last executing test programs: 19.861843307s ago: executing program 2 (id=2951): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000}]}]}}, 0x0, 0x2e}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000d80)='fdinfo\x00') getdents(r4, &(0x7f0000000040)=""/104, 0x68) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='\'\x00\x00\x00\a', @ANYRES16=r7], 0xd) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x28}}, 0x0) syz_socket_connect_nvme_tcp() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='configfs\x00', 0x0, &(0x7f0000000380)='source') syz_read_part_table(0x105f, &(0x7f0000000000)="$eJzsz8EtBXEUxeHfm/F/GWJBogodWEksdKAGZXi2YqcLC4WpgRBGQgVYfN/mJPee3OTGn1qm7j/y+aReqtt6eG1attWoMeZans6OD9f63XV1flpvc1O79n6cuhzVQRfVzedg0+5rtX+05va7Pbepq8dfehMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/rX3AAAA//+dFAtr") 18.556185265s ago: executing program 2 (id=2955): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x200800, &(0x7f0000000080)={[{@shortname_winnt}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@shortname_lower}, {@fat=@debug}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@numtail}, {@numtail}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@utf8}]}, 0x1, 0x28d, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 18.053597032s ago: executing program 2 (id=2956): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000000)=[{&(0x7f00000000c0)="140000002a000b0521b94d326792527204f8ab94", 0x14}], 0x1}, 0x0) 17.772882243s ago: executing program 2 (id=2958): r0 = syz_open_dev$media(&(0x7f0000000280), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000300)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{}, {r1}, 0x2}) 17.558679556s ago: executing program 2 (id=2962): socket$packet(0x11, 0x2, 0x300) fsopen(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 16.324807873s ago: executing program 2 (id=2967): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x60c043, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000500), 0x7, 0x2000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0xa2, 0x8000000000000000, 0x1, 0x208, 0x6, [{0x5, 0x3, 0xa}, {0x8, 0x6, 0x3, '\x00', 0x4}, {0xd, 0xe5, 0x2, '\x00', 0x108c}, {0x1, 0x2000000000c, 0x4, '\x00', 0x2}, {0xb3, 0x5, 0x2, '\x00', 0x38c}, {0x2, 0x0, 0x8, '\x00', 0x482}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f00000028c0)=0x2, 0x4) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3810746, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@user_xattr}, {@commit={'commit', 0x3d, 0x5}}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@dioread_nolock}, {@lazytime}, {@quota}]}, 0xfe, 0x451, &(0x7f0000000d00)="$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") r4 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) lseek(r4, 0xffffffffffffffff, 0x3) socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40010142, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x10000000, 0xfffffffe, 0x28000, 0x33c2, 0xffffffffffffffff, 0x600}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$overlay(0x0, 0x0, 0x0, 0x800000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d}}) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0xcf6}}) syz_open_procfs(0x0, &(0x7f00000001c0)='fd\x00') 10.971245845s ago: executing program 4 (id=2998): syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="646973636172642c71756f74612c6572726f72733d72656d6f756e742d726f2c696f636861727365743d6d61637475726b6973682c6572726f72733d72656d6f756e742d726f2c71756f74612c696f636861727365743d6d616363726f617469616e006572726f72733d72656d6f756e742d726f2c75737271756f74612c6572726f72733d72656d6f756e742d726f2c726573697a653d3078666666666666666666666666666666652c6572726f72733d636f6e74696e752c646973636172642c61707072616973652c7375626a5f757365723d21952c7375626a5f726f6c653d726573697a652c000000000000000000"], 0x1, 0x61ae, &(0x7f0000000840)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000002640)=ANY=[], 0x859, 0x0) listxattr(&(0x7f0000000a00)='./file1\x00', 0x0, 0x3b) 9.743913431s ago: executing program 4 (id=3003): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x2a4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x210, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x1f4, 0x6, [@m_tunnel_key={0xc4, 0x0, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x75, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a"}, {0xc}, {0xc}}}, @m_sample={0x40, 0x0, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x88, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x34, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x2a4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 8.812256324s ago: executing program 4 (id=3007): syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f0000000100)) 8.593051928s ago: executing