] device veth0_vlan entered promiscuous mode [ 85.373026][ T4295] device veth1_vlan entered promiscuous mode [ 85.396139][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.404454][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.412769][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.422050][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.432887][ T4295] device veth0_macvtap entered promiscuous mode [ 85.446444][ T4295] device veth1_macvtap entered promiscuous mode [ 85.464683][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.473117][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.498092][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.506903][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.517187][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.530138][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.538071][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.548538][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.560196][ T4295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.570483][ T4295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.579970][ T4295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.590203][ T4295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.666799][ T1458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.691132][ T1458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/29 10:34:36 executed programs: 2 [ 85.711671][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.714128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.727056][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.737869][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.833671][ T4204] Bluetooth: hci0: command 0x040f tx timeout [ 86.664651][ T15] [ 86.667123][ T15] ====================================================== [ 86.674147][ T15] WARNING: possible circular locking dependency detected [ 86.681184][ T15] 5.15.189-syzkaller #0 Not tainted [ 86.686393][ T15] ------------------------------------------------------ [ 86.693416][ T15] rcu_preempt/15 is trying to acquire lock: [ 86.699310][ T15] ffff8880b9127e78 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x186/0x7c0 [ 86.707953][ T15] [ 86.707953][ T15] but task is already holding lock: [ 86.715324][ T15] ffff88801f0115b8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 86.724220][ T15] [ 86.724220][ T15] which lock already depends on the new lock. [ 86.724220][ T15] [ 86.734619][ T15] [ 86.734619][ T15] the existing dependency chain (in reverse order) is: [ 86.743623][ T15] [ 86.743623][ T15] -> #2 (&trie->lock){..-.}-{2:2}: [ 86.750909][ T15] _raw_spin_lock_irqsave+0xa4/0xf0 [ 86.756625][ T15] trie_delete_elem+0x90/0x710 [ 86.761900][ T15] bpf_prog_2c29ac5cdc6b1842+0x48e/0xe88 [ 86.768045][ T15] bpf_trace_run3+0x17e/0x320 [ 86.773242][ T15] enqueue_timer+0x394/0x520 [ 86.778344][ T15] __mod_timer+0x8e1/0xd20 [ 86.783378][ T15] queue_delayed_work_on+0x126/0x1e0 [ 86.789173][ T15] kvfree_call_rcu+0x4a9/0x7c0 [ 86.794448][ T15] cfg80211_update_known_bss+0x177/0x9d0 [ 86.800594][ T15] cfg80211_bss_update+0x15f/0x2250 [ 86.806300][ T15] cfg80211_inform_bss_frame_data+0x873/0x1f30 [ 86.812963][ T15] ieee80211_bss_info_update+0x6c2/0xaa0 [ 86.819108][ T15] ieee80211_ibss_rx_queued_mgmt+0x16d0/0x29c0 [ 86.825772][ T15] ieee80211_iface_work+0x70e/0xc60 [ 86.831486][ T15] process_one_work+0x863/0x1000 [ 86.836965][ T15] worker_thread+0xaa8/0x12a0 [ 86.842154][ T15] kthread+0x436/0x520 [ 86.846756][ T15] ret_from_fork+0x1f/0x30 [ 86.851688][ T15] [ 86.851688][ T15] -> #1 (&base->lock){-.-.}-{2:2}: [ 86.858970][ T15] _raw_spin_lock_irqsave+0xa4/0xf0 [ 86.864686][ T15] lock_timer_base+0x123/0x270 [ 86.869962][ T15] __mod_timer+0x117/0xd20 [ 86.874898][ T15] queue_delayed_work_on+0x126/0x1e0 [ 86.880692][ T15] kvfree_call_rcu+0x4a9/0x7c0 [ 86.885969][ T15] rtnl_register_internal+0x44e/0x540 [ 86.891858][ T15] rtnl_register+0x2e/0x70 [ 86.896785][ T15] ip_rt_init+0x2e0/0x3a0 [ 86.901625][ T15] ip_init+0xa/0x20 [ 86.905963][ T15] inet_init+0x28b/0x3a0 [ 86.910714][ T15] do_one_initcall+0x1ee/0x680 [ 86.915999][ T15] do_initcall_level+0x137/0x1f0 [ 86.921445][ T15] do_initcalls+0x4b/0x90 [ 86.926285][ T15] kernel_init_freeable+0x3ce/0x560 [ 86.931997][ T15] kernel_init+0x19/0x1b0 [ 86.936841][ T15] ret_from_fork+0x1f/0x30 [ 86.941767][ T15] [ 86.941767][ T15] -> #0 (krc.lock){..