Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. 2026/04/13 17:40:54 parsed 1 programs [ 91.656720][ T4596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 94.826646][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.834486][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.843638][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.867734][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.877357][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.884869][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.153954][ T4663] chnl_net:caif_netlink_parms(): no params data found [ 95.188853][ T4663] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.196153][ T4663] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.204146][ T4663] device bridge_slave_0 entered promiscuous mode [ 95.212617][ T4663] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.219919][ T4663] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.228012][ T4663] device bridge_slave_1 entered promiscuous mode [ 95.246644][ T4663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.257824][ T4663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.279355][ T4663] team0: Port device team_slave_0 added [ 95.286555][ T4663] team0: Port device team_slave_1 added [ 95.303671][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.311761][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.338416][ T4663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.350550][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.357762][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.383939][ T4663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.409858][ T4663] device hsr_slave_0 entered promiscuous mode [ 95.416924][ T4663] device hsr_slave_1 entered promiscuous mode [ 95.919345][ T4663] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.929269][ T4663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.960255][ T4663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.973125][ T4663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.108206][ T4663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.123298][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.134456][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.147228][ T4663] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.157679][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.169088][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.178742][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.185855][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.209136][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.217997][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.229172][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.239643][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.246879][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.257154][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.266909][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.276145][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.288320][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.329247][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.341072][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.351608][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.361710][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.370816][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.380608][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.390403][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.403113][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.590523][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.600563][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.614506][ T4663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.640174][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.651744][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.672941][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.682530][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.694364][ T4663] device veth0_vlan entered promiscuous mode [ 96.703700][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.725259][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.743754][ T4663] device veth1_vlan entered promiscuous mode [ 96.768963][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.778942][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.788544][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.800490][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.811802][ T4663] device veth0_macvtap entered promiscuous mode [ 96.837329][ T4663] device veth1_macvtap entered promiscuous mode [ 96.858602][ T4663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.867018][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.876215][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.889889][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.899911][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.912429][ T4663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.920464][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.931389][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.944332][ T4663] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.958173][ T4663] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.969864][ T4663] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.979150][ T4663] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/13 17:41:03 executed programs: 0 [ 97.817138][ T4755] chnl_net:caif_netlink_parms(): no params data found [ 97.904557][ T4755] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.914477][ T4755] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.922690][ T4755] device bridge_slave_0 entered promiscuous mode [ 97.934662][ T4755] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.941945][ T4755] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.952242][ T4755] device bridge_slave_1 entered promiscuous mode [ 97.991216][ T4755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.002969][ T4755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.042526][ T4755] team0: Port device team_slave_0 added [ 98.050462][ T4755] team0: Port device team_slave_1 added [ 98.077956][ T4755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.085027][ T4755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.113284][ T4755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.128566][ T4755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.136907][ T4755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.163920][ T4755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.204350][ T4755] device hsr_slave_0 entered promiscuous mode [ 98.213906][ T4755] device hsr_slave_1 entered promiscuous mode [ 98.226301][ T4755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.245675][ T4755] Cannot create hsr debugfs directory [ 98.418132][ T4755] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.665634][ T4659] Bluetooth: hci0: command 0x0409 tx timeout [ 101.012127][ T4755] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.401353][ T4755] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.484416][ T4755] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.577390][ T4755] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.587835][ T4755] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.596814][ T4755] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.609442][ T4755] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.657661][ T4755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.670074][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.677976][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.689410][ T4755] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.698903][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.707887][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.716664][ T1461] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.724051][ T1461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.732123][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.746154][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 101.753867][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.762615][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.771553][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.778892][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.807780][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.817435][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.826896][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.836793][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.845190][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.854595][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.863352][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.872374][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.880798][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.892068][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.901172][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.921239][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.998923][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.006631][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.019967][ T4755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.043354][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.052299][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.078470][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.088361][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.097712][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.105501][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.120865][ T4755] device veth0_vlan entered promiscuous mode [ 102.132155][ T4755] device veth1_vlan entered promiscuous mode [ 102.155058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.167601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.176450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.185079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.195858][ T4755] device veth0_macvtap entered promiscuous mode [ 102.204367][ T4755] device veth1_macvtap entered promiscuous mode [ 102.215350][ T144] device hsr_slave_0 left promiscuous mode [ 102.222306][ T144] device hsr_slave_1 left promiscuous mode [ 102.229897][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.239513][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.247770][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.255300][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.263728][ T144] device bridge_slave_1 left promiscuous mode [ 