Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts. [ 51.494879][ T3500] chnl_net:caif_netlink_parms(): no params data found [ 51.540625][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.549018][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.557676][ T3500] device bridge_slave_0 entered promiscuous mode [ 51.568015][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.575854][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.584246][ T3500] device bridge_slave_1 entered promiscuous mode [ 51.605651][ T3500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.617102][ T3500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.639633][ T3500] team0: Port device team_slave_0 added [ 51.648249][ T3500] team0: Port device team_slave_1 added [ 51.667222][ T3500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.674435][ T3500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.700930][ T3500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.714481][ T3500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.721806][ T3500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.749141][ T3500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.778452][ T3500] device hsr_slave_0 entered promiscuous mode [ 51.785949][ T3500] device hsr_slave_1 entered promiscuous mode [ 51.877052][ T3500] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.889739][ T3500] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.900210][ T3500] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.910967][ T3500] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.934379][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.942219][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.950478][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.957983][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.013959][ T3500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.028420][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.039451][ T1281] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.048806][ T1281] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.057158][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 52.074814][ T3500] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.087255][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.097017][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.104553][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.118014][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.127517][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.134860][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.156243][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.166626][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.177222][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.193415][ T3500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.205082][ T3500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.218280][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.227483][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.236755][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.259626][ T3500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.267980][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.276103][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.302988][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.312612][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.321049][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.330096][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.341290][ T3500] device veth0_vlan entered promiscuous mode [ 52.356927][ T3500] device veth1_vlan entered promiscuous mode [ 52.377265][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.387811][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.397145][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.410584][ T3500] device veth0_macvtap entered promiscuous mode [ 52.425427][ T3500] device veth1_macvtap entered