-.}-{2:2}: [ 86.948790][ T15] __lock_acquire+0x2c33/0x7c60 [ 86.954153][ T15] lock_acquire+0x197/0x3f0 [ 86.959171][ T15] _raw_spin_lock+0x2a/0x40 [ 86.964307][ T15] kvfree_call_rcu+0x186/0x7c0 [ 86.969596][ T15] trie_delete_elem+0x58c/0x710 [ 86.974974][ T15] bpf_prog_2c29ac5cdc6b1842+0x3a/0xe88 [ 86.981489][ T15] bpf_trace_run3+0x17e/0x320 [ 86.986682][ T15] enqueue_timer+0x394/0x520 [ 86.991788][ T15] __mod_timer+0x8e1/0xd20 [ 86.996718][ T15] schedule_timeout+0x157/0x280 [ 87.002082][ T15] rcu_gp_fqs_loop+0x29e/0x11b0 [ 87.007444][ T15] rcu_gp_kthread+0x98/0x350 [ 87.012546][ T15] kthread+0x436/0x520 [ 87.017127][ T15] ret_from_fork+0x1f/0x30 [ 87.022056][ T15] [ 87.022056][ T15] other info that might help us debug this: [ 87.022056][ T15] [ 87.032281][ T15] Chain exists of: [ 87.032281][ T15] krc.lock --> &base->lock --> &trie->lock [ 87.032281][ T15] [ 87.044003][ T15] Possible unsafe locking scenario: [ 87.044003][ T15] [ 87.051440][ T15] CPU0 CPU1 [ 87.056806][ T15] ---- ---- [ 87.062159][ T15] lock(&trie->lock); [ 87.066218][ T15] lock(&base->lock); [ 87.072798][ T15] lock(&trie->lock); [ 87.079377][ T15] lock(krc.lock); [ 87.083177][ T15] [ 87.083177][ T15] *** DEADLOCK *** [ 87.083177][ T15] [ 87.091308][ T15] 3 locks held by rcu_preempt/15: [ 87.096317][ T15] #0: ffff8880b9128098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 87.105619][ T15] #1: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 87.114934][ T15] #2: ffff88801f0115b8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 87.124251][ T15] [ 87.124251][ T15] stack backtrace: [ 87.130242][ T15] CPU: 1 PID: 15 Comm: rcu_preempt Not tainted 5.15.189-syzkaller #0 [ 87.138300][ T15] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.148355][ T15] Call Trace: [ 87.151647][ T15] [ 87.154572][ T15] dump_stack_lvl+0x168/0x230 [ 87.159246][ T15] ? load_image+0x3b0/0x3b0 [ 87.163753][ T15] ? show_regs_print_info+0x20/0x20 [ 87.168946][ T15] ? print_circular_bug+0x12b/0x1a0 [ 87.174134][ T15] check_noncircular+0x274/0x310 [ 87.179059][ T15] ? add_chain_block+0x940/0x940 [ 87.184030][ T15] ? lockdep_lock+0xdc/0x1e0 [ 87.188614][ T15] ? mark_lock+0x94/0x320 [ 87.192935][ T15] __lock_acquire+0x2c33/0x7c60 [ 87.197785][ T15] ? verify_lock_unused+0x140/0x140 [ 87.202975][ T15] ? __lock_acquire+0x13ad/0x7c60 [ 87.207998][ T15] lock_acquire+0x197/0x3f0 [ 87.212494][ T15] ? kvfree_call_rcu+0x186/0x7c0 [ 87.217420][ T15] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 87.222893][ T15] ? read_lock_is_recursive+0x10/0x10 [ 87.228260][ T15] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 87.234147][ T15] ? _raw_spin_unlock+0x40/0x40 [ 87.238991][ T15] ? debug_object_active_state+0x6b/0x340 [ 87.244704][ T15] _raw_spin_lock+0x2a/0x40 [ 87.249197][ T15] ? kvfree_call_rcu+0x186/0x7c0 [ 87.254123][ T15] kvfree_call_rcu+0x186/0x7c0 [ 87.258879][ T15] ? call_rcu+0x930/0x930 [ 87.263193][ T15] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 87.268560][ T15] ? _raw_spin_lock+0x40/0x40 [ 87.273226][ T15] ? longest_prefix_match+0x452/0x660 [ 87.278611][ T15] trie_delete_elem+0x58c/0x710 [ 87.283469][ T15] bpf_prog_2c29ac5cdc6b1842+0x3a/0xe88 [ 87.289006][ T15] bpf_trace_run3+0x17e/0x320 [ 87.293671][ T15] ? bpf_trace_run2+0x2d0/0x2d0 [ 87.298513][ T15] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 87.304398][ T15] enqueue_timer+0x394/0x520 [ 87.308981][ T15] __mod_timer+0x8e1/0xd20 [ 87.313393][ T15] schedule_timeout+0x157/0x280 [ 87.318243][ T15] ? console_conditional_schedule+0x40/0x40 [ 87.324125][ T15] ? update_process_times+0x200/0x200 [ 87.329485][ T15] ? prepare_to_swait_event+0x331/0x350 [ 87.335022][ T15] rcu_gp_fqs_loop+0x29e/0x11b0 [ 87.339870][ T15] ? lockdep_hardirqs_on+0x94/0x140 [ 87.345061][ T15] ? rcu_gp_init+0xd58/0x10e0 [ 87.349729][ T15] ? rcu_gp_init+0x10e0/0x10e0 [ 87.354485][ T15] ? _raw_spin_unlock_irq+0x1f/0x40 [ 87.359678][ T15] ? lockdep_hardirqs_on+0x94/0x140 [ 87.364867][ T15] rcu_gp_kthread+0x98/0x350 [ 87.369450][ T15] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 87.374547][ T15] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 87.380431][ T15] ? __kthread_parkme+0x157/0x1b0 [ 87.385464][ T15] kthread+0x436/0x520 [ 87.389521][ T15] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 87.394641][ T15] ? kthread_blkcg+0xd0/0xd0 [ 87.399216][ T15] ret_from_fork+0x1f/0x30 [ 87.403629][ T15]