last executing test programs: 4.304984552s ago: executing program 2 (id=1944): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="660f3881ae000000c483b17e35e661c286000f08c4a2ed8c03f30f09f30fc7b5c5a40000410f01cbc4c2f9341cd50d0000000f7973d50f08", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.005542883s ago: executing program 2 (id=1946): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @val, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x3}}}}}}, 0x0) 3.926063063s ago: executing program 2 (id=1947): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @timestamp, @timestamp], 0x8) sendto$inet(r0, &(0x7f0000000100)="cb", 0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x649}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001980)="d5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001d80)="fe", 0x1}], 0x1}}], 0x3, 0x4008095) 3.70887593s ago: executing program 2 (id=1949): syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025500010100000009040000"], 0x0) 2.358477297s ago: executing program 1 (id=1967): socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x15, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063010a00000000009500000000000000271f32b65a302d6ee544f3f5dab604df86880a0cc95487bc6c97941123f05509e927790b0317c1d6dda411e4770c458c26432f0c79af55cd6f5a7a09a1130d136845d14935e683494fef34033c04d5b7fd6f19cd2fbf54a4ffad"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x891c, &(0x7f0000000000)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast1}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585cf"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.187964084s ago: executing program 4 (id=1973): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@private}, {@remote}, {@dev, 0x659}, {@broadcast}, {@multicast2, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0xf, 0x0, [@remote, @multicast1, @private=0xa010102]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.179380288s ago: executing program 2 (id=1974): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000f40)=0x540a, 0x4) 2.065378557s ago: executing program 2 (id=1975): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) r2 = dup(r1) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) mlockall(0x3) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil) 1.990291269s ago: executing program 3 (id=1978): unshare(0x20020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000006c0)={0x0, 0x1, 0x2, &(0x7f0000000000)=0xfffffffffffffffc}) 1.928419481s ago: executing program 4 (id=1979): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x8868}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, 0x0) 1.83738692s ago: executing program 4 (id=1980): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f00000000c0)='./file0\x00') syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f00000008c0)={&(0x7f0000000100)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000b40)={&(0x7f0000000000)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) 1.837116766s ago: executing program 3 (id=1981): r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @val, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x3}}}}}}, 0x0) 1.787030025s ago: executing program 3 (id=1982): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 1.657437997s ago: executing program 4 (id=1984): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 1.65718405s ago: executing program 3 (id=1985): syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025500010100000009040000"], 0x0) 1.587200996s ago: executing program 4 (id=1986): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000080)='./bus\x00', 0xa942, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newtaction={0xe68, 0x30, 0x0, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) 1.396197746s ago: executing program 0 (id=1988): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x649}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001980)="d5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001d80)="fe", 0x1}], 0x1}}], 0x3, 0x4008095) 1.306831291s ago: executing program 0 (id=1989): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@private}, {@remote}, {@dev, 0x659}, {@broadcast}, {@multicast2, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0xf, 0x0, [@remote, @multicast1, @private=0xa010102]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.21838252s ago: executing program 4 (id=1990): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) 863.971176ms ago: executing program 0 (id=1991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002"], 0x28}}, 0x0) 731.198427ms ago: executing program 0 (id=1992): unshare(0x20020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000006c0)={0x0, 0x1, 0x2, &(0x7f0000000000)=0xfffffffffffffffc}) 726.005513ms ago: executing program 1 (id=1993): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @val, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x3}}}}}}, 0x0) 623.262076ms ago: executing program 1 (id=1994): fchdir(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000001100)="94", 0x1) tee(r0, r4, 0x7ffffffffffffffe, 0x0) write$binfmt_script(r4, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 473.451652ms ago: executing program 0 (id=1995): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 316.696987ms ago: executing program 1 (id=1996): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1}}], 0x1, 0xc1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x78) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 168.407166ms ago: executing program 0 (id=1997): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000240), &(0x7f0000000280)=@v3, 0x18, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32=0x0, @ANYRES16, @ANYRES64, @ANYBLOB="01ce6671a3b30f673148672100038bbb4413ea284b892438cdddda3da4c78d940655fbd68a286059c5766f98f85fb413503eaf8c90a24dda1e09f68cd741168d69dae50652ca7b67c5b0a27ab80ff9afa5000443de8c748e1d5beabee7c1346b215f641ae190d56ea4ab81bacd909929deb5757040e8d5b2752ea779c30f600bd516a68d881e7fc7289826d49e35134a94e27f115c8195a0f152cbd840ffdb008356c72319cceb43ccb1280556efdf0fdf582fd3cfc830dff1787f000000b7400f5aef57b6dcbfde7af6012383adb085c40e4c295c2a3be750a42400e58523d24b8eecd75caabcee22347bdb78b72b400d080a044ebde5d39ad91ff0ef75aa244381cf00cd6fe9b9a92a9968104bf02481022af426853287e521a4e3cfe480f984efcea1359ff932ebd3bc75aefea41074799f3502a7472a6686b4011a41d7f0cfb25b3dc3077b4e8ded17cfff2b1d59bc12f637c36690f5ca91ee999ec138f6ce66522e652939a37435edb78f9ae18489f9d2b73c81609399f0d123f1721171bd72c012623f04d8965d3e5785d057c15798ab36af821c9b308731422ba3858b9895ace14068ea58f8cb6060c205caf209a73628eff5b9270a4a55c2d7fc59a4fe6e023bd424d8b010e2232d1b2e6ca603b466b2c82afff4a8cc469e8664d54769fc97df122b3ff8c34354dad46f900eaf6e72e538c0595caa056984ab8974dadad47a42af7cdae5bde6a12f412fe2a876aa191e78e91fbf780e2f4a20f57d41376b29f990ce63aa6edf622d2203fee37df269abf869d13b175852b775fff70491d1e5d1311b7eef954a101ddb98c5ba2b312528485ece7aff23cc6fee599daea0fca71a5970cf0fc82b49640cc3fabbc401dead4f83aa0c4072a9e98ab5afb790be17961fc073e2f8ec00000000000000005089d6db5ad893ee9b22b9250d01980952d0a3e0076c877556fa43f90cb574fd6ad67398ac4d9f8ff4e3ef09f99220928602523adc2289b5130c5f8e48384eff563a10787b0199642385e811504e7168804114842d51f42dd6937515fa64b2fd14ef427072c6556b99171bd00165a9aada7173f001679ac791ee67188c670f583f7b1f8d", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1d2, &(0x7f0000000580)="$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") r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000240)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r5, 0x0) write$binfmt_script(r4, &(0x7f0000000400), 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x58}, 0x1, 0x7}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 168.204599ms ago: executing program 1 (id=1998): socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYRES16], 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[], 0x0) 154.403949ms ago: executing program 3 (id=1999): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="49bbe4121f35be052595bd4892ad64d5c5d7f7a0c4527f09933c2e0d24eedb4089682bc3ea3a3a7ab2287b19ddcf0a00af4a5e8aceb906108d7808583160bbb357cfb3082802cbdcb5ebe6510c2702cb810cff8832a329248be6b6cbcef4ada8b9ce53db70062896046d3dca0b0079f6fc5be3df6a471d1d31f4f2a9cfd5e780454efac19884ccf5551961a5f3deef651b180cc6c25930ebc384ec6b78b262ed9f33c3aeba5e912c1e058bf02a32baf147db03cab8116210a79de0d9e1b1d5fa96dc21ccd8097a4d9a834a3e744d8b80050d5e7776115b5789d52ca8a1d813719935b7db239b23f72056a0b2db59b0651eb64ebf8a32dbe8c3eb9bb8acfe3ed1959e4a59146fbd23f9d33a14ddb7402dfd6e5d4d57120059780f9581980d9989282e482a8bd96aea75f697e8cff77af8ad5c007b8f54c460054fc78446265613d04cf67c62eb969b11741351f17a79bb9f9d3fe46d94f3bd7d2b4cd96ce426f7410df4a752b8d056fcb648396f75212906c69a73165acd1e1227202f72e575c3c76faf11dd59e4bb584a7852dbd33bda1d289ebd5484ea12390b9a6b0045e2a0463541e7b00808c6fa3972c7c19ee770fba7ebe54e577323eec212a945d80473f70b30c12a24c8d55fb3dbd57a9ef30668dde07175d8e0355a3df2d0298c27bb9bcea5ed7a058e3b199c7619c508846a8ed3c328a07fbdb85d7ed55850ff05fcab8fc2ba905f0268f6c4a9f634fb7408b2b247aba98363331449bb237154f4ebe1e040aabfca390d703b7abcf6d63ca71ac22e870777d637ecfe6f2bb24def195b4a4c00f9bb8ecd79018f5ca3104b45dfe9cba73176f4792ce8d21b1e2bfdc27784b05e192b9a18533a73df87d1b9ecce38adb9f9d1c263932ac36c274ab5aa91318a84ae51d580468e41fdff7de5240e25fa7dcbe469723461a2aab3978792aad031c6bf1f60a0fe205da692031164ad46bd738ada2c94acb00540bc6e47a13f4e825cec77ee77902b8d1ea9becf01cfdbea9a084742f9ca515dabab621e3855639e78f642cd354fbbe2e6ae19f242d3a7956846aaf052c00507efcb28f6239d51817d8631abdbbee86e008b0bf14cd7ae597acbf26fa906d79e8ba809f60be5d37e1fb523d1fdb75f883070fdd5faf94057b7bc1b21c3e29ce31c950a48d5ddd29d52222b6ef78d8db14a8563b20ed0a909d632d5a452b915b93b5ae2e1e1e32a43e016ee99ee4c67fdafd35e59fa31d4d1087119851227e8bc0bec205ae11b1763399263bc385a2a139363a242630792ad1ad973b2dad00e1287235690b67105a25c69617f7be647b294252c532730e9b59f5bb2dddecb4bf9ca8ab9fa5271a1ed0f2c5b31294af4e974b6dd974d67d9c299b7b995019fb05bff031e8296717eecc7f4ec039b4442a4387fe63c3c61f320f2fce0540741ea26e32c91b93977148e46704f70ea8c32cdc98eb399f1ca8937d0d5fa54999dd191b3d98f7ee957086f839f93c8ce5de2ad18299b0f5ee8c545f4f895592c3baa2fb1bd97b870c99e2dd2bc4b573b5f59b5a9241974d6a8a1fa3dd1e0e3cb7563e5024a8a5f5d9d92649a35353e9b17620bee36cfeb93942ad5ec647922ae37088a6f04c8493ada717f91d3ab27f54ea2a5b2e229c875a44a9e6ab0699aa936c956c6e153bb9dae5392a6d668402bdc5f6ab6976f9b709f3cacd3d35edaac64b863d0bf22efcaabe148cecbf5ca31183f2a809c43a6c98b1f5ae7e1eebfc4540e6011be6c88297ff25e70eb8c3adc8fe0ae5b7ce94391bc6bfcb7ab5d5f38fce7ec58d00779e60c92badf125d8152289e90b9e63df56680358819209ce41d9a91738937d554d8404de52447c471e5c52bef3b72a8914dc441a378cbe18d9220ba8e587a48d364c1873e3b36c6cba8e71e90ddcbafda8c185e06747dad9d1741674880d21a3d12282a1f816f7dbba2b4e363700d3bd6370cf70d2f8da5df4473b5edb3f72cdbd067134a8a103577da0dbf38fb6cd9c3437b32293badf56e0a9232be3abd2afea648419cc1951e602836e813db2993618b47b72ac57c7bbaf941969ac59979517f9ae21dc3c16c4c27136268372f181c209e7ce9b9e85007f219d44a16a1f725c1e1ee59ed4a9d2619ee68a2c3b301cf8fbb2c0c38e39e670aeaa267d2b10d9fb4965ec865192bd9457faf7b1284242ea9d0c2321592f03b4c9d21691b73e19066086d44b47551c62e1184062967cf23bcb202e79ddddcc51196202bf259f53f03ccb1099765ce7cd1d5", 0x649}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001980)="d5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001d80)="fe", 0x1}], 0x1}}], 0x3, 0x4008095) 54.6913ms ago: executing program 1 (id=2000): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 0s ago: executing program 3 (id=2001): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) kernel console output (not intermixed with test programs): from the descriptor's value: 1 [ 553.335886][ T8] usb 3-1: config index 5 descriptor too short (expected 8368, got 10) [ 553.346823][ T8] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 553.356156][ T8] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 553.367387][ T8] usb 3-1: config index 6 descriptor too short (expected 8368, got 10) [ 553.400051][ T8] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 553.407337][ T8] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 553.422953][ T8] usb 3-1: config index 7 descriptor too short (expected 8368, got 10) [ 553.432008][ T8] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 553.439663][ T8] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 553.483308][ T8] usb 3-1: string descriptor 0 read error: -71 [ 553.491009][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 553.495469][T12001] loop3: detected capacity change from 0 to 512 [ 553.504799][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.520640][ T8] usb 3-1: can't set config #1, error -71 [ 553.528356][ T8] usb 3-1: USB disconnect, device number 36 [ 553.536017][T12001] EXT4-fs (loop3): Test dummy encryption mode enabled [ 553.565031][T12001] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #12: comm syz.3.1704: corrupted in-inode xattr: invalid ea_ino [ 553.590661][T12001] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1704: couldn't read orphan inode 12 (err -117) [ 553.630390][T12001] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.813673][T12001] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 553.953402][ T8099] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 554.902145][ T5146] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 554.993532][ T55] Bluetooth: hci0: command tx timeout [ 555.096592][ T5146] usb 3-1: Using ep0 maxpacket: 8 [ 555.124927][ T5146] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 555.133507][ T5146] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.143853][ T5146] usb 3-1: config 0 has no interface number 0 [ 555.150174][ T5146] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 555.161492][ T5146] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 555.172362][ T5146] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.185404][ T5146] usb 3-1: config 0 interface 52 has no altsetting 0 [ 555.194823][ T5146] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 555.204336][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 555.225143][ T5146] usb 3-1: Product: syz [ 555.229485][ T5146] usb 3-1: SerialNumber: syz [ 555.257351][ T5146] usb 3-1: config 0 descriptor?? [ 555.902923][ T5146] usb 3-1: Can not set alternate setting to 1, error: -71 [ 555.910830][ T5146] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 555.933884][ T5146] usb 3-1: USB disconnect, device number 37 [ 556.537215][T12025] loop2: detected capacity change from 0 to 128 [ 556.558737][ T29] audit: type=1800 audit(1854400140.926:313): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1710" name="bus" dev="loop2" ino=1048760 res=0 errno=0 [ 556.586210][ T29] audit: type=1800 audit(1854400140.956:314): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1710" name="bus" dev="loop2" ino=1048760 res=0 errno=0 [ 556.966297][T11999] netlink: 'syz.0.1702': attribute type 4 has an invalid length. [ 557.058969][ T55] Bluetooth: hci0: command tx timeout [ 557.737883][T12050] mmap: syz.1.1718 (12050) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 557.768450][T12050] loop1: detected capacity change from 0 to 16 [ 557.794605][T12050] erofs: (device loop1): mounted with root inode @ nid 36. [ 558.610144][T12056] loop2: detected capacity change from 0 to 128 [ 558.627160][T10815] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46 [ 558.667406][T10815] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 558.686697][T10815] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 558.714600][ T29] audit: type=1800 audit(1854400143.086:315): pid=12056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1720" name="bus" dev="loop2" ino=1048761 res=0 errno=0 [ 558.742582][ T29] audit: type=1800 audit(1854400143.086:316): pid=12056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1720" name="bus" dev="loop2" ino=1048761 res=0 errno=0 [ 558.927981][T12060] loop2: detected capacity change from 0 to 1024 [ 558.961933][T12060] hfsplus: unable to find HFS+ superblock [ 559.148850][ T55] Bluetooth: hci0: command tx timeout [ 561.223404][ T55] Bluetooth: hci0: command tx timeout [ 562.185778][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1714'. [ 562.205902][T12036] netlink: 'syz.0.1714': attribute type 2 has an invalid length. [ 562.388027][T12081] syzkaller0: entered promiscuous mode [ 562.398357][T12093] loop3: detected capacity change from 0 to 1024 [ 562.422859][T12081] syzkaller0: entered allmulticast mode [ 562.430321][T12093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.465990][ T952] gretap0: left allmulticast mode [ 562.473752][ T952] gretap0: left promiscuous mode [ 562.490192][ T952] bridge0: port 3(gretap0) entered disabled state [ 562.500928][ T8099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.519679][ T952] bridge_slave_1: left allmulticast mode [ 562.525362][ T952] bridge_slave_1: left promiscuous mode [ 562.545924][ T952] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.555672][ T952] bridge_slave_0: left allmulticast mode [ 562.561479][ T952] bridge_slave_0: left promiscuous mode [ 562.575542][ T952] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.807060][T12104] loop3: detected capacity change from 0 to 512 [ 562.861617][T12104] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e02c, mo2=0002] [ 562.869854][T12104] System zones: 1-12 [ 562.899540][T12104] EXT4-fs error (device loop3): __ext4_iget:4980: inode #11: block 393240: comm syz.3.1736: invalid block [ 562.920319][T12104] EXT4-fs (loop3): Remounting filesystem read-only [ 562.927955][T12104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.004683][T12104] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz.3.1736: error -117 reading directory block [ 563.301548][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.308346][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.409407][ T5177] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 563.658972][ T5177] usb 4-1: Using ep0 maxpacket: 32 [ 563.686239][ T5177] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.707350][ T5177] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.718150][ T5177] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 563.773215][ T5177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.936665][ T5177] hub 4-1:4.0: USB hub found [ 564.277030][ T5177] hub 4-1:4.0: 2 ports detected [ 564.471147][ T952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.486429][ T5177] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 564.496369][ T5177] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 564.505507][ T952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.526471][ T952] bond0 (unregistering): Released all slaves [ 564.543535][ T952] bond1 (unregistering): Released all slaves [ 564.550636][ T5177] usb 4-1: USB disconnect, device number 33 [ 564.842683][ T5143] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 565.041041][ T5143] usb 1-1: Using ep0 maxpacket: 8 [ 565.062581][ T5143] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 565.082893][ T5143] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.093302][ T5143] usb 1-1: config 0 has no interface number 0 [ 565.113974][ T5143] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 565.128380][ T8099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.131448][ T5143] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 565.170614][ T5143] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.198953][ T5143] usb 1-1: config 0 interface 52 has no altsetting 0 [ 565.221518][ T5143] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 565.231627][ T5143] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 565.254468][ T5143] usb 1-1: Product: syz [ 565.258935][ T5143] usb 1-1: SerialNumber: syz [ 565.266273][ T5143] usb 1-1: config 0 descriptor?? [ 565.483042][ T5143] usb 1-1: Can not set alternate setting to 1, error: -71 [ 565.491601][ T5143] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 565.509563][ T5143] usb 1-1: USB disconnect, device number 34 [ 565.761335][T12131] input: syz1 as /devices/virtual/input/input22 [ 565.970431][T12130] xt_TCPMSS: Only works on TCP SYN packets [ 568.180078][ C1] DEBUG: holding rtnl_mutex for 593 jiffies. [ 568.186140][ C1] task:syz.2.1729 state:R running task stack:23800 pid:12079 tgid:12078 ppid:11011 flags:0x0000400e [ 568.198034][ C1] Call Trace: [ 568.201377][ C1] [ 568.204231][ C1] sched_show_task+0x506/0x6d0 [ 568.209056][ C1] ? report_rtnl_holders+0x29e/0x3f0 [ 568.214401][ C1] ? __pfx__printk+0x10/0x10 [ 568.219073][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 568.224401][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 568.230368][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 568.236742][ C1] report_rtnl_holders+0x320/0x3f0 [ 568.241952][ C1] call_timer_fn+0x18e/0x650 [ 568.246585][ C1] ? call_timer_fn+0xc0/0x650 [ 568.251333][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 568.257017][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 568.262201][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 568.267875][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 568.273566][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 568.279282][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 568.284518][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 568.289785][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 568.295477][ C1] __run_timer_base+0x66a/0x8e0 [ 568.300434][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 568.305885][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 568.312298][ C1] run_timer_softirq+0xb7/0x170 [ 568.317207][ C1] handle_softirqs+0x2c4/0x970 [ 568.322048][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 568.326868][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 568.332236][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 568.337484][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 568.342115][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 568.347342][ C1] irq_exit_rcu+0x9/0x30 [ 568.351652][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 568.357338][ C1] [ 568.360335][ C1] [ 568.363297][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 568.369357][ C1] RIP: 0010:preempt_schedule_irq+0xf6/0x1c0 [ 568.375289][ C1] Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 8b 00 00 00 bf 01 00 00 00 e8 15 24 c8 f5 e8 10 c3 00 f6 fb bf 01 00 00 00 55 ad ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 45 de 5f f6 48 [ 568.395005][ C1] RSP: 0000:ffffc900095d7440 EFLAGS: 00000286 [ 568.401183][ C1] RAX: 07d15ed4f5082900 RBX: 1ffff920012bae90 RCX: ffffffff816fddda [ 568.409241][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcac900 RDI: 0000000000000001 [ 568.417248][ C1] RBP: ffffc900095d7500 R08: ffffffff9301078f R09: 1ffffffff26020f1 [ 568.425277][ C1] R10: dffffc0000000000 R11: fffffbfff26020f2 R12: 1ffff920012bae88 [ 568.433323][ C1] R13: 1ffff920012bae8c R14: ffffc900095d7460 R15: dffffc0000000000 [ 568.441364][ C1] ? mark_lock+0x9a/0x360 [ 568.445739][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 568.451532][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 568.457146][ C1] irqentry_exit+0x5e/0x90 [ 568.461636][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 568.467165][ C1] RIP: 0010:lockdep_unregister_key+0x56d/0x610 [ 568.473407][ C1] Code: ff 92 48 c7 c6 10 bc 6f 81 e8 8f 04 0a 00 e8 fa 18 0a 00 e9 e5 fb ff ff e8 c0 62 21 0a 41 f7 c7 00 02 00 00 74 d0 fb 45 84 f6 <75> cf eb e0 90 0f 0b 90 45 31 f6 e9 62 ff ff ff 90 0f 0b 90 e9 a1 [ 568.493096][ C1] RSP: 0000:ffffc900095d75c0 EFLAGS: 00000246 [ 568.499251][ C1] RAX: dffffc0000000000 RBX: 1ffff920012baec0 RCX: ffffffff947f4803 [ 568.507355][ C1] RDX: 0000000000000001 RSI: ffffffff8bcad5e0 RDI: ffffffff8c207f20 [ 568.515416][ C1] RBP: ffffc900095d7698 R08: ffffffff93007487 R09: 1ffffffff2600e90 [ 568.523477][ C1] R10: dffffc0000000000 R11: fffffbfff2600e91 R12: ffffc900095d7600 [ 568.531522][ C1] R13: 1ffff920012baebc R14: 0000000000000000 R15: 0000000000000206 [ 568.539630][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 568.545583][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 568.550884][ C1] ? __qdisc_destroy+0x150/0x410 [ 568.555888][ C1] ? kfree+0x149/0x360 [ 568.560023][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 568.565622][ C1] __qdisc_destroy+0x165/0x410 [ 568.570462][ C1] dev_shutdown+0x9b/0x440 [ 568.574913][ C1] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 568.581304][ C1] ? __lock_acquire+0x1359/0x2000 [ 568.586400][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 568.593247][ C1] ? __asan_memset+0x23/0x50 [ 568.597867][ C1] ? skb_queue_purge_reason+0x2de/0x500 [ 568.603479][ C1] ? __asan_memset+0x23/0x50 [ 568.608110][ C1] ? skb_queue_purge_reason+0x2de/0x500 [ 568.613779][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 568.619066][ C1] unregister_netdevice_queue+0x303/0x370 [ 568.624907][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 568.631248][ C1] __tun_detach+0x6b6/0x1600 [ 568.635883][ C1] tun_chr_close+0x108/0x1b0 [ 568.640527][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 568.645667][ C1] __fput+0x24a/0x8a0 [ 568.649736][ C1] task_work_run+0x24f/0x310 [ 568.654384][ C1] ? __pfx_task_work_run+0x10/0x10 [ 568.659582][ C1] get_signal+0x15e6/0x1740 [ 568.664154][ C1] ? __pfx_get_signal+0x10/0x10 [ 568.669087][ C1] arch_do_signal_or_restart+0x96/0x860 [ 568.674714][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 568.680947][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 568.686994][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 568.692809][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 568.698418][ C1] do_syscall_64+0x100/0x230 [ 568.703084][ C1] ? clear_bhb_loop+0x35/0x90 [ 568.707794][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.713770][ C1] RIP: 0033:0x7f8911375bd9 [ 568.718232][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.737993][ C1] RSP: 002b:00007f89121ee048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.746464][ C1] RAX: 0000000000000000 RBX: 00007f8911503f60 RCX: 00007f8911375bd9 [ 568.754498][ C1] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000006 [ 568.762619][ C1] RBP: 00007f89113e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 568.770649][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.778697][ C1] R13: 000000000000000b R14: 00007f8911503f60 R15: 00007ffcb990c848 [ 568.786731][ C1] [ 568.789827][ C1] DEBUG: waiting rtnl_mutex for 641 jiffies. [ 568.795843][ C1] task:syz.1.1731 state:D stack:25624 pid:12094 tgid:12087 ppid:10815 flags:0x00004004 [ 568.806133][ C1] Call Trace: [ 568.809493][ C1] [ 568.812475][ C1] __schedule+0x1800/0x4a60 [ 568.817069][ C1] ? __pfx___schedule+0x10/0x10 [ 568.822033][ C1] ? __pfx_lock_release+0x10/0x10 [ 568.827104][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 568.832652][ C1] ? schedule+0x90/0x320 [ 568.836943][ C1] schedule+0x14b/0x320 [ 568.841173][ C1] schedule_preempt_disabled+0x13/0x30 [ 568.846648][ C1] __mutex_lock+0x6a4/0xd70 [ 568.851218][ C1] ? __mutex_lock+0x527/0xd70 [ 568.855946][ C1] ? nl80211_dump_interface+0x103/0x760 [ 568.861562][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 568.866614][ C1] ? get_rtnl_holder+0x144/0x190 [ 568.871619][ C1] nl80211_dump_interface+0x103/0x760 [ 568.877042][ C1] ? rcu_is_watching+0x15/0xb0 [ 568.881878][ C1] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 568.888491][ C1] ? __build_skb_around+0x245/0x3d0 [ 568.893776][ C1] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 568.899792][ C1] ? __alloc_skb+0x28f/0x440 [ 568.904437][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.910584][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 568.915573][ C1] genl_dumpit+0x107/0x1a0 [ 568.920085][ C1] netlink_dump+0x647/0xd80 [ 568.924663][ C1] ? __pfx_netlink_dump+0x10/0x10 [ 568.929788][ C1] ? __asan_memset+0x23/0x50 [ 568.934418][ C1] ? genl_start+0x4a8/0x6d0 [ 568.939005][ C1] __netlink_dump_start+0x59f/0x780 [ 568.944359][ C1] genl_rcv_msg+0x88c/0xec0 [ 568.948939][ C1] ? mark_lock+0x9a/0x360 [ 568.953323][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 568.958397][ C1] ? __pfx_genl_start+0x10/0x10 [ 568.963303][ C1] ? __pfx_genl_dumpit+0x10/0x10 [ 568.968255][ C1] ? __pfx_genl_done+0x10/0x10 [ 568.973104][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 568.978180][ C1] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 568.984140][ C1] ? __pfx___might_resched+0x10/0x10 [ 568.989502][ C1] netlink_rcv_skb+0x1e3/0x430 [ 568.994307][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 568.999392][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 569.004739][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 569.010278][ C1] genl_rcv+0x28/0x40 [ 569.014311][ C1] netlink_unicast+0x7f0/0x990 [ 569.019196][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 569.024522][ C1] ? __virt_addr_valid+0x183/0x530 [ 569.029703][ C1] ? __check_object_size+0x49c/0x900 [ 569.035024][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 569.040198][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 569.045031][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.050378][ C1] ? __import_iovec+0x536/0x820 [ 569.055275][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 569.060276][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 569.065609][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 569.071159][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.076478][ C1] __sock_sendmsg+0x221/0x270 [ 569.081243][ C1] ____sys_sendmsg+0x525/0x7d0 [ 569.086064][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.091445][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 569.096095][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 569.101319][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 569.107863][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 569.114239][ C1] ? exc_page_fault+0x590/0x8c0 [ 569.119158][ C1] ? do_syscall_64+0xb6/0x230 [ 569.123884][ C1] do_syscall_64+0xf3/0x230 [ 569.128445][ C1] ? clear_bhb_loop+0x35/0x90 [ 569.133189][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.139169][ C1] RIP: 0033:0x7fc864175bd9 [ 569.143651][ C1] RSP: 002b:00007fc864fee048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.152221][ C1] RAX: ffffffffffffffda RBX: 00007fc864304038 RCX: 00007fc864175bd9 [ 569.160267][ C1] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 569.168266][ C1] RBP: 00007fc8641e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 569.176274][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.184309][ C1] R13: 000000000000006e R14: 00007fc864304038 R15: 00007ffdd99b01d8 [ 569.192356][ C1] [ 569.195395][ C1] DEBUG: waiting rtnl_mutex for 673 jiffies. [ 569.201426][ C1] task:syz-executor state:D stack:24480 pid:11989 tgid:11989 ppid:11968 flags:0x00004002 [ 569.211671][ C1] Call Trace: [ 569.214979][ C1] [ 569.217947][ C1] __schedule+0x1800/0x4a60 [ 569.222563][ C1] ? __pfx___schedule+0x10/0x10 [ 569.227474][ C1] ? __pfx_lock_release+0x10/0x10 [ 569.232590][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 569.238121][ C1] ? schedule+0x90/0x320 [ 569.242450][ C1] schedule+0x14b/0x320 [ 569.246654][ C1] schedule_preempt_disabled+0x13/0x30 [ 569.252186][ C1] __mutex_lock+0x6a4/0xd70 [ 569.256748][ C1] ? __mutex_lock+0x527/0xd70 [ 569.261486][ C1] ? ip_tunnel_init_net+0x20e/0x710 [ 569.266706][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 569.271817][ C1] ? get_rtnl_holder+0x144/0x190 [ 569.276789][ C1] ip_tunnel_init_net+0x20e/0x710 [ 569.281866][ C1] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 569.287434][ C1] ? ops_init+0x8b/0x610 [ 569.291745][ C1] vti_init_net+0x2e/0xf0 [ 569.296153][ C1] ops_init+0x359/0x610 [ 569.300373][ C1] setup_net+0x515/0xca0 [ 569.304625][ C1] ? __pfx_down_read_killable+0x10/0x10 [ 569.310249][ C1] ? __pfx_setup_net+0x10/0x10 [ 569.315079][ C1] copy_net_ns+0x4e2/0x7b0 [ 569.319579][ C1] create_new_namespaces+0x425/0x7b0 [ 569.324924][ C1] ? bpf_lsm_capable+0x9/0x10 [ 569.329960][ C1] unshare_nsproxy_namespaces+0x124/0x180 [ 569.335730][ C1] ksys_unshare+0x619/0xc10 [ 569.340320][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 569.345403][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 