program 4 (id=3010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}, @NFQA_CFG_MASK={0x8}]}, 0x24}}, 0x0) 8.425247524s ago: executing program 4 (id=3012): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x140641, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = socket$inet6(0x10, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_mreqn(r2, 0x0, 0x22, 0x0, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) fsopen(&(0x7f0000000040)='cifs\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x101082, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000040)) 7.933199708s ago: executing program 4 (id=3018): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 6.060453106s ago: executing program 3 (id=3030): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz0\x00', {}, 0x0, [], [], [0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 5.831839373s ago: executing program 3 (id=3032): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x20, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000aa9e7ca18500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b8000005000000a0", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.577198397s ago: executing program 3 (id=3033): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x304009a, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES64], 0xd, 0x2a0, &(0x7f0000000840)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) mkdir(0x0, 0xc2) r2 = getpgrp(0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKGETSIZE64(r3, 0x80081272, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001f00010a00000000000000000000000005000000000000009607184fdfc029f7b8e04ee35a3e2932b0f1538fb1bef05e908cb4486849c44d754241de37"], 0x14}}, 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) write$bt_hci(r4, &(0x7f00000000c0)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x6) sched_setscheduler(r2, 0x6, &(0x7f0000000080)=0x5) openat(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) 4.844946805s ago: executing program 3 (id=3035): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.618126448s ago: executing program 0 (id=3036): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78) 4.572260531s ago: executing program 3 (id=3037): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x1e, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 4.467960598s ago: executing program 0 (id=3038): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x41) syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000080)={0x0, @output}) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x20000000000005) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4600, 0x0) r3 = dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000020042, 0x0) r5 = dup(r4) sendfile(r5, r3, 0x0, 0x89ffc) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) 4.351258904s ago: executing program 3 (id=3039): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, r1, 0x25, 0x10, @void}, 0x10) 3.969290307s ago: executing program 0 (id=3040): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) ppoll(&(0x7f0000000240)=[{r0}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 3.766356106s ago: executing program 1 (id=3041): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) inotify_init1(0x0) socket$nl_route(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x8, 0x7, 0x6, 0x9, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d6, 0x6, 0x95, 0x3, 0x0, 0xc0000000}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in6=@mcast2, 0x15, 0x10, 0x10}]}, 0x48}}, 0x10) 3.668319489s ago: executing program 0 (id=3042): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4}) 3.604518015s ago: executing program 0 (id=3043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r6, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) 2.537146027s ago: executing program 0 (id=3044): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="3a4be99f9f727e8d0262285f8311dc64a122b0328932c72b2382283dcb1539cb6d4840c2d90f6bb77b5e93c4b5", @ANYRESOCT], 0x1, 0x5530, &(0x7f000000c740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4003, &(0x7f0000002280)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006340)={0x2020}, 0x2058) write$FUSE_LSEEK(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000240)={0x18}, 0x18) write$cgroup_int(r1, &(0x7f0000000200), 0x48400) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) syz_mount_image$bfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES64], 0x1, 0x7a, &(0x7f0000000100)="$eJzszrEJAkEQheHfBQMjEzMD0QIswMxSxFAzI0WwNSuwBDu44CqYC3YvuL0CDo7/gxl485L5rdh+9xBriMrj+bpd7nmzpIiID5qJBJyADbA75Nycc7co/b99X/uZ+l9JkiRJkiRJkiRJkjSWONZ5cOgCAAD//7AVJes=") 2.493008559s ago: executing program 1 (id=3045): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000480)={{0x0, 