BUG: MAX_LOCKDEP_KEYS too low!
turning off the locking correctness validator.
CPU: 0 UID: 0 PID: 15402 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Workqueue: events_unbound linkwatch_event
Call Trace:
dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
register_lock_class+0x2e8/0x320 kernel/locking/lockdep.c:1332
__lock_acquire+0x99/0xd20 kernel/locking/lockdep.c:5112
lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868
__raw_spin_lock_bh include/linux/spinlock_api_smp.h:126 [inline]
_raw_spin_lock_bh+0x36/0x50 kernel/locking/spinlock.c:178
spin_lock_bh include/linux/spinlock.h:356 [inline]
dev_reset_queue+0xfa/0x1b0 net/sched/sch_generic.c:1312
netdev_for_each_tx_queue include/linux/netdevice.h:2660 [inline]
dev_deactivate_many+0x720/0xd40 net/sched/sch_generic.c:1378
dev_deactivate+0x118/0x1b0 net/sched/sch_generic.c:1401
linkwatch_do_dev+0x10f/0x170 net/core/link_watch.c:184
__linkwatch_run_queue+0x56a/0x7e0 net/core/link_watch.c:244
linkwatch_event+0x4c/0x60 net/core/link_watch.c:304
process_one_work kernel/workqueue.c:3236 [inline]
process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3319
worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
kthread+0x711/0x8a0 kernel/kthread.c:463
ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
bridge0: port 1(batadv0) entered disabled state
Oops: general protection fault, probably for non-canonical address 0xdffffc001fffc1ac: 0000 [#1] SMP KASAN PTI
KASAN: probably user-memory-access in range [0x00000000fffe0d60-0x00000000fffe0d67]
CPU: 1 UID: 0 PID: 15402 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Workqueue: netns cleanup_net
RIP: 0010:ip_mc_hash_remove net/ipv4/igmp.c:1431 [inline]
RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 net/ipv4/igmp.c:1774
Code: 79 76 bb f7 c6 05 b8 21 89 05 01 48 c7 c7 80 9c 9e 8c be 97 05 00 00 48 c7 c2 00 9d 9e 8c e8 ca 50 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 94 df 1e f8 4d 8b 2c 24 4d 39 f5
RSP: 0018:ffffc90003bcf4f8 EFLAGS: 00010206
RAX: ffffffff8a043585 RBX: 000000001fffc1ac RCX: ffff8880578b5a00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff88805a92f020 R08: ffffffff8f537ba7 R09: 1ffffffff1ea6f74
R10: dffffc0000000000 R11: fffffbfff1ea6f75 R12: 00000000fffe0d60
R13: dffffc0000000000 R14: ffff88807bc53400 R15: 1ffff1100b525e04
FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555b58b22000 CR3: 0000000063ac2000 CR4: 00000000003526f0
Call Trace:
inetdev_event+0x2a7/0x15b0 net/ipv4/devinet.c:1642
notifier_call_chain+0x1b3/0x3e0 kernel/notifier.c:85
call_netdevice_notifiers_extack net/core/dev.c:2267 [inline]
call_netdevice_notifiers net/core/dev.c:2281 [inline]
netif_close_many+0x29c/0x410 net/core/dev.c:1784
unregister_netdevice_many_notify+0x7b9/0x1ff0 net/core/dev.c:12136
ops_exit_rtnl_list net/core/net_namespace.c:186 [inline]
ops_undo_list+0x3dc/0x990 net/core/net_namespace.c:247
cleanup_net+0x4c5/0x800 net/core/net_namespace.c:682
process_one_work kernel/workqueue.c:3236 [inline]
process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3319
worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
kthread+0x711/0x8a0 kernel/kthread.c:463
ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ip_mc_hash_remove net/ipv4/igmp.c:1431 [inline]
RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 net/ipv4/igmp.c:1774
Code: 79 76 bb f7 c6 05 b8 21 89 05 01 48 c7 c7 80 9c 9e 8c be 97 05 00 00 48 c7 c2 00 9d 9e 8c e8 ca 50 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 94 df 1e f8 4d 8b 2c 24 4d 39 f5
RSP: 0018:ffffc90003bcf4f8 EFLAGS: 00010206
RAX: ffffffff8a043585 RBX: 000000001fffc1ac RCX: ffff8880578b5a00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff88805a92f020 R08: ffffffff8f537ba7 R09: 1ffffffff1ea6f74
R10: dffffc0000000000 R11: fffffbfff1ea6f75 R12: 00000000fffe0d60
R13: dffffc0000000000 R14: ffff88807bc53400 R15: 1ffff1100b525e04
FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555b58b22000 CR3: 0000000063ac2000 CR4: 00000000003526f0
----------------
Code disassembly (best guess):
0: 79 76 jns 0x78
2: bb f7 c6 05 b8 mov $0xb805c6f7,%ebx
7: 21 89 05 01 48 c7 and %ecx,-0x38b7fefb(%rcx)
d: c7 80 9c 9e 8c be 97 movl $0x597,-0x41736164(%rax)
14: 05 00 00
17: 48 c7 c2 00 9d 9e 8c mov $0xffffffff8c9e9d00,%rdx
1e: e8 ca 50 99 f7 call 0xf79950ed
23: 4c 89 e3 mov %r12,%rbx
26: 48 c1 eb 03 shr $0x3,%rbx
* 2a: 42 80 3c 2b 00 cmpb $0x0,(%rbx,%r13,1) <-- trapping instruction
2f: 74 08 je 0x39
31: 4c 89 e7 mov %r12,%rdi
34: e8 94 df 1e f8 call 0xf81edfcd
39: 4d 8b 2c 24 mov (%r12),%r13
3d: 4d 39 f5 cmp %r14,%r13