Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. 2025/07/29 15:55:24 ignoring optional flag "sandboxArg"="0" 2025/07/29 15:55:25 parsed 1 programs [ 50.430900][ T4187] cgroup: Unknown subsys name 'net' [ 50.556381][ T4187] cgroup: Unknown subsys name 'rlimit' [ 51.793904][ T4187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.114576][ T4194] syz-executor (4194) used greatest stack depth: 20640 bytes left [ 53.634041][ T4211] chnl_net:caif_netlink_parms(): no params data found [ 53.671776][ T4211] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.679220][ T4211] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.687131][ T4211] device bridge_slave_0 entered promiscuous mode [ 53.696028][ T4211] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.703529][ T4211] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.712279][ T4211] device bridge_slave_1 entered promiscuous mode [ 53.737380][ T4211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.749866][ T4211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.779693][ T4211] team0: Port device team_slave_0 added [ 53.788747][ T4211] team0: Port device team_slave_1 added [ 53.813592][ T4211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.820552][ T4211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.847728][ T4211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.860720][ T4211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.868914][ T4211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.896174][ T4211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.934509][ T4211] device hsr_slave_0 entered promiscuous mode [ 53.941402][ T4211] device hsr_slave_1 entered promiscuous mode [ 54.063592][ T4211] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.075537][ T4211] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.085434][ T4211] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.095178][ T4211] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.171621][ T4211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.186477][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.197444][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.208681][ T4211] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.219444][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.228484][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.239584][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.246853][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.258373][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.270515][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.281060][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.289911][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.297009][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.321369][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.330135][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.339777][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.349197][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.358003][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.367293][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.375993][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.393785][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.403465][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.418103][ T4211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.430672][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.439397][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.450898][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.559773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.567830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.582286][ T4211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.603379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.613630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.632269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.640863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.649634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.657563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.667330][ T4211] device veth0_vlan entered promiscuous mode [ 54.681910][ T4211] device veth1_vlan entered promiscuous mode [ 54.703850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.721956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.729958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.738516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.749266][ T4211] device veth0_macvtap entered promiscuous mode [ 54.760020][ T4211] device veth1_macvtap entered promiscuous mode [ 54.778165][ T4211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.786636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.795615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.804002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.813320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.826168][ T4211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.835984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.845280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.856016][ T4211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.865225][ T4211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.874350][ T4211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.883168][ T4211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.977463][ T4211] syz-executor (4211) used greatest stack depth: 20320 bytes left [ 55.641340][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.649357][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.660951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.680663][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.690644][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.699458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/07/29 15:55:32 executed programs: 0 [ 56.642492][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 56.699246][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.706749][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.714527][ T4278] device bridge_slave_0 entered promiscuous mode [ 56.722599][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.729697][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.737480][ T4278] device bridge_slave_1 entered promiscuous mode [ 56.769406][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.780916][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.810194][ T4278] team0: Port device team_slave_0 added [ 56.817931][ T4278] team0: Port device team_slave_1 added [ 56.835760][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.842850][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.869078][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.884756][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.891980][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.922337][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.955442][ T4278] device hsr_slave_0 entered promiscuous mode [ 56.962173][ T4278] device hsr_slave_1 entered promiscuous mode [ 56.968670][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.976562][ T4278] Cannot create hsr debugfs directory [ 57.070568][ T4278] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.592512][ T4295] Bluetooth: hci0: command 0x0409 tx timeout [ 60.147024][ T4278] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.215567][ T4278] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.268097][ T4278] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.392796][ T4278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.401236][ T4278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.422385][ T4278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.431245][ T4278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.475267][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.507467][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.515635][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.525533][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.554603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.563434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.572543][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.579584][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.587609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.599975][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.608901][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.617559][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.624648][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.634890][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.660834][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.672611][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.681745][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 60.684522][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.700803][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.709082][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.717806][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.727063][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.735429][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.746824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.755659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.778452][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.865987][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.875805][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.890876][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.920278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.929657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.941134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.949519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.959611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.967547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.976855][ T4278] device veth0_vlan entered promiscuous mode [ 61.001118][ T154] device hsr_slave_0 left promiscuous mode [ 61.008005][ T154] device hsr_slave_1 left promiscuous mode [ 61.015273][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.023845][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.031983][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.039359][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.047265][ T154] device bridge_slave_1 left promiscuous mode [ 61.054578][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.067819][ T154] device bridge_slave_0 