last executing test programs: 4m2.332619768s ago: executing program 2 (id=821): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000bc0)={0x9, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @remote}}, {{0x2, 0x0, @private}}]}, 0x190) 4m1.89556105s ago: executing program 2 (id=823): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) 4m0.909784717s ago: executing program 1 (id=825): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030362c626172726965722c6e6f626172726965722c736d61636b66737472616e736d7574653d55dac73dddd1aa0ff491f57216572f1e671a989f42c64dc0b65d67d4250567573bb5e8d8c2d916d55de0fad0693e50202f126e0e71e930d123c47bc4a1d2ab46e52a07fd8ca501f330abb8b07d3a5364154ec1faf99b6a9779abe230ce8f5a290ef9442c7569643c", @ANYRES8, @ANYBLOB="101500000000", @ANYRES32, @ANYRESDEC, @ANYRES64], 0x1, 0x6f8, &(0x7f0000000300)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_init1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r6 = socket$inet(0x2, 0x2, 0x0) shutdown(r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000040)={0x5, r3}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4048aec9, &(0x7f0000000080)={0x6}) open(&(0x7f00000005c0)='./bus\x00', 0x44842, 0x6a) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) 4m0.836762852s ago: executing program 4 (id=827): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000280)={[{@datacow}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x3, 0x50d4, &(0x7f00000051c0)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PN61+vdDUHKQxYxL0N+ktdrOw7WLyCcVBEIpGQtov6DQtbYm9TxBhs/Co4s1RhUlCKEC66IQh+2RFSnEsgqbXmEEosqQVUtGoU2fziPpgWEKkGjFNclSiRX986c2bln9j78WNsbPh/Je8+933POzDn33vGcmblnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgt8PV373hy+3i7/jR1796U+8HXvjBbw6u/9I9ky+FMNV4vScL97zvzHNnrvvU7Ru+d/s3Hjk9fudDg3m5PB6W1v/05k8+F2v92bIQvt0TQn8aWDWSBQby5yOxvuUjIVwV5gJFiZnhrES64PDkUAhHwlygqOq7QyGMlAJ3PfPDJ75YTxweCuGdIYRauowXatkyhtLAysEsMJwGdvRngf89mykC3+nNAnDB4peh+NAfn2rOMD5/uRafv4GLtmKXV9q8vpgYb53vV7cu8EqVDKYvTF3Q21apjgVR+Xqc8G1bBN+2Sj8f8raVd6TyPZSzc6Fa6N06c+/mvbN74iu9YWKir1VNC/Q+n3pl/5ZzSS+az2FcgfGL8jm8//DNzw5+7I4XH3n98f2na19bfqGr2ap7F1ot5J+5RfM+RhttTxbB16+yl7TCTlcI4fSJk/vbxSvj//H24//4cY6PvU25Y62vjWZj8/jKSEy8PJqNzQEAAGDRWAxHTQdX/OtP29VXGf+v6O78fzzlnw/ms9aeCGFjI/HZsRCubbyeBR6Li/v4WAhvbaSmmgO3JoETIVzXSNxYVJWUWBJLrEgCvxjNAxuTwFMxMJUEHo2BQ0ngczFwPAlsiYETSeC2GAjbmtvx/0bzdnQdGIqB6awTj8erEH49GpeW9NVzRVUAAAAXST46HGh+WrrW4UIzxOHl8aFOGeIV2C0z1JIa0hFsMaxqWUN/pxp6O9VQtPtA++ZXau7pVHPlMoye5gz/c+qaHaGNyvh/sv34vzbPivRUzv+HyU2Nh5i7N4/MFhmmp5oyAAAAABfg9948vbldvDL+39jd9f/xmEhfKXM4GQ9DbB8LYbI5kFV7SzWQnfVemgcAAABgMSjOxxfnwrflj9kl2ul4upp/6hzzxxP/G+fNv+PH//J4u/WtjP+nurv+f7j5MVuJp+JafGUshCWlwI/iWtYDDSti4KX3Nwfy9j8VO+ALsar8woSiqi/EEtMxMJkEjrQq8XRR4trmQP5mFQv/bNGObXmJUgAAAAAuuXg4IJ6Xj9f/r/nbP3yyXbnK+H/63K7/b4yDK5f3zy4NYXV/CH3pDwNODmcTA8bASE+e+PvhrK6+tKqDwyHcUm9YWtV/5PP/96dzDP5kKKsqBq5927FXVtYTXx8KYXU58OxHj66vJ/YmgWLhvzsUwg311qYL/7sl2cIH0oU/vCSEt5QCRVVbloRQX9hgWtU/1PL7GKRVHa+FcHUpUFT1nloI+wIAi1X8v3Rr+cXd+x7cvnl2dmbXAibiQfyhcO+22ZmJLTtmt9ZarNPWZJ2b5jH6TLVN3d765vk4R9Hdx8a6SRc/FJwsLys/kF+5cjB/HneGBhrtXDvQ9HRd2uR3v726iFDalWrV5N4FbvJwuZK5N7FSf8w/GJaGJXt3z+ya+PTmPXt2rcn+dpt9bfY3nmfK+mpN2lfD861bFx+PltNlJc63r1aWK1m954Gdq3fve3DVtgc23zdz38wnNkyuW7vh5sn171ldb9Rk9rdDS1fOV3PS0rNHu2zWRWzp9f2lSi7FRkNCQmKxJQYH7jzVbvNTGf/vbD/+j1uduOHP52dodf5/PJ7mz16fO80/HQNHuj3/P97qbH5xYcCKJHAgBg44zQ8AAMAbQzwcGY9mxoPSB971wvvalauM/w909/v/izT/fzF1/YdaTfN/Yywx2Wr+/3Sa/2L+/wOt5v9Pp/kv5v8/chnm/99bBJIu+bX5/wEAgDeCSzf/f8fp/dMbBFQydJzeP71BQCVDx2n8u71BwDnP//83v1yzPrRRGf8f6m78b+J+AAAAuHJcc9sNP24Xr4z/j3Q3/r/08/+FVtf/r2gVmGo1MaD5/wAAAFikWs3/98xHdr6/XbnK+P94d+P/eNlFb1PuWOtro9mcdiGd0+7l0eInAwAAALA49IaJiYEu8zZNjHrr+S/zVJwKtE267NDnj53b7/9PdDf+b/pdxv2Hb3528GN3vPjaI68/vv907WvL587/AwAAAAun2+MSAAAAAAAAAAAAAADA5ffo1d+ad16AqPL7/7Cp8Xqr3//H+/413TTxTD4Z4IE4s/6XxkzzBwAAAAvroVtffTj+u+/Lf/Rf7fJWxv/j3Y3/4/0F8vvgZbfeOxHv//fZsRAat9YbzwKPxcV9fCyEtzZSU7FEdkO9D8USk1ngsThh4o2xxPRUc1VLYuB4EvjFaB44kQSeioH8KMWxeGPAPx4NYX0jtam5xM5YYjwJ3BkDK5LARAxMJoFlMbAxCfxyWR6YSgL/FAP5zQeLvvrWsryvAAAAzkU+zhpofhrScd7x/k4Zejpl6LiI4U4ZejtlqLXIEJ//dVyHgfJ8/HmG+NJAWutQUkslQ7wZ3vk3vZiu7+nmnGnByqL7YsHx5pwxw85/vukroY3K+H9Fd+P/y3j///Ru/htjYEUS2BkDG5PA9KY8cOSa5oD7/wMAAHBla3X//9G3/NWhduUq4//J7sb/8UDEm5tyx1o73/8/f37Xh7+5r7HKJ0dDeHs5sP3g9qvqiUdHQ3hXOfDE3Tc2Ru0H0xLff/G2n9cT96SBD65605l64r1JYDp20nVpIB5VObMsCcTu/UkaiP1xPA0M5oGHlmXt6En76j9Hsr7qSfvq1Eh2eUVP2lffHsmW0ZM28HASKBr4yTQQG3hHHuhN1+qbS7O1ioGRWPQvlhYXfQAAcGWKe4ED4d5tszOT6U94r+9vfoyabln+mWq1PV0u/vl4a/K7j411k+5L90VrRVUDoVZvwprK7mo5S0+jlRenlg5d9+YWTe50t/feFuVS59p1g61bNJS1aGLLjtmtAx0bvq5zlrX9HbOsqQx2yll6G13aRS1drEsXLeqyb7pY5fi8N0xM9CW5/n8MjocmnT4R3d6vr3yf/1afgnKeo5//91fb1VcZ/2/sbvwf27M0lD7On4u1/mxZCN/umTsaUQRWjWSB2NyRODxePhLCVaV+KErMDGclBpMFhyeHshHqYFrVd4eyYwzx+V3P/PCJL9YTh4dCeGfpvSqW8UItW8ZQGlg5mAWG08CO/iwQr/woAt/pzQJwwYqNQvxA5T91KYzPX67F5++Nck/QtHmVa6DmyTffNneh1NIX8muqCuf2tlWqY0FUvh4nfNsW47ct+LaVd6TyPZSzc6Fa6N06c+/mvbN74ivlPdmKBXqfy3up3aQvwufwwPmvbWe1dAUmk83H5Pzl5v8c9sTq7j9887ODH7vjxUdef3z/6drXlne9Gi3EgcKT//2mq8rdu9BqIf/MLbrtyZTtyWL8b2Dc2xZCOPTnQ59sF6+M/6e6G//3J48Nr8bO3D0WwrtLnXsydv/vjGXbwVIg20peXQ1kl9z/dLTllhMAAAAutuJwR3G8YFv+mP0gPB0nV/NPnWP+eLxi47z5u13v/U/+/mPt4pXx/3T78f+SZDWd/3f+nwXi/P+8rvRD0UvSFw5c0KHoSnUsCOf/53Wlf9uc/5+X8//O/8/H+f8OnP+f15X+tlX2knba6QohnL1+4OF28cr4f2d34//fsvn/09n8i/n/00n7i/n/p1vN/7+z1fz/B8z/DwAALKgWE82n47zK5PyVDOnk/JUMPUmGc7/FQMdp9M3/n87/f/DPbtkT2qiM/w90N/6PH4eR8tIXy/z/45talNi4qXl1i8ChGNjpjgEAAABcRvEAQbzovdsZJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhYd7x6ZnO7+Dt+9PWv3tT7gRd+8JuD6790z+RLIWxrvN6ThXved+a5M9d96vYN37v9G4+cHr/zoVpebiB/XN6UO9b62mgIR0qvjMTEy6P1J3OBuz78zX399cTJ0RDeXg5sP7j9qnri0dEQ3lUOPHH3jdfUEwfTEt9/8baf1xP3pIEPrnrTmXrivXmgJ13dP12WrW5PurpfXBbCWClQrO79y5qrKpbxgTzQmy7jL0eyZcTASCz68Ei2jBiYjSW2LQlhdX8IfWlV/1jLqupLq/peLauqL63qD2oh3BJC6E+r+rfBrKr+tOVPD2ZVxcC1bzv2ysp64uhgCKvLgWc/enR9PbErCRQL/8hgCDfUPzLpwr81kC18IF34nwyE8JZSoKhqeiCE+sIG06pO9GdVDaZVfaM/hKtLgaKqm/pD2Be4XOKGZGv5xd37Hty+eXZ2ZtcCJgbzZQ2Fe7fNzkxs2TG7tZasUys9pfTZz5x/259/Zf+WRuLuY2PdpIv1miyvy9NTlRfLz/vzpwONdq4daHq6brE0ebhcydybWKk/5h8MS8OSvbtndk18evOePbvWZH+7zb42+9uXR7O+WrNY+mpluZLVex7YuXr3vgdXbXtg830z9818YsPkurUbbp5c/57V9UZNZn8vRkuPXvqWXt9fquRSbDQkJCQWW6K3aes2eaVvxys7+nMrOhBqjQ10ZVhRztLTaOXFaPSt59Ha3Lk2ujIkqbRoTWXgUMmytnOWdZUxw1yWoSxLY1+wMjgs19Tb6NL4vDdMTPS16ofx5qfl7v3VBXTvqdh1XaYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//Qczu7Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, 0x0) 4m0.521822803s ago: executing program 3 (id=829): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m0.375188557s ago: executing program 3 (id=830): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, r0, 0x1}, 0x14}}, 0x0) 4m0.205344304s ago: executing program 2 (id=831): r0 = syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x816, &(0x7f0000000140), 0x3, 0x50ed, &(0x7f0000005180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x0}, 0x48) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x1000, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000)={0x7, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xe) recvmmsg(r4, &(0x7f0000009880)=[{{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000640)=""/49, 0x31}}, {{0x0, 0x0, &(0x7f0000006fc0)=[{&(0x7f0000006d40)=""/62, 0x3e}], 0x1, &(0x7f0000007000)=""/6, 0x6}}], 0x2, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f0000000340)=ANY=[], 0x1, 0x5515, &(0x7f000000f7c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.parent_freezing\x00', 0x275a, 0x0) readahead(r0, 0xea1, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001200)=ANY=[@ANYRES16, @ANYBLOB="01002dbd7000fedbdf2501000000b402088048000080240002000a34424d49218578c6248e5094783398e387df9cd07040520d15adc7bed4b300200004000a004e2200000003ff01000000000000000000000000000100000000080200800800030000000000240002000811e5fe58799effa2a1b294dcc72fb9171471b5a6c5685ef39df1b9997f6d2ebc01098004000080b8000080060001000a00000014000200200100000000000000000000000000000500030000000000060001000200000008000200e00000020500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414000500030000000000060001000a00000014000200fe88000000000000000000000000010105000300000000000600010002000000080002000000000005000300000000001c000080060001000200000008000200ac14142a0500030000000000b8000080060001000200000008000200e00000010500030001000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200fe8800000000000000000000000001010500030003000000060001000200000008000200ac1e01010500030002000000060001000200000008000200ac1414bb0500030044000000060001000a0000001400020000000000000000000000000000000000050003000200000028000080060001000a00000014000200fe8000000000000000000000000000aa05000300000000001400040002004e207f000001000000000000000008000a0001000000040000802800008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b2800008024000200a7a30ca530db4d1febf3da821d1c78c0b6b670b90534f14048dbf547e5fc20a70c000080080003000100000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b1", @ANYRES32], 0x5e0}}, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r5, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0xfeffff, 0x1f0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 4m0.15750048s ago: executing program 3 (id=832): syz_emit_vhci(0x0, 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x8}}}, 0xd) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xd) syz_emit_vhci(0x0, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x0, 0x800, @empty, 0x1}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c2, &(0x7f00000008c0)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2nnAwMpOZndk1xkQ2K7f7+TT72+d5vjPPMxmys0WefPjy7OhuHvcfffFLZFkSvXGM40kSo+hF46s4ZfxNAADPsidFEb8XC5vkkojItjctAGCL1vv732/Lny5kWgDAFt1597239w8Obr2TRRa3Z18fT8r/7Mufi/79+/FxTONevBbDeBpRPSjsRvW0UJa3i6KY9/PSKK7P5seTMjn74HF9/P3fIqr8XgxjVDWdPG1U+bcObu3lC538vJzH8/X5x2X+ZgzjxZPwqfzNJfmYpPHqK53534hh/PxRfBLTuFtNos1/uZfnbxbf/vH5++X0ynwyP54MqnGtYueCXxoAAAAAAAAAAAAAAAAAAAAAAC6xG/XeOYPIr8X1WdlU77+z8zTS8te8MWpTZf+iSpqm7v5ARVHMi/i+s6VgXtQD2/19+vFSv7uxIAAAAAAAAAAAAAAAAAAAAFxdDz/97OhwOr334FyKZjeAfkT8eSfivx5n3Gm5FqsHD+pzHk6nvbo8NeZx2m2JnWZMErFyGuUizumy/Fvx3Nk5N8UPP5YL3OSAWafl9eUL3N3+upq76+gwWX6uQTQtWX2TfJdGtGPSWPNc6T91FbHJ7Zcu7RpuvPb0haqYrxgTyaqJvfHr4srVLcnZVaTVVV0a362LTvzMvbHW6x7ZIv7394qk2q1jsL03IwAAAAAAAAAAAAAAAAAAuOLaT/8u6Xy0MtorfBQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEui/f7/DYp5HV5jcBoPHv7PSwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAK+CsAAP//hipWFQ==") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000280)='./file0\x00', 0x200) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x82307201, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0xa, 0x4, {0x1, @sliced={0x2, [0x7, 0xf5a2, 0x0, 0x9, 0x9, 0x0, 0x5, 0x0, 0x0, 0x5, 0x2, 0x4b8c, 0x100, 0xbf1, 0xfa6, 0x0, 0x8, 0x6, 0x4, 0xfffc, 0x5, 0x8, 0xa584, 0x0, 0x1, 0x2b61, 0x50, 0x200, 0x7ff, 0x1ff, 0x478, 0x8, 0x4, 0x200, 0xb963, 0x62, 0x0, 0x8, 0xfffd, 0x3ab7, 0x7, 0x7, 0x0, 0x81, 0x8, 0x7, 0x3, 0x802], 0x3f}}, 0x2}) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xff}, "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"}, 0x103) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010700000000000000000a00000008000300", @ANYRES32=r7, @ANYBLOB="7483d1c5ef21a224467efad656f6e549e500cf7ad51dbbfe55e32ba1ac01c7332fa120e9d9f1ac0086ab9599966caaca2c91b20e981ee58020e7010630a046f36ff7f7dc25f9"], 0x1c}}, 0x0) 3m59.038223581s ago: executing program 3 (id=833): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3m58.701591163s ago: executing program 3 (id=835): socket$alg(0x26, 0x5, 0x0) fsopen(&(0x7f00000003c0)='ext3\x00', 0x0) r0 = syz_usbip_server_init(0x3) socket$l2tp6(0xa, 0x2, 0x73) write(r0, &(0x7f0000000f40)="b410a1e8252ce0a1a3be3d593e8bf96f9615aea940ed08d314cbc50631fb02a0647a3c2ed4c85c8eef57d078ec90823a", 0x30) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mbind(&(0x7f0000596000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) msgget$private(0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=@ethtool_ts_info}) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r5, &(0x7f000001aa80)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100002ba7b040480b03200174000000010902120001000000000904"], 0x0) 3m58.615690022s ago: executing program 4 (id=836): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) execve(0x0, 0x0, 0x0) 3m58.069750044s ago: executing program 0 (id=837): syz_emit_vhci(0x0, 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x8}}}, 0xd) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8"], 0xd) syz_emit_vhci(0x0, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x0, 0x800, @empty, 0x1}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c2, &(0x7f00000008c0)="$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") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000280)='./file0\x00', 0x200) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x82307201, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0xa, 0x4, {0x1, @sliced={0x2, [0x7, 0xf5a2, 0x0, 0x9, 0x9, 0x0, 0x5, 0x0, 0x0, 0x5, 0x2, 0x4b8c, 0x100, 0xbf1, 0xfa6, 0x0, 0x8, 0x6, 0x4, 0xfffc, 0x5, 0x8, 0xa584, 0x0, 0x1, 0x2b61, 0x50, 0x200, 0x7ff, 0x1ff, 0x478, 0x8, 0x4, 0x200, 0xb963, 0x62, 0x0, 0x8, 0xfffd, 0x3ab7, 0x7, 0x7, 0x0, 0x81, 0x8, 0x7, 0x3, 0x802], 0x3f}}, 0x2}) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xff}, "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"}, 0x103) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010700000000000000000a00000008000300", @ANYRES32=r7, @ANYBLOB="7483d1c5ef21a224467efad656f6e549e500cf7ad51dbbfe55e32ba1ac01c7332fa120e9d9f1ac0086ab9599966caaca2c91b20e981ee58020e7010630a046f36ff7f7dc25f9"], 0x1c}}, 0x0) 3m57.603951806s ago: executing program 4 (id=838): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}, @IFLA_IFALIASn={0x4}]}, 0x3c}}, 0x0) 3m57.269612475s ago: executing program 4 (id=839): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="2a01ffffa0b6", 0x0, 0x0, 0x0, 0x0, 0x0}) 3m57.025701484s ago: executing program 2 (id=840): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsync(r0) 3m56.926947682s ago: executing program 4 (id=841): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) 3m56.902038086s ago: executing program 0 (id=842): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x12, 0x0, 0x9, [0x401, 0x80005, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@broadcast}, {@empty}, {@multicast1}]}, @timestamp_prespec={0x44, 0x34, 0x6b, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {}, {@empty, 0x52b1}, {@multicast2}]}, @ssrr={0x89, 0x1b, 0xc3, [@multicast2, @empty, @local, @dev={0xac, 0x14, 0x14, 0x41}, @loopback, @remote]}, @noop, @lsrr={0x83, 0x3}, @rr={0x7, 0xf, 0x0, [@dev={0xac, 0x14, 0x14, 0x35}, @multicast1, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m56.145817729s ago: executing program 2 (id=843): socket$alg(0x26, 0x5, 0x0) fsopen(&(0x7f00000003c0)='ext3\x00', 0x0) r0 = syz_usbip_server_init(0x3) socket$l2tp6(0xa, 0x2, 0x73) write(r0, &(0x7f0000000f40)="b410a1e8252ce0a1a3be3d593e8bf96f9615aea940ed08d314cbc50631fb02a0647a3c2ed4c85c8eef57d078ec90823a", 0x30) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mbind(&(0x7f0000596000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) msgget$private(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=@ethtool_ts_info}) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r5, &(0x7f000001aa80)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100002ba7b040480b03200174000000010902120001000000000904"], 0x0) 3m56.061139264s ago: executing program 1 (id=844): syz_emit_vhci(0x0, 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x8}}}, 0xd) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xd) syz_emit_vhci(0x0, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x0, 0x800, @empty, 0x1}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c2, &(0x7f00000008c0)="$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") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000280)='./file0\x00', 0x200) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x82307201, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0xa, 0x4, {0x1, @sliced={0x2, [0x7, 0xf5a2, 0x0, 0x9, 0x9, 0x0, 0x5, 0x0, 0x0, 0x5, 0x2, 0x4b8c, 0x100, 0xbf1, 0xfa6, 0x0, 0x8, 0x6, 0x4, 0xfffc, 0x5, 0x8, 0xa584, 0x0, 0x1, 0x2b61, 0x50, 0x200, 0x7ff, 0x1ff, 0x478, 0x8, 0x4, 0x200, 0xb963, 0x62, 0x0, 0x8, 0xfffd, 0x3ab7, 0x7, 0x7, 0x0, 0x81, 0x8, 0x7, 0x3, 0x802], 0x3f}}, 0x2}) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xff}, "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"}, 0x103) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010700000000000000000a00000008000300", @ANYRES32=r7, @ANYBLOB="7483d1c5ef21a224467efad656f6e549e500cf7ad51dbbfe55e32ba1ac01c7332fa120e9d9f1ac0086ab9599966caaca2c91b20e981ee58020e7010630a046f36ff7f7dc25f9"], 0x1c}}, 0x0) 3m47.923743215s ago: executing program 1 (id=846): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x62651}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 3m47.866552902s ago: executing program 4 (id=847): socket$nl_generic(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 3m47.539496895s ago: executing program 0 (id=848): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x12, &(0x7f0000001f00)=""/4061, &(0x7f00000001c0)=0xfdd) 3m47.318056573s ago: executing program 1 (id=849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x7fff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3m47.292504172s ago: executing program 0 (id=850): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) 3m47.088223457s ago: executing program 0 (id=851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x5, 0xa, 0x0, @local}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) 3m46.939592017s ago: executing program 1 (id=852): open(&(0x7f00000001c0)='./file0\x00', 0x60c2, 0x0) open$dir(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 3m45.936915177s ago: executing program 0 (id=853): syz_emit_vhci(0x0, 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x8}}}, 0xd) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8"], 0xd) syz_emit_vhci(0x0, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x0, 0x800, @empty, 0x1}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c2, &(0x7f00000008c0)="$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") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000280)='./file0\x00', 0x200) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x82307201, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0xa, 0x4, {0x1, @sliced={0x2, [0x7, 0xf5a2, 0x0, 0x9, 0x9, 0x0, 0x5, 0x0, 0x0, 0x5, 0x2, 0x4b8c, 0x100, 0xbf1, 0xfa6, 0x0, 0x8, 0x6, 0x4, 0xfffc, 0x5, 0x8, 0xa584, 0x0, 0x1, 0x2b61, 0x50, 0x200, 0x7ff, 0x1ff, 0x478, 0x8, 0x4, 0x200, 0xb963, 0x62, 0x0, 0x8, 0xfffd, 0x3ab7, 0x7, 0x7, 0x0, 0x81, 0x8, 0x7, 0x3, 0x802], 0x3f}}, 0x2}) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xff}, "139fa9122a1a4817855c5cb8d333f1187971df95eb51d3a037cc71590281311ae381ddc184f37fcb97bb1c1727a0dd93b892f0672897377854a2abc10de4c406381c9253c4aad4ee7d7f6dff5565534314af80415213ab8e9ec0e59532db8fbb5fb4e238ee0ef9e4a960f81d1353c5b247e790808e4570af98fdedc4f4d71b3e2b6a5dc9b6ca0356301cdfdd768026177a76aee1c36fe6fd06dba05e0f78fe68866c49d336c9a003f6741365b0f3ecf31f8d2a8979f89b01591a1bb42b50451a70e89436ec9048d77131adc4ad9eb3fb1cd039a18441a4edc7a838be5aa3b3969a27901ff27513000da0c71f2a900cabbd9cbbfece274c871fbfac55b86370"}, 0x103) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010700000000000000000a00000008000300", @ANYRES32=r7, @ANYBLOB="7483d1c5ef21a224467efad656f6e549e500cf7ad51dbbfe55e32ba1ac01c7332fa120e9d9f1ac0086ab9599966caaca2c91b20e981ee58020e7010630a046f36ff7f7dc25f9"], 0x1c}}, 0x0) 3m39.845381668s ago: executing program 1 (id=855): socket$alg(0x26, 0x5, 0x0) fsopen(&(0x7f00000003c0)='ext3\x00', 0x0) r0 = syz_usbip_server_init(0x3) socket$l2tp6(0xa, 0x2, 0x73) write(r0, &(0x7f0000000f40)="b410a1e8252ce0a1a3be3d593e8bf96f9615aea940ed08d314cbc50631fb02a0647a3c2ed4c85c8eef57d078ec90823a", 0x30) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mbind(&(0x7f0000596000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) msgget$private(0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=@ethtool_ts_info}) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r5, &(0x7f000001aa80)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100002ba7b040480b03200174000000010902120001000000000904"], 0x0) 2m42.668278579s ago: executing program 3 (id=845): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) getdents(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f00008d1000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): a:aa:aa:0c, vlan:0) [ 634.487898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.493753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.498008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.503509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.507996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.395448][ C1] DEBUG: waiting rtnl_mutex for 13541 jiffies. [ 635.818377][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 635.824500][ C1] task:kworker/u8:9 state:D stack:18800 pid:2473 tgid:2473 ppid:2 flags:0x00004000 [ 635.824557][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 635.824595][ C1] Call Trace: [ 635.824605][ C1] [ 635.824622][ C1] __schedule+0x1800/0x4a60 [ 635.824680][ C1] ? __pfx___schedule+0x10/0x10 [ 635.824713][ C1] ? __pfx_lock_release+0x10/0x10 [ 635.824746][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 635.824785][ C1] ? kthread_data+0x52/0xd0 [ 635.824817][ C1] ? schedule+0x90/0x320 [ 635.824845][ C1] ? wq_worker_sleeping+0x66/0x240 [ 635.824881][ C1] ? schedule+0x90/0x320 [ 635.824909][ C1] schedule+0x14b/0x320 [ 635.824939][ C1] schedule_preempt_disabled+0x13/0x30 [ 635.824967][ C1] __mutex_lock+0x6a4/0xd70 [ 635.825007][ C1] ? mark_lock+0x9a/0x360 [ 635.825050][ C1] ? __mutex_lock+0x527/0xd70 [ 635.825087][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 635.825121][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 635.825167][ C1] ? get_rtnl_holder+0x144/0x190 [ 635.825199][ C1] addrconf_dad_work+0xd0/0x16f0 [ 635.825244][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 635.825278][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 635.825326][ C1] ? process_scheduled_works+0x945/0x1830 [ 635.825357][ C1] process_scheduled_works+0xa2c/0x1830 [ 635.825421][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 635.825463][ C1] ? assign_work+0x364/0x3d0 [ 635.825500][ C1] worker_thread+0x86d/0xd40 [ 635.825550][ C1] ? __kthread_parkme+0x169/0x1d0 [ 635.825588][ C1] ? __pfx_worker_thread+0x10/0x10 [ 635.825620][ C1] kthread+0x2f0/0x390 [ 635.825656][ C1] ? __pfx_worker_thread+0x10/0x10 [ 635.825687][ C1] ? __pfx_kthread+0x10/0x10 [ 635.825724][ C1] ret_from_fork+0x4b/0x80 [ 635.825757][ C1] ? __pfx_kthread+0x10/0x10 [ 635.825794][ C1] ret_from_fork_asm+0x1a/0x30 [ 635.825847][ C1] [ 635.825860][ C1] DEBUG: waiting rtnl_mutex for 13359 jiffies. [ 635.825876][ C1] task:syz-executor state:D stack:20288 pid:7381 tgid:7381 ppid:1 flags:0x00004006 [ 635.825921][ C1] Call Trace: [ 635.825932][ C1] [ 635.825949][ C1] __schedule+0x1800/0x4a60 [ 635.826005][ C1] ? __pfx___schedule+0x10/0x10 [ 635.826047][ C1] ? __pfx_lock_release+0x10/0x10 [ 635.826082][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 635.826133][ C1] ? schedule+0x90/0x320 [ 635.826162][ C1] schedule+0x14b/0x320 [ 635.826195][ C1] schedule_preempt_disabled+0x13/0x30 [ 635.826226][ C1] __mutex_lock+0x6a4/0xd70 [ 635.826265][ C1] ? __mutex_lock+0x527/0xd70 [ 635.826302][ C1] ? tun_chr_close+0x3e/0x1b0 [ 635.826330][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 635.826377][ C1] ? get_rtnl_holder+0x144/0x190 [ 635.826409][ C1] tun_chr_close+0x3e/0x1b0 [ 635.826434][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 635.826460][ C1] __fput+0x24a/0x8a0 [ 635.826514][ C1] task_work_run+0x24f/0x310 [ 635.826547][ C1] ? __pfx_task_work_run+0x10/0x10 [ 635.826576][ C1] ? do_exit+0xa2a/0x27f0 [ 635.826611][ C1] ? kmem_cache_free+0x145/0x350 [ 635.826653][ C1] do_exit+0xa2f/0x27f0 [ 635.826701][ C1] ? __pfx_do_exit+0x10/0x10 [ 635.826738][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 635.826772][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 635.826809][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 635.826841][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 635.826877][ C1] do_group_exit+0x207/0x2c0 [ 635.826914][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 635.826943][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 635.826983][ C1] get_signal+0x16a1/0x1740 [ 635.827031][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 635.827070][ C1] ? kfree+0x4e/0x360 [ 635.827104][ C1] ? __pfx_get_signal+0x10/0x10 [ 635.827132][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 635.827171][ C1] ? do_sock_setsockopt+0x3e2/0x720 [ 635.827210][ C1] arch_do_signal_or_restart+0x96/0x860 [ 635.827247][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 635.827279][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 635.827327][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 635.827369][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 635.827411][ C1] do_syscall_64+0x100/0x230 [ 635.827437][ C1] ? clear_bhb_loop+0x35/0x90 [ 635.827472][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.827502][ C1] RIP: 0033:0x7f79b31779ca [ 635.827526][ C1] RSP: 002b:00007ffde23c06f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 635.827555][ C1] RAX: 0000000000000000 RBX: 00007ffde23c0780 RCX: 00007f79b31779ca [ 635.827575][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 635.827593][ C1] RBP: 0000000000000003 R08: 00000000000003b8 R09: 0079746972756365 [ 635.827613][ C1] R10: 00007f79b32cfce0 R11: 0000000000000202 R12: 00007f79b32cfc80 [ 635.827632][ C1] R13: 00007ffde23c071c R14: 0000000000000000 R15: 00007f79b32d1e40 [ 635.827669][ C1] [ 635.827680][ C1] DEBUG: waiting rtnl_mutex for 12986 jiffies. [ 635.827696][ C1] task:kworker/u8:6 state:D stack:21008 pid:2424 tgid:2424 ppid:2 flags:0x00004000 [ 635.827741][ C1] Workqueue: netns cleanup_net [ 635.827770][ C1] Call Trace: [ 635.827782][ C1] [ 635.827799][ C1] __schedule+0x1800/0x4a60 [ 635.827855][ C1] ? __pfx___schedule+0x10/0x10 [ 635.827891][ C1] ? __pfx_lock_release+0x10/0x10 [ 635.827925][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 635.827965][ C1] ? kthread_data+0x52/0xd0 [ 635.827996][ C1] ? schedule+0x90/0x320 [ 635.828032][ C1] ? wq_worker_sleeping+0x66/0x240 [ 635.828067][ C1] ? schedule+0x90/0x320 [ 635.828097][ C1] schedule+0x14b/0x320 [ 635.828130][ C1] schedule_preempt_disabled+0x13/0x30 [ 635.828161][ C1] __mutex_lock+0x6a4/0xd70 [ 635.828200][ C1] ? __mutex_lock+0x527/0xd70 [ 635.828236][ C1] ? wg_netns_pre_exit+0x1f/0x1e0 [ 635.828264][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 635.828304][ C1] ? __local_bh_enable_ip+0x179/0x200 [ 635.828338][ C1] ? get_rtnl_holder+0x144/0x190 [ 635.828369][ C1] wg_netns_pre_exit+0x1f/0x1e0 [ 635.828401][ C1] cleanup_net+0x615/0xcc0 [ 635.828436][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 635.828477][ C1] ? process_scheduled_works+0x945/0x1830 [ 635.828508][ C1] process_scheduled_works+0xa2c/0x1830 [ 635.828572][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 635.828615][ C1] ? assign_work+0x364/0x3d0 [ 635.828665][ C1] worker_thread+0x86d/0xd40 [ 635.828727][ C1] ? __kthread_parkme+0x169/0x1d0 [ 635.828765][ C1] ? __pfx_worker_thread+0x10/0x10 [ 635.828798][ C1] kthread+0x2f0/0x390 [ 635.828833][ C1] ? __pfx_worker_thread+0x10/0x10 [ 635.828865][ C1] ? __pfx_kthread+0x10/0x10 [ 635.828902][ C1] ret_from_fork+0x4b/0x80 [ 635.828935][ C1] ? __pfx_kthread+0x10/0x10 [ 635.828972][ C1] ret_from_fork_asm+0x1a/0x30 [ 635.829031][ C1] [ 635.829042][ C1] DEBUG: waiting rtnl_mutex for 11124 jiffies. [ 635.829058][ C1] task:kworker/0:9 state:D stack:26008 pid:9025 tgid:9025 ppid:2 flags:0x00004000 [ 635.829105][ C1] Workqueue: events linkwatch_event [ 635.829135][ C1] Call Trace: [ 635.829146][ C1] [ 635.829163][ C1] __schedule+0x1800/0x4a60 [ 635.829219][ C1] ? __pfx___schedule+0x10/0x10 [ 635.829252][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 635.829285][ C1] ? __pfx_lock_release+0x10/0x10 [ 635.829319][ C1] ? kick_pool+0x45c/0x620 [ 635.829358][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 635.829387][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 635.829423][ C1] ? schedule+0x90/0x320 [ 635.829452][ C1] schedule+0x14b/0x320 [ 635.829485][ C1] schedule_preempt_disabled+0x13/0x30 [ 635.829516][ C1] __mutex_lock+0x6a4/0xd70 [ 635.829555][ C1] ? __mutex_lock+0x527/0xd70 [ 635.829591][ C1] ? linkwatch_event+0xe/0x60 [ 635.829620][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 635.829666][ C1] ? get_rtnl_holder+0x144/0x190 [ 635.829695][ C1] ? process_scheduled_works+0x945/0x1830 [ 635.829726][ C1] linkwatch_event+0xe/0x60 [ 635.829752][ C1] process_scheduled_works+0xa2c/0x1830 [ 635.829816][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 635.829859][ C1] ? assign_work+0x364/0x3d0 [ 635.829896][ C1] worker_thread+0x86d/0xd40 [ 635.829938][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 635.829974][ C1] ? __kthread_parkme+0x169/0x1d0 [ 635.830019][ C1] ? __pfx_worker_thread+0x10/0x10 [ 635.830052][ C1] kthread+0x2f0/0x390 [ 635.830088][ C1] ? __pfx_worker_thread+0x10/0x10 [ 635.830120][ C1] ? __pfx_kthread+0x10/0x10 [ 635.830161][ C1] ret_from_fork+0x4b/0x80 [ 635.830195][ C1] ? __pfx_kthread+0x10/0x10 [ 635.830231][ C1] ret_from_fork_asm+0x1a/0x30 [ 635.830284][ C1] [ 635.830296][ C1] DEBUG: waiting rtnl_mutex for 3344 jiffies. [ 635.830311][ C1] task:syz-executor state:D stack:24992 pid:9067 tgid:9067 ppid:1 flags:0x00000004 [ 635.830366][ C1] Call Trace: [ 635.830385][ C1] [ 635.830402][ C1] __schedule+0x1800/0x4a60 [ 635.830463][ C1] ? __pfx___schedule+0x10/0x10 [ 635.830500][ C1] ? __pfx_lock_release+0x10/0x10 [ 635.830539][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 635.830590][ C1] ? schedule+0x90/0x320 [ 635.830619][ C1] schedule+0x14b/0x320 [ 635.830653][ C1] schedule_preempt_disabled+0x13/0x30 [ 635.830684][ C1] __mutex_lock+0x6a4/0xd70 [ 635.830722][ C1] ? __mutex_lock+0x527/0xd70 [ 635.830769][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 635.830812][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 635.830860][ C1] ? get_rtnl_holder+0x144/0x190 [ 635.830891][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 635.830933][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 635.830975][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 635.831017][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 635.831062][ C1] ? __pfx_validate_chain+0x10/0x10 [ 635.831100][ C1] ? __pfx_validate_chain+0x10/0x10 [ 635.831139][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 635.831178][ C1] ? mark_lock+0x9a/0x360 [ 635.831211][ C1] ? __pfx_validate_chain+0x10/0x10 [ 635.831252][ C1] ? __lock_acquire+0x1359/0x2000 [ 635.831303][ C1] ? mark_lock+0x9a/0x360 [ 635.831342][ C1] ? __lock_acquire+0x1359/0x2000 [ 635.831398][ C1] netlink_rcv_skb+0x1e3/0x430 [ 635.831439][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 635.831480][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.831551][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 635.831580][ C1] netlink_unicast+0x7f0/0x990 [ 635.831627][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 635.831660][ C1] ? __virt_addr_valid+0x183/0x530 [ 635.831700][ C1] ? __check_object_size+0x49c/0x900 [ 635.831733][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 635.831770][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 635.831811][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.831841][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 635.831873][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 635.831908][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 635.831946][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.831977][ C1] __sock_sendmsg+0x221/0x270 [ 635.832025][ C1] __sys_sendto+0x3a4/0x4f0 [ 635.832063][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 635.832129][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 635.832166][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 635.832243][ C1] ? exc_page_fault+0x590/0x8c0 [ 635.832284][ C1] __x64_sys_sendto+0xde/0x100 [ 635.832318][ C1] do_syscall_64+0xf3/0x230 [ 635.832343][ C1] ? clear_bhb_loop+0x35/0x90 [ 635.832378][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.832408][ C1] RIP: 0033:0x7f62b0f7796c [ 635.832430][ C1] RSP: 002b:00007fff6102a540 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 635.832460][ C1] RAX: ffffffffffffffda RBX: 00007f62b1c34620 RCX: 00007f62b0f7796c [ 635.832481][ C1] RDX: 0000000000000028 RSI: 00007f62b1c34670 RDI: 0000000000000003 [ 635.832500][ C1] RBP: 0000000000000000 R08: 00007fff6102a594 R09: 000000000000000c [ 635.832519][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 635.832537][ C1] R13: 0000000000000000 R14: 00007f62b1c34670 R15: 0000000000000000 [ 635.832582][ C1] [ 635.832594][ C1] DEBUG: holding rtnl_mutex for 14038 jiffies. [ 635.832610][ C1] task:syz-executor state:D stack:20080 pid:5097 tgid:5097 ppid:1 flags:0x00004006 [ 635.832652][ C1] Call Trace: [ 635.832664][ C1] [ 635.832680][ C1] __schedule+0x1800/0x4a60 [ 635.832737][ C1] ? __pfx___schedule+0x10/0x10 [ 635.832773][ C1] ? __pfx_lock_release+0x10/0x10 [ 635.832823][ C1] ? schedule+0x90/0x320 [ 635.832852][ C1] schedule+0x14b/0x320 [ 635.832884][ C1] schedule_timeout+0xb0/0x310 [ 635.832912][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 635.832937][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 635.832981][ C1] ? wait_for_completion+0x2fe/0x620 [ 635.833021][ C1] ? wait_for_completion+0x2fe/0x620 [ 635.833051][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 635.833080][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 635.833115][ C1] ? wait_for_completion+0x2fe/0x620 [ 635.833149][ C1] wait_for_completion+0x355/0x620 [ 635.833206][ C1] ? __pfx_wait_for_completion+0x10/0x10 [ 635.833253][ C1] ? __flush_work+0xe6/0xd00 [ 635.833286][ C1] __flush_work+0xaa9/0xd00 [ 635.833323][ C1] ? __flush_work+0xe6/0xd00 [ 635.833362][ C1] ? __pfx___flush_work+0x10/0x10 [ 635.833399][ C1] ? __pfx_wq_barrier_func+0x10/0x10 [ 635.833443][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 635.833476][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 635.833512][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 635.833546][ C1] unregister_netdevice_many_notify+0x8a0/0x1d20 [ 635.833593][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 635.833634][ C1] ? __queue_work+0x198/0xee0 [ 635.833668][ C1] ? __pfx_lock_release+0x10/0x10 [ 635.833701][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 635.833740][ C1] ? mark_lock+0x9a/0x360 [ 635.833779][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 635.833816][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 635.833856][ C1] ? queue_delayed_work_on+0x1eb/0x390 [ 635.833890][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 635.833934][ C1] unregister_netdevice_queue+0x303/0x370 [ 635.833970][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 635.834022][ C1] __tun_detach+0x6b6/0x1600 [ 635.834068][ C1] tun_chr_close+0x108/0x1b0 [ 635.834093][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 635.834120][ C1] __fput+0x24a/0x8a0 [ 635.834168][ C1] task_work_run+0x24f/0x310 [ 635.834201][ C1] ? __pfx_task_work_run+0x10/0x10 [ 635.834231][ C1] ? do_exit+0xa2a/0x27f0 [ 635.834264][ C1] ? kmem_cache_free+0x145/0x350 [ 635.834307][ C1] do_exit+0xa2f/0x27f0 [ 635.834355][ C1] ? __pfx_do_exit+0x10/0x10 [ 635.834391][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 635.834426][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 635.834463][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 635.834495][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 635.834530][ C1] do_group_exit+0x207/0x2c0 [ 635.834567][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 635.834596][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 635.834635][ C1] get_signal+0x16a1/0x1740 [ 635.834681][ C1] ? __pfx_get_signal+0x10/0x10 [ 635.834708][ C1] ? debug_check_no_obj_freed+0x561/0x580 [ 635.834734][ C1] ? mod_objcg_state+0x125/0x930 [ 635.834775][ C1] arch_do_signal_or_restart+0x96/0x860 [ 635.834813][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 635.834845][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 635.834893][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 635.834935][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 635.834976][ C1] do_syscall_64+0x100/0x230 [ 635.835001][ C1] ? clear_bhb_loop+0x35/0x90 [ 635.835043][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.835073][ C1] RIP: 0033:0x7f5a68f7490a [ 635.835095][ C1] RSP: 002b:00007ffefd850fc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 635.835124][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f5a68f7490a [ 635.835142][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 635.835159][ C1] RBP: 00007ffefd85103c R08: 00007ffefd85091c R09: 00007ffefd850d27 [ 635.835180][ C1] R10: 00007ffefd8509a0 R11: 0000000000000293 R12: 000000000000000a [ 635.835198][ C1] R13: 000000000006830d R14: 00000000000674d7 R15: 000000000000000a [ 635.835235][ C1] [ 635.835247][ C1] DEBUG: waiting rtnl_mutex for 14010 jiffies. [ 635.835262][ C1] task:syz.0.853 state:D stack:25208 pid:9013 tgid:9011 ppid:6436 flags:0x00004006 [ 635.835307][ C1] Call Trace: [ 635.835319][ C1] [ 635.835335][ C1] __schedule+0x1800/0x4a60 [ 635.835392][ C1] ? __pfx___schedule+0x10/0x10 [ 635.835427][ C1] ? __pfx_lock_release+0x10/0x10 [ 635.835461][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 635.835512][ C1] ? schedule+0x90/0x320 [ 635.835541][ C1] schedule+0x14b/0x320 [ 635.835574][ C1] schedule_preempt_disabled+0x13/0x30 [ 635.835604][ C1] __mutex_lock+0x6a4/0xd70 [ 635.835643][ C1] ? __mutex_lock+0x527/0xd70 [ 635.835680][ C1] ? tun_chr_close+0x3e/0x1b0 [ 635.835707][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 635.835754][ C1] ? get_rtnl_holder+0x144/0x190 [ 635.835786][ C1] tun_chr_close+0x3e/0x1b0 [ 635.835810][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 635.835836][ C1] __fput+0x24a/0x8a0 [ 635.835884][ C1] task_work_run+0x24f/0x310 [ 635.835917][ C1] ? __pfx_task_work_run+0x10/0x10 [ 635.835953][ C1] ? do_exit+0xa2a/0x27f0 [ 635.835987][ C1] ? kmem_cache_free+0x145/0x350 [ 635.836034][ C1] do_exit+0xa2f/0x27f0 [ 635.836082][ C1] ? __pfx_do_exit+0x10/0x10 [ 635.836118][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 635.836153][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 635.836189][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 635.836221][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 635.836257][ C1] do_group_exit+0x207/0x2c0 [ 635.836294][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 635.836323][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 635.836362][ C1] get_signal+0x16a1/0x1740 [ 635.836408][ C1] ? __pfx_get_signal+0x10/0x10 [ 635.836448][ C1] arch_do_signal_or_restart+0x96/0x860 [ 635.836485][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 635.836517][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 635.836566][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 635.836607][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 635.836648][ C1] do_syscall_64+0x100/0x230 [ 635.836674][ C1] ? clear_bhb_loop+0x35/0x90 [ 635.836708][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.836737][ C1] RIP: 0033:0x7f0da8b75bd9 [ 635.836758][ C1] RSP: 002b:00007f0da9931048 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 635.836786][ C1] RAX: 0000000000000000 RBX: 00007f0da8d03f60 RCX: 00007f0da8b75bd9 [ 635.836806][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 635.836823][ C1] RBP: 00007f0da8be4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 635.836841][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 635.836859][ C1] R13: 000000000000000b R14: 00007f0da8d03f60 R15: 00007fff0acc7a58 [ 635.836897][ C1] [ 635.836908][ C1] DEBUG: waiting rtnl_mutex for 8572 jiffies. [ 635.836924][ C1] task:kworker/0:10 state:D stack:27040 pid:9041 tgid:9041 ppid:2 flags:0x00004000 [ 635.836969][ C1] Workqueue: events switchdev_deferred_process_work [ 635.837001][ C1] Call Trace: [ 635.837019][ C1] [ 635.837036][ C1] __schedule+0x1800/0x4a60 [ 635.837092][ C1] ? __pfx___schedule+0x10/0x10 [ 635.837124][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 635.837158][ C1] ? __pfx_lock_release+0x10/0x10 [ 635.837192][ C1] ? kick_pool+0x45c/0x620 [ 635.837230][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 635.837259][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 635.837296][ C1] ? schedule+0x90/0x320 [ 635.837324][ C1] schedule+0x14b/0x320 [ 635.837357][ C1] schedule_preempt_disabled+0x13/0x30 [ 635.837388][ C1] __mutex_lock+0x6a4/0xd70 [ 635.837426][ C1] ? __mutex_lock+0x527/0xd70 [ 635.837470][ C1] ? switchdev_deferred_process_work+0xe/0x20 [ 635.837500][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 635.837546][ C1] ? get_rtnl_holder+0x144/0x190 [ 635.837576][ C1] ? process_scheduled_works+0x945/0x1830 [ 635.837606][ C1] switchdev_deferred_process_work+0xe/0x20 [ 635.837652][ C1] process_scheduled_works+0xa2c/0x1830 [ 635.837717][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 635.837759][ C1] ? assign_work+0x364/0x3d0 [ 635.837797][ C1] worker_thread+0x86d/0xd40 [ 635.837838][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 635.837874][ C1] ? __kthread_parkme+0x169/0x1d0 [ 635.837911][ C1] ? __pfx_worker_thread+0x10/0x10 [ 635.837944][ C1] kthread+0x2f0/0x390 [ 635.837979][ C1] ? __pfx_worker_thread+0x10/0x10 [ 635.838016][ C1] ? __pfx_kthread+0x10/0x10 [ 635.838054][ C1] ret_from_fork+0x4b/0x80 [ 635.838088][ C1] ? __pfx_kthread+0x10/0x10 [ 635.838124][ C1] ret_from_fork_asm+0x1a/0x30 [ 635.838177][ C1] [ 635.838189][ C1] DEBUG: waiting rtnl_mutex for 4699 jiffies. [ 635.838204][ C1] task:syz-executor state:D stack:24992 pid:9060 tgid:9060 ppid:1 flags:0x00004006 [ 635.838248][ C1] Call Trace: [ 635.838259][ C1] [ 635.838276][ C1] __schedule+0x1800/0x4a60 [ 635.838332][ C1] ? __pfx___schedule+0x10/0x10 [ 635.838366][ C1] ? __pfx_lock_release+0x10/0x10 [ 635.838401][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 635.838451][ C1] ? schedule+0x90/0x320 [ 635.838481][ C1] schedule+0x14b/0x320 [ 635.838513][ C1] schedule_preempt_disabled+0x13/0x30 [ 635.838544][ C1] __mutex_lock+0x6a4/0xd70 [ 635.838582][ C1] ? __mutex_lock+0x527/0xd70 [ 635.838619][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 635.838658][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 635.838705][ C1] ? get_rtnl_holder+0x144/0x190 [ 635.838735][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 635.838775][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 635.838809][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 635.838843][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 635.838888][ C1] ? __pfx_validate_chain+0x10/0x10 [ 635.838926][ C1] ? __pfx_validate_chain+0x10/0x10 [ 635.838965][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 635.839003][ C1] ? mark_lock+0x9a/0x360 [ 635.839110][ C1] ? __pfx_validate_chain+0x10/0x10 [ 635.947372][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 635.952938][ C1] ? __lock_acquire+0x1359/0x2000 [ 635.952997][ C1] ? mark_lock+0x9a/0x360 [ 635.953035][ C1] ? __lock_acquire+0x1359/0x2000 [ 635.953087][ C1] netlink_rcv_skb+0x1e3/0x430 [ 635.953128][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 635.953168][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.953230][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 635.953259][ C1] netlink_unicast+0x7f0/0x990 [ 635.953306][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 635.953338][ C1] ? __virt_addr_valid+0x183/0x530 [ 635.953377][ C1] ? __check_object_size+0x49c/0x900 [ 635.953409][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 635.953446][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 635.953487][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.953517][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 635.953549][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 635.953584][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 635.953623][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.953648][ C1] __sock_sendmsg+0x221/0x270 [ 635.953691][ C1] __sys_sendto+0x3a4/0x4f0 [ 635.953727][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 635.953785][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 635.953830][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 635.953865][ C1] ? exc_page_fault+0x590/0x8c0 [ 635.953904][ C1] __x64_sys_sendto+0xde/0x100 [ 635.953939][ C1] do_syscall_64+0xf3/0x230 [ 635.953965][ C1] ? clear_bhb_loop+0x35/0x90 [ 635.953999][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.954029][ C1] RIP: 0033:0x7fbd1497796c [ 635.954053][ C1] RSP: 002b:00007ffd0673ec50 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 635.954084][ C1] RAX: ffffffffffffffda RBX: 00007fbd15634620 RCX: 00007fbd1497796c [ 635.954106][ C1] RDX: 0000000000000028 RSI: 00007fbd15634670 RDI: 0000000000000003 [ 635.954124][ C1] RBP: 0000000000000000 R08: 00007ffd0673eca4 R09: 000000000000000c [ 635.954143][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 635.954160][ C1] R13: 0000000000000000 R14: 00007fbd15634670 R15: 0000000000000000 [ 635.954197][ C1] [ 635.954212][ C1] [ 635.954212][ C1] Showing all locks held in the system: [ 635.954227][ C1] 3 locks held by kworker/0:0/8: [ 635.954246][ C1] 2 locks held by kworker/u8:1/12: [ 635.954270][ C1] 5 locks held by kworker/u8:4/62: [ 635.954312][ C1] 4 locks held by kworker/u8:6/2424: [ 635.954328][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 635.954407][ C1] #1: ffffc90008e17d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 635.954483][ C1] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 635.954553][ C1] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 635.954623][ C1] 3 locks held by kworker/u8:9/2473: [ 635.954639][ C1] #0: ffff88802a40b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 635.954715][ C1] #1: ffffc90009217d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 635.954791][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 635.954878][ C1] 1 lock held by dhcpcd/4763: [ 635.954896][ C1] 2 locks held by getty/4849: [ 635.954912][ C1] #0: ffff88802addf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 635.954993][ C1] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 635.955068][ C1] 2 locks held by syz-executor/5097: [ 635.955085][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 635.955154][ C1] #1: ffffffff8e1cf9f0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5fa/0x1d20 [ 635.955233][ C1] 4 locks held by kworker/u9:2/5101: [ 635.955252][ C1] 6 locks held by kworker/1:8/5204: [ 635.955268][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 635.955343][ C1] #1: ffffc90003fb7d00 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 635.955420][ C1] #2: ffff88806b869250 (&devlink->lock_key#8){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x57/0xaa0 [ 635.955504][ C1] #3: ffff88802bbea4e0 (&nsim_trap_data->trap_lock){+.+.}-{2:2}, at: nsim_dev_trap_report_work+0x195/0xaa0 [ 635.955580][ C1] #4: ffffc90000a18ca0 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 635.955648][ C1] #5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 635.955730][ C1] 1 lock held by syz-executor/7381: [ 635.955747][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 635.955817][ C1] 3 locks held by kworker/1:6/9009: [ 635.955841][ C1] 1 lock held by syz.0.853/9013: [ 635.955857][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 635.955927][ C1] 3 locks held by kworker/0:9/9025: [ 635.955943][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 635.956018][ C1] #1: ffffc90004427d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 635.956093][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 635.956164][ C1] 3 locks held by kworker/0:10/9041: [ 635.956180][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 635.956255][ C1] #1: ffffc90004507d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 635.956328][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 635.956402][ C1] 1 lock held by syz-executor/9060: [ 635.956418][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 635.956499][ C1] 2 locks held by syz-executor/9065: [ 635.956516][ C1] 1 lock held by syz-executor/9067: [ 635.956532][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 635.956614][ C1] 1 lock held by syz-executor/9076: [ 635.956630][ C1] #0: ffff888022d30d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_open+0x1f4/0x300 [ 635.956711][ C1] 2 locks held by udevd/9078: [ 635.956727][ C1] [ 635.956736][ C1] ============================================= [ 635.956736][ C1] [ 636.995741][ C1] DEBUG: waiting rtnl_mutex for 13701 jiffies. [ 636.995768][ C1] task:kworker/u8:9 state:D stack:18800 pid:2473 tgid:2473 ppid:2 flags:0x00004000 [ 636.995814][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 636.995853][ C1] Call Trace: [ 636.995865][ C1] [ 636.995882][ C1] __schedule+0x1800/0x4a60 [ 636.995940][ C1] ? __pfx___schedule+0x10/0x10 [ 636.995975][ C1] ? __pfx_lock_release+0x10/0x10 [ 636.996009][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 636.996050][ C1] ? kthread_data+0x52/0xd0 [ 636.996082][ C1] ? schedule+0x90/0x320 [ 636.996111][ C1] ? wq_worker_sleeping+0x66/0x240 [ 636.996146][ C1] ? schedule+0x90/0x320 [ 636.996175][ C1] schedule+0x14b/0x320 [ 636.996208][ C1] schedule_preempt_disabled+0x13/0x30 [ 636.996239][ C1] __mutex_lock+0x6a4/0xd70 [ 636.996272][ C1] ? mark_lock+0x9a/0x360 [ 636.996309][ C1] ? __mutex_lock+0x527/0xd70 [ 636.996345][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 636.996380][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 636.996426][ C1] ? get_rtnl_holder+0x144/0x190 [ 636.996457][ C1] addrconf_dad_work+0xd0/0x16f0 [ 636.996502][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 636.996535][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 636.996583][ C1] ? process_scheduled_works+0x945/0x1830 [ 636.996614][ C1] process_scheduled_works+0xa2c/0x1830 [ 636.996677][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 636.996727][ C1] ? assign_work+0x364/0x3d0 [ 636.996765][ C1] worker_thread+0x86d/0xd40 [ 636.996814][ C1] ? __kthread_parkme+0x169/0x1d0 [ 636.996852][ C1] ? __pfx_worker_thread+0x10/0x10 [ 636.996885][ C1] kthread+0x2f0/0x390 [ 636.996920][ C1] ? __pfx_worker_thread+0x10/0x10 [ 636.996952][ C1] ? __pfx_kthread+0x10/0x10 [ 636.996988][ C1] ret_from_fork+0x4b/0x80 [ 636.997022][ C1] ? __pfx_kthread+0x10/0x10 [ 636.997058][ C1] ret_from_fork_asm+0x1a/0x30 [ 636.997111][ C1] [ 636.997124][ C1] DEBUG: waiting rtnl_mutex for 13476 jiffies. [ 636.997139][ C1] task:syz-executor state:D stack:20288 pid:7381 tgid:7381 ppid:1 flags:0x00004006 [ 636.997181][ C1] Call Trace: [ 636.997193][ C1] [ 636.997209][ C1] __schedule+0x1800/0x4a60 [ 636.997265][ C1] ? __pfx___schedule+0x10/0x10 [ 636.997300][ C1] ? __pfx_lock_release+0x10/0x10 [ 636.997334][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 636.997385][ C1] ? schedule+0x90/0x320 [ 636.997414][ C1] schedule+0x14b/0x320 [ 636.997447][ C1] schedule_preempt_disabled+0x13/0x30 [ 636.997477][ C1] __mutex_lock+0x6a4/0xd70 [ 636.997531][ C1] ? __mutex_lock+0x527/0xd70 [ 636.997568][ C1] ? tun_chr_close+0x3e/0x1b0 [ 636.997596][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 636.997648][ C1] ? get_rtnl_holder+0x144/0x190 [ 636.997680][ C1] tun_chr_close+0x3e/0x1b0 [ 636.997710][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 636.997736][ C1] __fput+0x24a/0x8a0 [ 636.997785][ C1] task_work_run+0x24f/0x310 [ 636.997817][ C1] ? __pfx_task_work_run+0x10/0x10 [ 636.997846][ C1] ? do_exit+0xa2a/0x27f0 [ 636.997879][ C1] ? kmem_cache_free+0x145/0x350 [ 636.997922][ C1] do_exit+0xa2f/0x27f0 [ 636.997968][ C1] ? __pfx_do_exit+0x10/0x10 [ 636.998005][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 636.998039][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 636.998075][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 636.998107][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 636.998143][ C1] do_group_exit+0x207/0x2c0 [ 636.998178][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 636.998207][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 636.998247][ C1] get_signal+0x16a1/0x1740 [ 636.998289][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 636.998327][ C1] ? kfree+0x4e/0x360 [ 636.998361][ C1] ? __pfx_get_signal+0x10/0x10 [ 636.998389][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 636.998427][ C1] ? do_sock_setsockopt+0x3e2/0x720 [ 636.998465][ C1] arch_do_signal_or_restart+0x96/0x860 [ 636.998503][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 636.998535][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 636.998582][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 636.998623][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 636.998665][ C1] do_syscall_64+0x100/0x230 [ 636.998690][ C1] ? clear_bhb_loop+0x35/0x90 [ 636.998732][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.998763][ C1] RIP: 0033:0x7f79b31779ca [ 636.998785][ C1] RSP: 002b:00007ffde23c06f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 636.998815][ C1] RAX: 0000000000000000 RBX: 00007ffde23c0780 RCX: 00007f79b31779ca [ 636.998834][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 636.998852][ C1] RBP: 0000000000000003 R08: 00000000000003b8 R09: 0079746972756365 [ 636.998871][ C1] R10: 00007f79b32cfce0 R11: 0000000000000202 R12: 00007f79b32cfc80 [ 636.998890][ C1] R13: 00007ffde23c071c R14: 0000000000000000 R15: 00007f79b32d1e40 [ 636.998928][ C1] [ 636.998939][ C1] DEBUG: waiting rtnl_mutex for 13103 jiffies. [ 636.998954][ C1] task:kworker/u8:6 state:D stack:21008 pid:2424 tgid:2424 ppid:2 flags:0x00004000 [ 636.998998][ C1] Workqueue: netns cleanup_net [ 636.999026][ C1] Call Trace: [ 636.999037][ C1] [ 636.999054][ C1] __schedule+0x1800/0x4a60 [ 636.999110][ C1] ? __pfx___schedule+0x10/0x10 [ 636.999145][ C1] ? __pfx_lock_release+0x10/0x10 [ 636.999179][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 636.999220][ C1] ? kthread_data+0x52/0xd0 [ 636.999250][ C1] ? schedule+0x90/0x320 [ 636.999279][ C1] ? wq_worker_sleeping+0x66/0x240 [ 636.999314][ C1] ? schedule+0x90/0x320 [ 636.999343][ C1] schedule+0x14b/0x320 [ 636.999376][ C1] schedule_preempt_disabled+0x13/0x30 [ 636.999407][ C1] __mutex_lock+0x6a4/0xd70 [ 636.999445][ C1] ? __mutex_lock+0x527/0xd70 [ 636.999481][ C1] ? wg_netns_pre_exit+0x1f/0x1e0 [ 636.999509][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 636.999549][ C1] ? __local_bh_enable_ip+0x179/0x200 [ 636.999583][ C1] ? get_rtnl_holder+0x144/0x190 [ 636.999614][ C1] wg_netns_pre_exit+0x1f/0x1e0 [ 636.999646][ C1] cleanup_net+0x615/0xcc0 [ 636.999681][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 636.999728][ C1] ? process_scheduled_works+0x945/0x1830 [ 636.999759][ C1] process_scheduled_works+0xa2c/0x1830 [ 636.999822][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 636.999865][ C1] ? assign_work+0x364/0x3d0 [ 636.999902][ C1] worker_thread+0x86d/0xd40 [ 636.999951][ C1] ? __kthread_parkme+0x169/0x1d0 [ 636.999989][ C1] ? __pfx_worker_thread+0x10/0x10 [ 637.000021][ C1] kthread+0x2f0/0x390 [ 637.000056][ C1] ? __pfx_worker_thread+0x10/0x10 [ 637.000087][ C1] ? __pfx_kthread+0x10/0x10 [ 637.000123][ C1] ret_from_fork+0x4b/0x80 [ 637.000156][ C1] ? __pfx_kthread+0x10/0x10 [ 637.000192][ C1] ret_from_fork_asm+0x1a/0x30 [ 637.000244][ C1] [ 637.000256][ C1] DEBUG: waiting rtnl_mutex for 11241 jiffies. [ 637.000270][ C1] task:kworker/0:9 state:D stack:26008 pid:9025 tgid:9025 ppid:2 flags:0x00004000 [ 637.000316][ C1] Workqueue: events linkwatch_event [ 637.000344][ C1] Call Trace: [ 637.000355][ C1] [ 637.000372][ C1] __schedule+0x1800/0x4a60 [ 637.000426][ C1] ? __pfx___schedule+0x10/0x10 [ 637.000458][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 637.000491][ C1] ? __pfx_lock_release+0x10/0x10 [ 637.000526][ C1] ? kick_pool+0x45c/0x620 [ 637.000564][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 637.000593][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 637.000629][ C1] ? schedule+0x90/0x320 [ 637.000658][ C1] schedule+0x14b/0x320 [ 637.000697][ C1] schedule_preempt_disabled+0x13/0x30 [ 637.000728][ C1] __mutex_lock+0x6a4/0xd70 [ 637.000766][ C1] ? __mutex_lock+0x527/0xd70 [ 637.000802][ C1] ? linkwatch_event+0xe/0x60 [ 637.000831][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 637.000876][ C1] ? get_rtnl_holder+0x144/0x190 [ 637.000906][ C1] ? process_scheduled_works+0x945/0x1830 [ 637.000936][ C1] linkwatch_event+0xe/0x60 [ 637.000962][ C1] process_scheduled_works+0xa2c/0x1830 [ 637.001024][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 637.001067][ C1] ? assign_work+0x364/0x3d0 [ 637.001104][ C1] worker_thread+0x86d/0xd40 [ 637.001147][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 637.001182][ C1] ? __kthread_parkme+0x169/0x1d0 [ 637.001219][ C1] ? __pfx_worker_thread+0x10/0x10 [ 637.001252][ C1] kthread+0x2f0/0x390 [ 637.001286][ C1] ? __pfx_worker_thread+0x10/0x10 [ 637.001317][ C1] ? __pfx_kthread+0x10/0x10 [ 637.001354][ C1] ret_from_fork+0x4b/0x80 [ 637.001387][ C1] ? __pfx_kthread+0x10/0x10 [ 637.001423][ C1] ret_from_fork_asm+0x1a/0x30 [ 637.001476][ C1] [ 637.001486][ C1] DEBUG: waiting rtnl_mutex for 3461 jiffies. [ 637.001501][ C1] task:syz-executor state:D stack:24992 pid:9067 tgid:9067 ppid:1 flags:0x00000004 [ 637.001545][ C1] Call Trace: [ 637.001556][ C1] [ 637.001572][ C1] __schedule+0x1800/0x4a60 [ 637.001627][ C1] ? __pfx___schedule+0x10/0x10 [ 637.001662][ C1] ? __pfx_lock_release+0x10/0x10 [ 637.001704][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 637.001755][ C1] ? schedule+0x90/0x320 [ 637.001784][ C1] schedule+0x14b/0x320 [ 637.001817][ C1] schedule_preempt_disabled+0x13/0x30 [ 637.001848][ C1] __mutex_lock+0x6a4/0xd70 [ 637.001886][ C1] ? __mutex_lock+0x527/0xd70 [ 637.001922][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 637.001961][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 637.002008][ C1] ? get_rtnl_holder+0x144/0x190 [ 637.002039][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 637.002081][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 637.002122][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 637.002157][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 637.002242][ C1] ? __pfx_validate_chain+0x10/0x10 [ 637.002282][ C1] ? __pfx_validate_chain+0x10/0x10 [ 637.002322][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 637.002360][ C1] ? mark_lock+0x9a/0x360 [ 637.002393][ C1] ? __pfx_validate_chain+0x10/0x10 [ 637.002433][ C1] ? __lock_acquire+0x1359/0x2000 [ 637.002483][ C1] ? mark_lock+0x9a/0x360 [ 637.002522][ C1] ? __lock_acquire+0x1359/0x2000 [ 637.002578][ C1] netlink_rcv_skb+0x1e3/0x430 [ 637.002619][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 637.002660][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 637.002731][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 637.002760][ C1] netlink_unicast+0x7f0/0x990 [ 637.002808][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 637.002841][ C1] ? __virt_addr_valid+0x183/0x530 [ 637.002882][ C1] ? __check_object_size+0x49c/0x900 [ 637.002914][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 637.002952][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 637.002992][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.003022][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 637.003054][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 637.003088][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 637.003127][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.003151][ C1] __sock_sendmsg+0x221/0x270 [ 637.003193][ C1] __sys_sendto+0x3a4/0x4f0 [ 637.003229][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 637.003287][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 637.003324][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 637.003359][ C1] ? exc_page_fault+0x590/0x8c0 [ 637.003397][ C1] __x64_sys_sendto+0xde/0x100 [ 637.003431][ C1] do_syscall_64+0xf3/0x230 [ 637.003455][ C1] ? clear_bhb_loop+0x35/0x90 [ 637.003490][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.003519][ C1] RIP: 0033:0x7f62b0f7796c [ 637.003541][ C1] RSP: 002b:00007fff6102a540 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 637.003569][ C1] RAX: ffffffffffffffda RBX: 00007f62b1c34620 RCX: 00007f62b0f7796c [ 637.003590][ C1] RDX: 0000000000000028 RSI: 00007f62b1c34670 RDI: 0000000000000003 [ 637.003609][ C1] RBP: 0000000000000000 R08: 00007fff6102a594 R09: 000000000000000c [ 637.003627][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 637.003645][ C1] R13: 0000000000000000 R14: 00007f62b1c34670 R15: 0000000000000000 [ 637.003681][ C1] [ 637.003699][ C1] DEBUG: holding rtnl_mutex for 14155 jiffies. [ 637.003714][ C1] task:syz-executor state:R running task stack:20080 pid:5097 tgid:5097 ppid:1 flags:0x00004006 [ 637.003765][ C1] Call Trace: [ 637.003776][ C1] [ 637.003792][ C1] __schedule+0x1800/0x4a60 [ 637.003848][ C1] ? __pfx___schedule+0x10/0x10 [ 637.003883][ C1] ? __pfx_lock_release+0x10/0x10 [ 637.003933][ C1] ? schedule+0x90/0x320 [ 637.003961][ C1] schedule+0x14b/0x320 [ 637.003994][ C1] schedule_timeout+0xb0/0x310 [ 637.004022][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 637.004047][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 637.004091][ C1] ? wait_for_completion+0x2fe/0x620 [ 637.004123][ C1] ? wait_for_completion+0x2fe/0x620 [ 637.004153][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 637.004182][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 637.004217][ C1] ? wait_for_completion+0x2fe/0x620 [ 637.004251][ C1] wait_for_completion+0x355/0x620 [ 637.004301][ C1] ? __pfx_wait_for_completion+0x10/0x10 [ 637.004348][ C1] ? __flush_work+0xe6/0xd00 [ 637.004381][ C1] __flush_work+0xaa9/0xd00 [ 637.004418][ C1] ? __flush_work+0xe6/0xd00 [ 637.004457][ C1] ? __pfx___flush_work+0x10/0x10 [ 637.004494][ C1] ? __pfx_wq_barrier_func+0x10/0x10 [ 637.004539][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 637.004570][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 