569.351467][ C1] ? do_syscall_64+0x100/0x230 [ 569.356268][ C1] __x64_sys_unshare+0x38/0x40 [ 569.361112][ C1] do_syscall_64+0xf3/0x230 [ 569.365665][ C1] ? clear_bhb_loop+0x35/0x90 [ 569.370450][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.376379][ C1] RIP: 0033:0x7fdbce577337 [ 569.380857][ C1] RSP: 002b:00007ffcaea85d98 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 569.389359][ C1] RAX: ffffffffffffffda RBX: 00007fdbce703f20 RCX: 00007fdbce577337 [ 569.397388][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 569.405448][ C1] RBP: 00007fdbce704a18 R08: 0000000000000000 R09: 0000000000000000 [ 569.413497][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 569.421556][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 569.429637][ C1] [ 569.432695][ C1] DEBUG: waiting rtnl_mutex for 694 jiffies. [ 569.438696][ C1] task:kworker/1:5 state:D stack:20336 pid:5146 tgid:5146 ppid:2 flags:0x00004000 [ 569.448925][ C1] Workqueue: events switchdev_deferred_process_work [ 569.455582][ C1] Call Trace: [ 569.458938][ C1] [ 569.461900][ C1] __schedule+0x1800/0x4a60 [ 569.466436][ C1] ? __pfx___schedule+0x10/0x10 [ 569.471352][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 569.477383][ C1] ? __pfx_lock_release+0x10/0x10 [ 569.482471][ C1] ? kick_pool+0x1bd/0x620 [ 569.486918][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 569.492203][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 569.497465][ C1] ? schedule+0x90/0x320 [ 569.501781][ C1] schedule+0x14b/0x320 [ 569.505973][ C1] schedule_preempt_disabled+0x13/0x30 [ 569.511521][ C1] __mutex_lock+0x6a4/0xd70 [ 569.516085][ C1] ? __mutex_lock+0x527/0xd70 [ 569.520811][ C1] ? switchdev_deferred_process_work+0xe/0x20 [ 569.526910][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 569.532039][ C1] ? get_rtnl_holder+0x144/0x190 [ 569.537038][ C1] ? process_scheduled_works+0x945/0x1830 [ 569.542844][ C1] switchdev_deferred_process_work+0xe/0x20 [ 569.548832][ C1] process_scheduled_works+0xa2c/0x1830 [ 569.554444][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 569.560503][ C1] ? assign_work+0x364/0x3d0 [ 569.565144][ C1] worker_thread+0x86d/0xd40 [ 569.569817][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 569.575773][ C1] ? __kthread_parkme+0x169/0x1d0 [ 569.580907][ C1] ? __pfx_worker_thread+0x10/0x10 [ 569.586067][ C1] kthread+0x2f0/0x390 [ 569.590206][ C1] ? __pfx_worker_thread+0x10/0x10 [ 569.595364][ C1] ? __pfx_kthread+0x10/0x10 [ 569.600038][ C1] ret_from_fork+0x4b/0x80 [ 569.604505][ C1] ? __pfx_kthread+0x10/0x10 [ 569.609168][ C1] ret_from_fork_asm+0x1a/0x30 [ 569.613984][ C1] [ 569.617013][ C1] [ 569.617013][ C1] Showing all locks held in the system: [ 569.624826][ C1] 4 locks held by kworker/u8:5/952: [ 569.630098][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 569.641118][ C1] #1: ffffc90003c87d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 569.651818][ C1] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 569.661357][ C1] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 569.671341][ C1] 2 locks held by getty/4852: [ 569.676051][ C1] #0: ffff88802acd30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 569.685946][ C1] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 569.696154][ C1] 3 locks held by kworker/1:5/5146: [ 569.701413][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 569.712521][ C1] #1: ffffc90003fbfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 569.723618][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 569.734205][ C1] 3 locks held by kworker/u8:9/5461: [ 569.739572][ C1] #0: ffff8880b943ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 569.749634][ C1] #1: ffff8880b9428948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 569.761186][ C1] #2: ffff88807f0e8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xd9/0x490 [ 569.771341][ C1] 3 locks held by kworker/u8:14/9976: [ 569.776736][ C1] #0: ffff88802a70c948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 569.788384][ C1] #1: ffffc9000361fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 569.802312][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 569.811990][ C1] 3 locks held by kworker/0:2/10658: [ 569.817339][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 569.828397][ C1] #1: ffffc90008d8fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 569.839499][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 569.848566][ C1] 2 locks held by syz-executor/11989: [ 569.854019][ C1] #0: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 569.863533][ C1] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x710 [ 569.873143][ C1] 3 locks held by syz.2.1729/12079: [ 569.878346][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 569.887371][ C1] #1: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 569.897557][ C1] #2: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 569.907468][ C1] 3 locks held by syz.1.1731/12094: [ 569.912708][ C1] #0: ffffffff8f668fb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 569.920981][ C1] #1: ffff88802c585678 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x780 [ 569.931686][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_dump_interface+0x103/0x760 [ 569.941682][ C1] 2 locks held by syz.0.1750/12148: [ 569.946918][ C1] #0: ffffffff8f668fb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 569.955239][ C1] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 569.964597][ C1] 2 locks held by syz.0.1750/12149: [ 569.969867][ C1] #0: ffffffff8f668fb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 569.978179][ C1] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 569.987571][ C1] [ 569.989972][ C1] ============================================= [ 569.989972][ C1] [ 571.066028][ C1] DEBUG: waiting rtnl_mutex for 784 jiffies. [ 571.072109][ C1] task:kworker/0:2 state:D stack:23288 pid:10658 tgid:10658 ppid:2 flags:0x00004000 [ 571.082382][ C1] Workqueue: events linkwatch_event [ 571.087632][ C1] Call Trace: [ 571.090964][ C1] [ 571.093923][ C1] __schedule+0x1800/0x4a60 [ 571.098461][ C1] ? __pfx___schedule+0x10/0x10 [ 571.103359][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 571.109408][ C1] ? __pfx_lock_release+0x10/0x10 [ 571.114474][ C1] ? kick_pool+0x45c/0x620 [ 571.118955][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 571.124188][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 571.129448][ C1] ? schedule+0x90/0x320 [ 571.133733][ C1] schedule+0x14b/0x320 [ 571.137925][ C1] schedule_preempt_disabled+0x13/0x30 [ 571.143426][ C1] __mutex_lock+0x6a4/0xd70 [ 571.147952][ C1] ? __mutex_lock+0x527/0xd70 [ 571.152786][ C1] ? linkwatch_event+0xe/0x60 [ 571.157496][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 571.162598][ C1] ? get_rtnl_holder+0x144/0x190 [ 571.167568][ C1] ? process_scheduled_works+0x945/0x1830 [ 571.173357][ C1] linkwatch_event+0xe/0x60 [ 571.177877][ C1] process_scheduled_works+0xa2c/0x1830 [ 571.183488][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 571.189547][ C1] ? assign_work+0x364/0x3d0 [ 571.194193][ C1] worker_thread+0x86d/0xd40 [ 571.198883][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 571.204821][ C1] ? __kthread_parkme+0x169/0x1d0 [ 571.209934][ C1] ? __pfx_worker_thread+0x10/0x10 [ 571.215086][ C1] kthread+0x2f0/0x390 [ 571.219219][ C1] ? __pfx_worker_thread+0x10/0x10 [ 571.224364][ C1] ? __pfx_kthread+0x10/0x10 [ 571.229017][ C1] ret_from_fork+0x4b/0x80 [ 571.233481][ C1] ? __pfx_kthread+0x10/0x10 [ 571.238114][ C1] ret_from_fork_asm+0x1a/0x30 [ 571.242938][ C1] [ 571.245963][ C1] DEBUG: waiting rtnl_mutex for 651 jiffies. [ 571.251990][ C1] task:kworker/u8:5 state:D stack:21040 pid:952 tgid:952 ppid:2 flags:0x00004000 [ 571.262239][ C1] Workqueue: netns cleanup_net [ 571.267040][ C1] Call Trace: [ 571.270374][ C1] [ 571.273342][ C1] __schedule+0x1800/0x4a60 [ 571.277895][ C1] ? __pfx___schedule+0x10/0x10 [ 571.282789][ C1] ? __pfx_lock_release+0x10/0x10 [ 571.287828][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 571.293329][ C1] ? kthread_data+0x52/0xd0 [ 571.297844][ C1] ? schedule+0x90/0x320 [ 571.302148][ C1] ? wq_worker_sleeping+0x66/0x240 [ 571.307292][ C1] ? schedule+0x90/0x320 [ 571.311608][ C1] schedule+0x14b/0x320 [ 571.315801][ C1] schedule_preempt_disabled+0x13/0x30 [ 571.321311][ C1] __mutex_lock+0x6a4/0xd70 [ 571.325852][ C1] ? __mutex_lock+0x527/0xd70 [ 571.330589][ C1] ? ieee80211_unregister_hw+0x55/0x2c0 [ 571.336176][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 571.341286][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 571.347238][ C1] ? rcu_is_watching+0x15/0xb0 [ 571.352067][ C1] ? get_rtnl_holder+0x144/0x190 [ 571.357056][ C1] ieee80211_unregister_hw+0x55/0x2c0 [ 571.362482][ C1] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 571.368046][ C1] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 571.374186][ C1] hwsim_exit_net+0x5c1/0x670 [ 571.378943][ C1] ? __pfx_hwsim_exit_net+0x10/0x10 [ 571.384175][ C1] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 571.390045][ C1] cleanup_net+0x802/0xcc0 [ 571.394493][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 571.399495][ C1] ? process_scheduled_works+0x945/0x1830 [ 571.405243][ C1] process_scheduled_works+0xa2c/0x1830 [ 571.410883][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 571.416904][ C1] ? assign_work+0x364/0x3d0 [ 571.421556][ C1] worker_thread+0x86d/0xd40 [ 571.426192][ C1] ? __kthread_parkme+0x169/0x1d0 [ 571.431282][ C1] ? __pfx_worker_thread+0x10/0x10 [ 571.436425][ C1] kthread+0x2f0/0x390 [ 571.440553][ C1] ? __pfx_worker_thread+0x10/0x10 [ 571.445694][ C1] ? __pfx_kthread+0x10/0x10 [ 571.450343][ C1] ret_from_fork+0x4b/0x80 [ 571.454794][ C1] ? __pfx_kthread+0x10/0x10 [ 571.459442][ C1] ret_from_fork_asm+0x1a/0x30 [ 571.464251][ C1] [ 571.467270][ C1] DEBUG: holding rtnl_mutex for 921 jiffies. [ 571.473290][ C1] task:syz.2.1729 state:R running task stack:23800 pid:12079 tgid:12078 ppid:11011 flags:0x0000400e [ 571.485121][ C1] Call Trace: [ 571.488408][ C1] [ 571.491301][ C1] sched_show_task+0x506/0x6d0 [ 571.496097][ C1] ? report_rtnl_holders+0x29e/0x3f0 [ 571.501438][ C1] ? __pfx__printk+0x10/0x10 [ 571.506065][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 571.511398][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 571.517320][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 571.523721][ C1] report_rtnl_holders+0x320/0x3f0 [ 571.528930][ C1] call_timer_fn+0x18e/0x650 [ 571.533550][ C1] ? call_timer_fn+0xc0/0x650 [ 571.538228][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 571.543902][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 571.549063][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 571.554729][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 571.560418][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 571.566116][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 571.571373][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 571.576620][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 571.582348][ C1] __run_timer_base+0x66a/0x8e0 [ 571.587251][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 571.592703][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 571.599121][ C1] run_timer_softirq+0xb7/0x170 [ 571.604009][ C1] handle_softirqs+0x2c4/0x970 [ 571.608821][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 571.613616][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 571.618961][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 571.624215][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 571.628888][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 571.634145][ C1] irq_exit_rcu+0x9/0x30 [ 571.638431][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 571.644116][ C1] [ 571.647050][ C1] [ 571.650029][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 571.656041][ C1] RIP: 0010:preempt_schedule_irq+0xf6/0x1c0 [ 571.661987][ C1] Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 8b 00 00 00 bf 01 00 00 00 e8 15 24 c8 f5 e8 10 c3 00 f6 fb bf 01 00 00 00 55 ad ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 45 de 5f f6 48 [ 571.681684][ C1] RSP: 0018:ffffc900095d7440 EFLAGS: 00000286 [ 571.687793][ C1] RAX: 07d15ed4f5082900 RBX: 1ffff920012bae90 RCX: ffffffff816fddda [ 571.695817][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcac900 RDI: 0000000000000001 [ 571.703865][ C1] RBP: ffffc900095d7500 R08: ffffffff9301078f R09: 1ffffffff26020f1 [ 571.711929][ C1] R10: dffffc0000000000 R11: fffffbfff26020f2 R12: 1ffff920012bae88 [ 571.719988][ C1] R13: 1ffff920012bae8c R14: ffffc900095d7460 R15: dffffc0000000000 [ 571.728014][ C1] ? mark_lock+0x9a/0x360 [ 571.732441][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 571.738230][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 571.743898][ C1] irqentry_exit+0x5e/0x90 [ 571.748385][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 571.753942][ C1] RIP: 0010:lockdep_unregister_key+0x56d/0x610 [ 571.760193][ C1] Code: ff 92 48 c7 c6 10 bc 6f 81 e8 8f 04 0a 00 e8 fa 18 0a 00 e9 e5 fb ff ff e8 c0 62 21 0a 41 f7 c7 00 02 00 00 74 d0 fb 45 84 f6 <75> cf eb e0 90 0f 0b 90 45 31 f6 e9 62 ff ff ff 90 0f 0b 90 e9 a1 [ 571.779889][ C1] RSP: 0018:ffffc900095d75c0 EFLAGS: 00000246 [ 571.786015][ C1] RAX: dffffc0000000000 RBX: 1ffff920012baec0 RCX: ffffffff947f4803 [ 571.794090][ C1] RDX: 0000000000000001 RSI: ffffffff8bcad5e0 RDI: ffffffff8c207f20 [ 571.802153][ C1] RBP: ffffc900095d7698 R08: ffffffff9300748f R09: 1ffffffff2600e91 [ 571.810208][ C1] R10: dffffc0000000000 R11: fffffbfff2600e92 R12: ffffc900095d7600 [ 571.818224][ C1] R13: 1ffff920012baebc R14: 0000000000000000 R15: 0000000000000a02 [ 571.826306][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 571.832299][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 571.837562][ C1] ? __qdisc_destroy+0x150/0x410 [ 571.842579][ C1] ? kfree+0x149/0x360 [ 571.846704][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 571.852340][ C1] __qdisc_destroy+0x165/0x410 [ 571.857162][ C1] dev_shutdown+0x9b/0x440 [ 571.861671][ C1] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 571.868051][ C1] ? __lock_acquire+0x1359/0x2000 [ 571.873181][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 571.880026][ C1] ? __asan_memset+0x23/0x50 [ 571.884665][ C1] ? skb_queue_purge_reason+0x2de/0x500 [ 571.890321][ C1] ? __asan_memset+0x23/0x50 [ 571.894964][ C1] ? skb_queue_purge_reason+0x2de/0x500 [ 571.900627][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 571.905873][ C1] unregister_netdevice_queue+0x303/0x370 [ 571.911688][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 571.917995][ C1] __tun_detach+0x6b6/0x1600 [ 571.922689][ C1] tun_chr_close+0x108/0x1b0 [ 571.927320][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 571.932520][ C1] __fput+0x24a/0x8a0 [ 571.936574][ C1] task_work_run+0x24f/0x310 [ 571.941260][ C1] ? __pfx_task_work_run+0x10/0x10 [ 571.946430][ C1] get_signal+0x15e6/0x1740 [ 571.951031][ C1] ? __pfx_get_signal+0x10/0x10 [ 571.955930][ C1] arch_do_signal_or_restart+0x96/0x860 [ 571.961571][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 571.967784][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 571.973890][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 571.979706][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 571.985306][ C1] do_syscall_64+0x100/0x230 [ 571.989972][ C1] ? clear_bhb_loop+0x35/0x90 [ 571.994705][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.000685][ C1] RIP: 0033:0x7f8911375bd9 [ 572.005137][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.024832][ C1] RSP: 002b:00007f89121ee048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.033346][ C1] RAX: 0000000000000000 RBX: 00007f8911503f60 RCX: 00007f8911375bd9 [ 572.041403][ C1] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000006 [ 572.049461][ C1] RBP: 00007f89113e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 572.057478][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.065531][ C1] R13: 000000000000000b R14: 00007f8911503f60 R15: 00007ffcb990c848 [ 572.073620][ C1] [ 572.076670][ C1] DEBUG: waiting rtnl_mutex for 969 jiffies. [ 572.082720][ C1] task:syz.1.1731 state:D stack:25624 pid:12094 tgid:12087 ppid:10815 flags:0x00004004 [ 572.092976][ C1] Call Trace: [ 572.096293][ C1] [ 572.099305][ C1] __schedule+0x1800/0x4a60 [ 572.103883][ C1] ? __pfx___schedule+0x10/0x10 [ 572.108777][ C1] ? __pfx_lock_release+0x10/0x10 [ 572.113891][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 572.119458][ C1] ? schedule+0x90/0x320 [ 572.123746][ C1] schedule+0x14b/0x320 [ 572.127931][ C1] schedule_preempt_disabled+0x13/0x30 [ 572.133425][ C1] __mutex_lock+0x6a4/0xd70 [ 572.137940][ C1] ? __mutex_lock+0x527/0xd70 [ 572.142677][ C1] ? nl80211_dump_interface+0x103/0x760 [ 572.148254][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 572.153322][ C1] ? get_rtnl_holder+0x144/0x190 [ 572.158266][ C1] nl80211_dump_interface+0x103/0x760 [ 572.163703][ C1] ? rcu_is_watching+0x15/0xb0 [ 572.168507][ C1] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 572.175142][ C1] ? __build_skb_around+0x245/0x3d0 [ 572.180404][ C1] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 572.185930][ T5103] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 572.186318][ C1] ? __alloc_skb+0x28f/0x440 [ 572.186355][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.201754][ T5103] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 572.204306][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 572.213560][ T5103] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 572.216144][ C1] genl_dumpit+0x107/0x1a0 [ 572.224549][ T5103] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 572.227522][ C1] netlink_dump+0x647/0xd80 [ 572.235548][ T5103] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 572.239037][ C1] ? __pfx_netlink_dump+0x10/0x10 [ 572.246650][ T5103] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 572.251074][ C1] ? __asan_memset+0x23/0x50 [ 572.251109][ C1] ? genl_start+0x4a8/0x6d0 [ 572.267404][ C1] __netlink_dump_start+0x59f/0x780 [ 572.273459][ C1] genl_rcv_msg+0x88c/0xec0 [ 572.278028][ C1] ? mark_lock+0x9a/0x360 [ 572.282481][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.287581][ C1] ? __pfx_genl_start+0x10/0x10 [ 572.292526][ C1] ? __pfx_genl_dumpit+0x10/0x10 [ 572.297522][ C1] ? __pfx_genl_done+0x10/0x10 [ 572.302405][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 572.307644][ C1] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 572.313586][ C1] ? __pfx___might_resched+0x10/0x10 [ 572.318936][ C1] netlink_rcv_skb+0x1e3/0x430 [ 572.323762][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.328867][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 572.334198][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 572.339726][ C1] genl_rcv+0x28/0x40 [ 572.343748][ C1] netlink_unicast+0x7f0/0x990 [ 572.348557][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 572.353879][ C1] ? __virt_addr_valid+0x183/0x530 [ 572.359047][ C1] ? __check_object_size+0x49c/0x900 [ 572.364368][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 572.369560][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 572.374376][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.379710][ C1] ? __import_iovec+0x536/0x820 [ 572.384597][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 572.389610][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 572.394938][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 572.400503][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.405848][ C1] __sock_sendmsg+0x221/0x270 [ 572.410619][ C1] ____sys_sendmsg+0x525/0x7d0 [ 572.415453][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.420813][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 572.425439][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 572.430649][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 572.436670][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 572.443031][ C1] ? exc_page_fault+0x590/0x8c0 [ 572.447894][ C1] ? do_syscall_64+0xb6/0x230 [ 572.452625][ C1] do_syscall_64+0xf3/0x230 [ 572.457146][ C1] ? clear_bhb_loop+0x35/0x90 [ 572.461884][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.467809][ C1] RIP: 0033:0x7fc864175bd9 [ 572.472271][ C1] RSP: 002b:00007fc864fee048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.480759][ C1] RAX: ffffffffffffffda RBX: 00007fc864304038 RCX: 00007fc864175bd9 [ 572.488815][ C1] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 572.496815][ C1] RBP: 00007fc8641e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 572.504875][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.512922][ C1] R13: 000000000000006e R14: 00007fc864304038 R15: 00007ffdd99b01d8 [ 572.520996][ C1] [ 572.524035][ C1] DEBUG: waiting rtnl_mutex for 1006 jiffies. [ 572.530141][ C1] task:syz-executor state:D stack:24480 pid:11989 tgid:11989 ppid:11968 flags:0x00004002 [ 572.540390][ C1] Call Trace: [ 572.543691][ C1] [ 572.546630][ C1] __schedule+0x1800/0x4a60 [ 572.551215][ C1] ? __pfx___schedule+0x10/0x10 [ 572.556097][ C1] ? __pfx_lock_release+0x10/0x10 [ 572.561183][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 572.566691][ C1] ? schedule+0x90/0x320 [ 572.571002][ C1] schedule+0x14b/0x320 [ 572.575189][ C1] schedule_preempt_disabled+0x13/0x30 [ 572.580702][ C1] __mutex_lock+0x6a4/0xd70 [ 572.585238][ C1] ? __mutex_lock+0x527/0xd70 [ 572.589970][ C1] ? ip_tunnel_init_net+0x20e/0x710 [ 572.595200][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 572.600292][ C1] ? get_rtnl_holder+0x144/0x190 [ 572.605273][ C1] ip_tunnel_init_net+0x20e/0x710 [ 572.610378][ C1] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 572.615976][ C1] ? ops_init+0x8b/0x610 [ 572.620283][ C1] vti_init_net+0x2e/0xf0 [ 572.624673][ C1] ops_init+0x359/0x610 [ 572.628906][ C1] setup_net+0x515/0xca0 [ 572.633173][ C1] ? __pfx_down_read_killable+0x10/0x10 [ 572.638733][ C1] ? __pfx_setup_net+0x10/0x10 [ 572.643540][ C1] copy_net_ns+0x4e2/0x7b0 [ 572.647965][ C1] create_new_namespaces+0x425/0x7b0 [ 572.653287][ C1] ? bpf_lsm_capable+0x9/0x10 [ 572.657974][ C1] unshare_nsproxy_namespaces+0x124/0x180 [ 572.663756][ C1] ksys_unshare+0x619/0xc10 [ 572.668303][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 572.673416][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 572.679492][ C1] ? do_syscall_64+0x100/0x230 [ 572.684293][ C1] __x64_sys_unshare+0x38/0x40 [ 572.689123][ C1] do_syscall_64+0xf3/0x230 [ 572.693685][ C1] ? clear_bhb_loop+0x35/0x90 [ 572.698392][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.704369][ C1] RIP: 0033:0x7fdbce577337 [ 572.708868][ C1] RSP: 002b:00007ffcaea85d98 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 572.717354][ C1] RAX: ffffffffffffffda RBX: 00007fdbce703f20 RCX: 00007fdbce577337 [ 572.725404][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 572.733462][ C1] RBP: 00007fdbce704a18 R08: 0000000000000000 R09: 0000000000000000 [ 572.741526][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 572.749575][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 572.757701][ C1] [ 572.760794][ C1] DEBUG: waiting rtnl_mutex for 1027 jiffies. [ 572.766896][ C1] task:kworker/1:5 state:D stack:20336 pid:5146 tgid:5146 ppid:2 flags:0x00004000 [ 572.777165][ C1] Workqueue: events switchdev_deferred_process_work [ 572.783866][ C1] Call Trace: [ 572.787182][ C1] [ 572.790233][ C1] __schedule+0x1800/0x4a60 [ 572.794873][ C1] ? __pfx___schedule+0x10/0x10 [ 572.799832][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 572.805870][ C1] ? __pfx_lock_release+0x10/0x10 [ 572.811002][ C1] ? kick_pool+0x1bd/0x620 [ 572.815486][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 572.820786][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 572.826050][ C1] ? schedule+0x90/0x320 [ 572.830374][ C1] schedule+0x14b/0x320 [ 572.834577][ C1] schedule_preempt_disabled+0x13/0x30 [ 572.840122][ C1] __mutex_lock+0x6a4/0xd70 [ 572.844703][ C1] ? __mutex_lock+0x527/0xd70 [ 572.849452][ C1] ? switchdev_deferred_process_work+0xe/0x20 [ 572.855564][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 572.860687][ C1] ? get_rtnl_holder+0x144/0x190 [ 572.865629][ C1] ? process_scheduled_works+0x945/0x1830 [ 572.871410][ C1] switchdev_deferred_process_work+0xe/0x20 [ 572.877366][ C1] process_scheduled_works+0xa2c/0x1830 [ 572.882969][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 572.889093][ C1] ? assign_work+0x364/0x3d0 [ 572.893728][ C1] worker_thread+0x86d/0xd40 [ 572.898352][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 572.904288][ C1] ? __kthread_parkme+0x169/0x1d0 [ 572.909383][ C1] ? __pfx_worker_thread+0x10/0x10 [ 572.914547][ C1] kthread+0x2f0/0x390 [ 572.918652][ C1] ? __pfx_worker_thread+0x10/0x10 [ 572.923801][ C1] ? __pfx_kthread+0x10/0x10 [ 572.928405][ C1] ret_from_fork+0x4b/0x80 [ 572.932879][ C1] ? __pfx_kthread+0x10/0x10 [ 572.937506][ C1] ret_from_fork_asm+0x1a/0x30 [ 572.942317][ C1] [ 572.945337][ C1] [ 572.945337][ C1] Showing all locks held in the system: [ 572.953093][ C1] 2 locks held by kworker/u8:3/36: [ 572.958234][ C1] #0: ffff8880b943ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 572.968259][ C1] #1: ffff8880b9428948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 572.979713][ C1] 4 locks held by kworker/u8:5/952: [ 572.984940][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 572.995886][ C1] #1: ffffc90003c87d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 573.006513][ C1] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 573.015991][ C1] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 573.025947][ C1] 2 locks held by getty/4852: [ 573.030669][ C1] #0: ffff88802acd30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 573.040520][ C1] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 573.050688][ C1] 3 locks held by kworker/1:5/5146: [ 573.055900][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 573.066956][ C1] #1: ffffc90003fbfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 573.078004][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 573.088419][ C1] 3 locks held by kworker/u8:14/9976: [ 573.093842][ C1] #0: ffff88802a70c948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 573.105516][ C1] #1: ffffc9000361fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 573.119255][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 573.128885][ C1] 3 locks held by kworker/0:2/10658: [ 573.134201][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 573.145266][ C1] #1: ffffc90008d8fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 573.156307][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 573.165330][ C1] 2 locks held by syz-executor/11989: [ 573.170746][ C1] #0: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 573.180262][ C1] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x710 [ 573.189880][ C1] 3 locks held by syz.2.1729/12079: [ 573.195092][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 573.204108][ C1] #1: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 573.214262][ C1] #2: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 573.224228][ C1] 3 locks held by syz.1.1731/12094: [ 573.229475][ C1] #0: ffffffff8f668fb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 573.237730][ C1] #1: ffff88802c585678 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x780 [ 573.248314][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_dump_interface+0x103/0x760 [ 573.258206][ C1] 2 locks held by syz.0.1750/12148: [ 573.263470][ C1] #0: ffffffff8f668fb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 573.271728][ C1] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 573.281082][ C1] 2 locks held by syz.0.1750/12149: [ 573.286301][ C1] #0: ffffffff8f668fb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 573.294561][ C1] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 573.303934][ C1] 1 lock held by syz-executor/12152: [ 573.309263][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 573.318874][ C1] 3 locks held by syz-executor/12154: [ 573.324265][ C1] #0: ffff88802f5c9e18 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x17c/0x3d0 [ 573.333754][ C1] #1: ffff88802fb68420 (sb_writers#4){++++}-{0:0}, at: ext4_file_mmap+0x192/0x550 [ 573.343479][ C1] #2: ffff88802fb6c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x203f/0x22a0 [ 573.353217][ C1] [ 573.355560][ C1] ============================================= [ 573.355560][ C1] [ 574.114028][ T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 574.129382][ T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 574.159126][ T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 574.186472][ T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 574.209451][ T55] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 574.217437][ T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 574.346700][ T5103] Bluetooth: hci6: command tx timeout [ 574.432487][ C1] DEBUG: waiting rtnl_mutex for 1121 jiffies. [ 574.438636][ C1] task:kworker/0:2 state:D stack:23288 pid:10658 tgid:10658 ppid:2 flags:0x00004000 [ 574.448895][ C1] Workqueue: events linkwatch_event [ 574.454148][ C1] Call Trace: [ 574.457458][ C1] [ 574.460461][ C1] __schedule+0x1800/0x4a60 [ 574.465032][ C1] ? __pfx___schedule+0x10/0x10 [ 574.469967][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 574.476010][ C1] ? __pfx_lock_release+0x10/0x10 [ 574.481126][ C1] ? kick_pool+0x45c/0x620 [ 574.485595][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.490875][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 574.496130][ C1] ? schedule+0x90/0x320 [ 574.500468][ C1] schedule+0x14b/0x320 [ 574.504670][ C1] schedule_preempt_disabled+0x13/0x30 [ 574.510204][ C1] __mutex_lock+0x6a4/0xd70 [ 574.514759][ C1] ? __mutex_lock+0x527/0xd70 [ 574.519515][ C1] ? linkwatch_event+0xe/0x60 [ 574.524325][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 574.529440][ C1] ? get_rtnl_holder+0x144/0x190 [ 574.534418][ C1] ? process_scheduled_works+0x945/0x1830 [ 574.540208][ C1] linkwatch_event+0xe/0x60 [ 574.544756][ C1] process_scheduled_works+0xa2c/0x1830 [ 574.550422][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.556471][ C1] ? assign_work+0x364/0x3d0 [ 574.561158][ C1] worker_thread+0x86d/0xd40 [ 574.565807][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 574.571832][ C1] ? __kthread_parkme+0x169/0x1d0 [ 574.576910][ C1] ? __pfx_worker_thread+0x10/0x10 [ 574.582117][ C1] kthread+0x2f0/0x390 [ 574.586235][ C1] ? __pfx_worker_thread+0x10/0x10 [ 574.591428][ C1] ? __pfx_kthread+0x10/0x10 [ 574.596084][ C1] ret_from_fork+0x4b/0x80 [ 574.600669][ C1] ? __pfx_kthread+0x10/0x10 [ 574.605307][ C1] ret_from_fork_asm+0x1a/0x30 [ 574.610173][ C1] [ 574.613227][ C1] DEBUG: waiting rtnl_mutex for 988 jiffies. [ 574.619285][ C1] task:kworker/u8:5 state:D stack:21040 pid:952 tgid:952 ppid:2 flags:0x00004000 [ 574.629507][ C1] Workqueue: netns cleanup_net [ 574.634302][ C1] Call Trace: [ 574.637588][ C1] [ 574.640567][ C1] __schedule+0x1800/0x4a60 [ 574.645132][ C1] ? __pfx___schedule+0x10/0x10 [ 574.650149][ C1] ? __pfx_lock_release+0x10/0x10 [ 574.655228][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 574.660742][ C1] ? kthread_data+0x52/0xd0 [ 574.665262][ C1] ? schedule+0x90/0x320 [ 574.669554][ C1] ? wq_worker_sleeping+0x66/0x240 [ 574.674711][ C1] ? schedule+0x90/0x320 [ 574.679009][ C1] schedule+0x14b/0x320 [ 574.683183][ C1] schedule_preempt_disabled+0x13/0x30 [ 574.688654][ C1] __mutex_lock+0x6a4/0xd70 [ 574.693228][ C1] ? __mutex_lock+0x527/0xd70 [ 574.697924][ C1] ? ieee80211_unregister_hw+0x55/0x2c0 [ 574.703554][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 574.708596][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 574.714569][ C1] ? rcu_is_watching+0x15/0xb0 [ 574.719406][ C1] ? get_rtnl_holder+0x144/0x190 [ 574.724389][ C1] ieee80211_unregister_hw+0x55/0x2c0 [ 574.729820][ C1] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 574.735393][ C1] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 574.741546][ C1] hwsim_exit_net+0x5c1/0x670 [ 574.746267][ C1] ? __pfx_hwsim_exit_net+0x10/0x10 [ 574.751546][ C1] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 574.757399][ C1] cleanup_net+0x802/0xcc0 [ 