0x1}, 0x0, 0x0, 0xfffffffe, {0x1}}) 315.096938ms ago: executing program 1 (id=3046): kexec_load(0xff, 0x1, &(0x7f0000002bc0)=[{0x0}], 0x1) 238.116026ms ago: executing program 1 (id=3047): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78) 144.758842ms ago: executing program 1 (id=3048): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x0, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x40) 0s ago: executing program 1 (id=3049): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x41) syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000080)={0x0, @output}) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x20000000000005) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4600, 0x0) r3 = dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000020042, 0x0) r5 = dup(r4) sendfile(r5, r3, 0x0, 0x89ffc) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) kernel console output (not intermixed with test programs): gister_key+0x10/0x10 [ 1038.402565][ C1] ? rcu_is_watching+0x15/0xb0 [ 1038.402578][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 1038.402596][ C1] __qdisc_destroy+0x165/0x410 [ 1038.402612][ C1] dev_shutdown+0x9b/0x450 [ 1038.402629][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 1038.402658][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1038.402688][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1038.402710][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1038.402730][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1038.402751][ C1] ? __pfx___might_resched+0x10/0x10 [ 1038.402767][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1038.402786][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1038.402802][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1038.402821][ C1] cleanup_net+0x89d/0xcc0 [ 1038.402840][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1038.402863][ C1] ? process_scheduled_works+0x945/0x1830 [ 1038.402877][ C1] process_scheduled_works+0xa2c/0x1830 [ 1038.402915][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1038.402937][ C1] ? assign_work+0x364/0x3d0 [ 1038.402957][ C1] worker_thread+0x86d/0xd40 [ 1038.402984][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1038.403003][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1038.403019][ C1] kthread+0x2f0/0x390 [ 1038.403031][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1038.403045][ C1] ? __pfx_kthread+0x10/0x10 [ 1038.403058][ C1] ret_from_fork+0x4b/0x80 [ 1038.403073][ C1] ? __pfx_kthread+0x10/0x10 [ 1038.403085][ C1] ret_from_fork_asm+0x1a/0x30 [ 1038.403112][ C1] [ 1038.403118][ C1] DEBUG: waiting rtnl_mutex for 2724 jiffies. [ 1038.403125][ C1] task:syz-executor state:D stack:21728 pid:17094 tgid:17094 ppid:17061 flags:0x00000000 [ 1038.403147][ C1] Call Trace: [ 1038.403152][ C1] [ 1038.403161][ C1] __schedule+0x1800/0x4a60 [ 1038.403194][ C1] ? __pfx___schedule+0x10/0x10 [ 1038.403213][ C1] ? __pfx_lock_release+0x10/0x10 [ 1038.403230][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1038.403252][ C1] ? schedule+0x90/0x320 [ 1038.403267][ C1] schedule+0x14b/0x320 [ 1038.403284][ C1] schedule_preempt_disabled+0x13/0x30 [ 1038.403299][ C1] __mutex_lock+0x6a4/0xd70 [ 1038.403315][ C1] ? __mutex_lock+0x527/0xd70 [ 1038.403329][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1038.403347][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1038.403368][ C1] ? get_rtnl_holder+0x144/0x190 [ 1038.403384][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1038.403399][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1038.403417][ C1] ? __lock_acquire+0x1384/0x2050 [ 1038.403434][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1038.403464][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1038.403478][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1038.403497][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1038.403528][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1038.403543][ C1] netlink_unicast+0x7f6/0x990 [ 1038.403566][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1038.403581][ C1] ? __virt_addr_valid+0x183/0x530 [ 1038.403596][ C1] ? __check_object_size+0x49c/0x900 [ 1038.403609][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1038.403628][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1038.403651][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1038.403663][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1038.403680][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1038.403698][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1038.403709][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1038.403724][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1038.403735][ C1] __sock_sendmsg+0x221/0x270 [ 1038.403755][ C1] __sys_sendto+0x3a4/0x4f0 [ 1038.403774][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1038.403808][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1038.403830][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1038.403851][ C1] __x64_sys_sendto+0xde/0x100 [ 1038.403868][ C1] do_syscall_64+0xf3/0x230 [ 1038.403880][ C1] ? clear_bhb_loop+0x35/0x90 [ 1038.403896][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.403909][ C1] RIP: 0033:0x7f4eb757902c [ 1038.403922][ C1] RSP: 002b:00007ffc904f9180 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1038.403936][ C1] RAX: ffffffffffffffda RBX: 00007f4eb8234620 RCX: 00007f4eb757902c [ 1038.403945][ C1] RDX: 0000000000000044 RSI: 00007f4eb8234670 RDI: 0000000000000003 [ 1038.403954][ C1] RBP: 0000000000000000 R08: 00007ffc904f91d4 R09: 000000000000000c [ 1038.403962][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1038.403970][ C1] R13: 0000000000000000 R14: 00007f4eb8234670 R15: 0000000000000000 [ 1038.403991][ C1] [ 1038.403997][ C1] DEBUG: waiting rtnl_mutex for 2657 jiffies. [ 1038.404004][ C1] task:kworker/1:10 state:D stack:18360 pid:6309 tgid:6309 ppid:2 flags:0x00004000 [ 1038.404025][ C1] Workqueue: events linkwatch_event [ 1038.404038][ C1] Call Trace: [ 1038.404043][ C1] [ 1038.404052][ C1] __schedule+0x1800/0x4a60 [ 1038.404086][ C1] ? __pfx___schedule+0x10/0x10 [ 1038.404103][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1038.404119][ C1] ? __pfx_lock_release+0x10/0x10 [ 1038.404136][ C1] ? kick_pool+0x45c/0x620 [ 1038.404153][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1038.404170][ C1] ? schedule+0x90/0x320 [ 1038.404186][ C1] schedule+0x14b/0x320 [ 1038.404204][ C1] schedule_preempt_disabled+0x13/0x30 [ 1038.404219][ C1] __mutex_lock+0x6a4/0xd70 [ 1038.404235][ C1] ? __mutex_lock+0x527/0xd70 [ 1038.404249][ C1] ? linkwatch_event+0xe/0x60 [ 1038.404263][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1038.404283][ C1] ? get_rtnl_holder+0x144/0x190 [ 1038.404297][ C1] ? process_scheduled_works+0x945/0x1830 [ 1038.404312][ C1] linkwatch_event+0xe/0x60 [ 1038.404324][ C1] process_scheduled_works+0xa2c/0x1830 [ 1038.404361][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1038.404384][ C1] ? assign_work+0x364/0x3d0 [ 1038.404404][ C1] worker_thread+0x86d/0xd40 [ 1038.404431][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1038.404450][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1038.404465][ C1] kthread+0x2f0/0x390 [ 1038.404477][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1038.404492][ C1] ? __pfx_kthread+0x10/0x10 [ 1038.404505][ C1] ret_from_fork+0x4b/0x80 [ 1038.404519][ C1] ? __pfx_kthread+0x10/0x10 [ 1038.404531][ C1] ret_from_fork_asm+0x1a/0x30 [ 1038.404559][ C1] [ 1038.404565][ C1] [ 1038.404565][ C1] Showing all locks held in the system: [ 1038.404572][ C1] 3 locks held by kworker/u8:1/12: [ 1038.404581][ C1] #0: ffff88802a778148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1038.404618][ C1] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1038.404654][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1038.404696][ C1] 5 locks held by kworker/u8:4/66: [ 1038.404723][ C1] 3 locks held by kworker/u8:7/2550: [ 1038.404732][ C1] 2 locks held by kworker/u8:9/2944: [ 1038.404743][ C1] 2 locks held by getty/4977: [ 1038.404750][ C1] #0: ffff88802b1940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1038.404786][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1038.404825][ C1] 1 lock held by syz-executor/5218: [ 1038.404834][ C1] 5 locks held by kworker/u8:10/6025: [ 1038.404841][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1038.404876][ C1] #1: ffffc9000361fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1038.404910][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1038.404943][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1038.404974][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1038.405009][ C1] 3 locks held by kworker/1:10/6309: [ 1038.405016][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1038.405051][ C1] #1: ffffc900094dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1038.405085][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1038.405120][ C1] 2 locks held by syz.2.1976/12758: [ 1038.405129][ C1] 1 lock held by syz-executor/14217: [ 1038.405139][ C1] 2 locks held by syz-executor/14266: [ 1038.405148][ C1] 1 lock held by syz-executor/17094: [ 1038.405155][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1038.405193][ C1] 2 locks held by syz.4.3018/17611: [ 1038.405200][ C1] #0: ffff88807e97dc08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1038.405239][ C1] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 1038.405272][ C1] 1 lock held by syz.3.3039/17746: [ 