637.004607][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 637.004642][ C1] unregister_netdevice_many_notify+0x8a0/0x1d20 [ 637.004689][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 637.004737][ C1] ? __queue_work+0x198/0xee0 [ 637.004770][ C1] ? __pfx_lock_release+0x10/0x10 [ 637.004804][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 637.004843][ C1] ? mark_lock+0x9a/0x360 [ 637.004882][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 637.004919][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 637.004958][ C1] ? queue_delayed_work_on+0x1eb/0x390 [ 637.004991][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 637.005036][ C1] unregister_netdevice_queue+0x303/0x370 [ 637.005071][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 637.005117][ C1] __tun_detach+0x6b6/0x1600 [ 637.005162][ C1] tun_chr_close+0x108/0x1b0 [ 637.005187][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 637.005212][ C1] __fput+0x24a/0x8a0 [ 637.005260][ C1] task_work_run+0x24f/0x310 [ 637.005292][ C1] ? __pfx_task_work_run+0x10/0x10 [ 637.005321][ C1] ? do_exit+0xa2a/0x27f0 [ 637.005355][ C1] ? kmem_cache_free+0x145/0x350 [ 637.005397][ C1] do_exit+0xa2f/0x27f0 [ 637.005444][ C1] ? __pfx_do_exit+0x10/0x10 [ 637.005480][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 637.005513][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 637.005551][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 637.005582][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 637.005617][ C1] do_group_exit+0x207/0x2c0 [ 637.005652][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 637.005681][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 637.005727][ C1] get_signal+0x16a1/0x1740 [ 637.005773][ C1] ? __pfx_get_signal+0x10/0x10 [ 637.005799][ C1] ? debug_check_no_obj_freed+0x561/0x580 [ 637.005824][ C1] ? mod_objcg_state+0x125/0x930 [ 637.005865][ C1] arch_do_signal_or_restart+0x96/0x860 [ 637.005902][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 637.005933][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 637.005982][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 637.006023][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 637.006064][ C1] do_syscall_64+0x100/0x230 [ 637.006089][ C1] ? clear_bhb_loop+0x35/0x90 [ 637.006124][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.006153][ C1] RIP: 0033:0x7f5a68f7490a [ 637.006174][ C1] RSP: 002b:00007ffefd850fc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 637.006202][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f5a68f7490a [ 637.006221][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 637.006238][ C1] RBP: 00007ffefd85103c R08: 00007ffefd85091c R09: 00007ffefd850d27 [ 637.006258][ C1] R10: 00007ffefd8509a0 R11: 0000000000000293 R12: 000000000000000a [ 637.006276][ C1] R13: 000000000006830d R14: 00000000000674d7 R15: 000000000000000a [ 637.006313][ C1] [ 637.006324][ C1] DEBUG: waiting rtnl_mutex for 14127 jiffies. [ 637.006340][ C1] task:syz.0.853 state:D stack:25208 pid:9013 tgid:9011 ppid:6436 flags:0x00004006 [ 637.006384][ C1] Call Trace: [ 637.006395][ C1] [ 637.006411][ C1] __schedule+0x1800/0x4a60 [ 637.006467][ C1] ? __pfx___schedule+0x10/0x10 [ 637.006502][ C1] ? __pfx_lock_release+0x10/0x10 [ 637.006536][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 637.006587][ C1] ? schedule+0x90/0x320 [ 637.006616][ C1] schedule+0x14b/0x320 [ 637.006649][ C1] schedule_preempt_disabled+0x13/0x30 [ 637.006679][ C1] __mutex_lock+0x6a4/0xd70 [ 637.006724][ C1] ? __mutex_lock+0x527/0xd70 [ 637.006760][ C1] ? tun_chr_close+0x3e/0x1b0 [ 637.006787][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 637.006835][ C1] ? get_rtnl_holder+0x144/0x190 [ 637.006866][ C1] tun_chr_close+0x3e/0x1b0 [ 637.006890][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 637.006915][ C1] __fput+0x24a/0x8a0 [ 637.006964][ C1] task_work_run+0x24f/0x310 [ 637.006995][ C1] ? __pfx_task_work_run+0x10/0x10 [ 637.007024][ C1] ? do_exit+0xa2a/0x27f0 [ 637.007058][ C1] ? kmem_cache_free+0x145/0x350 [ 637.007100][ C1] do_exit+0xa2f/0x27f0 [ 637.007146][ C1] ? __pfx_do_exit+0x10/0x10 [ 637.007182][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 637.007216][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 637.007253][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 637.007285][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 637.007320][ C1] do_group_exit+0x207/0x2c0 [ 637.007356][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 637.007385][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 637.007424][ C1] get_signal+0x16a1/0x1740 [ 637.007470][ C1] ? __pfx_get_signal+0x10/0x10 [ 637.007510][ C1] arch_do_signal_or_restart+0x96/0x860 [ 637.007547][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 637.007578][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 637.007631][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 637.007672][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 637.007719][ C1] do_syscall_64+0x100/0x230 [ 637.007744][ C1] ? clear_bhb_loop+0x35/0x90 [ 637.007779][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.007808][ C1] RIP: 0033:0x7f0da8b75bd9 [ 637.007829][ C1] RSP: 002b:00007f0da9931048 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 637.007858][ C1] RAX: 0000000000000000 RBX: 00007f0da8d03f60 RCX: 00007f0da8b75bd9 [ 637.007877][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 637.007895][ C1] RBP: 00007f0da8be4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 637.007913][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 637.007931][ C1] R13: 000000000000000b R14: 00007f0da8d03f60 R15: 00007fff0acc7a58 [ 637.007968][ C1] [ 637.007979][ C1] DEBUG: waiting rtnl_mutex for 8689 jiffies. [ 637.007994][ C1] task:kworker/0:10 state:D stack:27040 pid:9041 tgid:9041 ppid:2 flags:0x00004000 [ 637.008040][ C1] Workqueue: events switchdev_deferred_process_work [ 637.008071][ C1] Call Trace: [ 637.008082][ C1] [ 637.008098][ C1] __schedule+0x1800/0x4a60 [ 637.008155][ C1] ? __pfx___schedule+0x10/0x10 [ 637.008187][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 637.008221][ C1] ? __pfx_lock_release+0x10/0x10 [ 637.008254][ C1] ? kick_pool+0x45c/0x620 [ 637.008293][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 637.008322][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 637.008359][ C1] ? schedule+0x90/0x320 [ 637.008388][ C1] schedule+0x14b/0x320 [ 637.008420][ C1] schedule_preempt_disabled+0x13/0x30 [ 637.008451][ C1] __mutex_lock+0x6a4/0xd70 [ 637.008489][ C1] ? __mutex_lock+0x527/0xd70 [ 637.008524][ C1] ? switchdev_deferred_process_work+0xe/0x20 [ 637.008555][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 637.008600][ C1] ? get_rtnl_holder+0x144/0x190 [ 637.008630][ C1] ? process_scheduled_works+0x945/0x1830 [ 637.008660][ C1] switchdev_deferred_process_work+0xe/0x20 [ 637.008687][ C1] process_scheduled_works+0xa2c/0x1830 [ 637.008759][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 637.008801][ C1] ? assign_work+0x364/0x3d0 [ 637.008837][ C1] worker_thread+0x86d/0xd40 [ 637.008879][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 637.008915][ C1] ? __kthread_parkme+0x169/0x1d0 [ 637.008951][ C1] ? __pfx_worker_thread+0x10/0x10 [ 637.008984][ C1] kthread+0x2f0/0x390 [ 637.009019][ C1] ? __pfx_worker_thread+0x10/0x10 [ 637.009050][ C1] ? __pfx_kthread+0x10/0x10 [ 637.009086][ C1] ret_from_fork+0x4b/0x80 [ 637.009120][ C1] ? __pfx_kthread+0x10/0x10 [ 637.009156][ C1] ret_from_fork_asm+0x1a/0x30 [ 637.009208][ C1] [ 637.009220][ C1] DEBUG: waiting rtnl_mutex for 4816 jiffies. [ 637.009235][ C1] task:syz-executor state:D stack:24992 pid:9060 tgid:9060 ppid:1 flags:0x00004006 [ 637.009277][ C1] Call Trace: [ 637.009288][ C1] [ 637.009304][ C1] __schedule+0x1800/0x4a60 [ 637.009359][ C1] ? __pfx___schedule+0x10/0x10 [ 637.009395][ C1] ? __pfx_lock_release+0x10/0x10 [ 637.009429][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 637.009479][ C1] ? schedule+0x90/0x320 [ 637.009508][ C1] schedule+0x14b/0x320 [ 637.009540][ C1] schedule_preempt_disabled+0x13/0x30 [ 637.009570][ C1] __mutex_lock+0x6a4/0xd70 [ 637.009608][ C1] ? __mutex_lock+0x527/0xd70 [ 637.009644][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 637.009683][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 637.009737][ C1] ? get_rtnl_holder+0x144/0x190 [ 637.009767][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 637.009809][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 637.009850][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 637.009885][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 637.009929][ C1] ? __pfx_validate_chain+0x10/0x10 [ 637.009968][ C1] ? __pfx_validate_chain+0x10/0x10 [ 637.010006][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 637.010044][ C1] ? mark_lock+0x9a/0x360 [ 637.010076][ C1] ? __pfx_validate_chain+0x10/0x10 [ 637.010116][ C1] ? __lock_acquire+0x1359/0x2000 [ 637.010166][ C1] ? mark_lock+0x9a/0x360 [ 637.010205][ C1] ? __lock_acquire+0x1359/0x2000 [ 637.010261][ C1] netlink_rcv_skb+0x1e3/0x430 [ 637.010302][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 637.010342][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 637.010407][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 637.010435][ C1] netlink_unicast+0x7f0/0x990 [ 637.010482][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 637.010515][ C1] ? __virt_addr_valid+0x183/0x530 [ 637.010555][ C1] ? __check_object_size+0x49c/0x900 [ 637.010587][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 637.010624][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 637.010660][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.010686][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 637.010732][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 637.010765][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 637.010803][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.010827][ C1] __sock_sendmsg+0x221/0x270 [ 637.010869][ C1] __sys_sendto+0x3a4/0x4f0 [ 637.010904][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 637.010961][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 637.010998][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 637.011032][ C1] ? exc_page_fault+0x590/0x8c0 [ 638.002637][ T9076] Bluetooth: hci1: Opcode 0x0c38 failed: -110 [ 638.006926][ C1] __x64_sys_sendto+0xde/0x100 [ 639.473497][ C0] net_ratelimit: 10014 callbacks suppressed [ 639.473520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.478212][ C1] do_syscall_64+0xf3/0x230 [ 639.484419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.489843][ C1] ? clear_bhb_loop+0x35/0x90 [ 639.495853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.501383][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.506471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.510568][ C1] RIP: 0033:0x7fbd1497796c [ 639.516949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.521524][ C1] RSP: 002b:00007ffd0673ec50 EFLAGS: 00000293 [ 639.527268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.531067][ C1] ORIG_RAX: 000000000000002c [ 639.536681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.540865][ C1] RAX: ffffffffffffffda RBX: 00007fbd15634620 RCX: 00007fbd1497796c [ 639.545782][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.549902][ C1] RDX: 0000000000000028 RSI: 00007fbd15634670 RDI: 0000000000000003 [ 639.555462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.557869][ C1] RBP: 0000000000000000 R08: 00007ffd0673eca4 R09: 000000000000000c [ 639.564446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.574178][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 644.484446][ C0] net_ratelimit: 9286 callbacks suppressed [ 644.484469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.489561][ C1] R13: 0000000000000000 R14: 00007fbd15634670 R15: 0000000000000000 [ 644.496007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.500862][ C1] [ 644.506576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.511342][ C1] [ 644.511342][ C1] Showing all locks held in the system: [ 644.516997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.521828][ C1] 4 locks held by kworker/u8:1/12: [ 644.527427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.532614][ C1] #0: [ 644.537655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.541787][ C1] ffff88802ae9e948 [ 644.546922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.551619][ C1] ((wq_completion)bat_events [ 644.557546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.563314][ C1] ){+.+.}-{0:0} [ 644.568961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.573695][ C1] , at: process_scheduled_works+0x90a/0x1830 [ 644.580507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.585869][ C1] #1: [ 647.118173][ T5109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 647.122060][ C1] ffffc90000117d00 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0} [ 647.148856][ T5109] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 647.154993][ C1] , at: process_scheduled_works+0x945/0x1830 [ 647.155031][ C1] #2: ffffc90000a18ca0 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 647.155102][ C1] #3: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 647.155207][ C1] 4 locks held by kworker/u8:6/2424: [ 647.155225][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 647.155297][ C1] #1: ffffc90008e17d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 647.155367][ C1] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 647.155436][ C1] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 647.155505][ C1] 3 locks held by kworker/u8:9/2473: [ 647.155521][ C1] #0: ffff88802a40b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 647.155595][ C1] #1: ffffc90009217d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 647.155670][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 647.155749][ C1] 4 locks held by udevd/4549: [ 647.155767][ C1] 2 locks held by getty/4849: [ 647.155783][ C1] #0: ffff88802addf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 647.155861][ C1] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 647.155933][ C1] 2 locks held by kworker/0:3/4872: [ 647.155951][ C1] 2 locks held by syz-executor/5097: [ 647.155966][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 647.156033][ C1] #1: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 647.156124][ C1] 3 locks held by kworker/u9:2/5101: [ 647.156139][ C1] #0: ffff88802f261948 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 647.156228][ C1] #1: ffffc90003657d00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 647.156302][ C1] #2: ffff88802240cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1bf/0x6b0 [ 647.156375][ C1] 5 locks held by kworker/u9:5/5109: [ 647.156392][ C1] 2 locks held by kworker/1:4/5166: [ 647.156410][ C1] 2 locks held by kworker/1:8/5204: [ 647.156430][ C1] 1 lock held by syz-executor/7381: [ 647.156446][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 647.156528][ C1] 3 locks held by kworker/1:6/9009: [ 647.156551][ C1] 1 lock held by syz.0.853/9013: [ 647.156589][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 647.156660][ C1] 3 locks held by kworker/0:9/9025: [ 647.156675][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 647.156748][ C1] #1: ffffc90004427d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 647.156822][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 647.156898][ C1] 3 locks held by kworker/0:10/9041: [ 647.156914][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 647.156988][ C1] #1: ffffc90004507d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 647.157068][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 647.157140][ C1] 1 lock held by syz-executor/9060: [ 647.157156][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 647.157238][ C1] 1 lock held by syz-executor/9067: [ 647.157254][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 647.157334][ C1] 4 locks held by syz-executor/9072: [ 647.157351][ C1] 1 lock held by syz-executor/9074: [ 647.157368][ C1] 2 locks held by dhcpcd/9079: [ 647.157384][ C1] #0: ffff888023df2258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 647.157460][ C1] #1: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 647.157543][ C1] 1 lock held by dhcpcd/9080: [ 647.157558][ C1] #0: ffff88802beee258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 647.157636][ C1] 1 lock held by dhcpcd/9082: [ 647.157651][ C1] #0: ffff88802012a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 647.157728][ C1] 1 lock held by dhcpcd/9083: [ 647.157743][ C1] #0: ffff88806db02258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 647.157820][ C1] 1 lock held by dhcpcd/9085: [ 647.157836][ C1] #0: ffff88807a4fa258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 647.157912][ C1] 1 lock held by syz-executor/9086: [ 647.157929][ C1] [ 647.157938][ C1] ============================================= [ 647.157938][ C1] [ 648.514223][ C1] DEBUG: waiting rtnl_mutex for 14853 jiffies. [ 648.514250][ C1] task:kworker/u8:9 state:D stack:18800 pid:2473 tgid:2473 ppid:2 flags:0x00004000 [ 648.514298][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 648.514339][ C1] Call Trace: [ 648.514351][ C1] [ 648.514369][ C1] __schedule+0x1800/0x4a60 [ 648.514426][ C1] ? __pfx___schedule+0x10/0x10 [ 648.514460][ C1] ? __pfx_lock_release+0x10/0x10 [ 648.514493][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 648.514532][ C1] ? kthread_data+0x52/0xd0 [ 648.514563][ C1] ? schedule+0x90/0x320 [ 648.514591][ C1] ? wq_worker_sleeping+0x66/0x240 [ 648.514624][ C1] ? schedule+0x90/0x320 [ 648.514652][ C1] schedule+0x14b/0x320 [ 648.514684][ C1] schedule_preempt_disabled+0x13/0x30 [ 648.514714][ C1] __mutex_lock+0x6a4/0xd70 [ 648.514745][ C1] ? mark_lock+0x9a/0x360 [ 648.514781][ C1] ? __mutex_lock+0x527/0xd70 [ 648.514815][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 648.514849][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 648.514901][ C1] ? get_rtnl_holder+0x144/0x190 [ 648.514932][ C1] addrconf_dad_work+0xd0/0x16f0 [ 648.514975][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 648.515007][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 648.515054][ C1] ? process_scheduled_works+0x945/0x1830 [ 648.515084][ C1] process_scheduled_works+0xa2c/0x1830 [ 648.515144][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 648.515185][ C1] ? assign_work+0x364/0x3d0 [ 648.515221][ C1] worker_thread+0x86d/0xd40 [ 648.515269][ C1] ? __kthread_parkme+0x169/0x1d0 [ 648.515305][ C1] ? __pfx_worker_thread+0x10/0x10 [ 648.515336][ C1] kthread+0x2f0/0x390 [ 648.515370][ C1] ? __pfx_worker_thread+0x10/0x10 [ 648.515400][ C1] ? __pfx_kthread+0x10/0x10 [ 648.515455][ C1] ret_from_fork+0x4b/0x80 [ 648.515488][ C1] ? __pfx_kthread+0x10/0x10 [ 648.515524][ C1] ret_from_fork_asm+0x1a/0x30 [ 648.515577][ C1] [ 648.515589][ C1] DEBUG: waiting rtnl_mutex for 14628 jiffies. [ 648.515605][ C1] task:syz-executor state:D stack:20288 pid:7381 tgid:7381 ppid:1 flags:0x00004006 [ 648.515645][ C1] Call Trace: [ 648.515657][ C1] [ 648.515673][ C1] __schedule+0x1800/0x4a60 [ 648.515729][ C1] ? __pfx___schedule+0x10/0x10 [ 648.515764][ C1] ? __pfx_lock_release+0x10/0x10 [ 648.515799][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 648.515850][ C1] ? schedule+0x90/0x320 [ 648.515884][ C1] schedule+0x14b/0x320 [ 648.515918][ C1] schedule_preempt_disabled+0x13/0x30 [ 648.515948][ C1] __mutex_lock+0x6a4/0xd70 [ 648.515986][ C1] ? __mutex_lock+0x527/0xd70 [ 648.516023][ C1] ? tun_chr_close+0x3e/0x1b0 [ 648.516050][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 648.516097][ C1] ? get_rtnl_holder+0x144/0x190 [ 648.516128][ C1] tun_chr_close+0x3e/0x1b0 [ 648.516153][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 648.516179][ C1] __fput+0x24a/0x8a0 [ 648.516228][ C1] task_work_run+0x24f/0x310 [ 648.516261][ C1] ? __pfx_task_work_run+0x10/0x10 [ 648.516289][ C1] ? do_exit+0xa2a/0x27f0 [ 648.516324][ C1] ? kmem_cache_free+0x145/0x350 [ 648.516366][ C1] do_exit+0xa2f/0x27f0 [ 648.516413][ C1] ? __pfx_do_exit+0x10/0x10 [ 648.516470][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 648.516505][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 648.516541][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 648.516573][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 648.516608][ C1] do_group_exit+0x207/0x2c0 [ 648.516644][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 648.516673][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 648.516713][ C1] get_signal+0x16a1/0x1740 [ 648.516755][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 648.516793][ C1] ? kfree+0x4e/0x360 [ 648.516827][ C1] ? __pfx_get_signal+0x10/0x10 [ 648.516854][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 