left promiscuous mode [ 61.074150][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.090759][ T154] device veth1_macvtap left promiscuous mode [ 61.097086][ T154] device veth0_macvtap left promiscuous mode [ 61.103474][ T154] device veth1_vlan left promiscuous mode [ 61.109346][ T154] device veth0_vlan left promiscuous mode [ 61.239777][ T154] team0 (unregistering): Port device team_slave_1 removed [ 61.251148][ T154] team0 (unregistering): Port device team_slave_0 removed [ 61.264468][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.277329][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.324803][ T154] bond0 (unregistering): Released all slaves [ 61.368100][ T4278] device veth1_vlan entered promiscuous mode [ 61.385446][ T4278] device veth0_macvtap entered promiscuous mode [ 61.393906][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.403140][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.410970][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.420373][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.428800][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.440004][ T4278] device veth1_macvtap entered promiscuous mode [ 61.459640][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.474325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.482693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.492883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.504244][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.513908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.522791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.535292][ T4278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.544151][ T4278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.554993][ T4278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.563734][ T4278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.616247][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.624435][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.645922][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2025/07/29 15:55:37 executed programs: 2 [ 61.660416][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.669145][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.677658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.037982][ T4198] [ 62.040324][ T4198] ====================================================== [ 62.047319][ T4198] WARNING: possible circular locking dependency detected [ 62.054320][ T4198] 5.15.189-syzkaller #0 Not tainted [ 62.059492][ T4198] ------------------------------------------------------ [ 62.066479][ T4198] kworker/0:3/4198 is trying to acquire lock: [ 62.072611][ T4198] ffff8880b9027e78 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x186/0x7c0 [ 62.081233][ T4198] [ 62.081233][ T4198] but task is already holding lock: [ 62.088590][ T4198] ffff88801fc1e1b8 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 62.097454][ T4198] [ 62.097454][ T4198] which lock already depends on the new lock. [ 62.097454][ T4198] [ 62.107840][ T4198] [ 62.107840][ T4198] the existing dependency chain (in reverse order) is: [ 62.116829][ T4198] [ 62.116829][ T4198] -> #2 (&trie->lock){....}-{2:2}: [ 62.124107][ T4198] _raw_spin_lock_irqsave+0xa4/0xf0 [ 62.129805][ T4198] trie_delete_elem+0x90/0x710 [ 62.135064][ T4198] bpf_prog_2c29ac5cdc6b1842+0x3a/0x18c [ 62.141107][ T4198] bpf_trace_run3+0x17e/0x320 [ 62.146281][ T4198] enqueue_timer+0x394/0x520 [ 62.151377][ T4198] __mod_timer+0x8e1/0xd20 [ 62.156290][ T4198] mod_delayed_work_on+0xc3/0x1a0 [ 62.161811][ T4198] ipv6_mc_dad_complete+0x10a/0x210 [ 62.167593][ T4198] addrconf_dad_completed+0x6c7/0xca0 [ 62.173461][ T4198] addrconf_dad_work+0xc70/0x1520 [ 62.178977][ T4198] process_one_work+0x863/0x1000 [ 62.184408][ T4198] worker_thread+0xaa8/0x12a0 [ 62.189577][ T4198] kthread+0x436/0x520 [ 62.194140][ T4198] ret_from_fork+0x1f/0x30 [ 62.199055][ T4198] [ 62.199055][ T4198] -> #1 (&base->lock){-.-.}-{2:2}: [ 62.206321][ T4198] _raw_spin_lock_irqsave+0xa4/0xf0 [ 62.212020][ T4198] lock_timer_base+0x123/0x270 [ 62.217292][ T4198] __mod_timer+0x117/0xd20 [ 62.222202][ T4198] queue_delayed_work_on+0x126/0x1e0 [ 62.227986][ T4198] kvfree_call_rcu+0x4a9/0x7c0 [ 62.233246][ T4198] rtnl_register_internal+0x44e/0x540 [ 62.239117][ T4198] rtnl_register+0x2e/0x70 [ 62.244029][ T4198] ip_rt_init+0x2e0/0x3a0 [ 62.248859][ T4198] ip_init+0xa/0x20 [ 62.253164][ T4198] inet_init+0x28b/0x3a0 [ 62.257904][ T4198] do_one_initcall+0x1ee/0x680 [ 62.263168][ T4198] do_initcall_level+0x137/0x1f0 [ 62.268620][ T4198] do_initcalls+0x4b/0x90 [ 62.273470][ T4198] kernel_init_freeable+0x3ce/0x560 [ 62.279168][ T4198] kernel_init+0x19/0x1b0 [ 62.284005][ T4198] ret_from_fork+0x1f/0x30 [ 62.288932][ T4198] [ 62.288932][ T4198] -> #0 (krc.lock){..-.