574.761868][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 574.766869][ C1] ? process_scheduled_works+0x945/0x1830 [ 574.772633][ C1] process_scheduled_works+0xa2c/0x1830 [ 574.778309][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.784336][ C1] ? assign_work+0x364/0x3d0 [ 574.788986][ C1] worker_thread+0x86d/0xd40 [ 574.793656][ C1] ? __kthread_parkme+0x169/0x1d0 [ 574.798719][ C1] ? __pfx_worker_thread+0x10/0x10 [ 574.803873][ C1] kthread+0x2f0/0x390 [ 574.807986][ C1] ? __pfx_worker_thread+0x10/0x10 [ 574.813143][ C1] ? __pfx_kthread+0x10/0x10 [ 574.817756][ C1] ret_from_fork+0x4b/0x80 [ 574.822253][ C1] ? __pfx_kthread+0x10/0x10 [ 574.826865][ C1] ret_from_fork_asm+0x1a/0x30 [ 574.831721][ C1] [ 574.834774][ C1] DEBUG: waiting rtnl_mutex for 665 jiffies. [ 574.840778][ C1] task:syz.0.1750 state:D stack:24504 pid:12148 tgid:12147 ppid:6315 flags:0x00004004 [ 574.851107][ C1] Call Trace: [ 574.854422][ C1] [ 574.857395][ C1] __schedule+0x1800/0x4a60 [ 574.861975][ C1] ? __pfx___schedule+0x10/0x10 [ 574.866871][ C1] ? __pfx_lock_release+0x10/0x10 [ 574.871988][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 574.877527][ C1] ? schedule+0x90/0x320 [ 574.881917][ C1] schedule+0x14b/0x320 [ 574.886143][ C1] schedule_preempt_disabled+0x13/0x30 [ 574.891705][ C1] __mutex_lock+0x6a4/0xd70 [ 574.896249][ C1] ? __mutex_lock+0x527/0xd70 [ 574.900967][ C1] ? nl80211_pre_doit+0x5f/0x8b0 [ 574.905961][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 574.911032][ C1] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 574.917322][ C1] ? get_rtnl_holder+0x144/0x190 [ 574.922313][ C1] nl80211_pre_doit+0x5f/0x8b0 [ 574.927098][ C1] genl_rcv_msg+0xaaa/0xec0 [ 574.931648][ C1] ? mark_lock+0x9a/0x360 [ 574.935995][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.941082][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 574.946123][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 574.951533][ C1] ? __pfx_nl80211_set_interface+0x10/0x10 [ 574.957369][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 574.962923][ C1] ? __pfx___might_resched+0x10/0x10 [ 574.968239][ C1] netlink_rcv_skb+0x1e3/0x430 [ 574.973082][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.978120][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.983454][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 574.988974][ C1] genl_rcv+0x28/0x40 [ 574.992991][ C1] netlink_unicast+0x7f0/0x990 [ 574.997775][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 575.003119][ C1] ? __virt_addr_valid+0x183/0x530 [ 575.008267][ C1] ? __check_object_size+0x49c/0x900 [ 575.013619][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 575.018764][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 575.023616][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.028949][ C1] ? __import_iovec+0x536/0x820 [ 575.033849][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 575.038850][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 575.044181][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 575.049704][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.055048][ C1] __sock_sendmsg+0x221/0x270 [ 575.059800][ C1] ____sys_sendmsg+0x525/0x7d0 [ 575.064616][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.069986][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 575.074620][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 575.079822][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 575.086162][ C1] ? do_syscall_64+0x100/0x230 [ 575.090982][ C1] ? do_syscall_64+0xb6/0x230 [ 575.095693][ C1] do_syscall_64+0xf3/0x230 [ 575.100227][ C1] ? clear_bhb_loop+0x35/0x90 [ 575.104945][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.110870][ C1] RIP: 0033:0x7f67fff75bd9 [ 575.115321][ C1] RSP: 002b:00007f6800d32048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.123798][ C1] RAX: ffffffffffffffda RBX: 00007f6800103f60 RCX: 00007f67fff75bd9 [ 575.131803][ C1] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 575.139829][ C1] RBP: 00007f67fffe4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 575.147864][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.155901][ C1] R13: 000000000000000b R14: 00007f6800103f60 R15: 00007ffcf55b77c8 [ 575.163966][ C1] [ 575.167020][ C1] DEBUG: waiting rtnl_mutex for 690 jiffies. [ 575.173036][ C1] task:syz.0.1750 state:D stack:27056 pid:12149 tgid:12147 ppid:6315 flags:0x00004004 [ 575.183234][ C1] Call Trace: [ 575.186533][ C1] [ 575.189496][ C1] __schedule+0x1800/0x4a60 [ 575.194029][ C1] ? __pfx___schedule+0x10/0x10 [ 575.198944][ C1] ? __pfx_lock_release+0x10/0x10 [ 575.204031][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 575.209538][ C1] ? schedule+0x90/0x320 [ 575.213790][ C1] schedule+0x14b/0x320 [ 575.217956][ C1] schedule_preempt_disabled+0x13/0x30 [ 575.223450][ C1] __mutex_lock+0x6a4/0xd70 [ 575.227969][ C1] ? __mutex_lock+0x527/0xd70 [ 575.232683][ C1] ? nl80211_pre_doit+0x5f/0x8b0 [ 575.237634][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 575.242701][ C1] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 575.249001][ C1] ? get_rtnl_holder+0x144/0x190 [ 575.253969][ C1] nl80211_pre_doit+0x5f/0x8b0 [ 575.258758][ C1] genl_rcv_msg+0xaaa/0xec0 [ 575.263341][ C1] ? mark_lock+0x9a/0x360 [ 575.267716][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.272837][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 575.277875][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 575.283283][ C1] ? __pfx_nl80211_connect+0x10/0x10 [ 575.288575][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 575.294094][ C1] ? __pfx___might_resched+0x10/0x10 [ 575.299420][ C1] netlink_rcv_skb+0x1e3/0x430 [ 575.304201][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.309289][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.314626][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 575.320123][ C1] genl_rcv+0x28/0x40 [ 575.324112][ C1] netlink_unicast+0x7f0/0x990 [ 575.328934][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 575.334281][ C1] ? __virt_addr_valid+0x183/0x530 [ 575.339439][ C1] ? __check_object_size+0x49c/0x900 [ 575.344754][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 575.349906][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 575.354710][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.360052][ C1] ? __import_iovec+0x536/0x820 [ 575.364951][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 575.370002][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 575.375306][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 575.380832][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.386146][ C1] __sock_sendmsg+0x221/0x270 [ 575.390887][ C1] ____sys_sendmsg+0x525/0x7d0 [ 575.395672][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.401096][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 575.405704][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 575.410874][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 575.416875][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 575.423237][ C1] ? exc_page_fault+0x590/0x8c0 [ 575.428138][ C1] ? do_syscall_64+0xb6/0x230 [ 575.432851][ C1] do_syscall_64+0xf3/0x230 [ 575.437393][ C1] ? clear_bhb_loop+0x35/0x90 [ 575.442131][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.448032][ C1] RIP: 0033:0x7f67fff75bd9 [ 575.452472][ C1] RSP: 002b:00007f6800d11048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.460957][ C1] RAX: ffffffffffffffda RBX: 00007f6800104038 RCX: 00007f67fff75bd9 [ 575.468982][ C1] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000006 [ 575.476994][ C1] RBP: 00007f67fffe4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 575.485006][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.493031][ C1] R13: 000000000000006e R14: 00007f6800104038 R15: 00007ffcf55b77c8 [ 575.501045][ C1] [ 575.504065][ C1] DEBUG: waiting rtnl_mutex for 708 jiffies. [ 575.510060][ C1] task:kworker/u8:14 state:D stack:20024 pid:9976 tgid:9976 ppid:2 flags:0x00004000 [ 575.520252][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 575.526517][ C1] Call Trace: [ 575.529822][ C1] [ 575.532756][ C1] __schedule+0x1800/0x4a60 [ 575.537292][ C1] ? __pfx___schedule+0x10/0x10 [ 575.542223][ C1] ? __pfx_lock_release+0x10/0x10 [ 575.547310][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 575.552853][ C1] ? kthread_data+0x52/0xd0 [ 575.557405][ C1] ? schedule+0x90/0x320 [ 575.561720][ C1] ? wq_worker_sleeping+0x66/0x240 [ 575.566883][ C1] ? schedule+0x90/0x320 [ 575.571246][ C1] schedule+0x14b/0x320 [ 575.575451][ C1] schedule_preempt_disabled+0x13/0x30 [ 575.581021][ C1] __mutex_lock+0x6a4/0xd70 [ 575.585618][ C1] ? __mutex_lock+0x527/0xd70 [ 575.590347][ C1] ? addrconf_verify_work+0x19/0x30 [ 575.595568][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 575.600649][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 575.606715][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 575.613085][ C1] ? get_rtnl_holder+0x144/0x190 [ 575.618053][ C1] ? process_scheduled_works+0x945/0x1830 [ 575.623826][ C1] addrconf_verify_work+0x19/0x30 [ 575.628909][ C1] process_scheduled_works+0xa2c/0x1830 [ 575.634508][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 575.640535][ C1] ? assign_work+0x364/0x3d0 [ 575.645176][ C1] worker_thread+0x86d/0xd40 [ 575.649815][ C1] ? __kthread_parkme+0x169/0x1d0 [ 575.654855][ C1] ? __pfx_worker_thread+0x10/0x10 [ 575.659998][ C1] kthread+0x2f0/0x390 [ 575.664086][ C1] ? __pfx_worker_thread+0x10/0x10 [ 575.669253][ C1] ? __pfx_kthread+0x10/0x10 [ 575.673988][ C1] ret_from_fork+0x4b/0x80 [ 575.678469][ C1] ? __pfx_kthread+0x10/0x10 [ 575.683162][ C1] ret_from_fork_asm+0x1a/0x30 [ 575.687956][ C1] [ 575.691030][ C1] DEBUG: holding rtnl_mutex for 1344 jiffies. [ 575.697102][ C1] task:syz.2.1729 state:R running task stack:23800 pid:12079 tgid:12078 ppid:11011 flags:0x0000400e [ 575.708920][ C1] Call Trace: [ 575.712224][ C1] [ 575.715071][ C1] sched_show_task+0x506/0x6d0 [ 575.719938][ C1] ? report_rtnl_holders+0x29e/0x3f0 [ 575.725249][ C1] ? __pfx__printk+0x10/0x10 [ 575.729889][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 575.735187][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 575.741203][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 575.747546][ C1] report_rtnl_holders+0x320/0x3f0 [ 575.752705][ C1] call_timer_fn+0x18e/0x650 [ 575.757304][ C1] ? call_timer_fn+0xc0/0x650 [ 575.762043][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 575.767691][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 575.772859][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 575.778540][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 575.784244][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 575.789927][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.795145][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 575.800407][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 575.806085][ C1] __run_timer_base+0x66a/0x8e0 [ 575.810982][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 575.816369][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 575.822738][ C1] run_timer_softirq+0xb7/0x170 [ 575.827688][ C1] handle_softirqs+0x2c4/0x970 [ 575.832509][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 575.837285][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 575.842602][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 575.847813][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 575.852435][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 575.857647][ C1] irq_exit_rcu+0x9/0x30 [ 575.861918][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 575.867568][ C1] [ 575.870523][ C1] [ 575.873458][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 575.879483][ C1] RIP: 0010:lockdep_unregister_key+0x56d/0x610 [ 575.885654][ C1] Code: ff 92 48 c7 c6 10 bc 6f 81 e8 8f 04 0a 00 e8 fa 18 0a 00 e9 e5 fb ff ff e8 c0 62 21 0a 41 f7 c7 00 02 00 00 74 d0 fb 45 84 f6 <75> cf eb e0 90 0f 0b 90 45 31 f6 e9 62 ff ff ff 90 0f 0b 90 e9 a1 [ 575.905323][ C1] RSP: 0018:ffffc900095d75c0 EFLAGS: 00000246 [ 575.911436][ C1] RAX: dffffc0000000000 RBX: 1ffff920012baec0 RCX: ffffffff947f4803 [ 575.919557][ C1] RDX: 0000000000000001 RSI: ffffffff8bcad5e0 RDI: ffffffff8c207f20 [ 575.927532][ C1] RBP: ffffc900095d7698 R08: ffffffff930074af R09: 1ffffffff2600e95 [ 575.935625][ C1] R10: dffffc0000000000 R11: fffffbfff2600e96 R12: ffffc900095d7600 [ 575.943655][ C1] R13: 1ffff920012baebc R14: 0000000000000000 R15: 0000000000000a07 [ 575.951694][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 575.957606][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 575.962843][ C1] ? __qdisc_destroy+0x150/0x410 [ 575.967784][ C1] ? kfree+0x149/0x360 [ 575.971906][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 575.977474][ C1] __qdisc_destroy+0x165/0x410 [ 575.982277][ C1] dev_shutdown+0x9b/0x440 [ 575.986704][ C1] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 575.993094][ C1] ? __lock_acquire+0x1359/0x2000 [ 575.998153][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 576.004960][ C1] ? __asan_memset+0x23/0x50 [ 576.009582][ C1] ? skb_queue_purge_reason+0x2de/0x500 [ 576.015155][ C1] ? __asan_memset+0x23/0x50 [ 576.019804][ C1] ? skb_queue_purge_reason+0x2de/0x500 [ 576.025520][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 576.030755][ C1] unregister_netdevice_queue+0x303/0x370 [ 576.036487][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 576.042771][ C1] __tun_detach+0x6b6/0x1600 [ 576.047415][ C1] tun_chr_close+0x108/0x1b0 [ 576.052129][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 576.057247][ C1] __fput+0x24a/0x8a0 [ 576.061294][ C1] task_work_run+0x24f/0x310 [ 576.065900][ C1] ? __pfx_task_work_run+0x10/0x10 [ 576.071068][ C1] get_signal+0x15e6/0x1740 [ 576.075610][ C1] ? __pfx_get_signal+0x10/0x10 [ 576.080496][ C1] arch_do_signal_or_restart+0x96/0x860 [ 576.086061][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 576.092280][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 576.098284][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 576.104056][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 576.109650][ C1] do_syscall_64+0x100/0x230 [ 576.114272][ C1] ? clear_bhb_loop+0x35/0x90 [ 576.118989][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.124898][ C1] RIP: 0033:0x7f8911375bd9 [ 576.129375][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.149067][ C1] RSP: 002b:00007f89121ee048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.157560][ C1] RAX: 0000000000000000 RBX: 00007f8911503f60 RCX: 00007f8911375bd9 [ 576.165591][ C1] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000006 [ 576.173594][ C1] RBP: 00007f89113e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 576.181599][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.189730][ C1] R13: 000000000000000b R14: 00007f8911503f60 R15: 00007ffcb990c848 [ 576.197736][ C1] [ 576.200794][ C1] DEBUG: waiting rtnl_mutex for 1382 jiffies. [ 576.206875][ C1] task:syz.1.1731 state:D stack:25624 pid:12094 tgid:12087 ppid:10815 flags:0x00004004 [ 576.217082][ C1] Call Trace: [ 576.220424][ C1] [ 576.223359][ C1] __schedule+0x1800/0x4a60 [ 576.227890][ C1] ? __pfx___schedule+0x10/0x10 [ 576.232800][ C1] ? __pfx_lock_release+0x10/0x10 [ 576.237858][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 576.243367][ C1] ? schedule+0x90/0x320 [ 576.247624][ C1] schedule+0x14b/0x320 [ 576.251814][ C1] schedule_preempt_disabled+0x13/0x30 [ 576.257283][ C1] __mutex_lock+0x6a4/0xd70 [ 576.261861][ C1] ? __mutex_lock+0x527/0xd70 [ 576.266548][ C1] ? nl80211_dump_interface+0x103/0x760 [ 576.272154][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 576.277197][ C1] ? get_rtnl_holder+0x144/0x190 [ 576.282185][ C1] nl80211_dump_interface+0x103/0x760 [ 576.287585][ C1] ? rcu_is_watching+0x15/0xb0 [ 576.292441][ C1] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 576.299081][ C1] ? __build_skb_around+0x245/0x3d0 [ 576.304296][ C1] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 576.310231][ C1] ? __alloc_skb+0x28f/0x440 [ 576.314827][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.320931][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 