648.516898][ C1] ? do_sock_setsockopt+0x3e2/0x720 [ 648.516936][ C1] arch_do_signal_or_restart+0x96/0x860 [ 648.516974][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 648.517005][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 648.517053][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 648.517094][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 648.517135][ C1] do_syscall_64+0x100/0x230 [ 648.517161][ C1] ? clear_bhb_loop+0x35/0x90 [ 648.517196][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.517226][ C1] RIP: 0033:0x7f79b31779ca [ 648.517249][ C1] RSP: 002b:00007ffde23c06f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 648.517279][ C1] RAX: 0000000000000000 RBX: 00007ffde23c0780 RCX: 00007f79b31779ca [ 648.517298][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 648.517316][ C1] RBP: 0000000000000003 R08: 00000000000003b8 R09: 0079746972756365 [ 648.517335][ C1] R10: 00007f79b32cfce0 R11: 0000000000000202 R12: 00007f79b32cfc80 [ 648.517354][ C1] R13: 00007ffde23c071c R14: 0000000000000000 R15: 00007f79b32d1e40 [ 648.517392][ C1] [ 648.517403][ C1] DEBUG: waiting rtnl_mutex for 14255 jiffies. [ 648.517418][ C1] task:kworker/u8:6 state:D stack:21008 pid:2424 tgid:2424 ppid:2 flags:0x00004000 [ 648.517463][ C1] Workqueue: netns cleanup_net [ 648.517491][ C1] Call Trace: [ 648.517502][ C1] [ 648.517518][ C1] __schedule+0x1800/0x4a60 [ 648.517570][ C1] ? __pfx___schedule+0x10/0x10 [ 648.999939][ T5109] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 649.004933][ C1] ? __pfx_lock_release+0x10/0x10 [ 649.004978][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 649.005018][ C1] ? kthread_data+0x52/0xd0 [ 649.005049][ C1] ? schedule+0x90/0x320 [ 649.005078][ C1] ? wq_worker_sleeping+0x66/0x240 [ 649.005113][ C1] ? schedule+0x90/0x320 [ 649.005141][ C1] schedule+0x14b/0x320 [ 649.005175][ C1] schedule_preempt_disabled+0x13/0x30 [ 649.005205][ C1] __mutex_lock+0x6a4/0xd70 [ 649.005244][ C1] ? __mutex_lock+0x527/0xd70 [ 649.005279][ C1] ? wg_netns_pre_exit+0x1f/0x1e0 [ 649.005308][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 649.005347][ C1] ? __local_bh_enable_ip+0x179/0x200 [ 649.005382][ C1] ? get_rtnl_holder+0x144/0x190 [ 649.005414][ C1] wg_netns_pre_exit+0x1f/0x1e0 [ 649.005445][ C1] cleanup_net+0x615/0xcc0 [ 649.005480][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 649.005521][ C1] ? process_scheduled_works+0x945/0x1830 [ 649.005552][ C1] process_scheduled_works+0xa2c/0x1830 [ 649.005615][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 649.005665][ C1] ? assign_work+0x364/0x3d0 [ 649.005702][ C1] worker_thread+0x86d/0xd40 [ 649.005752][ C1] ? __kthread_parkme+0x169/0x1d0 [ 649.005790][ C1] ? __pfx_worker_thread+0x10/0x10 [ 649.005821][ C1] kthread+0x2f0/0x390 [ 649.005856][ C1] ? __pfx_worker_thread+0x10/0x10 [ 649.005888][ C1] ? __pfx_kthread+0x10/0x10 [ 649.005925][ C1] ret_from_fork+0x4b/0x80 [ 649.005958][ C1] ? __pfx_kthread+0x10/0x10 [ 649.005994][ C1] ret_from_fork_asm+0x1a/0x30 [ 649.006047][ C1] [ 649.006060][ C1] DEBUG: waiting rtnl_mutex for 12442 jiffies. [ 649.006076][ C1] task:kworker/0:9 state:D stack:26008 pid:9025 tgid:9025 ppid:2 flags:0x00004000 [ 649.006125][ C1] Workqueue: events linkwatch_event [ 649.006156][ C1] Call Trace: [ 649.006167][ C1] [ 649.006184][ C1] __schedule+0x1800/0x4a60 [ 649.006240][ C1] ? __pfx___schedule+0x10/0x10 [ 649.006272][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 649.006305][ C1] ? __pfx_lock_release+0x10/0x10 [ 649.006339][ C1] ? kick_pool+0x45c/0x620 [ 649.006377][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 649.006406][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 649.006443][ C1] ? schedule+0x90/0x320 [ 649.006472][ C1] schedule+0x14b/0x320 [ 649.006505][ C1] schedule_preempt_disabled+0x13/0x30 [ 649.006535][ C1] __mutex_lock+0x6a4/0xd70 [ 649.006573][ C1] ? __mutex_lock+0x527/0xd70 [ 649.006608][ C1] ? linkwatch_event+0xe/0x60 [ 649.006643][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 649.006689][ C1] ? get_rtnl_holder+0x144/0x190 [ 649.006719][ C1] ? process_scheduled_works+0x945/0x1830 [ 649.006750][ C1] linkwatch_event+0xe/0x60 [ 649.006776][ C1] process_scheduled_works+0xa2c/0x1830 [ 649.006839][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 649.006881][ C1] ? assign_work+0x364/0x3d0 [ 649.006919][ C1] worker_thread+0x86d/0xd40 [ 649.006961][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 649.006997][ C1] ? __kthread_parkme+0x169/0x1d0 [ 649.007035][ C1] ? __pfx_worker_thread+0x10/0x10 [ 649.007066][ C1] kthread+0x2f0/0x390 [ 649.007101][ C1] ? __pfx_worker_thread+0x10/0x10 [ 649.007133][ C1] ? __pfx_kthread+0x10/0x10 [ 649.007169][ C1] ret_from_fork+0x4b/0x80 [ 649.007203][ C1] ? __pfx_kthread+0x10/0x10 [ 649.007238][ C1] ret_from_fork_asm+0x1a/0x30 [ 649.007291][ C1] [ 649.007303][ C1] DEBUG: waiting rtnl_mutex for 4662 jiffies. [ 649.007317][ C1] task:syz-executor state:D stack:24992 pid:9067 tgid:9067 ppid:1 flags:0x00000004 [ 649.007362][ C1] Call Trace: [ 649.007373][ C1] [ 649.007389][ C1] __schedule+0x1800/0x4a60 [ 649.007444][ C1] ? __pfx___schedule+0x10/0x10 [ 649.007479][ C1] ? __pfx_lock_release+0x10/0x10 [ 649.007513][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 649.007564][ C1] ? schedule+0x90/0x320 [ 649.007593][ C1] schedule+0x14b/0x320 [ 649.007637][ C1] schedule_preempt_disabled+0x13/0x30 [ 649.007668][ C1] __mutex_lock+0x6a4/0xd70 [ 649.007707][ C1] ? __mutex_lock+0x527/0xd70 [ 649.007743][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 649.007784][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 649.007830][ C1] ? get_rtnl_holder+0x144/0x190 [ 649.007860][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 649.007903][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 649.007945][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.007980][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 649.008025][ C1] ? __pfx_validate_chain+0x10/0x10 [ 649.008063][ C1] ? __pfx_validate_chain+0x10/0x10 [ 649.008102][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 649.008140][ C1] ? mark_lock+0x9a/0x360 [ 649.008173][ C1] ? __pfx_validate_chain+0x10/0x10 [ 649.008213][ C1] ? __lock_acquire+0x1359/0x2000 [ 649.008263][ C1] ? mark_lock+0x9a/0x360 [ 649.008301][ C1] ? __lock_acquire+0x1359/0x2000 [ 649.008358][ C1] netlink_rcv_skb+0x1e3/0x430 [ 649.008400][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.008440][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 649.008505][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 649.008534][ C1] netlink_unicast+0x7f0/0x990 [ 649.008581][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 649.008613][ C1] ? __virt_addr_valid+0x183/0x530 [ 649.008662][ C1] ? __check_object_size+0x49c/0x900 [ 649.008695][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 649.008732][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 649.008773][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.008803][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 649.008835][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 649.008869][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 649.008907][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.008931][ C1] __sock_sendmsg+0x221/0x270 [ 649.008974][ C1] __sys_sendto+0x3a4/0x4f0 [ 649.009009][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 649.009068][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 649.009105][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 649.009140][ C1] ? exc_page_fault+0x590/0x8c0 [ 649.009178][ C1] __x64_sys_sendto+0xde/0x100 [ 649.009211][ C1] do_syscall_64+0xf3/0x230 [ 649.009237][ C1] ? clear_bhb_loop+0x35/0x90 [ 649.009272][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.009302][ C1] RIP: 0033:0x7f62b0f7796c [ 649.009325][ C1] RSP: 002b:00007fff6102a540 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 649.009354][ C1] RAX: ffffffffffffffda RBX: 00007f62b1c34620 RCX: 00007f62b0f7796c [ 649.009375][ C1] RDX: 0000000000000028 RSI: 00007f62b1c34670 RDI: 0000000000000003 [ 649.009393][ C1] RBP: 0000000000000000 R08: 00007fff6102a594 R09: 000000000000000c [ 649.009411][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 649.009428][ C1] R13: 0000000000000000 R14: 00007f62b1c34670 R15: 0000000000000000 [ 649.009465][ C1] [ 649.009476][ C1] DEBUG: holding rtnl_mutex for 15355 jiffies. [ 649.009491][ C1] task:syz-executor state:R running task stack:20080 pid:5097 tgid:5097 ppid:1 flags:0x00004006 [ 649.009542][ C1] Call Trace: [ 649.009553][ C1] [ 649.009569][ C1] __schedule+0x1800/0x4a60 [ 649.009624][ C1] ? __pfx___schedule+0x10/0x10 [ 649.009669][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 649.009709][ C1] ? kasan_save_track+0x51/0x80 [ 649.009742][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 649.009776][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 649.009808][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 649.009840][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 649.009882][ C1] irqentry_exit+0x5e/0x90 [ 649.009916][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 649.009948][ C1] RIP: 0010:lockdep_unregister_key+0x56d/0x610 [ 649.009983][ C1] Code: ff 92 48 c7 c6 10 bc 6f 81 e8 8f 04 0a 00 e8 fa 18 0a 00 e9 e5 fb ff ff e8 c0 62 21 0a 41 f7 c7 00 02 00 00 74 d0 fb 45 84 f6 <75> cf eb e0 90 0f 0b 90 45 31 f6 e9 62 ff ff ff 90 0f 0b 90 e9 a1 [ 649.010008][ C1] RSP: 0018:ffffc90003617400 EFLAGS: 00000246 [ 649.010033][ C1] RAX: dffffc0000000000 RBX: 1ffff920006c2e88 RCX: ffffffff947f4803 [ 649.010053][ C1] RDX: 0000000000000001 RSI: ffffffff8bcad5e0 RDI: ffffffff8c207f20 [ 649.010073][ C1] RBP: ffffc900036174d8 R08: ffffffff93005df7 R09: 1ffffffff2600bbe [ 649.010093][ C1] R10: dffffc0000000000 R11: fffffbfff2600bbf R12: ffffc90003617440 [ 649.010114][ C1] R13: 1ffff920006c2e84 R14: 0000000000000000 R15: 0000000000000a02 [ 649.010157][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 649.010191][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 649.010233][ C1] ? __qdisc_destroy+0x150/0x410 [ 649.010258][ C1] ? kfree+0x149/0x360 [ 649.010292][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 649.010321][ C1] __qdisc_destroy+0x165/0x410 [ 649.010352][ C1] dev_shutdown+0x357/0x440 [ 649.010385][ C1] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 649.010443][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 649.010482][ C1] ? mark_lock+0x9a/0x360 [ 649.010521][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 649.010558][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 649.010598][ C1] ? queue_delayed_work_on+0x1eb/0x390 [ 649.010638][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 649.010683][ C1] unregister_netdevice_queue+0x303/0x370 [ 649.010718][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 649.010764][ C1] __tun_detach+0x6b6/0x1600 [ 649.010808][ C1] tun_chr_close+0x108/0x1b0 [ 649.010833][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 649.010859][ C1] __fput+0x24a/0x8a0 [ 649.010907][ C1] task_work_run+0x24f/0x310 [ 649.010940][ C1] ? __pfx_task_work_run+0x10/0x10 [ 649.010969][ C1] ? do_exit+0xa2a/0x27f0 [ 649.011003][ C1] ? kmem_cache_free+0x145/0x350 [ 649.011044][ C1] do_exit+0xa2f/0x27f0 [ 649.011091][ C1] ? __pfx_do_exit+0x10/0x10 [ 649.011128][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 649.011161][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 649.011198][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 649.011230][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 649.011265][ C1] do_group_exit+0x207/0x2c0 [ 649.011301][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 649.011330][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 649.011369][ C1] get_signal+0x16a1/0x1740 [ 649.011415][ C1] ? __pfx_get_signal+0x10/0x10 [ 649.011441][ C1] ? debug_check_no_obj_freed+0x561/0x580 [ 649.011468][ C1] ? mod_objcg_state+0x125/0x930 [ 649.011508][ C1] arch_do_signal_or_restart+0x96/0x860 [ 649.011546][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 649.011576][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 649.011625][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 649.011672][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 649.011713][ C1] do_syscall_64+0x100/0x230 [ 649.011738][ C1] ? clear_bhb_loop+0x35/0x90 [ 649.011773][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.011802][ C1] RIP: 0033:0x7f5a68f7490a [ 649.011824][ C1] RSP: 002b:00007ffefd850fc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 649.011852][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f5a68f7490a [ 649.011870][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 649.011887][ C1] RBP: 00007ffefd85103c R08: 00007ffefd85091c R09: 00007ffefd850d27 [ 649.011908][ C1] R10: 00007ffefd8509a0 R11: 0000000000000293 R12: 000000000000000a [ 649.011926][ C1] R13: 000000000006830d R14: 00000000000674d7 R15: 000000000000000a [ 649.011962][ C1] [ 649.011974][ C1] DEBUG: waiting rtnl_mutex for 15327 jiffies. [ 649.011989][ C1] task:syz.0.853 state:D stack:25208 pid:9013 tgid:9011 ppid:6436 flags:0x00004006 [ 649.012034][ C1] Call Trace: [ 649.012045][ C1] [ 649.012061][ C1] __schedule+0x1800/0x4a60 [ 649.012117][ C1] ? __pfx___schedule+0x10/0x10 [ 649.012152][ C1] ? __pfx_lock_release+0x10/0x10 [ 649.012227][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 649.012279][ C1] ? schedule+0x90/0x320 [ 649.012308][ C1] schedule+0x14b/0x320 [ 649.012341][ C1] schedule_preempt_disabled+0x13/0x30 [ 649.012372][ C1] __mutex_lock+0x6a4/0xd70 [ 649.012410][ C1] ? __mutex_lock+0x527/0xd70 [ 649.012446][ C1] ? tun_chr_close+0x3e/0x1b0 [ 649.012473][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 649.012521][ C1] ? get_rtnl_holder+0x144/0x190 [ 649.012553][ C1] tun_chr_close+0x3e/0x1b0 [ 649.012575][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 649.012599][ C1] __fput+0x24a/0x8a0 [ 649.012653][ C1] task_work_run+0x24f/0x310 [ 649.012686][ C1] ? __pfx_task_work_run+0x10/0x10 [ 649.012714][ C1] ? do_exit+0xa2a/0x27f0 [ 649.012747][ C1] ? kmem_cache_free+0x145/0x350 [ 649.012789][ C1] do_exit+0xa2f/0x27f0 [ 649.012835][ C1] ? __pfx_do_exit+0x10/0x10 [ 649.012871][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 649.012905][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 649.012941][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 649.012973][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 649.013009][ C1] do_group_exit+0x207/0x2c0 [ 649.013044][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 649.013073][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 649.013111][ C1] get_signal+0x16a1/0x1740 [ 649.013157][ C1] ? __pfx_get_signal+0x10/0x10 [ 649.013197][ C1] arch_do_signal_or_restart+0x96/0x860 [ 649.013233][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 649.013264][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 649.013313][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 649.013354][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 649.013394][ C1] do_syscall_64+0x100/0x230 [ 649.013420][ C1] ? clear_bhb_loop+0x35/0x90 [ 649.013454][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.013483][ C1] RIP: 0033:0x7f0da8b75bd9 [ 649.013504][ C1] RSP: 002b:00007f0da9931048 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 649.013533][ C1] RAX: 0000000000000000 RBX: 00007f0da8d03f60 RCX: 00007f0da8b75bd9 [ 649.013552][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 649.013569][ C1] RBP: 00007f0da8be4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 649.013586][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 649.013603][ C1] R13: 000000000000000b R14: 00007f0da8d03f60 R15: 00007fff0acc7a58 [ 649.013647][ C1] [ 649.013659][ C1] DEBUG: waiting rtnl_mutex for 9890 jiffies. [ 649.013674][ C1] task:kworker/0:10 state:D stack:27040 pid:9041 tgid:9041 ppid:2 flags:0x00004000 [ 649.013719][ C1] Workqueue: events switchdev_deferred_process_work [ 649.013751][ C1] Call Trace: [ 649.013761][ C1] [ 649.013778][ C1] __schedule+0x1800/0x4a60 [ 649.013833][ C1] ? __pfx___schedule+0x10/0x10 [ 649.013865][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 649.013898][ C1] ? __pfx_lock_release+0x10/0x10 [ 649.013932][ C1] ? kick_pool+0x45c/0x620 [ 649.013971][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 649.014000][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 649.014036][ C1] ? schedule+0x90/0x320 [ 649.014065][ C1] schedule+0x14b/0x320 [ 649.014097][ C1] schedule_preempt_disabled+0x13/0x30 [ 649.014128][ C1] __mutex_lock+0x6a4/0xd70 [ 649.014166][ C1] ? __mutex_lock+0x527/0xd70 [ 649.014202][ C1] ? switchdev_deferred_process_work+0xe/0x20 [ 649.014232][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 649.014277][ C1] ? get_rtnl_holder+0x144/0x190 [ 649.014306][ C1] ? process_scheduled_works+0x945/0x1830 [ 649.014336][ C1] switchdev_deferred_process_work+0xe/0x20 [ 649.014364][ C1] process_scheduled_works+0xa2c/0x1830 [ 649.014427][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 649.014469][ C1] ? assign_work+0x364/0x3d0 [ 649.014506][ C1] worker_thread+0x86d/0xd40 [ 649.014548][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 649.014583][ C1] ? __kthread_parkme+0x169/0x1d0 [ 649.014620][ C1] ? __pfx_worker_thread+0x10/0x10 [ 649.014659][ C1] kthread+0x2f0/0x390 [ 649.014695][ C1] ? __pfx_worker_thread+0x10/0x10 [ 649.014726][ C1] ? __pfx_kthread+0x10/0x10 [ 649.014762][ C1] ret_from_fork+0x4b/0x80 [ 649.014796][ C1] ? __pfx_kthread+0x10/0x10 [ 649.014831][ C1] ret_from_fork_asm+0x1a/0x30 [ 649.014883][ C1] [ 649.014895][ C1] DEBUG: waiting rtnl_mutex for 6017 jiffies. [ 649.014910][ C1] task:syz-executor state:D stack:24992 pid:9060 tgid:9060 ppid:1 flags:0x00004006 [ 649.014954][ C1] Call Trace: [ 649.014965][ C1] [ 649.014981][ C1] __schedule+0x1800/0x4a60 [ 649.015037][ C1] ? __pfx___schedule+0x10/0x10 [ 649.015072][ C1] ? __pfx_lock_release+0x10/0x10 [ 649.015106][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 649.015156][ C1] ? schedule+0x90/0x320 [ 649.015185][ C1] schedule+0x14b/0x320 [ 649.015218][ C1] schedule_preempt_disabled+0x13/0x30 [ 649.015249][ C1] __mutex_lock+0x6a4/0xd70 [ 649.015288][ C1] ? __mutex_lock+0x527/0xd70 [ 649.015324][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 649.015363][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 649.015410][ C1] ? get_rtnl_holder+0x144/0x190 [ 649.015440][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 649.015483][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 649.015524][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.015559][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 649.015604][ C1] ? __pfx_validate_chain+0x10/0x10 [ 649.015648][ C1] ? __pfx_validate_chain+0x10/0x10 [ 649.015687][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 649.015725][ C1] ? mark_lock+0x9a/0x360 [ 649.015758][ C1] ? __pfx_validate_chain+0x10/0x10 [ 649.015799][ C1] ? __lock_acquire+0x1359/0x2000 [ 649.015849][ C1] ? mark_lock+0x9a/0x360 [ 649.015889][ C1] ? __lock_acquire+0x1359/0x2000 [ 649.015946][ C1] netlink_rcv_skb+0x1e3/0x430 [ 649.015986][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.016027][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 649.016092][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 649.016121][ C1] netlink_unicast+0x7f0/0x990 [ 649.016167][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 649.016200][ C1] ? __virt_addr_valid+0x183/0x530 [ 649.016241][ C1] ? __check_object_size+0x49c/0x900 [ 649.016273][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 649.016309][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 649.016350][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.016380][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 649.016431][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 649.016466][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 649.016506][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.016530][ C1] __sock_sendmsg+0x221/0x270 [ 649.016572][ C1] __sys_sendto+0x3a4/0x4f0 [ 649.016608][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 649.016672][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 649.016709][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 649.016744][ C1] ? exc_page_fault+0x590/0x8c0 [ 649.016782][ C1] __x64_sys_sendto+0xde/0x100 [ 649.016816][ C1] do_syscall_64+0xf3/0x230 [ 649.016841][ C1] ? clear_bhb_loop+0x35/0x90 [ 649.016875][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.016905][ C1] RIP: 0033:0x7fbd1497796c [ 649.016927][ C1] RSP: 002b:00007ffd0673ec50 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 649.016956][ C1] RAX: ffffffffffffffda RBX: 00007fbd15634620 RCX: 00007fbd1497796c [ 649.016977][ C1] RDX: 0000000000000028 RSI: 