1038.405280][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: bpf_xdp_link_attach+0x112/0x700 [ 1038.405313][ C1] 5 locks held by syz.0.3044/17768: [ 1038.405320][ C1] #0: ffff88807bc320e0 (&type->s_umount_key#77/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 1038.405363][ C1] #1: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1038.405399][ C1] #2: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1038.405432][ C1] #3: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1038.405465][ C1] #4: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1038.405502][ C1] [ 1038.405506][ C1] ============================================= [ 1038.405506][ C1] [ 1039.433861][ C1] DEBUG: waiting rtnl_mutex for 2831 jiffies. [ 1039.433877][ C1] task:syz.4.3018 state:D stack:24672 pid:17611 tgid:17611 ppid:14266 flags:0x00004004 [ 1039.433904][ C1] Call Trace: [ 1039.433910][ C1] [ 1039.433920][ C1] __schedule+0x1800/0x4a60 [ 1039.433959][ C1] ? __pfx___schedule+0x10/0x10 [ 1039.433979][ C1] ? __pfx_lock_release+0x10/0x10 [ 1039.433997][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1039.434019][ C1] ? schedule+0x90/0x320 [ 1039.434035][ C1] schedule+0x14b/0x320 [ 1039.434053][ C1] schedule_preempt_disabled+0x13/0x30 [ 1039.434069][ C1] __mutex_lock+0x6a4/0xd70 [ 1039.434086][ C1] ? __mutex_lock+0x527/0xd70 [ 1039.434100][ C1] ? raw_release+0x1b8/0x8b0 [ 1039.434114][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1039.434133][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1039.434149][ C1] ? get_rtnl_holder+0x144/0x190 [ 1039.434166][ C1] raw_release+0x1b8/0x8b0 [ 1039.434180][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1039.434199][ C1] sock_close+0xbc/0x240 [ 1039.434215][ C1] ? __pfx_sock_close+0x10/0x10 [ 1039.434233][ C1] __fput+0x24a/0x8a0 [ 1039.434259][ C1] task_work_run+0x24f/0x310 [ 1039.434277][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1039.434294][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1039.434314][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 1039.434334][ C1] do_syscall_64+0x100/0x230 [ 1039.434347][ C1] ? clear_bhb_loop+0x35/0x90 [ 1039.434365][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.434378][ C1] RIP: 0033:0x7f745a977299 [ 1039.434397][ C1] RSP: 002b:00007ffe190a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1039.434411][ C1] RAX: 0000000000000000 RBX: 00007f745ab07a80 RCX: 00007f745a977299 [ 1039.434421][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1039.434429][ C1] RBP: 00007f745ab07a80 R08: 00007f745aaf2000 R09: 00007ffe190a23cf [ 1039.434438][ C1] R10: 00000000005f2cc4 R11: 0000000000000246 R12: 00000000000f6ec7 [ 1039.434447][ C1] R13: 00007ffe190a21e0 R14: 00007ffe190a2200 R15: ffffffffffffffff [ 1039.434470][ C1] [ 1039.434476][ C1] DEBUG: waiting rtnl_mutex for 2552 jiffies. [ 1039.434483][ C1] task:kworker/u8:1 state:D stack:20600 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 1039.434506][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 1039.434525][ C1] Call Trace: [ 1039.434530][ C1] [ 1039.434539][ C1] __schedule+0x1800/0x4a60 [ 1039.434573][ C1] ? __pfx___schedule+0x10/0x10 [ 1039.434592][ C1] ? __pfx_lock_release+0x10/0x10 [ 1039.434609][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1039.434623][ C1] ? kthread_data+0x52/0xd0 [ 1039.434638][ C1] ? schedule+0x90/0x320 [ 1039.434653][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1039.434671][ C1] ? schedule+0x90/0x320 [ 1039.434687][ C1] schedule+0x14b/0x320 [ 1039.434704][ C1] schedule_preempt_disabled+0x13/0x30 [ 1039.434720][ C1] __mutex_lock+0x6a4/0xd70 [ 1039.434735][ C1] ? __mutex_lock+0x527/0xd70 [ 1039.434749][ C1] ? addrconf_verify_work+0x19/0x30 [ 1039.434767][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1039.434778][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1039.434801][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1039.434822][ C1] ? get_rtnl_holder+0x144/0x190 [ 1039.434837][ C1] ? process_scheduled_works+0x945/0x1830 [ 1039.434851][ C1] addrconf_verify_work+0x19/0x30 [ 1039.434868][ C1] process_scheduled_works+0xa2c/0x1830 [ 1039.434906][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1039.434929][ C1] ? assign_work+0x364/0x3d0 [ 1039.434948][ C1] worker_thread+0x86d/0xd40 [ 1039.434976][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1039.434995][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1039.435010][ C1] kthread+0x2f0/0x390 [ 1039.435022][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1039.435037][ C1] ? __pfx_kthread+0x10/0x10 [ 1039.435049][ C1] ret_from_fork+0x4b/0x80 [ 1039.435065][ C1] ? __pfx_kthread+0x10/0x10 [ 1039.435077][ C1] ret_from_fork_asm+0x1a/0x30 [ 1039.435107][ C1] [ 1039.435112][ C1] DEBUG: waiting rtnl_mutex for 2521 jiffies. [ 