Warning: Permanently added '10.128.0.142' (ED25519) to the list of known hosts. executing program [ 76.633098][ C1] [ 76.635501][ C1] ====================================================== [ 76.642538][ C1] WARNING: possible circular locking dependency detected [ 76.649582][ C1] 6.1.134-syzkaller #0 Not tainted [ 76.654873][ C1] ------------------------------------------------------ [ 76.661977][ C1] udevd/4246 is trying to acquire lock: [ 76.667533][ C1] ffff8880b8f28118 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x1b2/0x8c0 [ 76.676302][ C1] [ 76.676302][ C1] but task is already holding lock: [ 76.683757][ C1] ffff8880b8f29418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 76.692852][ C1] [ 76.692852][ C1] which lock already depends on the new lock. [ 76.692852][ C1] [ 76.703587][ C1] [ 76.703587][ C1] the existing dependency chain (in reverse order) is: [ 76.712715][ C1] [ 76.712715][ C1] -> #1 (&base->lock){-.-.}-{2:2}: [ 76.720763][ C1] lock_acquire+0x1f8/0x5a0 [ 76.725987][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 76.731843][ C1] lock_timer_base+0x120/0x260 [ 76.737550][ C1] __mod_timer+0x1cb/0xee0 [ 76.742547][ C1] queue_delayed_work_on+0x156/0x250 [ 76.748366][ C1] kvfree_call_rcu+0x520/0x8c0 [ 76.753762][ C1] rtnl_register_internal+0x489/0x580 [ 76.759920][ C1] rtnl_register+0x32/0x70 [ 76.764948][ C1] ip_rt_init+0x335/0x3c7 [ 76.769996][ C1] ip_init+0xa/0x14 [ 76.774769][ C1] inet_init+0x2ae/0x3c0 [ 76.779629][ C1] do_one_initcall+0x265/0x8f0 [ 76.784922][ C1] do_initcall_level+0x157/0x207 [ 76.790582][ C1] do_initcalls+0x49/0x86 [ 76.795481][ C1] kernel_init_freeable+0x45c/0x60f [ 76.801410][ C1] kernel_init+0x19/0x290 [ 76.806295][ C1] ret_from_fork+0x1f/0x30 [ 76.811444][ C1] [ 76.811444][ C1] -> #0 (krc.lock){..-.}-{2:2}: [ 76.818966][ C1] validate_chain+0x1661/0x5950 [ 76.824459][ C1] __lock_acquire+0x125b/0x1f80 [ 76.829931][ C1] lock_acquire+0x1f8/0x5a0 [ 76.835056][ C1] _raw_spin_lock+0x2a/0x40 [ 76.840273][ C1] kvfree_call_rcu+0x1b2/0x8c0 [ 76.846452][ C1] trie_delete_elem+0x53a/0x690 [ 76.851862][ C1] bpf_prog_1db1603a7cfa36fb+0x3d/0x41 [ 76.858163][ C1] bpf_trace_run3+0x231/0x440 [ 76.863570][ C1] enqueue_timer+0x440/0x600 [ 76.868987][ C1] __mod_timer+0x92b/0xee0 [ 76.874032][ C1] call_timer_fn+0x1ad/0x6b0 [ 76.879590][ C1] __run_timers+0x67c/0x890 [ 76.884622][ C1] handle_softirqs+0x2ee/0xa40 [ 76.890043][ C1] __irq_exit_rcu+0x157/0x240 [ 76.895344][ C1] irq_exit_rcu+0x5/0x20 [ 76.900214][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 76.906515][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 76.913482][ C1] __stack_depot_save+0x172/0x470 [ 76.919256][ C1] kasan_set_track+0x60/0x70 [ 76.924938][ C1] __kasan_slab_alloc+0x65/0x70 [ 76.930412][ C1] slab_post_alloc_hook+0x52/0x3a0 [ 76.936139][ C1] kmem_cache_alloc_lru+0x10c/0x2d0 [ 76.942066][ C1] __d_alloc+0x31/0x760 [ 76.946878][ C1] d_alloc_parallel+0xdd/0x1590 [ 76.952514][ C1] path_openat+0x90a/0x2e60 [ 76.957712][ C1] do_filp_open+0x230/0x480 [ 76.962839][ C1] do_sys_openat2+0x13b/0x4f0 [ 76.968229][ C1] __x64_sys_openat+0x243/0x290 [ 76.973614][ C1] do_syscall_64+0x3b/0x80 [ 76.978622][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.985248][ C1] [ 76.985248][ C1] other info that might help us debug this: [ 76.985248][ C1] [ 76.995490][ C1] Possible unsafe locking scenario: [ 76.995490][ C1] [ 77.003056][ C1] CPU0 CPU1 [ 77.009162][ C1] ---- ---- [ 77.014636][ C1] lock(&base->lock); [ 77.019837][ C1] lock(krc.lock); [ 77.027365][ C1] lock(&base->lock); [ 77.035162][ C1] lock(krc.lock); [ 77.039574][ C1] [ 77.039574][ C1] *** DEADLOCK *** [ 77.039574][ C1] [ 77.048206][ C1] 4 locks held by udevd/4246: [ 77.052977][ C1] #0: ffff888074093900 (&type->i_mutex_dir_key#4){++++}-{3:3}, at: path_openat+0x7a7/0x2e60 [ 77.063401][ C1] #1: ffffc900001e0be0 ((&tcp_orphan_timer)){+.