00007fbd15634670 RDI: 0000000000000003 [ 649.016995][ C1] RBP: 0000000000000000 R08: 00007ffd0673eca4 R09: 000000000000000c [ 649.017014][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 649.017031][ C1] R13: 0000000000000000 R14: 00007fbd15634670 R15: 0000000000000000 [ 649.017068][ C1] [ 649.017082][ C1] [ 649.017082][ C1] Showing all locks held in the system: [ 649.017096][ C1] 2 locks held by kworker/0:0/8: [ 649.017114][ C1] 5 locks held by kworker/0:1/9: [ 649.017131][ C1] 2 locks held by kworker/u8:1/12: [ 649.017155][ C1] 5 locks held by kworker/u8:4/62: [ 649.017196][ C1] 4 locks held by kworker/u8:6/2424: [ 649.017212][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 649.017290][ C1] #1: ffffc90008e17d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 649.017364][ C1] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 649.017434][ C1] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 649.017503][ C1] 3 locks held by kworker/u8:9/2473: [ 649.017519][ C1] #0: ffff88802a40b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 649.017593][ C1] #1: ffffc90009217d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 649.017681][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 649.017760][ C1] 2 locks held by jbd2/sda1-8/4512: [ 649.017778][ C1] 1 lock held by syslogd/4531: [ 649.017795][ C1] 4 locks held by udevd/4549: [ 649.017812][ C1] 2 locks held by getty/4849: [ 649.017827][ C1] #0: ffff88802addf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 649.017907][ C1] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 649.017978][ C1] 2 locks held by kworker/0:3/4872: [ 649.017996][ C1] 1 lock held by syz-executor/5097: [ 649.018012][ C1] 3 locks held by kworker/u9:2/5101: [ 649.018028][ C1] #0: ffff88802f261948 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 649.018109][ C1] #1: ffffc90003657d00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 649.018183][ C1] #2: ffff88802240cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1bf/0x6b0 [ 649.018258][ C1] 3 locks held by kworker/u9:5/5109: [ 649.018276][ C1] 2 locks held by kworker/1:4/5166: [ 649.018293][ C1] 4 locks held by kworker/1:8/5204: [ 649.018308][ C1] #0: ffff88805d801d48 ((wq_completion)wg-crypt-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 649.018392][ C1] #1: ffffc90003fb7d00 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 649.018467][ C1] #2: ffffc90000a18ca0 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 649.018534][ C1] #3: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 649.018615][ C1] 1 lock held by syz-executor/7381: [ 649.018654][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 649.018724][ C1] 3 locks held by kworker/1:6/9009: [ 649.018742][ C1] 1 lock held by syz.0.853/9013: [ 649.018757][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 649.018825][ C1] 3 locks held by kworker/0:9/9025: [ 649.018841][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 649.018914][ C1] #1: ffffc90004427d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 649.018988][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 649.019056][ C1] 3 locks held by kworker/0:10/9041: [ 649.019071][ C1] #0: ffff888015080948 ( [ 649.196685][ T5109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 649.200227][ C1] (wq_completion)events [ 649.221590][ T5109] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 649.226432][ C1] ){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 649.226485][ C1] #1: ffffc90004507d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 649.226556][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 649.226635][ C1] 1 lock held by syz-executor/9060: [ 649.226653][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 649.226733][ C1] 1 lock held by syz-executor/9067: [ 649.226749][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 649.226824][ C1] 4 locks held by syz-executor/9072: [ 649.226840][ C1] 2 locks held by syz-executor/9074: [ 649.226855][ C1] 2 locks held by dhcpcd/9079: [ 649.226870][ C1] #0: ffff888023df2258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 649.226947][ C1] #1: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 649.227030][ C1] 1 lock held by dhcpcd/9080: [ 649.227045][ C1] #0: ffff88802beee258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 649.227121][ C1] 1 lock held by dhcpcd/9082: [ 649.227137][ C1] #0: ffff88802012a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 649.227213][ C1] 1 lock held by dhcpcd/9083: [ 649.227228][ C1] #0: ffff88806db02258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 649.227305][ C1] 1 lock held by dhcpcd/9085: [ 649.227321][ C1] #0: ffff88807a4fa258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 649.227397][ C1] 2 locks held by syz-executor/9086: [ 649.227415][ C1] 2 locks held by dhcpcd/9088: [ 649.227431][ C1] [ 649.227440][ C1] ============================================= [ 649.227440][ C1] [ 649.492450][ C1] net_ratelimit: 10765 callbacks suppressed [ 649.492474][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.494091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.500078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.504820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.509657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.515023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.521226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.525754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.530389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.535050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.282239][ C1] DEBUG: waiting rtnl_mutex for 15030 jiffies. [ 651.410860][ T5101] Bluetooth: hci1: Opcode 0x0c25 failed: -110 [ 651.414998][ C1] task:kworker/u8:9 state:D stack:18800 pid:2473 tgid:2473 ppid:2 flags:0x00004000 [ 651.415049][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 651.415088][ C1] Call Trace: [ 651.415099][ C1] [ 651.415116][ C1] __schedule+0x1800/0x4a60 [ 651.415174][ C1] ? __pfx___schedule+0x10/0x10 [ 651.415209][ C1] ? __pfx_lock_release+0x10/0x10 [ 651.415244][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 651.415284][ C1] ? kthread_data+0x52/0xd0 [ 651.415315][ C1] ? schedule+0x90/0x320 [ 651.415344][ C1] ? wq_worker_sleeping+0x66/0x240 [ 651.415379][ C1] ? schedule+0x90/0x320 [ 651.415416][ C1] schedule+0x14b/0x320 [ 651.415450][ C1] schedule_preempt_disabled+0x13/0x30 [ 651.415480][ C1] __mutex_lock+0x6a4/0xd70 [ 651.415512][ C1] ? mark_lock+0x9a/0x360 [ 651.415550][ C1] ? __mutex_lock+0x527/0xd70 [ 651.415586][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 651.415620][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 651.415666][ C1] ? get_rtnl_holder+0x144/0x190 [ 651.415698][ C1] addrconf_dad_work+0xd0/0x16f0 [ 651.415742][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 651.415776][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 651.415824][ C1] ? process_scheduled_works+0x945/0x1830 [ 651.415855][ C1] process_scheduled_works+0xa2c/0x1830 [ 651.415918][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 651.415961][ C1] ? assign_work+0x364/0x3d0 [ 651.415997][ C1] worker_thread+0x86d/0xd40 [ 651.416047][ C1] ? __kthread_parkme+0x169/0x1d0 [ 651.416084][ C1] ? __pfx_worker_thread+0x10/0x10 [ 651.416116][ C1] kthread+0x2f0/0x390 [ 651.416151][ C1] ? __pfx_worker_thread+0x10/0x10 [ 651.416202][ C1] ? __pfx_kthread+0x10/0x10 [ 651.416239][ C1] ret_from_fork+0x4b/0x80 [ 651.416274][ C1] ? __pfx_kthread+0x10/0x10 [ 651.416309][ C1] ret_from_fork_asm+0x1a/0x30 [ 651.416362][ C1] [ 651.416374][ C1] DEBUG: waiting rtnl_mutex for 14918 jiffies. [ 651.416390][ C1] task:syz-executor state:D stack:20288 pid:7381 tgid:7381 ppid:1 flags:0x00004006 [ 651.416440][ C1] Call Trace: [ 651.416451][ C1] [ 651.416467][ C1] __schedule+0x1800/0x4a60 [ 651.416522][ C1] ? __pfx___schedule+0x10/0x10 [ 651.416557][ C1] ? __pfx_lock_release+0x10/0x10 [ 651.416591][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 651.416641][ C1] ? schedule+0x90/0x320 [ 651.416671][ C1] schedule+0x14b/0x320 [ 651.416703][ C1] schedule_preempt_disabled+0x13/0x30 [ 651.416734][ C1] __mutex_lock+0x6a4/0xd70 [ 651.416772][ C1] ? __mutex_lock+0x527/0xd70 [ 651.416808][ C1] ? tun_chr_close+0x3e/0x1b0 [ 651.416836][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 651.416883][ C1] ? get_rtnl_holder+0x144/0x190 [ 651.416915][ C1] tun_chr_close+0x3e/0x1b0 [ 651.416939][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 651.416965][ C1] __fput+0x24a/0x8a0 [ 651.417013][ C1] task_work_run+0x24f/0x310 [ 651.417046][ C1] ? __pfx_task_work_run+0x10/0x10 [ 651.417075][ C1] ? do_exit+0xa2a/0x27f0 [ 651.417108][ C1] ? kmem_cache_free+0x145/0x350 [ 651.417151][ C1] do_exit+0xa2f/0x27f0 [ 651.417197][ C1] ? __pfx_do_exit+0x10/0x10 [ 651.417234][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 651.417268][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.417304][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 651.417337][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 651.417372][ C1] do_group_exit+0x207/0x2c0 [ 651.417414][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 651.417443][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 651.417482][ C1] get_signal+0x16a1/0x1740 [ 651.417524][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 651.417562][ C1] ? kfree+0x4e/0x360 [ 651.417596][ C1] ? __pfx_get_signal+0x10/0x10 [ 651.417623][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 651.417662][ C1] ? do_sock_setsockopt+0x3e2/0x720 [ 651.417700][ C1] arch_do_signal_or_restart+0x96/0x860 [ 651.417737][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 651.417769][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.417817][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 651.417857][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 651.417899][ C1] do_syscall_64+0x100/0x230 [ 651.417924][ C1] ? clear_bhb_loop+0x35/0x90 [ 651.417959][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.417989][ C1] RIP: 0033:0x7f79b31779ca [ 651.418011][ C1] RSP: 002b:00007ffde23c06f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 651.418040][ C1] RAX: 0000000000000000 RBX: 00007ffde23c0780 RCX: 00007f79b31779ca [ 651.418060][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 651.418078][ C1] RBP: 0000000000000003 R08: 00000000000003b8 R09: 0079746972756365 [ 651.418097][ C1] R10: 00007f79b32cfce0 R11: 0000000000000202 R12: 00007f79b32cfc80 [ 651.418116][ C1] R13: 00007ffde23c071c R14: 0000000000000000 R15: 00007f79b32d1e40 [ 651.418154][ C1] [ 651.418165][ C1] DEBUG: waiting rtnl_mutex for 14545 jiffies. [ 651.418180][ C1] task:kworker/u8:6 state:D stack:21008 pid:2424 tgid:2424 ppid:2 flags:0x00004000 [ 651.418224][ C1] Workqueue: netns cleanup_net [ 651.418253][ C1] Call Trace: [ 651.418264][ C1] [ 651.418281][ C1] __schedule+0x1800/0x4a60 [ 651.418337][ C1] ? __pfx___schedule+0x10/0x10 [ 651.418372][ C1] ? __pfx_lock_release+0x10/0x10 [ 651.418412][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 651.418452][ C1] ? kthread_data+0x52/0xd0 [ 651.418483][ C1] ? schedule+0x90/0x320 [ 651.418512][ C1] ? wq_worker_sleeping+0x66/0x240 [ 651.418548][ C1] ? schedule+0x90/0x320 [ 651.418576][ C1] schedule+0x14b/0x320 [ 651.418609][ C1] schedule_preempt_disabled+0x13/0x30 [ 651.418640][ C1] __mutex_lock+0x6a4/0xd70 [ 651.418679][ C1] ? __mutex_lock+0x527/0xd70 [ 651.418715][ C1] ? wg_netns_pre_exit+0x1f/0x1e0 [ 651.418743][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 651.418782][ C1] ? __local_bh_enable_ip+0x179/0x200 [ 651.418817][ C1] ? get_rtnl_holder+0x144/0x190 [ 651.418848][ C1] wg_netns_pre_exit+0x1f/0x1e0 [ 651.418880][ C1] cleanup_net+0x615/0xcc0 [ 651.418915][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 651.418956][ C1] ? process_scheduled_works+0x945/0x1830 [ 651.418987][ C1] process_scheduled_works+0xa2c/0x1830 [ 651.419050][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 651.419092][ C1] ? assign_work+0x364/0x3d0 [ 651.419130][ C1] worker_thread+0x86d/0xd40 [ 651.419179][ C1] ? __kthread_parkme+0x169/0x1d0 [ 651.419217][ C1] ? __pfx_worker_thread+0x10/0x10 [ 651.419249][ C1] kthread+0x2f0/0x390 [ 651.419284][ C1] ? __pfx_worker_thread+0x10/0x10 [ 651.419314][ C1] ? __pfx_kthread+0x10/0x10 [ 651.419351][ C1] ret_from_fork+0x4b/0x80 [ 651.419384][ C1] ? __pfx_kthread+0x10/0x10 [ 651.419427][ C1] ret_from_fork_asm+0x1a/0x30 [ 651.419480][ C1] [ 651.419491][ C1] DEBUG: waiting rtnl_mutex for 12683 jiffies. [ 651.419506][ C1] task:kworker/0:9 state:D stack:26008 pid:9025 tgid:9025 ppid:2 flags:0x00004000 [ 651.419552][ C1] Workqueue: events linkwatch_event [ 651.419580][ C1] Call Trace: [ 651.419591][ C1] [ 651.419608][ C1] __schedule+0x1800/0x4a60 [ 651.419663][ C1] ? __pfx___schedule+0x10/0x10 [ 651.419696][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.419730][ C1] ? __pfx_lock_release+0x10/0x10 [ 651.419764][ C1] ? kick_pool+0x45c/0x620 [ 651.419802][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 651.419831][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 651.419868][ C1] ? schedule+0x90/0x320 [ 651.419897][ C1] schedule+0x14b/0x320 [ 651.419930][ C1] schedule_preempt_disabled+0x13/0x30 [ 651.419960][ C1] __mutex_lock+0x6a4/0xd70 [ 651.419998][ C1] ? __mutex_lock+0x527/0xd70 [ 651.420035][ C1] ? linkwatch_event+0xe/0x60 [ 651.420063][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 651.420108][ C1] ? get_rtnl_holder+0x144/0x190 [ 651.420137][ C1] ? process_scheduled_works+0x945/0x1830 [ 651.420168][ C1] linkwatch_event+0xe/0x60 [ 651.420193][ C1] process_scheduled_works+0xa2c/0x1830 [ 651.420256][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 651.420299][ C1] ? assign_work+0x364/0x3d0 [ 651.420336][ C1] worker_thread+0x86d/0xd40 [ 651.420378][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 651.420419][ C1] ? __kthread_parkme+0x169/0x1d0 [ 651.420456][ C1] ? __pfx_worker_thread+0x10/0x10 [ 651.420488][ C1] kthread+0x2f0/0x390 [ 651.420524][ C1] ? __pfx_worker_thread+0x10/0x10 [ 651.420555][ C1] ? __pfx_kthread+0x10/0x10 [ 651.420592][ C1] ret_from_fork+0x4b/0x80 [ 651.420625][ C1] ? __pfx_kthread+0x10/0x10 [ 651.420661][ C1] ret_from_fork_asm+0x1a/0x30 [ 651.420713][ C1] [ 651.420725][ C1] DEBUG: waiting rtnl_mutex for 4903 jiffies. [ 651.420740][ C1] task:syz-executor state:D stack:24992 pid:9067 tgid:9067 ppid:1 flags:0x00000004 [ 651.420783][ C1] Call Trace: [ 651.420794][ C1] [ 651.420811][ C1] __schedule+0x1800/0x4a60 [ 651.420866][ C1] ? __pfx___schedule+0x10/0x10 [ 651.420901][ C1] ? __pfx_lock_release+0x10/0x10 [ 651.420935][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 651.420986][ C1] ? schedule+0x90/0x320 [ 651.421015][ C1] schedule+0x14b/0x320 [ 651.421048][ C1] schedule_preempt_disabled+0x13/0x30 [ 651.421078][ C1] __mutex_lock+0x6a4/0xd70 [ 651.421116][ C1] ? __mutex_lock+0x527/0xd70 [ 651.421152][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 651.421191][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 651.421239][ C1] ? get_rtnl_holder+0x144/0x190 [ 651.421269][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 651.421311][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 651.421352][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 651.421387][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 651.421439][ C1] ? __pfx_validate_chain+0x10/0x10 [ 651.421478][ C1] ? __pfx_validate_chain+0x10/0x10 [ 651.421517][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 651.421555][ C1] ? mark_lock+0x9a/0x360 [ 651.421587][ C1] ? __pfx_validate_chain+0x10/0x10 [ 651.421628][ C1] ? __lock_acquire+0x1359/0x2000 [ 651.421678][ C1] ? mark_lock+0x9a/0x360 [ 651.421718][ C1] ? __lock_acquire+0x1359/0x2000 [ 651.421772][ C1] netlink_rcv_skb+0x1e3/0x430 [ 651.421814][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 651.421855][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 651.421919][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 651.421949][ C1] netlink_unicast+0x7f0/0x990 [ 651.421995][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 651.422028][ C1] ? __virt_addr_valid+0x183/0x530 [ 651.422068][ C1] ? __check_object_size+0x49c/0x900 [ 651.422100][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 651.422138][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 651.422221][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.422253][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 651.422285][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 651.422319][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 651.422358][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.422382][ C1] __sock_sendmsg+0x221/0x270 [ 651.422447][ C1] __sys_sendto+0x3a4/0x4f0 [ 651.422483][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 651.422541][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.422578][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 651.422613][ C1] ? exc_page_fault+0x590/0x8c0 [ 651.422650][ C1] __x64_sys_sendto+0xde/0x100 [ 651.422684][ C1] do_syscall_64+0xf3/0x230 [ 651.422709][ C1] ? clear_bhb_loop+0x35/0x90 [ 651.422744][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.422774][ C1] RIP: 0033:0x7f62b0f7796c [ 651.422796][ C1] RSP: 002b:00007fff6102a540 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 651.422825][ C1] RAX: ffffffffffffffda RBX: 00007f62b1c34620 RCX: 00007f62b0f7796c [ 651.422846][ C1] RDX: 0000000000000028 RSI: 00007f62b1c34670 RDI: 0000000000000003 [ 651.422864][ C1] RBP: 0000000000000000 R08: 00007fff6102a594 R09: 000000000000000c [ 651.422882][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 651.422900][ C1] R13: 0000000000000000 R14: 00007f62b1c34670 R15: 0000000000000000 [ 651.422936][ C1] [ 651.422948][ C1] DEBUG: holding rtnl_mutex for 15597 jiffies. [ 651.422964][ C1] task:syz-executor state:R running task stack:20080 pid:5097 tgid:5097 ppid:1 flags:0x00004006 [ 651.423013][ C1] Call Trace: [ 651.423024][ C1] [ 651.423041][ C1] __schedule+0x1800/0x4a60 [ 651.423097][ C1] ? __pfx___schedule+0x10/0x10 [ 651.423132][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.423172][ C1] ? kasan_save_track+0x51/0x80 [ 651.423204][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 651.423239][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 651.423271][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 651.423304][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 651.423346][ C1] irqentry_exit+0x5e/0x90 [ 651.423380][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 651.423418][ C1] RIP: 0010:lockdep_unregister_key+0x56d/0x610 [ 651.423453][ C1] Code: ff 92 48 c7 c6 10 bc 6f 81 e8 8f 04 0a 00 e8 fa 18 0a 00 e9 e5 fb ff ff e8 c0 62 21 0a 41 f7 c7 00 02 00 00 74 d0 fb 45 84 f6 <75> cf eb e0 90 0f 0b 90 45 31 f6 e9 62 ff ff ff 90 0f 0b 90 e9 a1 [ 651.423476][ C1] RSP: 0018:ffffc90003617400 EFLAGS: 00000246 [ 651.423500][ C1] RAX: dffffc0000000000 RBX: 1ffff920006c2e88 RCX: ffffffff947f4803 [ 651.423521][ C1] RDX: 0000000000000001 RSI: ffffffff8bcad5e0 RDI: ffffffff8c207f20 [ 651.423541][ C1] RBP: ffffc900036174d8 R08: ffffffff93005df7 R09: 1ffffffff2600bbe [ 651.423562][ C1] R10: dffffc0000000000 R11: fffffbfff2600bbf R12: ffffc90003617440 [ 651.423583][ C1] R13: 1ffff920006c2e84 R14: 0000000000000000 R15: 0000000000000a02 [ 651.423626][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 651.423660][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 651.423702][ C1] ? __qdisc_destroy+0x150/0x410 [ 651.423727][ C1] ? kfree+0x149/0x360 [ 651.423760][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 651.423790][ C1] __qdisc_destroy+0x165/0x410 [ 651.423819][ C1] dev_shutdown+0x357/0x440 [ 651.423852][ C1] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 651.423909][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 651.423949][ C1] ? mark_lock+0x9a/0x360 [ 651.423988][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.424024][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 651.424064][ C1] ? queue_delayed_work_on+0x1eb/0x390 [ 651.424097][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 651.424140][ C1] unregister_netdevice_queue+0x303/0x370 [ 651.424176][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 651.424221][ C1] __tun_detach+0x6b6/0x1600 [ 651.424265][ C1] tun_chr_close+0x108/0x1b0 [ 651.424289][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 651.424315][ C1] __fput+0x24a/0x8a0 [ 651.424363][ C1] task_work_run+0x24f/0x310 [ 651.424403][ C1] ? __pfx_task_work_run+0x10/0x10 [ 651.424431][ C1] ? do_exit+0xa2a/0x27f0 [ 651.424465][ C1] ? kmem_cache_free+0x145/0x350 [ 651.424507][ C1] do_exit+0xa2f/0x27f0 [ 651.424554][ C1] ? __pfx_do_exit+0x10/0x10 [ 651.424590][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 