576.325910][ C1] genl_dumpit+0x107/0x1a0 [ 576.330368][ C1] netlink_dump+0x647/0xd80 [ 576.334923][ C1] ? __pfx_netlink_dump+0x10/0x10 [ 576.339994][ C1] ? __asan_memset+0x23/0x50 [ 576.344588][ C1] ? genl_start+0x4a8/0x6d0 [ 576.349163][ C1] __netlink_dump_start+0x59f/0x780 [ 576.354410][ C1] genl_rcv_msg+0x88c/0xec0 [ 576.358964][ C1] ? mark_lock+0x9a/0x360 [ 576.363325][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.368360][ C1] ? __pfx_genl_start+0x10/0x10 [ 576.373245][ C1] ? __pfx_genl_dumpit+0x10/0x10 [ 576.378191][ C1] ? __pfx_genl_done+0x10/0x10 [ 576.383000][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 576.388036][ C1] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 576.393990][ C1] ? __pfx___might_resched+0x10/0x10 [ 576.399326][ C1] netlink_rcv_skb+0x1e3/0x430 [ 576.404112][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.409172][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 576.414483][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 576.419979][ C1] genl_rcv+0x28/0x40 [ 576.423973][ C1] netlink_unicast+0x7f0/0x990 [ 576.428754][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 576.434107][ C1] ? __virt_addr_valid+0x183/0x530 [ 576.439258][ C1] ? __check_object_size+0x49c/0x900 [ 576.444555][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 576.449704][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 576.454485][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.459829][ C1] ? __import_iovec+0x536/0x820 [ 576.464715][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 576.469687][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 576.474985][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 576.480510][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.485827][ C1] __sock_sendmsg+0x221/0x270 [ 576.490564][ C1] ____sys_sendmsg+0x525/0x7d0 [ 576.495371][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 576.500734][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 576.505359][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 576.510533][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 576.516533][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 576.522916][ C1] ? exc_page_fault+0x590/0x8c0 [ 576.527788][ C1] ? do_syscall_64+0xb6/0x230 [ 576.532505][ C1] do_syscall_64+0xf3/0x230 [ 576.537019][ C1] ? clear_bhb_loop+0x35/0x90 [ 576.541758][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.547661][ C1] RIP: 0033:0x7fc864175bd9 [ 576.552106][ C1] RSP: 002b:00007fc864fee048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.560550][ C1] RAX: ffffffffffffffda RBX: 00007fc864304038 RCX: 00007fc864175bd9 [ 576.568526][ C1] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 576.576535][ C1] RBP: 00007fc8641e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 576.584536][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.592542][ C1] R13: 000000000000006e R14: 00007fc864304038 R15: 00007ffdd99b01d8 [ 576.600564][ C1] [ 576.603593][ C1] DEBUG: waiting rtnl_mutex for 1414 jiffies. [ 576.609682][ C1] task:syz-executor state:D stack:24480 pid:11989 tgid:11989 ppid:11968 flags:0x00004002 [ 576.619902][ C1] Call Trace: [ 576.623187][ C1] [ 576.626136][ C1] __schedule+0x1800/0x4a60 [ 576.630696][ C1] ? __pfx___schedule+0x10/0x10 [ 576.635559][ C1] ? __pfx_lock_release+0x10/0x10 [ 576.640620][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 576.646098][ C1] ? schedule+0x90/0x320 [ 576.650370][ C1] schedule+0x14b/0x320 [ 576.654535][ C1] schedule_preempt_disabled+0x13/0x30 [ 576.660048][ C1] __mutex_lock+0x6a4/0xd70 [ 576.664569][ C1] ? __mutex_lock+0x527/0xd70 [ 576.669279][ C1] ? ip_tunnel_init_net+0x20e/0x710 [ 576.674487][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 576.679613][ C1] ? get_rtnl_holder+0x144/0x190 [ 576.684585][ C1] ip_tunnel_init_net+0x20e/0x710 [ 576.689654][ C1] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 576.695220][ C1] ? ops_init+0x8b/0x610 [ 576.699564][ C1] vti_init_net+0x2e/0xf0 [ 576.703950][ C1] ops_init+0x359/0x610 [ 576.708135][ C1] setup_net+0x515/0xca0 [ 576.712426][ C1] ? __pfx_down_read_killable+0x10/0x10 [ 576.718024][ C1] ? __pfx_setup_net+0x10/0x10 [ 576.722833][ C1] copy_net_ns+0x4e2/0x7b0 [ 576.727275][ C1] create_new_namespaces+0x425/0x7b0 [ 576.732605][ C1] ? bpf_lsm_capable+0x9/0x10 [ 576.737298][ C1] unshare_nsproxy_namespaces+0x124/0x180 [ 576.743083][ C1] ksys_unshare+0x619/0xc10 [ 576.747620][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 576.752782][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 576.758830][ C1] ? do_syscall_64+0x100/0x230 [ 576.763646][ C1] __x64_sys_unshare+0x38/0x40 [ 576.768439][ C1] do_syscall_64+0xf3/0x230 [ 576.772979][ C1] ? clear_bhb_loop+0x35/0x90 [ 576.777670][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.783596][ C1] RIP: 0033:0x7fdbce577337 [ 576.788059][ C1] RSP: 002b:00007ffcaea85d98 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 576.796546][ C1] RAX: ffffffffffffffda RBX: 00007fdbce703f20 RCX: 00007fdbce577337 [ 576.804570][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 576.812585][ C1] RBP: 00007fdbce704a18 R08: 0000000000000000 R09: 0000000000000000 [ 576.820618][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 576.828619][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 576.836816][ C1] [ 576.839958][ C1] DEBUG: waiting rtnl_mutex for 1435 jiffies. [ 576.846032][ C1] task:kworker/1:5 state:D stack:20336 pid:5146 tgid:5146 ppid:2 flags:0x00004000 [ 576.856234][ C1] Workqueue: events switchdev_deferred_process_work [ 576.862863][ C1] Call Trace: [ 576.866141][ C1] [ 576.869112][ C1] __schedule+0x1800/0x4a60 [ 576.873674][ C1] ? __pfx___schedule+0x10/0x10 [ 576.878530][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 576.884571][ C1] ? __pfx_lock_release+0x10/0x10 [ 576.889634][ C1] ? kick_pool+0x1bd/0x620 [ 576.894080][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.899363][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 576.904613][ C1] ? schedule+0x90/0x320 [ 576.908915][ C1] schedule+0x14b/0x320 [ 576.913104][ C1] schedule_preempt_disabled+0x13/0x30 [ 576.918575][ C1] __mutex_lock+0x6a4/0xd70 [ 576.923146][ C1] ? __mutex_lock+0x527/0xd70 [ 576.927840][ C1] ? switchdev_deferred_process_work+0xe/0x20 [ 576.933943][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 576.939023][ C1] ? get_rtnl_holder+0x144/0x190 [ 576.943971][ C1] ? process_scheduled_works+0x945/0x1830 [ 576.949726][ C1] switchdev_deferred_process_work+0xe/0x20 [ 576.955628][ C1] process_scheduled_works+0xa2c/0x1830 [ 576.961224][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 576.967219][ C1] ? assign_work+0x364/0x3d0 [ 576.971843][ C1] worker_thread+0x86d/0xd40 [ 576.976449][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 576.982375][ C1] ? __kthread_parkme+0x169/0x1d0 [ 576.987412][ C1] ? __pfx_worker_thread+0x10/0x10 [ 576.992554][ C1] kthread+0x2f0/0x390 [ 576.996638][ C1] ? __pfx_worker_thread+0x10/0x10 [ 577.001809][ C1] ? __pfx_kthread+0x10/0x10 [ 577.006419][ C1] ret_from_fork+0x4b/0x80 [ 577.010906][ C1] ? __pfx_kthread+0x10/0x10 [ 577.015559][ C1] ret_from_fork_asm+0x1a/0x30 [ 577.020408][ C1] [ 577.023452][ C1] [ 577.023452][ C1] Showing all locks held in the system: [ 577.031232][ C1] 4 locks held by kworker/u8:5/952: [ 577.036448][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 577.047379][ C1] #1: ffffc90003c87d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 577.057969][ C1] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 577.067437][ C1] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 577.077373][ C1] 2 locks held by getty/4852: [ 577.082089][ C1] #0: ffff88802acd30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 577.091895][ C1] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 577.102050][ C1] 3 locks held by kworker/1:5/5146: [ 577.107268][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 577.118350][ C1] #1: ffffc90003fbfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 577.129378][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 577.139823][ C1] 4 locks held by kworker/0:7/5177: [ 577.145053][ C1] #0: ffff8880b943ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 577.155067][ C1] #1: ffff8880b9428948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3a7/0x770 [ 577.166569][ C1] #2: ffff8880b942a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 577.175960][ C1] #3: ffffffff949b4018 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x16d/0x510 [ 577.186378][ C1] 3 locks held by kworker/u8:14/9976: [ 577.191778][ C1] #0: ffff88802a70c948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 577.203392][ C1] #1: ffffc9000361fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 577.217111][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 577.226695][ C1] 3 locks held by kworker/0:2/10658: [ 577.232026][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 577.243033][ C1] #1: ffffc90008d8fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 577.254046][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 577.263064][ C1] 2 locks held by syz-executor/11989: [ 577.268444][ C1] #0: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 577.277885][ C1] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x710 [ 577.287442][ C1] 3 locks held by syz.2.1729/12079: [ 577.292666][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 577.301672][ C1] #1: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 577.311833][ C1] #2: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 577.321783][ C1] 3 locks held by syz.1.1731/12094: [ 577.326978][ C1] #0: ffffffff8f668fb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 577.335208][ C1] #1: ffff88802c585678 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x780 [ 577.345815][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_dump_interface+0x103/0x760 [ 577.355702][ C1] 2 locks held by syz.0.1750/12148: [ 577.360948][ C1] #0: ffffffff8f668fb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 577.369211][ C1] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 577.378460][ C1] 2 locks held by syz.0.1750/12149: [ 577.383691][ C1] #0: ffffffff8f668fb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 577.391923][ C1] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 577.401216][ C1] 1 lock held by syz-executor/12152: [ 577.406495][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 577.416041][ C1] 1 lock held by syz.3.1753/12160: [ 577.421175][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 577.430540][ C1] 1 lock held by syz-executor/12158: [ 577.435820][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 577.445353][ C1] [ 577.447672][ C1] ============================================= [ 577.447672][ C1] [ 577.472076][ T5103] Bluetooth: hci7: command tx timeout [ 577.472673][ T55] Bluetooth: hci6: command tx timeout [ 577.491591][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 578.125583][T12172] loop3: detected capacity change from 0 to 2048 [ 578.144127][T12172] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 578.400243][ T952] hsr_slave_0: left promiscuous mode [ 578.413149][ T952] hsr_slave_1: left promiscuous mode [ 578.427007][ T952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.444473][ T952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.200350][ T952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.232005][ T952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.323877][ T952] veth1_macvtap: left promiscuous mode [ 579.334833][ T952] veth0_macvtap: left promiscuous mode [ 579.340886][ T952] veth1_vlan: left promiscuous mode [ 579.346327][ T952] veth0_vlan: left promiscuous mode [ 579.539124][ T55] Bluetooth: hci6: command tx timeout [ 579.544592][ T55] Bluetooth: hci7: command tx timeout [ 580.621035][ T952] team0 (unregistering): Port device team_slave_1 removed [ 580.724856][ T952] team0 (unregistering): Port device team_slave_0 removed [ 581.233192][T12188] loop3: detected capacity change from 0 to 512 [ 581.323644][T12188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 581.336492][T12188] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.632414][ T55] Bluetooth: hci6: command tx timeout [ 581.640650][ T5103] Bluetooth: hci7: command tx timeout [ 582.824118][T11989] chnl_net:caif_netlink_parms(): no params data found [ 582.992185][T11989] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.007805][T11989] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.015809][T11989] bridge_slave_0: entered allmulticast mode [ 583.032201][T11989] bridge_slave_0: entered promiscuous mode [ 583.042478][T11989] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.059887][T11989] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.067342][T11989] bridge_slave_1: entered allmulticast mode [ 583.079298][T11989] bridge_slave_1: entered promiscuous mode [ 583.162144][T11989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.183386][T11989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.266778][T11989] team0: Port device team_slave_0 added [ 583.283110][T11989] team0: Port device team_slave_1 added [ 583.335829][T11989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.353220][T11989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.389027][T11989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.413351][T11989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.426758][T11989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.467194][T11989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.562267][T11989] hsr_slave_0: entered promiscuous mode [ 583.579725][T11989] hsr_slave_1: entered promiscuous mode [ 583.586313][T11989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.602638][T11989] Cannot create hsr debugfs directory [ 583.699488][ T55] Bluetooth: hci7: command tx timeout [ 584.089750][ T8099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 584.206291][T12199] loop3: detected capacity change from 0 to 512 [ 584.246273][T12199] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 584.269810][T12199] EXT4-fs (loop3): 1 truncate cleaned up [ 584.288062][T12199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.086376][T12212] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 585.215895][T12152] chnl_net:caif_netlink_parms(): no params data found [ 585.447713][ T8099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.472382][T12218] Bluetooth: hci3: unsupported parameter 28 [ 585.478480][T12218] Bluetooth: hci3: unsupported parameter 28 [ 585.504614][T12158] chnl_net:caif_netlink_parms(): no params data found [ 585.910606][T12152] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.919758][T12152] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.927060][T12152] bridge_slave_0: entered allmulticast mode [ 585.934978][T12152] bridge_slave_0: entered promiscuous mode [ 586.461470][T11989] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 586.753077][ T952] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.784028][T12152] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.794876][T12152] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.802446][T12152] bridge_slave_1: entered allmulticast mode [ 586.820091][T12152] bridge_slave_1: entered promiscuous mode [ 586.871811][T11989] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 586.884283][ T29] audit: type=1326 audit(1854400171.256:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.0.1772" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67fff75bd9 code=0x0 [ 586.914719][T11989] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 586.988579][ T952] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.029879][T11989] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 587.104481][ T952] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.135633][T12152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.218120][ T952] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.266238][T12158] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.277433][T12158] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.292869][T12158] bridge_slave_0: entered allmulticast mode [ 587.307111][T12158] bridge_slave_0: entered promiscuous mode [ 587.351771][T12152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.662314][T12158] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.709844][T12158] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.815564][T12158] bridge_slave_1: entered allmulticast mode [ 588.099320][T12158] bridge_slave_1: entered promiscuous mode [ 588.341195][T12152] team0: Port device team_slave_0 added [ 588.357747][T12152] team0: Port device team_slave_1 added [ 588.458465][T12158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.483773][T12158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.603192][T12152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.619059][T12152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.660804][T12152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.779857][T12152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.799008][T12152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.834265][T12152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.857755][T12158] team0: Port device team_slave_0 added [ 588.875290][T12158] team0: Port device team_slave_1 added [ 589.076503][T12152] hsr_slave_0: entered promiscuous mode [ 589.087769][T12152] hsr_slave_1: entered promiscuous mode [ 589.095560][T12152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.103576][T12152] Cannot create hsr debugfs directory [ 589.124668][T12158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.141294][T12158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.167772][T12158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.233237][T12158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.244625][T12158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.271284][T12158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.315817][T12284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1785'. [ 590.472824][ T952] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.534439][T12158] hsr_slave_0: entered promiscuous mode [ 590.542825][T12306] fuse: Bad value for 'fd' [ 590.558204][T12158] hsr_slave_1: entered promiscuous mode [ 590.573188][T12158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 590.587640][T12158] Cannot create hsr debugfs directory [ 590.680965][ T952] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.846940][ T952] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.057990][ T952] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.325111][T11989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.436266][T11989] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.514120][T10658] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.521400][T10658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.582372][T12313] loop3: detected capacity change from 0 to 8 [ 591.651164][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.658347][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.761808][ T952] bridge_slave_1: left allmulticast mode [ 591.767530][ T952] bridge_slave_1: left promiscuous mode [ 591.797778][ T952] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.815268][ T952] bridge_slave_0: left allmulticast mode [ 591.846667][ T952] bridge_slave_0: left promiscuous mode [ 591.869071][ T952] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.896664][ T952] bridge_slave_1: left allmulticast mode [ 591.906986][ T952] bridge_slave_1: left promiscuous mode [ 591.913402][ T952] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.941221][ T952] bridge_slave_0: left allmulticast mode [ 591.946938][ T952] bridge_slave_0: left promiscuous mode [ 591.964852][ T952] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.789185][ T48] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 592.994731][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.021653][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.036810][ T48] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00 [ 593.046064][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.057104][ T48] usb 1-1: config 0 descriptor?? [ 593.201694][ T952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.218360][ T952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.234267][ T952] bond0 (unregistering): Released all slaves [ 593.334712][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 593.354192][ T48] usb 1-1: string descriptor 0 read error: -71 [ 593.393104][ T48] usbhid 1-1:0.0: can't add hid device: -71 [ 593.399308][ T48] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 593.421550][ T48] usb 1-1: USB disconnect, device number 35 [ 593.501419][ T952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.519894][ T952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.534317][ T952] bond0 (unregistering): Released all slaves [ 593.568466][T11989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 593.582671][T11989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 594.127063][T11989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.255191][T12352] loop3: detected capacity change from 0 to 512 [ 594.291954][T12352] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 595.568543][ T952] hsr_slave_0: left promiscuous mode [ 595.575545][ T952] hsr_slave_1: left promiscuous mode [ 595.582133][ T952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.589791][ T952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.597816][ T952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.605340][ T952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.643172][ T952] hsr_slave_0: left promiscuous mode [ 595.651521][ T952] hsr_slave_1: left promiscuous mode [ 595.659626][ T952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.667092][ T952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.676458][ T952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.684048][ T952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.732713][ T952] veth1_macvtap: left promiscuous mode [ 595.738292][ T952] veth0_macvtap: left promiscuous mode [ 595.745511][ T952] veth1_vlan: left promiscuous mode [ 595.750977][ T952] veth0_vlan: left promiscuous mode [ 595.757545][ T952] veth1_macvtap: left promiscuous mode [ 595.764291][ T952] veth0_macvtap: left promiscuous mode [ 595.770125][ T952] veth1_vlan: left promiscuous mode [ 595.775493][ T952] veth0_vlan: left promiscuous mode [ 595.949349][ T5146] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 596.163454][ T5146] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.184161][ T5146] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 596.193408][ T5146] usb 4-1: config 1 has no interface number 0 [ 596.201099][ T5146] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.212157][ T5146] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 596.227229][ T5146] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 596.242044][ T5146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.250664][ T5146] usb 4-1: Product: syz [ 596.255015][ T5146] usb 4-1: Manufacturer: syz [ 596.259711][ T5146] usb 4-1: SerialNumber: syz [ 596.678616][T12374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.717361][ T5146] cdc_ncm 4-1:1.1: bind() failure [ 596.726538][ T5146] usb 4-1: USB disconnect, device number 34 [ 596.776666][ T952] team0 (unregistering): Port device team_slave_1 removed [ 596.848525][ T952] team0 (unregistering): Port device team_slave_0 removed [ 598.480004][ T952] team0 (unregistering): Port device team_slave_1 removed [ 598.589226][ T952] team0 (unregistering): Port device team_slave_0 removed [ 599.553997][T12405] loop3: detected capacity change from 0 to 512 [ 599.562115][T12405] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 599.618735][T12405] EXT4-fs (loop3): 1 orphan inode deleted [ 599.625675][T12405] EXT4-fs (loop3): 1 truncate cleaned up [ 599.646091][T12405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.767287][ T8099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.131084][T12152] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 600.192245][T12152] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 600.209710][T12152] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 600.227365][T12419] loop3: detected capacity change from 0 to 512 [ 600.253847][T12152] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 600.274782][T12419] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 600.323290][T11989] veth0_vlan: entered promiscuous mode [ 600.488172][T11989] veth1_vlan: entered promiscuous mode [ 600.683577][T12158] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 601.181118][T12158] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 601.348311][T12158] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 601.367487][T12158] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 601.980821][T11989] veth0_macvtap: entered promiscuous mode [ 602.207068][T11989] veth1_macvtap: entered promiscuous mode [ 602.389557][T12152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.446429][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.460193][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.470184][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.480997][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.496451][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.513362][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.527218][T11989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.561537][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.581696][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.597346][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.617403][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.631183][T12443] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1833'. [ 602.637049][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.651252][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.662703][T11989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.730965][T11989] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.748913][T11989] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.768041][T11989] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.779236][T11989] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.842795][T12152] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.898238][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.905565][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.993359][T12158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.022181][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.029564][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.104649][T12452] loop3: detected capacity change from 0 to 256 [ 603.148615][T12158] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.194848][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.221462][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.229281][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.236439][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.268197][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.275464][ T5115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.352781][ T952] bridge_slave_1: left allmulticast mode [ 603.358482][ T952] bridge_slave_1: left promiscuous mode [ 603.366715][ T952] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.384831][ T952] bridge_slave_0: left allmulticast mode [ 603.392077][ T952] bridge_slave_0: left promiscuous mode [ 603.397897][ T952] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.547269][T12458] loop3: detected capacity change from 0 to 128 [ 603.566343][T12458] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 603.739699][T12464] usb usb8: usbfs: process 12464 (syz.3.1841) did not claim interface 0 before use [ 604.165858][T12482] usb usb8: usbfs: process 12482 (syz.3.1851) did not claim interface 0 before use [ 604.290663][T12486] loop3: detected capacity change from 0 to 128 [ 604.347323][T12486] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 604.381767][T12486] ext4 filesystem being mounted at /251/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 604.436939][ T952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.476626][ T952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.497528][ T8099] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 604.512374][ T952] bond0 (unregistering): Released all slaves [ 604.732465][ T5461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.746027][T12152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 604.775895][ T5461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.838107][T12158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 605.221079][T12511] usb usb8: usbfs: process 12511 (syz.3.1860) did not claim interface 0 before use [ 605.337204][ T952] hsr_slave_0: left promiscuous mode [ 605.392522][ T952] hsr_slave_1: left promiscuous mode [ 605.415995][ T952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.456431][ T952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.481359][ T952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.497882][ T952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.596749][ T952] veth1_macvtap: left promiscuous mode [ 605.606126][ T952] veth0_macvtap: left promiscuous mode [ 605.615560][ T952] veth1_vlan: left promiscuous mode [ 605.624255][ T952] veth0_vlan: left promiscuous mode [ 605.904499][T12522] loop4: detected capacity change from 0 to 8192 [ 606.528017][T12535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.564832][T12535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.907169][ T952] team0 (unregistering): Port device team_slave_1 removed [ 606.986700][ T952] team0 (unregistering): Port device team_slave_0 removed [ 607.413132][ T5146] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 607.622119][ T5146] usb 4-1: too many configurations: 31, using maximum allowed: 8 [ 607.693199][ T5146] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 5.88 [ 607.711108][ T5146] usb 4-1: New USB device strings: Mfr=198, Product=1, SerialNumber=181 [ 607.721309][ T5146] usb 4-1: Product: syz [ 607.725976][ T5146] usb 4-1: Manufacturer: syz [ 607.730706][ T5146] usb 4-1: SerialNumber: syz [ 607.875113][T12543] loop4: detected capacity change from 0 to 512 [ 607.897777][T12543] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 607.916464][T12543] EXT4-fs (loop4): 1 truncate cleaned up [ 607.926606][T12543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.979129][ T5146] usb 4-1: USB disconnect, device number 35 [ 608.033663][T12152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.114265][T12158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.363879][T12547] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 608.626885][T12547] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 609.088701][T12158] veth0_vlan: entered promiscuous mode [ 609.110627][T11989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.132646][T12152] veth0_vlan: entered promiscuous mode [ 609.210648][T12152] veth1_vlan: entered promiscuous mode [ 609.227073][T12158] veth1_vlan: entered promiscuous mode [ 609.343920][T12158] veth0_macvtap: entered promiscuous mode [ 609.366379][T12158] veth1_macvtap: entered promiscuous mode [ 609.601031][T12152] veth0_macvtap: entered promiscuous mode [ 609.689151][ T5150] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 609.760514][T12152] veth1_macvtap: entered promiscuous mode [ 