102.270019][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.278511][ T144] device bridge_slave_0 left promiscuous mode [ 102.284754][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.297035][ T144] device veth1_macvtap left promiscuous mode [ 102.303134][ T144] device veth0_macvtap left promiscuous mode [ 102.309378][ T144] device veth1_vlan left promiscuous mode [ 102.315144][ T144] device veth0_vlan left promiscuous mode [ 102.434437][ T144] team0 (unregistering): Port device team_slave_1 removed [ 102.447469][ T144] team0 (unregistering): Port device team_slave_0 removed [ 102.461771][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.475265][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.522194][ T144] bond0 (unregistering): Released all slaves [ 102.561475][ T4755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.571394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.579911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.587945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.597826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.610928][ T4755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.619357][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.630518][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.643447][ T4755] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.652835][ T4755] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.662428][ T4755] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.671540][ T4755] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.732306][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.742329][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.751083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/04/13 17:41:08 executed programs: 2 [ 102.777073][ T1461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.785026][ T1461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.793562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.587508][ T4298] [ 103.589887][ T4298] ====================================================== [ 103.597018][ T4298] WARNING: possible circular locking dependency detected [ 103.604122][ T4298] syzkaller #0 Not tainted [ 103.608517][ T4298] ------------------------------------------------------ [ 103.615525][ T4298] kworker/0:10/4298 is trying to acquire lock: [ 103.621657][ T4298] ffff8880b9027eb8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x18d/0x7d0 [ 103.630303][ T4298] [ 103.630303][ T4298] but task is already holding lock: [ 103.637675][ T4298] ffff88801f75aa38 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 103.646724][ T4298] [ 103.646724][ T4298] which lock already depends on the new lock. [ 103.646724][ T4298] [ 103.657293][ T4298] [ 103.657293][ T4298] the existing dependency chain (in reverse order) is: [ 103.666287][ T4298] [ 103.666287][ T4298] -> #2 (&trie->lock){..-.}-{2:2}: [ 103.673606][ T4298] _raw_spin_lock_irqsave+0xb0/0x100 [ 103.679511][ T4298] trie_delete_elem+0x90/0x710 [ 103.684798][ T4298] 0xffffffffa00161aa [ 103.689291][ T4298] bpf_trace_run3+0x19e/0x350 [ 103.694471][ T4298] enqueue_timer+0x394/0x520 [ 103.699571][ T4298] __mod_timer+0x8b8/0xd00 [ 103.704494][ T4298] sk_reset_timer+0x1f/0xb0 [ 103.709511][ T4298] tcp_event_new_data_sent+0x20e/0x370 [ 103.715474][ T4298] tcp_write_xmit+0x18f6/0x6580 [ 103.720914][ T4298] __tcp_push_pending_frames+0x92/0x250 [ 103.727009][ T4298] tcp_rcv_established+0xf2d/0x1ce0 [ 103.732807][ T4298] tcp_v4_do_rcv+0x44b/0x9b0 [ 103.737899][ T4298] tcp_v4_rcv+0x26d8/0x2d10 [ 103.742902][ T4298] ip_protocol_deliver_rcu+0x3ad/0x770 [ 103.748869][ T4298] ip_local_deliver_finish+0x1d5/0x320 [ 103.754992][ T4298] NF_HOOK+0x303/0x390 [ 103.759596][ T4298] NF_HOOK+0x303/0x390 [ 103.764174][ T4298] __netif_receive_skb+0xcc/0x290 [ 103.769801][ T4298] process_backlog+0x370/0x790 [ 103.775092][ T4298] __napi_poll+0xc0/0x430 [ 103.780040][ T4298] net_rx_action+0x4d4/0xa10 [ 103.785205][ T4298] handle_softirqs+0x339/0x830 [ 103.790472][ T4298] run_ksoftirqd+0xa4/0x100 [ 103.795608][ T4298] smpboot_thread_fn+0x4f6/0x970 [ 103.801274][ T4298] kthread+0x436/0x520 [ 103.805858][ T4298] ret_from_fork+0x1f/0x30 [ 103.810787][ T4298] [ 103.810787][ T4298] -> #1 (&base->lock){-.-.}-{2:2}: [ 103.818178][ T4298] _raw_spin_lock_irqsave+0xb0/0x100 [ 103.823977][ T4298] lock_timer_base+0x123/0x270 [ 103.829255][ T4298] __mod_timer+0xfe/0xd00 [ 103.834102][ T4298] queue_delayed_work_on+0x12d/0x1f0 [ 103.839919][ T4298] kvfree_call_rcu+0x4bc/0x7d0 [ 103.845193][ T4298] rtnl_register_internal+0x489/0x590 [ 103.851077][ T4298] rtnl_register+0x2e/0x70 [ 103.856013][ T4298] ip_rt_init+0x2e0/0x3a0 [ 103.860864][ T4298] ip_init+0xa/0x20 [ 103.865305][ T4298] inet_init+0x28b/0x3a0 [ 103.870178][ T4298] do_one_initcall+0x272/0x730 [ 103.875547][ T4298] do_initcall_level+0x137/0x1f0 [ 103.880998][ T4298] do_initcalls+0x4b/0x90 [ 103.885923][ T4298] kernel_init_freeable+0x3e9/0x570 [ 103.891633][ T4298] kernel_init+0x19/0x1b0 [ 103.896486][ T4298] ret_from_fork+0x1f/0x30 [ 103.901416][ T4298] [ 103.901416][ T4298] -> #0 (krc.lock){..-.