promiscuous mode [ 52.444686][ T3500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.453947][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.463905][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.475875][ T3500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.485463][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.498731][ T3500] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.508979][ T3500] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.518376][ T3500] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 52.528121][ T3500] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.571846][ T15] [ 52.574286][ T15] ====================================================== [ 52.581462][ T15] WARNING: possible circular locking dependency detected [ 52.588738][ T15] 5.15.153-syzkaller #0 Not tainted [ 52.594031][ T15] ------------------------------------------------------ [ 52.601372][ T15] rcu_preempt/15 is trying to acquire lock: [ 52.607280][ T15] ffff8880b9a27e78 (krc.lock){....}-{2:2}, at: kvfree_call_rcu+0x1b5/0x8a0 [ 52.615968][ T15] [ 52.615968][ T15] but task is already holding lock: [ 52.623666][ T15] ffff88806fd239b8 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 52.632809][ T15] [ 52.632809][ T15] which lock already depends on the new lock. [ 52.632809][ T15] [ 52.643496][ T15] [ 52.643496][ T15] the existing dependency chain (in reverse order) is: [ 52.652603][ T15] [ 52.652603][ T15] -> #2 (&trie->lock){....}-{2:2}: [ 52.660701][ T15] lock_acquire+0x1db/0x4f0 [ 52.665986][ T15] _raw_spin_lock_irqsave+0xd1/0x120 [ 52.671782][ T15] trie_delete_elem+0x90/0x690 [ 52.677230][ T15] bpf_prog_2c29ac5cdc6b1842+0x3a/0x620 [ 52.683643][ T15] bpf_trace_run3+0x1d1/0x380 [ 52.690240][ T15] enqueue_timer+0x3ae/0x540 [ 52.695806][ T15] __mod_timer+0xa60/0xeb0 [ 52.701624][ T15] schedule_timeout+0x1b4/0x300 [ 52.706995][ T15] rcu_gp_fqs_loop+0x2bf/0x1080 [ 52.712557][ T15] rcu_gp_kthread+0xa4/0x360 [ 52.717869][ T15] kthread+0x3f6/0x4f0 [ 52.722998][ T15] ret_from_fork+0x1f/0x30 [ 52.727942][ T15] [ 52.727942][ T15] -> #1 (&base->lock){-.-.}-{2:2}: [ 52.735766][ T15] lock_acquire+0x1db/0x4f0 [ 52.741146][ T15] _raw_spin_lock_irqsave+0xd1/0x120 [ 52.747387][ T15] lock_timer_base+0x120/0x260 [ 52.753056][ T15] __mod_timer+0x1d6/0xeb0 [ 52.758826][ T15] queue_delayed_work_on+0x156/0x250 [ 52.764992][ T15] kvfree_call_rcu+0x50e/0x8a0 [ 52.770526][ T15] rtnl_register_internal+0x443/0x530 [ 52.776492][ T15] rtnl_register+0x32/0x70 [ 52.782005][ T15] ip_rt_init+0x2e6/0x390 [ 52.786849][ T15] ip_init+0xa/0x14 [ 52.791365][ T15] inet_init+0x27c/0x38e [ 52.796285][ T15] do_one_initcall+0x22b/0x7a0 [ 52.801735][ T15] do_initcall_level+0x157/0x207 [ 52.807670][ T15] do_initcalls+0x49/0x86 [ 52.812946][ T15] kernel_init_freeable+0x425/0x5b5 [ 52.818837][ T15] kernel_init+0x19/0x290 [ 52.824278][ T15] ret_from_fork+0x1f/0x30 [ 52.829469][ T15] [ 52.829469][ T15] -> #0 (krc.lock){....}-{2:2}: [ 52.836958][ T15] validate_chain+0x1649/0x5930 [ 52.842615][ T15] __lock_acquire+0x1295/0x1ff0 [ 52.848820][ T15] lock_acquire+0x1db/0x4f0 [ 52.854394][ T15] _raw_spin_lock+0x2a/0x40 [ 52.859820][ T15] kvfree_call_rcu+0x1b5/0x8a0 [ 52.865199][ T15] trie_delete_elem+0x520/0x690 [ 52.870553][ T15] bpf_prog_2c29ac5cdc6b1842+0x3a/0x620 [ 52.876657][ T15] bpf_trace_run3+0x1d1/0x380 [ 52.881829][ T15] enqueue_timer+0x3ae/0x540 [ 52.887057][ T15] __mod_timer+0xa60/0xeb0 [ 52.894608][ T15] schedule_timeout+0x1b4/0x300 [ 52.899998][ T15] rcu_gp_fqs_loop+0x2bf/0x1080 [ 52.905528][ T15] rcu_gp_kthread+0xa4/0x360 [ 52.911012][ T15] kthread+0x3f6/0x4f0 [ 52.916462][ T15] ret_from_fork+0x1f/0x30 [ 52.921476][ T15] [ 52.921476][ T15] other info that might help us debug this: [ 52.921476][ T15] [ 52.932197][ T15] Chain exists of: [ 52.932197][ T15] krc.lock --> &base->lock --> &trie->lock [ 52.932197][ T15] [ 52.944154][ T15] Possible unsafe locking scenario: [ 52.944154][ T15] [ 52.951662][ T15] CPU0 CPU1 [ 52.957188][ T15] ---- ---- [ 52.962701][ T15] lock(&trie->lock); [ 52.966890][ T15] lock(&base->lock); [ 52.973570][ T15] lock(&trie->lock); [ 52.980399][ T15] lock(krc.lock); [ 52.984542][ T15] [ 52.984542][ T15] *** DEADLOCK *** [ 52.984542][ T15] [ 52.992872][ T15] 3 locks held by rcu_preempt/15: [ 52.998182][ T15] #0: ffff8880b9a28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 53.007794][ T15] #1: ffffffff8c91f720 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 53.017788][ T15] #2: ffff88806fd239b8 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 53.027327][ T15] [ 53.027327][ T15] stack backtrace: [ 53.033275][ T15] CPU: 0 PID: 15 Comm: rcu_preempt Not tainted 5.15.153-syzkaller #0 [ 53.041312][ T15] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 53.051652][ T15] Call Trace: [ 53.055461][ T15] [ 53.058747][ T15] dump_stack_lvl+0x1e3/0x2cb [ 53.063590][ T15] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 53.069291][ T15] ? print_circular_bug+0x12b/0x1a0 [ 53.074565][ T15] check_noncircular+0x2f8/0x3b0 [ 53.079760][ T15] ? add_chain_block+0x850/0x850 [ 53.084688][ T15] ? queued_spin_lock_slowpath+0x42/0x50 [ 53.090813][ T15] ? lockdep_lock+0x1a7/0x2a0 [ 53.095671][ T15] validate_chain+0x1649/0x5930 [ 53.100871][ T15] ? reacquire_held_locks+0x660/0x660 [ 53.106225][ T15] ? mark_lock+0x98/0x340 [ 53.110877][ T15] ? __lock_acquire+0x1295/0x1ff0 [ 53.115966][ T15] ? mark_lock+0x98/0x340 [ 53.120359][ T15] __lock_acquire+0x1295/0x1ff0 [ 53.125446][ T15] lock_acquire+0x1db/0x4f0 [ 53.130232][ T15] ? kvfree_call_rcu+0x1b5/0x8a0 [ 53.135404][ T15] ? __lock_acquire+0x1ff0/0x1ff0 [ 53.140510][ T15] ? read_lock_is_recursive+0x10/0x10 [ 53.146739][ T15] ? do_raw_spin_unlock+0x137/0x8b0 [ 53.152000][ T15] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 53.157982][ T15] ? _raw_spin_unlock+0x40/0x40 [ 53.163069][ T15] ? debug_object_active_state+0x6b/0x380 [ 53.168769][ T15] _raw_spin_lock+0x2a/0x40 [ 53.173333][ T15] ? kvfree_call_rcu+0x1b5/0x8a0 [ 53.178249][ T15] kvfree_call_rcu+0x1b5/0x8a0 [ 53.183087][ T15] ? call_rcu+0xa70/0xa70 [ 53.187812][ T15] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 53.193386][ T15] ? _raw_spin_lock+0x40/0x40 [ 53.199249][ T15] ? read_lock_is_recursive+0x10/0x10 [ 53.205656][ T15] ? longest_prefix_match+0x318/0x640 [ 53.211394][ T15] trie_delete_elem+0x520/0x690 [ 53.216979][ T15] bpf_prog_2c29ac5cdc6b1842+0x3a/0x620 [ 53.223202][ T15] bpf_trace_run3+0x1d1/0x380 [ 53.228157][ T15] ? bpf_trace_run2+0x340/0x340 [ 53.233223][ T15] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 53.239189][ T15] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 53.244900][ T15] ? _raw_spin_lock+0x40/0x40 [ 53.249657][ T15] ? __debug_object_init+0x258/0xd30 [ 53.254932][ T15] enqueue_timer+0x3ae/0x540 [ 53.259867][ T15] __mod_timer+0xa60/0xeb0 [ 53.264371][ T15] ? mod_timer_pending+0x20/0x20 [ 53.269590][ T15] ? lockdep_softirqs_off+0x420/0x420 [ 53.275522][ T15] ? do_raw_spin_unlock+0x137/0x8b0 [ 53.281711][ T15] schedule_timeout+0x1b4/0x300 [ 53.286637][ T15] ? console_conditional_schedule+0x40/0x40 [ 53.292521][ T15] ? update_process_times+0x200/0x200 [ 53.298960][ T15] ? prepare_to_swait_event+0x321/0x340 [ 53.304779][ T15] rcu_gp_fqs_loop+0x2bf/0x1080 [ 53.309704][ T15] ? _raw_spin_unlock_irq+0x1f/0x40 [ 53.315094][ T15] ? lockdep_hardirqs_on+0x94/0x130 [ 53.320365][ T15] ? rcu_gp_init+0xdae/0x1140 [ 53.325040][ T15] ? rcu_gp_init+0x1140/0x1140 [ 53.329869][ T15] ? finish_swait+0xc5/0x1d0 [ 53.334892][ T15] rcu_gp_kthread+0xa4/0x360 [ 53.339710][ T15] ? _raw_spin_unlock+0x40/0x40 [ 53.344762][ T15] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 53.350036][ T15] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 53.356290][ T15] ? __kthread_parkme+0x15c/0x1c0 [ 53.361633][ T15] kthread+0x3f6/0x4f0 [ 53.365869][ T15] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 53.370977][ T15] ? kthread_blkcg+0xd0/0xd0 [ 53.375818][ T15] ret_from_fork+0x1f/0x30 [ 53.380389][ T15]