610.061639][T12158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.113614][T12158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.143451][T12158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.188709][T12158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.207782][T12158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.234449][T12158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.269864][T12158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.333142][T12158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.372953][T12158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.387043][T12158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.400391][T12158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.416678][T12158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.431427][T12158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.448239][T12158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.501265][T12152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.518646][T12152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.536974][T12152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.548900][T12152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.565021][T12152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.599423][T12152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.609555][T12152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.620644][T12152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.634298][T12152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.686783][T12158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.692256][ T5150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.705504][T12158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.721205][T12158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.734999][ T5150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.736567][T12158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.754338][ T5150] usb 5-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 610.769298][ T5150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.782917][T12152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.784565][ T5150] usb 5-1: config 0 descriptor?? [ 610.798833][T12152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.811014][T12152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.823480][T12152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.833490][T12152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.846041][T12152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.856326][T12152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.870487][T12152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.884815][T12152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.951650][T12152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.980916][T12152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.993763][T12152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.010158][T12152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.115726][ T9977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.195813][ T9977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.300734][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.311979][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.314122][ T5150] hid-generic 0003:0EEF:C002.000B: unbalanced delimiter at end of report description [ 611.980035][ T5150] hid-generic 0003:0EEF:C002.000B: probe with driver hid-generic failed with error -22 [ 612.190997][ T9977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.212101][ T9977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.463525][ T9977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.480149][ T9977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.219717][ T5150] usb 5-1: USB disconnect, device number 30 [ 613.248985][T12596] loop1: detected capacity change from 0 to 512 [ 613.298249][T12596] EXT4-fs (loop1): Test dummy encryption mode enabled [ 613.367133][T12596] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz.1.1887: corrupted in-inode xattr: invalid ea_ino [ 613.433057][T12596] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1887: couldn't read orphan inode 12 (err -117) [ 613.488386][T12596] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.661571][T12158] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 615.498692][T12656] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 615.515502][T12656] kvm: pic: non byte read [ 615.520840][T12656] kvm: pic: non byte read [ 615.561887][T12656] kvm: pic: non byte read [ 615.576906][T12656] kvm: pic: non byte read [ 615.591243][T12656] kvm: pic: single mode not supported [ 615.591271][T12656] kvm: pic: level sensitive irq not supported [ 615.611423][T12656] kvm: pic: non byte read [ 615.632236][T12656] kvm: pic: single mode not supported [ 615.632263][T12656] kvm: pic: level sensitive irq not supported [ 615.642869][T12656] kvm: pic: non byte read [ 615.665709][T12656] kvm: pic: single mode not supported [ 615.665772][T12656] kvm: pic: level sensitive irq not supported [ 615.675101][T12656] kvm: pic: non byte read [ 615.699993][T12656] kvm: pic: single mode not supported [ 615.700021][T12656] kvm: pic: level sensitive irq not supported [ 615.708227][T12656] kvm: pic: non byte read [ 615.751113][T12656] kvm: pic: single mode not supported [ 615.751175][T12656] kvm: pic: level sensitive irq not supported [ 615.763642][T12656] kvm: pic: non byte read [ 615.789629][T12656] kvm: pic: single mode not supported [ 615.789660][T12656] kvm: pic: level sensitive irq not supported [ 615.810308][T12656] kvm: pic: non byte read [ 615.841428][T12656] kvm: pic: single mode not supported [ 615.841459][T12656] kvm: pic: level sensitive irq not supported [ 615.865311][T12656] kvm: pic: single mode not supported [ 615.872153][T12656] kvm: pic: level sensitive irq not supported [ 615.895242][T12656] kvm: pic: single mode not supported [ 615.901951][T12656] kvm: pic: level sensitive irq not supported [ 615.925498][T12656] kvm: pic: single mode not supported [ 615.932600][T12656] kvm: pic: level sensitive irq not supported [ 616.263621][T12678] input: syz1 as /devices/virtual/input/input23 [ 618.049125][ T48] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 618.190468][T12699] loop3: detected capacity change from 0 to 1024 [ 618.238916][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 618.252829][T12699] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 618.273774][ T48] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.309306][ T48] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 618.328923][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.337452][ T48] usb 1-1: Product: syz [ 618.363621][ T48] usb 1-1: Manufacturer: syz [ 618.373597][ T48] usb 1-1: SerialNumber: syz [ 618.563955][T12711] loop3: detected capacity change from 0 to 2048 [ 618.595733][T12711] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 618.606856][ T8] usb 1-1: USB disconnect, device number 36 [ 619.173116][ T5143] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 619.264609][T12741] loop4: detected capacity change from 0 to 1024 [ 619.292675][T12741] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 619.394036][ T5143] usb 2-1: Using ep0 maxpacket: 8 [ 619.422527][ T5143] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 619.435915][ T5143] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 619.446764][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.489789][ T29] audit: type=1326 audit(1854400203.856:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.4.1942" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbce575bd9 code=0x0 [ 619.536974][T12751] input: syz1 as /devices/virtual/input/input24 [ 619.758815][T12721] netlink: 'syz.1.1932': attribute type 4 has an invalid length. [ 619.898238][ T5143] usb 2-1: string descriptor 0 read error: -71 [ 619.927504][ T5143] hub 2-1:32.0: USB hub found [ 619.953834][ T5143] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 620.080583][ T5143] usb 2-1: USB disconnect, device number 31 [ 620.252388][T12767] loop3: detected capacity change from 0 to 1764 [ 620.319031][ T8] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 620.534899][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 620.560527][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.605352][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.627338][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.644780][ T8] usb 3-1: Product: syz [ 620.661144][ T8] usb 3-1: Manufacturer: syz [ 620.670953][ T8] usb 3-1: SerialNumber: syz [ 620.947504][ T5095] usb 3-1: USB disconnect, device number 38 [ 621.292826][T12803] loop3: detected capacity change from 0 to 1024 [ 621.311695][T12803] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 621.679591][T12545] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 621.726562][T12824] serio: Serial port pts0 [ 621.879172][T12545] usb 2-1: Using ep0 maxpacket: 8 [ 621.895974][T12545] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 621.918314][T12545] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 621.939925][T12545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.197537][T12857] loop4: detected capacity change from 0 to 128 [ 622.224274][T12808] netlink: 'syz.1.1967': attribute type 4 has an invalid length. [ 622.243782][T12545] usb 2-1: string descriptor 0 read error: -71 [ 622.262656][T12545] hub 2-1:32.0: USB hub found [ 622.270032][T12545] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 622.284749][T12857] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 622.306156][T12857] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 622.390652][T12545] usb 2-1: USB disconnect, device number 32 [ 622.409150][ T5095] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 622.486667][T11989] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 622.509758][T11989] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 622.551671][T11989] EXT4-fs error (device loop4): ext4_empty_dir:3071: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 622.590168][T11989] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 622.604432][ T5095] usb 4-1: Using ep0 maxpacket: 8 [ 622.618907][ T5095] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.640275][ T5095] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 622.649986][T11989] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 622.664247][ T5095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.672436][ T5095] usb 4-1: Product: syz [ 622.677695][ T5095] usb 4-1: Manufacturer: syz [ 622.682520][ T5095] usb 4-1: SerialNumber: syz [ 622.688020][T11989] EXT4-fs error (device loop4): ext4_empty_dir:3071: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 622.717467][T11989] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 622.733503][T11989] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 622.756285][T11989] EXT4-fs error (device loop4): ext4_empty_dir:3071: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 622.774816][T11989] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 622.885242][T12868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1991'. [ 622.918888][T12545] usb 4-1: USB disconnect, device number 36 [ 623.760872][T12893] loop1: detected capacity change from 0 to 512 [ 623.777637][T12894] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN PTI [ 623.777668][T12894] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 623.777688][T12894] CPU: 0 UID: 0 PID: 12894 Comm: syz.3.2001 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 623.777737][T12894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 623.777754][T12894] RIP: 0010:dev_map_redirect+0x65/0x6a0 [ 623.777788][T12894] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 83 b3 3d 00 4c 8b 2b 4d 8d 7d 38 4c 89 fb 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 03 84 c0 0f 85 6e 04 00 00 41 8b 2f 89 ee 83 e6 02 31 ff [ 623.777809][T12894] RSP: 0018:ffffc9000a2e76e8 EFLAGS: 00010202 [ 623.777831][T12894] RAX: dffffc0000000000 RBX: 0000000000000007 RCX: 0000000000040000 [ 623.777849][T12894] RDX: ffffc900117dd000 RSI: 000000000000189d RDI: 000000000000189e [ 623.777866][T12894] RBP: dffffc0000000000 R08: 0000000000000007 R09: ffffffff81b5ee2f [ 623.777883][T12894] R10: 0000000000000004 R11: ffff888061a78000 R12: 000000000a2e7738 [ 623.777899][T12894] R13: 0000000000000000 R14: 0000000000000008 R15: 0000000000000038 [ 623.777915][T12894] FS: 00007fa871dff6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 623.777936][T12894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 623.777953][T12894] CR2: 000000002000f000 CR3: 00000000543ac000 CR4: 00000000003506f0 [ 623.777973][T12894] DR0: 0000000000000006 DR1: 0000000000000000 DR2: 0000000000000000 [ 623.777989][T12894] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 623.778005][T12894] Call Trace: [ 623.778014][T12894] [ 623.778024][T12894] ? __die_body+0x88/0xe0 [ 623.778061][T12894] ? die_addr+0x108/0x140 [ 623.778098][T12894] ? exc_general_protection+0x3dd/0x5d0 [ 623.778142][T12894] ? asm_exc_general_protection+0x26/0x30 [ 623.778174][T12894] ? bpf_ringbuf_query+0x4f/0x150 [ 623.778207][T12894] ? dev_map_redirect+0x65/0x6a0 [ 623.778233][T12894] ? dev_map_redirect+0x28/0x6a0 [ 623.778262][T12894] bpf_prog_ec9efaa32d58ce69+0x56/0x5a [ 623.778284][T12894] bpf_prog_run_generic_xdp+0x679/0x14c0 [ 623.778334][T12894] do_xdp_generic+0x673/0xb90 [ 623.778378][T12894] ? __pfx_do_xdp_generic+0x10/0x10 [ 623.778408][T12894] ? tun_get_user+0x26c8/0x4560 [ 623.778441][T12894] ? tun_get_user+0x26c8/0x4560 [ 623.778464][T12894] tun_get_user+0x2805/0x4560 [ 623.778502][T12894] ? __pfx_tun_get_user+0x10/0x10 [ 623.778531][T12894] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 623.778555][T12894] ? tun_get+0x1e/0x2f0 [ 623.778588][T12894] ? tun_get+0x1e/0x2f0 [ 623.778610][T12894] ? tun_get+0x27d/0x2f0 [ 623.778633][T12894] tun_chr_write_iter+0x113/0x1f0 [ 623.778660][T12894] vfs_write+0xa72/0xc90 [ 623.778685][T12894] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 623.778709][T12894] ? __pfx_vfs_write+0x10/0x10 [ 623.778729][T12894] ? do_futex+0x392/0x560 [ 623.778776][T12894] ksys_write+0x1a0/0x2c0 [ 623.778801][T12894] ? __pfx_ksys_write+0x10/0x10 [ 623.778823][T12894] ? do_syscall_64+0x100/0x230 [ 623.778846][T12894] ? do_syscall_64+0xb6/0x230 [ 623.778871][T12894] do_syscall_64+0xf3/0x230 [ 623.778892][T12894] ? clear_bhb_loop+0x35/0x90 [ 623.778923][T12894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.778950][T12894] RIP: 0033:0x7fa87237475f [ 623.778970][T12894] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 623.778991][T12894] RSP: 002b:00007fa871dff010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 623.779015][T12894] RAX: ffffffffffffffda RBX: 00007fa872503f60 RCX: 00007fa87237475f [ 623.779034][T12894] RDX: 000000000000fdef RSI: 0000000020000100 RDI: 00000000000000c8 [ 623.779049][T12894] RBP: 00007fa8723e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 623.779065][T12894] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 623.779080][T12894] R13: 000000000000000b R14: 00007fa872503f60 R15: 00007ffe6591d658 [ 623.779107][T12894] [ 623.779116][T12894] Modules linked in: [ 623.779167][T12894] ---[ end trace 0000000000000000 ]--- [ 623.882107][T12893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 623.884240][T12894] RIP: 0010:dev_map_redirect+0x65/0x6a0 [ 623.892684][T12893] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.901216][T12894] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 83 b3 3d 00 4c 8b 2b 4d 8d 7d 38 4c 89 fb 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 03 84 c0 0f 85 6e 04 00 00 41 8b 2f 89 ee 83 e6 02 31 ff [ 623.901243][T12894] RSP: 0018:ffffc9000a2e76e8 EFLAGS: 00010202 [ 624.228216][T12894] RAX: dffffc0000000000 RBX: 0000000000000007 RCX: 0000000000040000 [ 624.236224][T12894] RDX: ffffc900117dd000 RSI: 000000000000189d RDI: 000000000000189e [ 624.244228][T12894] RBP: dffffc0000000000 R08: 0000000000000007 R09: ffffffff81b5ee2f [ 624.252232][T12894] R10: 0000000000000004 R11: ffff888061a78000 R12: 000000000a2e7738 [ 624.260256][T12894] R13: 0000000000000000 R14: 0000000000000008 R15: 0000000000000038 [ 624.268256][T12894] FS: 00007fa871dff6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 624.277225][T12894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 624.283840][T12894] CR2: 000000002000f000 CR3: 00000000543ac000 CR4: 00000000003506f0 [ 624.291848][T12894] DR0: 0000000000000006 DR1: 0000000000000000 DR2: 0000000000000000 [ 624.299849][T12894] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 624.307827][T12894] Kernel panic - not syncing: Fatal exception in interrupt [ 624.315273][T12894] Kernel Offset: disabled [ 624.319604][T12894] Rebooting in 86400 seconds..