}-{2:2}: [ 103.908434][ T4298] __lock_acquire+0x2c42/0x7d10 [ 103.913894][ T4298] lock_acquire+0x19e/0x400 [ 103.918932][ T4298] _raw_spin_lock+0x2a/0x40 [ 103.923940][ T4298] kvfree_call_rcu+0x18d/0x7d0 [ 103.929208][ T4298] trie_delete_elem+0x58c/0x710 [ 103.934589][ T4298] bpf_prog_2c29ac5cdc6b1842+0x3a/0xcdc [ 103.940825][ T4298] bpf_trace_run3+0x19e/0x350 [ 103.946007][ T4298] enqueue_timer+0x394/0x520 [ 103.951207][ T4298] __mod_timer+0x911/0xd00 [ 103.956148][ T4298] addrconf_dad_completed+0x8ed/0xc80 [ 103.962112][ T4298] addrconf_dad_work+0xc8c/0x1540 [ 103.967728][ T4298] process_one_work+0x85f/0x1010 [ 103.973214][ T4298] worker_thread+0xaa6/0x1290 [ 103.978421][ T4298] kthread+0x436/0x520 [ 103.983339][ T4298] ret_from_fork+0x1f/0x30 [ 103.988291][ T4298] [ 103.988291][ T4298] other info that might help us debug this: [ 103.988291][ T4298] [ 103.998586][ T4298] Chain exists of: [ 103.998586][ T4298] krc.lock --> &base->lock --> &trie->lock [ 103.998586][ T4298] [ 104.010661][ T4298] Possible unsafe locking scenario: [ 104.010661][ T4298] [ 104.018095][ T4298] CPU0 CPU1 [ 104.023442][ T4298] ---- ---- [ 104.028882][ T4298] lock(&trie->lock); [ 104.033023][ T4298] lock(&base->lock); [ 104.039591][ T4298] lock(&trie->lock); [ 104.046156][ T4298] lock(krc.lock); [ 104.049944][ T4298] [ 104.049944][ T4298] *** DEADLOCK *** [ 104.049944][ T4298] [ 104.058066][ T4298] 8 locks held by kworker/0:10/4298: [ 104.063415][ T4298] #0: ffff88802ad42538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 104.074716][ T4298] #1: ffffc90002eafd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 104.086954][ T4298] #2: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xca/0x1540 [ 104.096959][ T4298] #3: ffff88807a90c578 (&ndev->lock){++--}-{2:2}, at: addrconf_dad_completed+0x787/0xc80 [ 104.106947][ T4298] #4: ffff888079da1440 (&ifa->lock){+...}-{2:2}, at: addrconf_dad_completed+0x795/0xc80 [ 104.116767][ T4298] #5: ffff8880b90280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 104.126073][ T4298] #6: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 104.135543][ T4298] #7: ffff88801f75aa38 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 104.144843][ T4298] [ 104.144843][ T4298] stack backtrace: [ 104.150749][ T4298] CPU: 0 PID: 4298 Comm: kworker/0:10 Not tainted syzkaller #0 [ 104.158299][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 104.168545][ T4298] Workqueue: ipv6_addrconf addrconf_dad_work [ 104.174619][ T4298] Call Trace: [ 104.177906][ T4298] [ 104.180867][ T4298] dump_stack_lvl+0x188/0x250 [ 104.185548][ T4298] ? load_image+0x400/0x400 [ 104.190253][ T4298] ? show_regs_print_info+0x20/0x20 [ 104.195634][ T4298] ? print_circular_bug+0x12b/0x1a0 [ 104.200934][ T4298] check_noncircular+0x296/0x330 [ 104.205968][ T4298] ? add_chain_block+0x940/0x940 [ 104.210976][ T4298] ? lockdep_lock+0xf1/0x1f0 [ 104.215641][ T4298] ? mark_lock+0x94/0x320 [ 104.219959][ T4298] ? _find_first_zero_bit+0xce/0xf0 [ 104.225205][ T4298] __lock_acquire+0x2c42/0x7d10 [ 104.230051][ T4298] ? verify_lock_unused+0x140/0x140 [ 104.235242][ T4298] lock_acquire+0x19e/0x400 [ 104.239730][ T4298] ? kvfree_call_rcu+0x18d/0x7d0 [ 104.244655][ T4298] ? read_lock_is_recursive+0x10/0x10 [ 104.250103][ T4298] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 104.256075][ T4298] ? _raw_spin_unlock+0x40/0x40 [ 104.261141][ T4298] ? debug_object_active_state+0x6a/0x380 [ 104.266871][ T4298] _raw_spin_lock+0x2a/0x40 [ 104.271459][ T4298] ? kvfree_call_rcu+0x18d/0x7d0 [ 104.276382][ T4298] kvfree_call_rcu+0x18d/0x7d0 [ 104.281144][ T4298] ? call_rcu+0x950/0x950 [ 104.285468][ T4298] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 104.290931][ T4298] ? _raw_spin_lock+0x40/0x40 [ 104.295690][ T4298] ? longest_prefix_match+0x452/0x660 [ 104.302061][ T4298] trie_delete_elem+0x58c/0x710 [ 104.307098][ T4298] bpf_prog_2c29ac5cdc6b1842+0x3a/0xcdc [ 104.312844][ T4298] bpf_trace_run3+0x19e/0x350 [ 104.317729][ T4298] ? do_raw_spin_unlock+0x11d/0x230 [ 104.322944][ T4298] ? bpf_trace_run2+0x2e0/0x2e0 [ 104.327802][ T4298] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 104.333777][ T4298] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 104.339389][ T4298] ? _raw_spin_lock+0x40/0x40 [ 104.344255][ T4298] enqueue_timer+0x394/0x520 [ 104.348841][ T4298] __mod_timer+0x911/0xd00 [ 104.353247][ T4298] addrconf_dad_completed+0x8ed/0xc80 [ 104.358814][ T4298] ? addrconf_dad_stop+0x430/0x430 [ 104.364032][ T4298] addrconf_dad_work+0xc8c/0x1540 [ 104.369054][ T4298] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 104.375396][ T4298] ? rcu_lock_release+0x20/0x20 [ 104.380236][ T4298] ? read_lock_is_recursive+0x10/0x10 [ 104.385602][ T4298] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 104.391509][ T4298] ? _raw_spin_unlock+0x40/0x40 [ 104.396356][ T4298] ? _raw_spin_unlock_irq+0x1f/0x40 [ 104.401555][ T4298] process_one_work+0x85f/0x1010 [ 104.406612][ T4298] ? worker_detach_from_pool+0x240/0x240 [ 104.412236][ T4298] ? lockdep_hardirqs_off+0x70/0x100 [ 104.417599][ T4298] ? _raw_spin_lock_irq+0xb7/0xf0 [ 104.422607][ T4298] ? _raw_spin_lock_irqsave+0x100/0x100 [ 104.428226][ T4298] ? wq_worker_running+0x97/0x170 [ 104.433321][ T4298] worker_thread+0xaa6/0x1290 [ 104.437985][ T4298] ? lockdep_hardirqs_on+0x94/0x140 [ 104.443168][ T4298] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 104.449047][ T4298] kthread+0x436/0x520 [ 104.453242][ T4298] ? rcu_lock_release+0x20/0x20 [ 104.458077][ T4298] ? kthread_blkcg+0xd0/0xd0 [ 104.462659][ T4298] ret_from_fork+0x1f/0x30 [ 104.467074][ T4298]