}-{2:2}: [ 62.295952][ T4198] __lock_acquire+0x2c33/0x7c60 [ 62.301307][ T4198] lock_acquire+0x197/0x3f0 [ 62.306322][ T4198] _raw_spin_lock+0x2a/0x40 [ 62.311327][ T4198] kvfree_call_rcu+0x186/0x7c0 [ 62.316605][ T4198] trie_delete_elem+0x58c/0x710 [ 62.321965][ T4198] bpf_prog_2c29ac5cdc6b1842+0x3a/0x18c [ 62.328025][ T4198] bpf_trace_run3+0x17e/0x320 [ 62.333215][ T4198] enqueue_timer+0x394/0x520 [ 62.338308][ T4198] __mod_timer+0x8e1/0xd20 [ 62.343222][ T4198] mod_delayed_work_on+0xc3/0x1a0 [ 62.348746][ T4198] ipv6_mc_dad_complete+0x10a/0x210 [ 62.354444][ T4198] addrconf_dad_completed+0x6c7/0xca0 [ 62.360312][ T4198] addrconf_dad_work+0xc70/0x1520 [ 62.365830][ T4198] process_one_work+0x863/0x1000 [ 62.371264][ T4198] worker_thread+0xaa8/0x12a0 [ 62.376438][ T4198] kthread+0x436/0x520 [ 62.381003][ T4198] ret_from_fork+0x1f/0x30 [ 62.385915][ T4198] [ 62.385915][ T4198] other info that might help us debug this: [ 62.385915][ T4198] [ 62.396114][ T4198] Chain exists of: [ 62.396114][ T4198] krc.lock --> &base->lock --> &trie->lock [ 62.396114][ T4198] [ 62.407818][ T4198] Possible unsafe locking scenario: [ 62.407818][ T4198] [ 62.415247][ T4198] CPU0 CPU1 [ 62.420598][ T4198] ---- ---- [ 62.425948][ T4198] lock(&trie->lock); [ 62.429998][ T4198] lock(&base->lock); [ 62.436563][ T4198] lock(&trie->lock); [ 62.443131][ T4198] lock(krc.lock); [ 62.446914][ T4198] [ 62.446914][ T4198] *** DEADLOCK *** [ 62.446914][ T4198] [ 62.455117][ T4198] 7 locks held by kworker/0:3/4198: [ 62.460288][ T4198] #0: ffff88802ab77538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 62.471226][ T4198] #1: ffffc90002f6fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 62.483372][ T4198] #2: ffffffff8d235f48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1520 [ 62.492738][ T4198] #3: ffff8880779db530 (&idev->mc_lock){+.+.}-{3:3}, at: ipv6_mc_dad_complete+0x2d/0x210 [ 62.502717][ T4198] #4: ffff8880b9028098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 62.512015][ T4198] #5: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 62.521313][ T4198] #6: ffff88801fc1e1b8 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 62.530622][ T4198] [ 62.530622][ T4198] stack backtrace: [ 62.536519][ T4198] CPU: 0 PID: 4198 Comm: kworker/0:3 Not tainted 5.15.189-syzkaller #0 [ 62.544741][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.554780][ T4198] Workqueue: ipv6_addrconf addrconf_dad_work [ 62.560752][ T4198] Call Trace: [ 62.564018][ T4198] [ 62.566936][ T4198] dump_stack_lvl+0x168/0x230 [ 62.571598][ T4198] ? load_image+0x3b0/0x3b0 [ 62.576086][ T4198] ? show_regs_print_info+0x20/0x20 [ 62.581268][ T4198] ? print_circular_bug+0x12b/0x1a0 [ 62.586452][ T4198] check_noncircular+0x274/0x310 [ 62.591368][ T4198] ? add_chain_block+0x940/0x940 [ 62.596281][ T4198] ? lockdep_lock+0xdc/0x1e0 [ 62.600870][ T4198] ? mark_lock+0x94/0x320 [ 62.605178][ T4198] __lock_acquire+0x2c33/0x7c60 [ 62.610013][ T4198] ? verify_lock_unused+0x140/0x140 [ 62.615196][ T4198] lock_acquire+0x197/0x3f0 [ 62.619683][ T4198] ? kvfree_call_rcu+0x186/0x7c0 [ 62.624599][ T4198] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 62.629951][ T4198] ? read_lock_is_recursive+0x10/0x10 [ 62.635304][ T4198] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 62.641174][ T4198] ? _raw_spin_unlock+0x40/0x40 [ 62.646003][ T4198] ? debug_object_active_state+0x6b/0x340 [ 62.651705][ T4198] _raw_spin_lock+0x2a/0x40 [ 62.656190][ T4198] ? kvfree_call_rcu+0x186/0x7c0 [ 62.661104][ T4198] kvfree_call_rcu+0x186/0x7c0 [ 62.665853][ T4198] ? call_rcu+0x930/0x930 [ 62.670174][ T4198] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 62.675526][ T4198] ? _raw_spin_lock+0x40/0x40 [ 62.680184][ T4198] ? longest_prefix_match+0x452/0x660 [ 62.685540][ T4198] trie_delete_elem+0x58c/0x710 [ 62.690383][ T4198] bpf_prog_2c29ac5cdc6b1842+0x3a/0x18c [ 62.695912][ T4198] bpf_trace_run3+0x17e/0x320 [ 62.700570][ T4198] ? bpf_trace_run2+0x2d0/0x2d0 [ 62.705398][ T4198] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 62.711273][ T4198] ? del_timer+0x11a/0x1b0 [ 62.715675][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 62.720942][ T4198] enqueue_timer+0x394/0x520 [ 62.725512][ T4198] __mod_timer+0x8e1/0xd20 [ 62.729913][ T4198] mod_delayed_work_on+0xc3/0x1a0 [ 62.734919][ T4198] ? __queue_delayed_work+0x200/0x200 [ 62.740268][ T4198] ? prandom_u32+0x217/0x250 [ 62.744839][ T4198] ipv6_mc_dad_complete+0x10a/0x210 [ 62.750018][ T4198] addrconf_dad_completed+0x6c7/0xca0 [ 62.755369][ T4198] ? addrconf_dad_stop+0x430/0x430 [ 62.760460][ T4198] addrconf_dad_work+0xc70/0x1520 [ 62.765463][ T4198] ? rcu_lock_release+0x20/0x20 [ 62.770465][ T4198] ? read_lock_is_recursive+0x10/0x10 [ 62.775818][ T4198] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 62.781693][ T4198] ? _raw_spin_unlock+0x40/0x40 [ 62.786521][ T4198] ? _raw_spin_unlock_irq+0x1f/0x40 [ 62.791702][ T4198] process_one_work+0x863/0x1000 [ 62.796624][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 62.802233][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 62.807497][ T4198] ? _raw_spin_lock_irq+0xab/0xe0 [ 62.812503][ T4198] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 62.817862][ T4198] ? wq_worker_running+0x97/0x170 [ 62.822864][ T4198] worker_thread+0xaa8/0x12a0 [ 62.827528][ T4198] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 62.833416][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 62.838609][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 62.843799][ T4198] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 62.849694][ T4198] kthread+0x436/0x520 [ 62.853764][ T4198] ? rcu_lock_release+0x20/0x20 [ 62.858607][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 62.863179][ T4198] ret_from_fork+0x1f/0x30 [ 62.867597][ T4198]