651.424624][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.424661][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 651.424692][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 651.424727][ C1] do_group_exit+0x207/0x2c0 [ 651.424763][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 651.424791][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 651.424830][ C1] get_signal+0x16a1/0x1740 [ 651.424876][ C1] ? __pfx_get_signal+0x10/0x10 [ 651.424902][ C1] ? debug_check_no_obj_freed+0x561/0x580 [ 651.424927][ C1] ? mod_objcg_state+0x125/0x930 [ 651.424969][ C1] arch_do_signal_or_restart+0x96/0x860 [ 651.425006][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 651.425036][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.425084][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 651.425125][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 651.425166][ C1] do_syscall_64+0x100/0x230 [ 651.425191][ C1] ? clear_bhb_loop+0x35/0x90 [ 651.425225][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.425254][ C1] RIP: 0033:0x7f5a68f7490a [ 651.425276][ C1] RSP: 002b:00007ffefd850fc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 651.425303][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f5a68f7490a [ 651.425322][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 651.425339][ C1] RBP: 00007ffefd85103c R08: 00007ffefd85091c R09: 00007ffefd850d27 [ 651.425358][ C1] R10: 00007ffefd8509a0 R11: 0000000000000293 R12: 000000000000000a [ 651.425377][ C1] R13: 000000000006830d R14: 00000000000674d7 R15: 000000000000000a [ 651.425419][ C1] [ 651.425431][ C1] DEBUG: waiting rtnl_mutex for 15569 jiffies. [ 651.425445][ C1] task:syz.0.853 state:D stack:25208 pid:9013 tgid:9011 ppid:6436 flags:0x00004006 [ 651.425489][ C1] Call Trace: [ 651.425500][ C1] [ 651.425517][ C1] __schedule+0x1800/0x4a60 [ 651.425570][ C1] ? __pfx___schedule+0x10/0x10 [ 651.425605][ C1] ? __pfx_lock_release+0x10/0x10 [ 651.425639][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 651.425690][ C1] ? schedule+0x90/0x320 [ 651.425719][ C1] schedule+0x14b/0x320 [ 651.425751][ C1] schedule_preempt_disabled+0x13/0x30 [ 651.425782][ C1] __mutex_lock+0x6a4/0xd70 [ 651.425820][ C1] ? __mutex_lock+0x527/0xd70 [ 651.425857][ C1] ? tun_chr_close+0x3e/0x1b0 [ 651.425884][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 651.425930][ C1] ? get_rtnl_holder+0x144/0x190 [ 651.425961][ C1] tun_chr_close+0x3e/0x1b0 [ 651.425985][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 651.426010][ C1] __fput+0x24a/0x8a0 [ 651.426058][ C1] task_work_run+0x24f/0x310 [ 651.426091][ C1] ? __pfx_task_work_run+0x10/0x10 [ 651.426119][ C1] ? do_exit+0xa2a/0x27f0 [ 651.426153][ C1] ? kmem_cache_free+0x145/0x350 [ 651.426195][ C1] do_exit+0xa2f/0x27f0 [ 651.426241][ C1] ? __pfx_do_exit+0x10/0x10 [ 651.426276][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 651.426311][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.426347][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 651.426379][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 651.426441][ C1] do_group_exit+0x207/0x2c0 [ 651.426477][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 651.426506][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 651.426544][ C1] get_signal+0x16a1/0x1740 [ 651.426590][ C1] ? __pfx_get_signal+0x10/0x10 [ 651.426630][ C1] arch_do_signal_or_restart+0x96/0x860 [ 651.426667][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 651.426698][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.426747][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 651.426787][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 651.426829][ C1] do_syscall_64+0x100/0x230 [ 651.426854][ C1] ? clear_bhb_loop+0x35/0x90 [ 651.426888][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.426917][ C1] RIP: 0033:0x7f0da8b75bd9 [ 651.426938][ C1] RSP: 002b:00007f0da9931048 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 651.426966][ C1] RAX: 0000000000000000 RBX: 00007f0da8d03f60 RCX: 00007f0da8b75bd9 [ 651.426986][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 651.427003][ C1] RBP: 00007f0da8be4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 651.427020][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 651.427038][ C1] R13: 000000000000000b R14: 00007f0da8d03f60 R15: 00007fff0acc7a58 [ 651.427076][ C1] [ 651.427087][ C1] DEBUG: waiting rtnl_mutex for 10131 jiffies. [ 651.427102][ C1] task:kworker/0:10 state:D stack:27040 pid:9041 tgid:9041 ppid:2 flags:0x00004000 [ 651.427148][ C1] Workqueue: events switchdev_deferred_process_work [ 651.427179][ C1] Call Trace: [ 651.427190][ C1] [ 651.427207][ C1] __schedule+0x1800/0x4a60 [ 651.427262][ C1] ? __pfx___schedule+0x10/0x10 [ 651.427294][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.427328][ C1] ? __pfx_lock_release+0x10/0x10 [ 651.427362][ C1] ? kick_pool+0x45c/0x620 [ 651.427407][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 651.427436][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 651.427472][ C1] ? schedule+0x90/0x320 [ 651.427501][ C1] schedule+0x14b/0x320 [ 651.427534][ C1] schedule_preempt_disabled+0x13/0x30 [ 651.427564][ C1] __mutex_lock+0x6a4/0xd70 [ 651.427602][ C1] ? __mutex_lock+0x527/0xd70 [ 651.427639][ C1] ? switchdev_deferred_process_work+0xe/0x20 [ 651.427669][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 651.427715][ C1] ? get_rtnl_holder+0x144/0x190 [ 651.427744][ C1] ? process_scheduled_works+0x945/0x1830 [ 651.427774][ C1] switchdev_deferred_process_work+0xe/0x20 [ 651.427802][ C1] process_scheduled_works+0xa2c/0x1830 [ 651.427865][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 651.427908][ C1] ? assign_work+0x364/0x3d0 [ 651.427945][ C1] worker_thread+0x86d/0xd40 [ 651.427988][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 651.428023][ C1] ? __kthread_parkme+0x169/0x1d0 [ 651.428061][ C1] ? __pfx_worker_thread+0x10/0x10 [ 651.428093][ C1] kthread+0x2f0/0x390 [ 651.428127][ C1] ? __pfx_worker_thread+0x10/0x10 [ 651.428159][ C1] ? __pfx_kthread+0x10/0x10 [ 651.428195][ C1] ret_from_fork+0x4b/0x80 [ 651.428228][ C1] ? __pfx_kthread+0x10/0x10 [ 651.428264][ C1] ret_from_fork_asm+0x1a/0x30 [ 651.428317][ C1] [ 651.428328][ C1] DEBUG: waiting rtnl_mutex for 6258 jiffies. [ 651.428343][ C1] task:syz-executor state:D stack:24992 pid:9060 tgid:9060 ppid:1 flags:0x00004006 [ 651.428387][ C1] Call Trace: [ 651.428405][ C1] [ 651.428422][ C1] __schedule+0x1800/0x4a60 [ 651.428477][ C1] ? __pfx___schedule+0x10/0x10 [ 651.428512][ C1] ? __pfx_lock_release+0x10/0x10 [ 651.428546][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 651.428597][ C1] ? schedule+0x90/0x320 [ 651.428626][ C1] schedule+0x14b/0x320 [ 651.428660][ C1] schedule_preempt_disabled+0x13/0x30 [ 651.428690][ C1] __mutex_lock+0x6a4/0xd70 [ 651.428729][ C1] ? __mutex_lock+0x527/0xd70 [ 651.428765][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 651.428804][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 651.428851][ C1] ? get_rtnl_holder+0x144/0x190 [ 651.428881][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 651.428924][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 651.428965][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 651.429001][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 651.429045][ C1] ? __pfx_validate_chain+0x10/0x10 [ 651.429083][ C1] ? __pfx_validate_chain+0x10/0x10 [ 651.429122][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 651.429159][ C1] ? mark_lock+0x9a/0x360 [ 651.429192][ C1] ? __pfx_validate_chain+0x10/0x10 [ 651.429232][ C1] ? __lock_acquire+0x1359/0x2000 [ 651.429282][ C1] ? mark_lock+0x9a/0x360 [ 651.429321][ C1] ? __lock_acquire+0x1359/0x2000 [ 651.429375][ C1] netlink_rcv_skb+0x1e3/0x430 [ 651.429423][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 651.429457][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 651.567966][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 651.568604][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 652.079315][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 652.084909][ C1] netlink_unicast+0x7f0/0x990 [ 652.084967][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 652.085000][ C1] ? __virt_addr_valid+0x183/0x530 [ 652.085041][ C1] ? __check_object_size+0x49c/0x900 [ 652.085073][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 652.085110][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 652.085150][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.085179][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 652.085209][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 652.085243][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 652.085281][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.085304][ C1] __sock_sendmsg+0x221/0x270 [ 652.085347][ C1] __sys_sendto+0x3a4/0x4f0 [ 652.085382][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 652.085441][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.085479][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 652.085513][ C1] ? exc_page_fault+0x590/0x8c0 [ 652.085554][ C1] __x64_sys_sendto+0xde/0x100 [ 652.085587][ C1] do_syscall_64+0xf3/0x230 [ 652.085620][ C1] ? clear_bhb_loop+0x35/0x90 [ 652.085655][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.085685][ C1] RIP: 0033:0x7fbd1497796c [ 652.085708][ C1] RSP: 002b:00007ffd0673ec50 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 652.085739][ C1] RAX: ffffffffffffffda RBX: 00007fbd15634620 RCX: 00007fbd1497796c [ 652.085761][ C1] RDX: 0000000000000028 RSI: 00007fbd15634670 RDI: 0000000000000003 [ 652.085779][ C1] RBP: 0000000000000000 R08: 00007ffd0673eca4 R09: 000000000000000c [ 652.085797][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 652.085815][ C1] R13: 0000000000000000 R14: 00007fbd15634670 R15: 0000000000000000 [ 652.085852][ C1] [ 652.085868][ C1] [ 652.085868][ C1] Showing all locks held in the system: [ 652.085883][ C1] 2 locks held by kworker/u8:1/12: [ 652.085907][ C1] 2 locks held by kworker/1:1/46: [ 652.085950][ C1] 4 locks held by kworker/u8:6/2424: [ 652.085967][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 652.086046][ C1] #1: ffffc90008e17d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 652.086120][ C1] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 652.086190][ C1] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 652.086260][ C1] 3 locks held by kworker/u8:9/2473: [ 652.086276][ C1] #0: ffff88802a40b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 652.086351][ C1] #1: ffffc90009217d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 652.086427][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 652.086506][ C1] 1 lock held by udevd/4549: [ 652.086524][ C1] 2 locks held by getty/4849: [ 652.086539][ C1] #0: ffff88802addf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 652.086625][ C1] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 652.086700][ C1] 2 locks held by syz-executor/5097: [ 652.086716][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 652.086784][ C1] #1: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 652.086867][ C1] 4 locks held by kworker/u9:2/5101: [ 652.086884][ C1] 2 locks held by kworker/0:4/5105: [ 652.086902][ C1] 2 locks held by kworker/1:3/5150: [ 652.086918][ C1] 2 locks held by kworker/1:4/5166: [ 652.086935][ C1] 2 locks held by kworker/1:8/5204: [ 652.086954][ C1] 1 lock held by syz-executor/7381: [ 652.086970][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 652.087038][ C1] 3 locks held by kworker/1:6/9009: [ 652.087055][ C1] 1 lock held by syz.0.853/9013: [ 652.087071][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 652.087138][ C1] 3 locks held by kworker/0:9/9025: [ 652.087155][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 652.087229][ C1] #1: ffffc90004427d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 652.087303][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 652.087372][ C1] 3 locks held by kworker/0:10/9041: [ 652.087388][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 652.087462][ C1] #1: ffffc90004507d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 652.087535][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 652.087614][ C1] 2 locks held by kworker/1:9/9057: [ 652.087631][ C1] 1 lock held by syz-executor/9060: [ 652.087647][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 652.087726][ C1] 1 lock held by syz-executor/9067: [ 652.087743][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 652.087823][ C1] 2 locks held by dhcpcd/9079: [ 652.087839][ C1] #0: ffff888023df2258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 652.087915][ C1] #1: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 652.087997][ C1] 1 lock held by dhcpcd/9080: [ 652.088012][ C1] #0: ffff88802beee258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 652.088089][ C1] 1 lock held by dhcpcd/9082: [ 652.088104][ C1] #0: ffff88802012a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 652.088181][ C1] 1 lock held by dhcpcd/9083: [ 652.088196][ C1] #0: ffff88806db02258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 652.088272][ C1] 1 lock held by syz-executor/9084: [ 652.088288][ C1] #0: ffff88802240cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_open+0x1f4/0x300 [ 652.088367][ C1] 1 lock held by dhcpcd/9085: [ 652.088383][ C1] #0: ffff88807a4fa258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 652.088460][ C1] 4 locks held by syz-executor/9086: [ 652.088475][ C1] #0: ffff88802f263918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0 [ 652.088546][ C1] #1: ffffffff8f8dae88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 652.088621][ C1] #2: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 652.088688][ C1] #3: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 652.088766][ C1] 2 locks held by dhcpcd/9088: [ 652.088782][ C1] 2 locks held by syz-executor/9089: [ 652.088799][ C1] [ 652.088808][ C1] ============================================= [ 652.088808][ C1] [ 652.104886][ T30] INFO: task kworker/u8:9:2473 blocked for more than 146 seconds. [ 652.104916][ T30] Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 652.104933][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 652.104947][ T30] task:kworker/u8:9 state:D stack:18800 pid:2473 tgid:2473 ppid:2 flags:0x00004000 [ 652.104994][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 652.105032][ T30] Call Trace: [ 652.105043][ T30] [ 652.105061][ T30] __schedule+0x1800/0x4a60 [ 652.105120][ T30] ? __pfx___schedule+0x10/0x10 [ 652.105154][ T30] ? __pfx_lock_release+0x10/0x10 [ 652.105189][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 652.105229][ T30] ? kthread_data+0x52/0xd0 [ 652.105259][ T30] ? schedule+0x90/0x320 [ 652.105288][ T30] ? wq_worker_sleeping+0x66/0x240 [ 652.105323][ T30] ? schedule+0x90/0x320 [ 652.105352][ T30] schedule+0x14b/0x320 [ 652.105384][ T30] schedule_preempt_disabled+0x13/0x30 [ 652.105415][ T30] __mutex_lock+0x6a4/0xd70 [ 652.105446][ T30] ? mark_lock+0x9a/0x360 [ 652.105484][ T30] ? __mutex_lock+0x527/0xd70 [ 652.105519][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 652.105553][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 652.105606][ T30] ? get_rtnl_holder+0x144/0x190 [ 652.105638][ T30] addrconf_dad_work+0xd0/0x16f0 [ 652.105682][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 652.105716][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 652.105763][ T30] ? process_scheduled_works+0x945/0x1830 [ 652.105794][ T30] process_scheduled_works+0xa2c/0x1830 [ 652.105857][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 652.105900][ T30] ? assign_work+0x364/0x3d0 [ 652.105936][ T30] worker_thread+0x86d/0xd40 [ 652.105986][ T30] ? __kthread_parkme+0x169/0x1d0 [ 652.106023][ T30] ? __pfx_worker_thread+0x10/0x10 [ 652.106054][ T30] kthread+0x2f0/0x390 [ 652.106090][ T30] ? __pfx_worker_thread+0x10/0x10 [ 652.106120][ T30] ? __pfx_kthread+0x10/0x10 [ 652.106157][ T30] ret_from_fork+0x4b/0x80 [ 652.106190][ T30] ? __pfx_kthread+0x10/0x10 [ 652.106225][ T30] ret_from_fork_asm+0x1a/0x30 [ 652.106278][ T30] [ 652.106315][ T30] INFO: task syz-executor:7381 blocked for more than 146 seconds. [ 652.106335][ T30] Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 652.106351][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 652.106364][ T30] task:syz-executor state:D stack:20288 pid:7381 tgid:7381 ppid:1 flags:0x00004006 [ 652.106407][ T30] Call Trace: [ 652.106418][ T30] [ 652.106435][ T30] __schedule+0x1800/0x4a60 [ 652.106491][ T30] ? __pfx___schedule+0x10/0x10 [ 652.106526][ T30] ? __pfx_lock_release+0x10/0x10 [ 652.106560][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 652.106616][ T30] ? schedule+0x90/0x320 [ 652.106646][ T30] schedule+0x14b/0x320 [ 652.106679][ T30] schedule_preempt_disabled+0x13/0x30 [ 652.106709][ T30] __mutex_lock+0x6a4/0xd70 [ 652.106747][ T30] ? __mutex_lock+0x527/0xd70 [ 652.106783][ T30] ? tun_chr_close+0x3e/0x1b0 [ 652.106812][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 652.106858][ T30] ? get_rtnl_holder+0x144/0x190 [ 652.106889][ T30] tun_chr_close+0x3e/0x1b0 [ 652.106914][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 652.106940][ T30] __fput+0x24a/0x8a0 [ 652.106989][ T30] task_work_run+0x24f/0x310 [ 652.107021][ T30] ? __pfx_task_work_run+0x10/0x10 [ 652.107049][ T30] ? do_exit+0xa2a/0x27f0 [ 652.107083][ T30] ? kmem_cache_free+0x145/0x350 [ 652.107126][ T30] do_exit+0xa2f/0x27f0 [ 652.107172][ T30] ? __pfx_do_exit+0x10/0x10 [ 652.107208][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 652.107242][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.107279][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 652.107311][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 652.107346][ T30] do_group_exit+0x207/0x2c0 [ 652.107382][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 652.107411][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 652.107450][ T30] get_signal+0x16a1/0x1740 [ 652.107492][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 652.107530][ T30] ? kfree+0x4e/0x360 [ 652.107564][ T30] ? __pfx_get_signal+0x10/0x10 [ 652.107607][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 652.107646][ T30] ? do_sock_setsockopt+0x3e2/0x720 [ 652.107684][ T30] arch_do_signal_or_restart+0x96/0x860 [ 652.107732][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 652.107764][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.107811][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 652.107852][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 652.107894][ T30] do_syscall_64+0x100/0x230 [ 652.107920][ T30] ? clear_bhb_loop+0x35/0x90 [ 652.107954][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.107984][ T30] RIP: 0033:0x7f79b31779ca [ 652.108007][ T30] RSP: 002b:00007ffde23c06f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 652.108036][ T30] RAX: 0000000000000000 RBX: 00007ffde23c0780 RCX: 00007f79b31779ca [ 652.108056][ T30] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 652.108073][ T30] RBP: 0000000000000003 R08: 00000000000003b8 R09: 0079746972756365 [ 652.108091][ T30] R10: 00007f79b32cfce0 R11: 0000000000000202 R12: 00007f79b32cfc80 [ 652.108110][ T30] R13: 00007ffde23c071c R14: 0000000000000000 R15: 00007f79b32d1e40 [ 652.108149][ T30] [ 652.108164][ T30] INFO: task syz.0.853:9013 blocked for more than 146 seconds. [ 652.108182][ T30] Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 652.108198][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 652.108211][ T30] task:syz.0.853 state:D stack:25208 pid:9013 tgid:9011 ppid:6436 flags:0x00004006 [ 652.108256][ T30] Call Trace: [ 652.108267][ T30] [ 652.108283][ T30] __schedule+0x1800/0x4a60 [ 652.108340][ T30] ? __pfx___schedule+0x10/0x10 [ 652.108375][ T30] ? __pfx_lock_release+0x10/0x10 [ 652.108409][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 652.108460][ T30] ? schedule+0x90/0x320 [ 652.108489][ T30] schedule+0x14b/0x320 [ 652.108521][ T30] schedule_preempt_disabled+0x13/0x30 [ 652.108551][ T30] __mutex_lock+0x6a4/0xd70 [ 652.108590][ T30] ? __mutex_lock+0x527/0xd70 [ 652.108632][ T30] ? tun_chr_close+0x3e/0x1b0 [ 652.108659][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 652.108707][ T30] ? get_rtnl_holder+0x144/0x190 [ 652.108748][ T30] tun_chr_close+0x3e/0x1b0 [ 652.108772][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 652.108798][ T30] __fput+0x24a/0x8a0 [ 652.108845][ T30] task_work_run+0x24f/0x310 [ 652.108878][ T30] ? __pfx_task_work_run+0x10/0x10 [ 652.108907][ T30] ? do_exit+0xa2a/0x27f0 [ 652.108940][ T30] ? kmem_cache_free+0x145/0x350 [ 652.108982][ T30] do_exit+0xa2f/0x27f0 [ 652.109028][ T30] ? __pfx_do_exit+0x10/0x10 [ 652.109064][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 652.109098][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.109134][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 