-.}-{0:0}, at: call_timer_fn+0xc2/0x6b0 [ 77.073359][ C1] #2: ffff8880b8f29418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 77.082858][ C1] #3: ffffffff8d32e740 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0x146/0x440 [ 77.092635][ C1] [ 77.092635][ C1] stack backtrace: [ 77.098534][ C1] CPU: 1 PID: 4246 Comm: udevd Not tainted 6.1.134-syzkaller #0 [ 77.106170][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 77.116621][ C1] Call Trace: [ 77.119936][ C1] [ 77.122913][ C1] dump_stack_lvl+0x1e3/0x2cb [ 77.127729][ C1] ? nf_tcp_handle_invalid+0x647/0x647 [ 77.133698][ C1] ? print_circular_bug+0x12b/0x1a0 [ 77.138948][ C1] check_noncircular+0x2fa/0x3b0 [ 77.143987][ C1] ? deref_stack_reg+0x17c/0x210 [ 77.148994][ C1] ? add_chain_block+0x850/0x850 [ 77.153945][ C1] ? lockdep_lock+0x11f/0x2a0 [ 77.158638][ C1] ? 0xffffffffa00007d8 [ 77.163076][ C1] ? 0xffffffffa00007d8 [ 77.167433][ C1] ? _find_first_zero_bit+0xd0/0x100 [ 77.172844][ C1] validate_chain+0x1661/0x5950 [ 77.177797][ C1] ? print_irq_lock_scenario+0x180/0x180 [ 77.183486][ C1] ? reacquire_held_locks+0x660/0x660 [ 77.189055][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 77.194431][ C1] ? lockdep_lock+0x11f/0x2a0 [ 77.199427][ C1] ? lockdep_unlock+0x165/0x300 [ 77.204379][ C1] ? lockdep_lock+0x2a0/0x2a0 [ 77.209066][ C1] ? mark_lock+0x9a/0x340 [ 77.213404][ C1] __lock_acquire+0x125b/0x1f80 [ 77.218377][ C1] lock_acquire+0x1f8/0x5a0 [ 77.222890][ C1] ? kvfree_call_rcu+0x1b2/0x8c0 [ 77.227933][ C1] ? read_lock_is_recursive+0x10/0x10 [ 77.233322][ C1] ? __phys_addr+0xb6/0x170 [ 77.237831][ C1] _raw_spin_lock+0x2a/0x40 [ 77.242345][ C1] ? kvfree_call_rcu+0x1b2/0x8c0 [ 77.247410][ C1] kvfree_call_rcu+0x1b2/0x8c0 [ 77.252206][ C1] ? rcu_leak_callback+0x10/0x10 [ 77.257243][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 77.263165][ C1] ? _raw_spin_unlock+0x40/0x40 [ 77.268032][ C1] ? longest_prefix_match+0x4a5/0x640 [ 77.273417][ C1] trie_delete_elem+0x53a/0x690 [ 77.278307][ C1] bpf_prog_1db1603a7cfa36fb+0x3d/0x41 [ 77.284313][ C1] bpf_trace_run3+0x231/0x440 [ 77.289183][ C1] ? bpf_trace_run3+0x146/0x440 [ 77.294086][ C1] ? bpf_trace_run2+0x410/0x410 [ 77.299142][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 77.305067][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 77.310545][ C1] ? _raw_spin_lock+0x40/0x40 [ 77.315273][ C1] enqueue_timer+0x440/0x600 [ 77.319892][ C1] __mod_timer+0x92b/0xee0 [ 77.324387][ C1] ? mod_timer_pending+0x20/0x20 [ 77.329436][ C1] ? tcp_orphan_update+0x16a/0x1c0 [ 77.334670][ C1] call_timer_fn+0x1ad/0x6b0 [ 77.339278][ C1] ? tcp_abort+0x450/0x450 [ 77.343790][ C1] ? call_timer_fn+0xc2/0x6b0 [ 77.348573][ C1] ? __run_timers+0x890/0x890 [ 77.353358][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 77.358599][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 77.363910][ C1] ? tcp_abort+0x450/0x450 [ 77.368421][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 77.373660][ C1] ? tcp_abort+0x450/0x450 [ 77.378348][ C1] __run_timers+0x67c/0x890 [ 77.383167][ C1] ? detach_timer+0x380/0x380 [ 77.387974][ C1] handle_softirqs+0x2ee/0xa40 [ 77.392821][ C1] ? __irq_exit_rcu+0x157/0x240 [ 77.397881][ C1] ? do_softirq+0x240/0x240 [ 77.402729][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 77.407975][ C1] __irq_exit_rcu+0x157/0x240 [ 77.412822][ C1] ? irq_exit_rcu+0x20/0x20 [ 77.417855][ C1] irq_exit_rcu+0x5/0x20 [ 77.422128][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 77.427800][ C1] [ 77.430861][ C1] [ 77.433911][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 77.440052][ C1] RIP: 0010:__stack_depot_save+0x172/0x470 [ 77.446259][ C1] Code: 04 13 8b 1d 24 84 04 13 44 21 eb 48 89 44 24 10 4c 8b 34 d8 4c 89 c5 41 89 ec eb 03 4d 8b 36 4d 85 f6 74 2a 45 39 6e 08 75 f2 <41> 39 6e 0c 75 ec 31 c0 49 8b 0c c7 49 3b 4c c6 18 75 df 48 ff c0 [ 77.467033][ C1] RSP: 0018:ffffc90003bb7358 EFLAGS: 00000246 [ 77.473109][ C1] RAX: ffff88823b400000 RBX: 0000000000095ad0 RCX: 0000000074f5b41d [ 77.481176][ C1] RDX: ffffc90003bb7414 RSI: 0000000000000003 RDI: 0000000000000cc0 [ 77.489235][ C1] RBP: 000000000000000c R08: 000000000000000c R09: 0000000000000001 [ 77.497205][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000000000c [ 77.505369][ C1] R13: 0000000010b95ad0 R14: ffff88807e113000 R15: ffffc90003bb73c0 [ 77.513466][ C1] ? __stack_depot_save+0x36/0x470 [ 77.518707][ C1] kasan_set_track+0x60/0x70 [ 77.523326][ C1] ? kasan_set_track+0x4b/0x70 [ 77.528134][ C1] ? __kasan_slab_alloc+0x65/0x70 [ 77.533446][ C1] ? slab_post_alloc_hook+0x52/0x3a0 [ 77.538951][ C1] ? kmem_cache_alloc_lru+0x10c/0x2d0 [ 77.544539][ C1] ? __d_alloc+0x31/0x760 [ 77.548973][ C1] ? d_alloc_parallel+0xdd/0x1590 [ 77.554106][ C1] ? path_openat+0x90a/0x2e60 [ 77.558839][ C1] ? do_filp_open+0x230/0x480 [ 77.563523][ C1] ? do_sys_openat2+0x13b/0x4f0 [ 77.568398][ C1] ? __x64_sys_openat+0x243/0x290 [ 77.573546][ C1] ? do_syscall_64+0x3b/0x80 [ 77.578177][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.584302][ C1] __kasan_slab_alloc+0x65/0x70 [ 77.589195][ C1] slab_post_alloc_hook+0x52/0x3a0 [ 77.594566][ C1] kmem_cache_alloc_lru+0x10c/0x2d0 [ 77.600036][ C1] ? __d_alloc+0x31/0x760 [ 77.604650][ C1] __d_alloc+0x31/0x760 [ 77.608956][ C1] d_alloc_parallel+0xdd/0x1590 [ 77.614033][ C1] ? __d_lookup+0x8b/0x790 [ 77.618500][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 77.624153][ C1] ? d_hash_and_lookup+0x1b0/0x1b0 [ 77.629294][ C1] ? __d_lookup+0x6d6/0x790 [ 77.633904][ C1] path_openat+0x90a/0x2e60 [ 77.638418][ C1] ? mark_lock+0x9a/0x340 [ 77.642798][ C1] ? do_filp_open+0x480/0x480 [ 77.647530][ C1] do_filp_open+0x230/0x480 [ 77.652868][ C1] ? vfs_tmpfile+0x4a0/0x4a0 [ 77.657594][ C1] ? _raw_spin_unlock+0x24/0x40 [ 77.662481][ C1] ? alloc_fd+0x5a0/0x640 [ 77.666877][ C1] do_sys_openat2+0x13b/0x4f0 [ 77.671692][ C1] ? do_sys_open+0x220/0x220 [ 77.676317][ C1] __x64_sys_openat+0x243/0x290 [ 77.681296][ C1] ? __ia32_sys_open+0x270/0x270 [ 77.686333][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 77.692409][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 77.697616][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 77.703638][ C1] do_syscall_64+0x3b/0x80 [ 77.708350][ C1] ? clear_bhb_loop+0x45/0xa0 [ 77.713151][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.719397][ C1] RIP: 0033:0x7fdd179169a4 [ 77.723936][ C1] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 77.743846][ C1] RSP: 002b:00007ffffadeb2a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 77.752381][ C1] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fdd179169a4 [ 77.760533][ C1] RDX: 0000000000080000 RSI: 00007ffffadeb3d8 RDI: 00000000ffffff9c [ 77.768606][ C1] RBP: 00007ffffadeb3d8 R08: 0000000000000008 R09: 0000000000000001 [ 77.776587][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 [ 77.784833][ C1] R13: 000055d0967