652.109166][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 652.109201][ T30] do_group_exit+0x207/0x2c0 [ 652.109236][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 652.109265][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 652.109305][ T30] get_signal+0x16a1/0x1740 [ 652.109350][ T30] ? __pfx_get_signal+0x10/0x10 [ 652.109390][ T30] arch_do_signal_or_restart+0x96/0x860 [ 652.109427][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 652.109459][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.109506][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 652.109547][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 652.109587][ T30] do_syscall_64+0x100/0x230 [ 652.109617][ T30] ? clear_bhb_loop+0x35/0x90 [ 652.109652][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.109681][ T30] RIP: 0033:0x7f0da8b75bd9 [ 652.109702][ T30] RSP: 002b:00007f0da9931048 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 652.109731][ T30] RAX: 0000000000000000 RBX: 00007f0da8d03f60 RCX: 00007f0da8b75bd9 [ 652.109750][ T30] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 652.109768][ T30] RBP: 00007f0da8be4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 652.109786][ T30] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 652.109803][ T30] R13: 000000000000000b R14: 00007f0da8d03f60 R15: 00007fff0acc7a58 [ 652.109841][ T30] [ 652.109862][ T30] [ 652.109862][ T30] Showing all locks held in the system: [ 652.109876][ T30] 2 locks held by kworker/u8:1/12: [ 652.109904][ T30] 1 lock held by khungtaskd/30: [ 652.109919][ T30] #0: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 652.110002][ T30] 2 locks held by kworker/1:1/46: [ 652.110042][ T30] 4 locks held by kworker/u8:6/2424: [ 652.110058][ T30] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 652.110131][ T30] #1: ffffc90008e17d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 652.110203][ T30] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 652.110272][ T30] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 652.110339][ T30] 3 locks held by kworker/u8:9/2473: [ 652.110355][ T30] #0: ffff88802a40b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 652.110428][ T30] #1: ffffc90009217d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 652.110510][ T30] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 652.110587][ T30] 1 lock held by udevd/4549: [ 652.110609][ T30] 2 locks held by getty/4849: [ 652.110624][ T30] #0: ffff88802addf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 652.110702][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 652.110774][ T30] 2 locks held by syz-executor/5097: [ 652.110790][ T30] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 652.110855][ T30] #1: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 652.110937][ T30] 5 locks held by kworker/u9:2/5101: [ 652.110954][ T30] 2 locks held by kworker/0:4/5105: [ 652.110973][ T30] 2 locks held by kworker/1:3/5150: [ 652.110990][ T30] 2 locks held by kworker/1:4/5166: [ 652.111006][ T30] 2 locks held by kworker/1:8/5204: [ 652.111025][ T30] 1 lock held by syz-executor/7381: [ 652.111041][ T30] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 652.111110][ T30] 3 locks held by kworker/1:6/9009: [ 652.111126][ T30] 1 lock held by syz.0.853/9013: [ 652.111142][ T30] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 652.111209][ T30] 3 locks held by kworker/0:9/9025: [ 652.111225][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 652.111298][ T30] #1: ffffc90004427d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 652.111370][ T30] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 652.111438][ T30] 3 locks held by kworker/0:10/9041: [ 652.111454][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 652.111525][ T30] #1: ffffc90004507d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 652.111604][ T30] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 652.111676][ T30] 2 locks held by kworker/1:9/9057: [ 652.111692][ T30] 1 lock held by syz-executor/9060: [ 652.111708][ T30] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 652.111787][ T30] 1 lock held by syz-executor/9067: [ 652.111804][ T30] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 652.111882][ T30] 2 locks held by dhcpcd/9079: [ 652.111898][ T30] #0: ffff888023df2258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 652.111973][ T30] #1: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 652.112054][ T30] 1 lock held by dhcpcd/9080: [ 652.112069][ T30] #0: ffff88802beee258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 652.112152][ T30] 1 lock held by dhcpcd/9082: [ 652.112168][ T30] #0: ffff88802012a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 652.126494][ T30] 1 lock held by dhcpcd/9083: [ 652.126513][ T30] #0: ffff88806db02258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 652.126596][ T30] 1 lock held by syz-executor/9084: [ 652.126612][ T30] #0: ffff88802240cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_open+0x1f4/0x300 [ 652.126689][ T30] 1 lock held by dhcpcd/9085: [ 652.126705][ T30] #0: ffff88807a4fa258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 652.126780][ T30] 2 locks held by syz-executor/9086: [ 652.126797][ T30] 2 locks held by dhcpcd/9088: [ 652.126814][ T30] 2 locks held by syz-executor/9089: [ 652.126831][ T30] [ 652.126840][ T30] ============================================= [ 652.126840][ T30] [ 652.126865][ T30] NMI backtrace for cpu 1 [ 652.126880][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 652.126907][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 652.126923][ T30] Call Trace: [ 652.126934][ T30] [ 652.126946][ T30] dump_stack_lvl+0x241/0x360 [ 652.126989][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.127026][ T30] ? __pfx__printk+0x10/0x10 [ 652.127064][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 652.127096][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 652.127132][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 652.127158][ T30] ? _printk+0xd5/0x120 [ 652.127189][ T30] ? __pfx__printk+0x10/0x10 [ 652.127223][ T30] ? __wake_up_klogd+0x109/0x140 [ 652.127251][ T30] ? __pfx__printk+0x10/0x10 [ 652.127290][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 652.127321][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 652.127355][ T30] watchdog+0xfee/0x1030 [ 652.127391][ T30] ? watchdog+0x1ea/0x1030 [ 652.127431][ T30] ? __pfx_watchdog+0x10/0x10 [ 652.127465][ T30] kthread+0x2f0/0x390 [ 652.127499][ T30] ? __pfx_watchdog+0x10/0x10 [ 652.127530][ T30] ? __pfx_kthread+0x10/0x10 [ 652.127565][ T30] ret_from_fork+0x4b/0x80 [ 652.127603][ T30] ? __pfx_kthread+0x10/0x10 [ 652.127638][ T30] ret_from_fork_asm+0x1a/0x30 [ 652.127687][ T30] [ 652.127697][ T30] Sending NMI from CPU 1 to CPUs 0: [ 652.127734][ C0] NMI backtrace for cpu 0 [ 652.127747][ C0] CPU: 0 UID: 0 PID: 5101 Comm: kworker/u9:2 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 652.127769][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 652.127782][ C0] Workqueue: hci1 hci_rx_work [ 652.127804][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0xa/0x120 [ 652.127835][ C0] Code: cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 54 <53> 4c 8b 16 48 8b 46 08 48 83 c0 f8 48 c1 c0 3d 48 83 f8 02 7f 1f [ 652.127850][ C0] RSP: 0018:ffffc900000064e8 EFLAGS: 00000202 [ 652.127866][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffff88802837bc00 [ 652.127880][ C0] RDX: 0000000000000102 RSI: ffffffff8e1a1280 RDI: 0000000000000002 [ 652.127893][ C0] RBP: ffffffff90bcfcc6 R08: ffffffff8140fc60 R09: ffffc900000066d0 [ 652.127908][ C0] R10: 0000000000000003 R11: ffffffff817f2bd0 R12: ffffffff901bf8e4 [ 652.127921][ C0] R13: dffffc0000000000 R14: 1ffff92000000cbc R15: ffffffff90bcfcc2 [ 652.127936][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 652.127952][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 652.127966][ C0] CR2: 000055bb440292e0 CR3: 000000007bd6c000 CR4: 00000000003506f0 [ 652.127983][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 652.127995][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 652.128007][ C0] Call Trace: [ 652.128014][ C0] [ 652.128022][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 652.128044][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 652.128070][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 652.128091][ C0] ? nmi_handle+0x2a/0x5a0 [ 652.128118][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 652.128141][ C0] ? nmi_handle+0x14f/0x5a0 [ 652.128158][ C0] ? nmi_handle+0x2a/0x5a0 [ 652.128176][ C0] ? __sanitizer_cov_trace_switch+0xa/0x120 [ 652.128202][ C0] ? default_do_nmi+0x63/0x160 [ 652.128225][ C0] ? exc_nmi+0x123/0x1f0 [ 652.128245][ C0] ? end_repeat_nmi+0xf/0x53 [ 652.128270][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 652.128294][ C0] ? unwind_next_frame+0x510/0x2a00 [ 652.128324][ C0] ? __sanitizer_cov_trace_switch+0xa/0x120 [ 652.128356][ C0] ? __sanitizer_cov_trace_switch+0xa/0x120 [ 652.128384][ C0] ? __sanitizer_cov_trace_switch+0xa/0x120 [ 652.128411][ C0] [ 652.128417][ C0] [ 652.128425][ C0] unwind_next_frame+0x6c2/0x2a00 [ 652.128455][ C0] ? br_handle_frame+0x9fc/0x1530 [ 652.128476][ C0] ? br_handle_frame+0x9fd/0x1530 [ 652.128495][ C0] ? br_handle_frame+0x9fd/0x1530 [ 652.128514][ C0] ? __kernel_text_address+0xd/0x40 [ 652.128531][ C0] ? br_handle_frame+0x9fd/0x1530 [ 652.128550][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 652.128575][ C0] arch_stack_walk+0x151/0x1b0 [ 652.128597][ C0] ? br_handle_frame+0x9fd/0x1530 [ 652.128620][ C0] stack_trace_save+0x118/0x1d0 [ 652.128645][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 652.128671][ C0] ? mark_lock+0x9a/0x360 [ 652.128702][ C0] kasan_save_track+0x3f/0x80 [ 652.128721][ C0] ? kasan_save_track+0x3f/0x80 [ 652.128740][ C0] ? kasan_save_free_info+0x40/0x50 [ 652.128766][ C0] ? poison_slab_object+0xe0/0x150 [ 652.128786][ C0] ? __kasan_slab_free+0x37/0x60 [ 652.128806][ C0] ? kmem_cache_free+0x145/0x350 [ 652.128832][ C0] ? sk_skb_reason_drop+0x170/0x3d0 [ 652.128854][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 652.128872][ C0] ? ip_sabotage_in+0x203/0x290 [ 652.128889][ C0] ? nf_hook_slow+0xc3/0x220 [ 652.128911][ C0] ? NF_HOOK+0x29e/0x450 [ 652.128926][ C0] ? __netif_receive_skb+0x1ea/0x650 [ 652.128951][ C0] ? netif_receive_skb+0x1e8/0x890 [ 652.128975][ C0] ? NF_HOOK+0x9e/0x400 [ 652.128992][ C0] ? br_handle_frame_finish+0x18ed/0x1fe0 [ 652.129011][ C0] ? br_nf_hook_thresh+0x472/0x590 [ 652.129027][ C0] ? br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 [ 652.129047][ C0] ? br_nf_pre_routing_ipv6+0x379/0x770 [ 652.129066][ C0] ? br_handle_frame+0x9fd/0x1530 [ 652.129108][ C0] ? sk_skb_reason_drop+0x170/0x3d0 [ 652.129129][ C0] kasan_save_free_info+0x40/0x50 [ 652.129156][ C0] poison_slab_object+0xe0/0x150 [ 652.129177][ C0] ? sk_skb_reason_drop+0x170/0x3d0 [ 652.129198][ C0] __kasan_slab_free+0x37/0x60 [ 652.129219][ C0] kmem_cache_free+0x145/0x350 [ 652.129249][ C0] sk_skb_reason_drop+0x170/0x3d0 [ 652.129270][ C0] ? ip6_mc_input+0xa10/0xc30 [ 652.129290][ C0] ip6_mc_input+0xa1f/0xc30 [ 652.129312][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 652.129330][ C0] ? skb_dst+0x72/0xd0 [ 652.129353][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 652.129382][ C0] ip_sabotage_in+0x203/0x290 [ 652.129402][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 652.129420][ C0] nf_hook_slow+0xc3/0x220 [ 652.129444][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 652.129471][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 652.129499][ C0] NF_HOOK+0x29e/0x450 [ 652.129515][ C0] ? skb_orphan+0xae/0xd0 [ 652.129534][ C0] ? NF_HOOK+0x9a/0x450 [ 652.129550][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 652.129569][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 652.129602][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 652.129620][ C0] __netif_receive_skb+0x1ea/0x650 [ 652.129648][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 652.129672][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 652.129708][ C0] ? netif_receive_skb+0x131/0x890 [ 652.129733][ C0] ? netif_receive_skb+0x131/0x890 [ 652.129758][ C0] netif_receive_skb+0x1e8/0x890 [ 652.129783][ C0] ? __pfx_lock_release+0x10/0x10 [ 652.129807][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 652.129837][ C0] ? br_netif_receive_skb+0x130/0x1a0 [ 652.129859][ C0] NF_HOOK+0x9e/0x400 [ 652.129878][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 652.129897][ C0] ? NF_HOOK+0xfc/0x400 [ 652.129915][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 652.129935][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 652.129959][ C0] ? br_pass_frame_up+0x297/0x430 [ 652.129980][ C0] br_handle_frame_finish+0x18ed/0x1fe0 [ 652.130010][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 652.130028][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 652.130051][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 652.130072][ C0] ? ip6t_do_table+0x205/0x18a0 [ 652.130096][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 652.130117][ C0] ? nf_conntrack_in+0x15e6/0x1880 [ 652.130146][ C0] ? ipv6_ext_hdr+0x71/0x80 [ 652.130174][ C0] ? ip6t_do_table+0x205/0x18a0 [ 652.130199][ C0] ? nf_hook_slow+0x175/0x220 [ 652.130223][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 652.130243][ C0] br_nf_hook_thresh+0x472/0x590 [ 652.130267][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 652.130287][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 652.130311][ C0] ? skb_push+0x97/0x100 [ 652.130337][ C0] br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 [ 652.130363][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 652.130390][ C0] br_nf_pre_routing_ipv6+0x379/0x770 [ 652.130411][ C0] ? br_nf_pre_routing_ipv6+0x41e/0x770 [ 652.130432][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 652.130455][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 652.130476][ C0] ? br_nf_pre_routing+0x70e/0x1470 [ 652.130493][ C0] ? NF_HOOK+0x3a4/0x450 [ 652.130513][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 652.130532][ C0] br_handle_frame+0x9fd/0x1530 [ 652.130551][ C0] ? hci_event_packet+0xa55/0x1540 [ 652.130572][ C0] ? worker_thread+0x86d/0xd40 [ 652.130600][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 652.130621][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 652.130647][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 652.130666][ C0] __netif_receive_skb_core+0x13e8/0x4570 [ 652.130695][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 652.130714][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 652.130744][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 652.130761][ C0] ? kmem_cache_free+0x145/0x350 [ 652.130791][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 652.130812][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 652.130842][ C0] ? mark_lock+0x9a/0x360 [ 652.130870][ C0] ? __lock_acquire+0x1359/0x2000 [ 652.130908][ C0] __netif_receive_skb+0x12f/0x650 [ 652.130935][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 652.130959][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 652.130984][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.131009][ C0] ? __pfx_lock_release+0x10/0x10 [ 652.131033][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 652.131062][ C0] process_backlog+0x662/0x15b0 [ 652.131093][ C0] ? process_backlog+0x33b/0x15b0 [ 652.131125][ C0] ? __pfx_process_backlog+0x10/0x10 [ 652.131152][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.131178][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 652.131205][ C0] __napi_poll+0xcb/0x490 [ 652.131233][ C0] net_rx_action+0x89b/0x1240 [ 652.131273][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 652.131322][ C0] handle_softirqs+0x2c4/0x970 [ 652.131351][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 652.131376][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 652.131401][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 652.131429][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 652.131451][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 652.131479][ C0] irq_exit_rcu+0x9/0x30 [ 652.131499][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 652.131525][ C0] [ 652.131532][ C0] [ 652.131539][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 652.131563][ C0] RIP: 0010:console_flush_all+0x9f7/0xf50 [ 652.131583][ C0] Code: 20 00 90 0f 0b 90 e9 f3 f9 ff ff e8 43 25 20 00 e8 6e bf 1d 0a 4d 85 f6 74 c0 e8 34 25 20 00 fb 49 bd 00 00 00 00 00 fc ff df <43> 80 3c 2f 00 48 8b 5c 24 30 74 08 48 89 df e8 25 f0 86 00 4c 8b [ 652.131600][ C0] RSP: 0018:ffffc90003657340 EFLAGS: 00000287 [ 652.131616][ C0] RAX: ffffffff81735eac RBX: 0000000000000000 RCX: 0000000000040000 [ 652.131629][ C0] RDX: ffffc9001209a000 RSI: 0000000000015d8c RDI: 0000000000015d8d [ 652.131642][ C0] RBP: ffffc900036574d0 R08: ffffffff81735e53 R09: 1ffffffff26020f0 [ 652.131657][ C0] R10: dffffc0000000000 R11: fffffbfff26020f1 R12: ffffffff8eb2cb40 [ 652.131671][ C0] R13: dffffc0000000000 R14: 0000000000000200 R15: 1ffffffff1d65973 [ 652.131689][ C0] ? console_flush_all+0x993/0xf50 [ 652.131708][ C0] ? console_flush_all+0x9ec/0xf50 [ 652.131735][ C0] ? mark_lock+0x9a/0x360 [ 652.131759][ C0] ? console_flush_all+0x147/0xf50 [ 652.131782][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 652.131814][ C0] console_unlock+0x13b/0x4d0 [ 652.131835][ C0] ? __pfx_console_unlock+0x10/0x10 [ 652.131856][ C0] ? vprintk_emit+0x420/0x900 [ 652.131876][ C0] ? vprintk_emit+0x761/0x900 [ 652.131897][ C0] vprintk_emit+0x7a1/0x900 [ 652.131914][ C0] ? __lock_acquire+0x1359/0x2000 [ 652.131941][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 652.131969][ C0] _printk+0xd5/0x120 [ 652.131998][ C0] ? __pfx__printk+0x10/0x10 [ 652.132026][ C0] ? hci_event_packet+0x56c/0x1540 [ 652.132052][ C0] bt_warn+0x127/0x180 [ 652.132077][ C0] ? __pfx_bt_warn+0x10/0x10 [ 652.132099][ C0] ? __mutex_unlock_slowpath+0x21d/0x750 [ 652.132126][ C0] ? __copy_skb_header+0x437/0x5b0 [ 652.132151][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 652.132187][ C0] hci_cmd_complete_evt+0x3ef/0x8b0 [ 652.132219][ C0] hci_event_packet+0xa55/0x1540 [ 652.132245][ C0] ? __pfx_hci_cmd_complete_evt+0x10/0x10 [ 652.132273][ C0] ? __pfx_hci_event_packet+0x10/0x10 [ 652.132296][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 652.132324][ C0] ? hci_send_to_monitor+0xd8/0x7f0 [ 652.132362][ C0] ? kcov_remote_start+0x9e/0x7e0 [ 652.132395][ C0] hci_rx_work+0x3e8/0xca0 [ 652.132426][ C0] ? process_scheduled_works+0x945/0x1830 [ 652.132453][ C0] process_scheduled_works+0xa2c/0x1830 [ 652.132500][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 652.132534][ C0] ? assign_work+0x364/0x3d0 [ 652.132564][ C0] worker_thread+0x86d/0xd40 [ 652.132603][ C0] ? __kthread_parkme+0x169/0x1d0 [ 652.132634][ C0] ? __pfx_worker_thread+0x10/0x10 [ 652.132662][ C0] kthread+0x2f0/0x390 [ 652.132693][ C0] ? __pfx_worker_thread+0x10/0x10 [ 652.132719][ C0] ? __pfx_kthread+0x10/0x10 [ 652.132750][ C0] ret_from_fork+0x4b/0x80 [ 652.132780][ C0] ? __pfx_kthread+0x10/0x10 [ 652.132811][ C0] ret_from_fork_asm+0x1a/0x30 [ 652.132854][ C0] [ 652.145235][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 652.145255][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 652.145286][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 652.145304][ T30] Call Trace: [ 652.145315][ T30] [ 652.145328][ T30] dump_stack_lvl+0x241/0x360 [ 652.145373][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.145412][ T30] ? __pfx__printk+0x10/0x10 [ 652.145444][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.145486][ T30] ? vscnprintf+0x5d/0x90 [ 652.145516][ T30] panic+0x349/0x870 [ 652.145553][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 652.145585][ T30] ? __pfx_panic+0x10/0x10 [ 652.145624][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 652.145654][ T30] ? __irq_work_queue_local+0x137/0x410 [ 652.145692][ T30] ? irq_work_queue+0xca/0x150 [ 652.145725][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 652.145758][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 652.145789][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 652.145819][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 652.145853][ T30] watchdog+0x102d/0x1030 [ 652.145889][ T30] ? watchdog+0x1ea/0x1030 [ 652.145930][ T30] ? __pfx_watchdog+0x10/0x10 [ 652.145965][ T30] kthread+0x2f0/0x390 [ 652.146000][ T30] ? __pfx_watchdog+0x10/0x10 [ 652.146033][ T30] ? __pfx_kthread+0x10/0x10 [ 652.146068][ T30] ret_from_fork+0x4b/0x80 [ 652.146101][ T30] ? __pfx_kthread+0x10/0x10 [ 652.146136][ T30] ret_from_fork_asm+0x1a/0x30 [ 652.146187][ T30] [ 652.150282][ T30] Kernel Offset: disabled