1039.435120][ C1] task:syz.3.3039 state:D stack:23800 pid:17746 tgid:17745 ppid:14163 flags:0x00000004 [ 1039.435143][ C1] Call Trace: [ 1039.435148][ C1] [ 1039.435157][ C1] __schedule+0x1800/0x4a60 [ 1039.435190][ C1] ? __pfx___schedule+0x10/0x10 [ 1039.435209][ C1] ? __pfx_lock_release+0x10/0x10 [ 1039.435226][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1039.435248][ C1] ? schedule+0x90/0x320 [ 1039.435263][ C1] schedule+0x14b/0x320 [ 1039.435281][ C1] schedule_preempt_disabled+0x13/0x30 [ 1039.435296][ C1] __mutex_lock+0x6a4/0xd70 [ 1039.435307][ C1] ? mark_lock+0x9a/0x360 [ 1039.435326][ C1] ? __mutex_lock+0x527/0xd70 [ 1039.435340][ C1] ? bpf_xdp_link_attach+0x112/0x700 [ 1039.435356][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1039.435377][ C1] ? get_rtnl_holder+0x144/0x190 [ 1039.435399][ C1] bpf_xdp_link_attach+0x112/0x700 [ 1039.435416][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1039.435432][ C1] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 1039.435463][ C1] ? __fget_files+0x3f6/0x470 [ 1039.435474][ C1] ? __fget_files+0x29/0x470 [ 1039.435491][ C1] ? attach_type_to_prog_type+0x316/0x460 [ 1039.435504][ C1] ? bpf_prog_attach_check_attach_type+0x2cb/0x4b0 [ 1039.435520][ C1] link_create+0x47c/0x8b0 [ 1039.435533][ C1] ? bpf_lsm_bpf+0x9/0x10 [ 1039.435550][ C1] __sys_bpf+0x4bc/0x810 [ 1039.435568][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 1039.435595][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1039.435613][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1039.435630][ C1] ? do_syscall_64+0x100/0x230 [ 1039.435646][ C1] __x64_sys_bpf+0x7c/0x90 [ 1039.435662][ C1] do_syscall_64+0xf3/0x230 [ 1039.435675][ C1] ? clear_bhb_loop+0x35/0x90 [ 1039.435690][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.435704][ C1] RIP: 0033:0x7f7717177299 [ 1039.435717][ C1] RSP: 002b:00007f7717ec7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1039.435730][ C1] RAX: ffffffffffffffda RBX: 00007f7717305f80 RCX: 00007f7717177299 [ 1039.435740][ C1] RDX: 0000000000000010 RSI: 0000000020000580 RDI: 000000000000001c [ 1039.435748][ C1] RBP: 00007f77171e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 1039.435757][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.435765][ C1] R13: 000000000000000b R14: 00007f7717305f80 R15: 00007ffd1bdabf38 [ 1039.435792][ C1] [ 1039.435797][ C1] DEBUG: holding rtnl_mutex for 2828 jiffies. [ 1039.435805][ C1] task:kworker/u8:10 state:D stack:18648 pid:6025 tgid:6025 ppid:2 flags:0x00004000 [ 1039.435827][ C1] Workqueue: netns cleanup_net [ 1039.435840][ C1] Call Trace: [ 1039.435845][ C1] [ 1039.435854][ C1] __schedule+0x1800/0x4a60 [ 1039.435887][ C1] ? __pfx___schedule+0x10/0x10 [ 1039.435906][ C1] ? __pfx_lock_release+0x10/0x10 [ 1039.435920][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1039.435941][ C1] ? kthread_data+0x52/0xd0 [ 1039.435958][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1039.435975][ C1] ? schedule+0x90/0x320 [ 1039.435990][ C1] schedule+0x14b/0x320 [ 1039.436008][ C1] synchronize_rcu_expedited+0x684/0x830 [ 1039.436025][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1039.436051][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1039.436064][ C1] ? __pfx___might_resched+0x10/0x10 [ 1039.436078][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1039.436094][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1039.436111][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1039.436135][ C1] synchronize_rcu+0x11b/0x360 [ 1039.436148][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 1039.436172][ C1] lockdep_unregister_key+0x4b7/0x540 [ 1039.436191][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1039.436210][ C1] ? rcu_is_watching+0x15/0xb0 [ 1039.436223][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 1039.436241][ C1] __qdisc_destroy+0x165/0x410 [ 1039.436257][ C1] dev_shutdown+0x9b/0x450 [ 1039.436273][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 1039.436302][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1039.436332][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1039.436353][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1039.436373][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1039.436394][ C1] ? __pfx___might_resched+0x10/0x10 [ 1039.436409][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1039.436429][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1039.436445][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1039.436459][ C1] cleanup_net+0x89d/0xcc0 [ 1039.436477][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1039.436500][ C1] ? process_scheduled_works+0x945/0x1830 [ 1039.436514][ C1] process_scheduled_works+0xa2c/0x1830 [ 1039.436552][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1039.436574][ C1] ? assign_work+0x364/0x3d0 [ 1039.436594][ C1] worker_thread+0x86d/0xd40 [ 1039.436621][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1039.436640][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1039.436656][ C1] kthread+0x2f0/0x390 [ 1039.436667][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1039.436682][ C1] ? __pfx_kthread+0x10/0x10 [ 1039.436695][ C1] ret_from_fork+0x4b/0x80 [ 1039.436709][ C1] ? __pfx_kthread+0x10/0x10 [ 1039.436721][ C1] ret_from_fork_asm+0x1a/0x30 [ 1039.436749][ C1] [ 1039.436754][ C1] DEBUG: waiting rtnl_mutex for 2827 jiffies. [ 1039.436761][ C1] task:syz-executor state:D stack:21728 pid:17094 tgid:17094 ppid:17061 flags:0x00000000 [ 1039.436786][ C1] Call Trace: [ 1039.436791][ C1] [ 1039.436800][ C1] __schedule+0x1800/0x4a60 [ 1039.436833][ C1] ? __pfx___schedule+0x10/0x10 [ 1039.436852][ C1] ? __pfx_lock_release+0x10/0x10 [ 1039.436868][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1039.436890][ C1] ? schedule+0x90/0x320 [ 1039.436905][ C1] schedule+0x14b/0x320 [ 1039.436923][ C1] schedule_preempt_disabled+0x13/0x30 [ 1039.436938][ C1] __mutex_lock+0x6a4/0xd70 [ 1039.436954][ C1] ? __mutex_lock+0x527/0xd70 [ 1039.436968][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1039.436986][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1039.437007][ C1] ? get_rtnl_holder+0x144/0x190 [ 1039.437023][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1039.437038][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1039.437056][ C1] ? __lock_acquire+0x1384/0x2050 [ 1039.437072][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1039.437102][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1039.437116][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1039.437135][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1039.437166][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1039.437181][ C1] netlink_unicast+0x7f6/0x990 [ 1039.437204][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1039.437219][ C1] ? __virt_addr_valid+0x183/0x530 [ 1039.437234][ C1] ? __check_object_size+0x49c/0x900 [ 1039.437248][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1039.437267][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1039.437289][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.437301][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1039.437319][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1039.437336][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1039.437347][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1039.437362][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.437373][ C1] __sock_sendmsg+0x221/0x270 [ 1039.437393][ C1] __sys_sendto+0x3a4/0x4f0 [ 1039.437412][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1039.437446][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1039.437464][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1039.437485][ C1] __x64_sys_sendto+0xde/0x100 [ 1039.437502][ C1] do_syscall_64+0xf3/0x230 [ 1039.437515][ C1] ? clear_bhb_loop+0x35/0x90 [ 1039.437530][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.437544][ C1] RIP: 0033:0x7f4eb757902c [ 1039.437556][ C1] RSP: 002b:00007ffc904f9180 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1039.437570][ C1] RAX: ffffffffffffffda RBX: 00007f4eb8234620 RCX: 00007f4eb757902c [ 1039.437579][ C1] RDX: 0000000000000044 RSI: 00007f4eb8234670 RDI: 0000000000000003 [ 1039.437588][ C1] RBP: 0000000000000000 R08: 00007ffc904f91d4 R09: 000000000000000c [ 1039.437596][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1039.437604][ C1] R13: 0000000000000000 R14: 00007f4eb8234670 R15: 0000000000000000 [ 1039.437625][ C1] [ 1039.437630][ C1] DEBUG: waiting rtnl_mutex for 2760 jiffies. [ 1039.437637][ C1] task:kworker/1:10 state:D stack:18360 pid:6309 tgid:6309 ppid:2 flags:0x00004000 [ 1039.437658][ C1] Workqueue: events linkwatch_event [ 1039.437671][ C1] Call Trace: [ 1039.437676][ C1] [ 1039.437685][ C1] __schedule+0x1800/0x4a60 [ 1039.437718][ C1] ? __pfx___schedule+0x10/0x10 [ 1039.437735][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1039.437751][ C1] ? __pfx_lock_release+0x10/0x10 [ 1039.437768][ C1] ? kick_pool+0x45c/0x620 [ 1039.437789][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1039.437807][ C1] ? schedule+0x90/0x320 [ 1039.437822][ C1] schedule+0x14b/0x320 [ 1039.437840][ C1] schedule_preempt_disabled+0x13/0x30 [ 1039.437855][ C1] __mutex_lock+0x6a4/0xd70 [ 1039.437870][ C1] ? __mutex_lock+0x527/0xd70 [ 1039.437884][ C1] ? linkwatch_event+0xe/0x60 [ 1039.437898][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1039.437919][ C1] ? get_rtnl_holder+0x144/0x190 [ 1039.437933][ C1] ? process_scheduled_works+0x945/0x1830 [ 1039.437948][ C1] linkwatch_event+0xe/0x60 [ 1039.437960][ C1] process_scheduled_works+0xa2c/0x1830 [ 1039.437997][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1039.438020][ C1] ? assign_work+0x364/0x3d0 [ 1039.438040][ C1] worker_thread+0x86d/0xd40 [ 1039.438067][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1039.438086][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1039.438101][ C1] kthread+0x2f0/0x390 [ 1039.438113][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1039.438127][ C1] ? __pfx_kthread+0x10/0x10 [ 1039.438140][ C1] ret_from_fork+0x4b/0x80 [ 1039.438155][ C1] ? __pfx_kthread+0x10/0x10 [ 1039.438167][ C1] ret_from_fork_asm+0x1a/0x30 [ 1039.438194][ C1] [ 1039.438201][ C1] [ 1039.438201][ C1] Showing all locks held in the system: [ 1039.438208][ C1] 3 locks held by kworker/u8:1/12: [ 1039.438217][ C1] #0: ffff88802a778148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1039.438254][ C1] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1039.438290][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1039.438332][ C1] 5 locks held by kworker/u8:4/66: [ 1039.438359][ C1] 3 locks held by kworker/u8:7/2550: [ 1039.438368][ C1] 2 locks held by kworker/u8:9/2944: [ 1039.438378][ C1] 2 locks held by getty/4977: [ 1039.438385][ C1] #0: ffff88802b1940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1039.438422][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1039.438457][ C1] 1 lock held by syz-executor/5218: [ 1039.438466][ C1] 5 locks held by kworker/u8:10/6025: [ 1039.438474][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1039.438509][ C1] #1: ffffc9000361fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1039.438543][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1039.438576][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1039.438608][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1039.438641][ C1] 3 locks held by kworker/1:10/6309: [ 1039.438648][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1039.438683][ C1] #1: ffffc900094dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1039.438718][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1039.438752][ C1] 2 locks held by syz.2.1976/12758: [ 1039.438762][ C1] 1 lock held by syz-executor/14217: [ 1039.438771][ C1] 2 locks held by syz-executor/14266: [ 1039.438780][ C1] 1 lock held by syz-executor/17094: [ 1039.438791][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1039.438829][ C1] 2 locks held by syz.4.3018/17611: [ 1039.438837][ C1] #0: ffff88807e97dc08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1039.438876][ C1] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 1039.438908][ C1] 1 lock held by syz.3.3039/17746: [ 1039.438916][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: bpf_xdp_link_attach+0x112/0x700 [ 1039.438949][ C1] 5 locks held by syz.0.3044/17768: [ 1039.438956][ C1] #0: ffff88807bc320e0 (&type->s_umount_key#77/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 1039.438999][ C1] #1: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1039.439035][ C1] #2: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1039.439069][ C1] #3: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1039.439102][ C1] #4: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1039.439139][ C1] [ 1039.439143][ C1] ============================================= [ 1039.439143][ C1] [ 1040.472563][ C1] DEBUG: waiting rtnl_mutex for 2935 jiffies. [ 1040.472581][ C1] task:syz.4.3018 state:D stack:24672 pid:17611 tgid:17611 ppid:14266 flags:0x00004004 [ 1040.472609][ C1] Call Trace: [ 1040.472615][ C1] [ 1040.472626][ C1] __schedule+0x1800/0x4a60 [ 1040.472666][ C1] ? __pfx___schedule+0x10/0x10 [ 1040.472685][ C1] ? __pfx_lock_release+0x10/0x10 [ 1040.472704][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1040.472726][ C1] ? schedule+0x90/0x320 [ 1040.472741][ C1] schedule+0x14b/0x320 [ 1040.472760][ C1] schedule_preempt_disabled+0x13/0x30 [ 1040.472776][ C1] __mutex_lock+0x6a4/0xd70 [ 1040.472792][ C1] ? __mutex_lock+0x527/0xd70 [ 1040.472806][ C1] ? raw_release+0x1b8/0x8b0 [ 1040.472821][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1040.472840][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1040.472857][ C1] ? get_rtnl_holder+0x144/0x190 [ 1040.472874][ C1] raw_release+0x1b8/0x8b0 [ 1040.472893][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1040.472911][ C1] sock_close+0xbc/0x240 [ 1040.472928][ C1] ? __pfx_sock_close+0x10/0x10 [ 1040.472946][ C1] __fput+0x24a/0x8a0 [ 1040.472972][ C1] task_work_run+0x24f/0x310 [ 1040.472991][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1040.473008][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1040.473028][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 1040.473048][ C1] do_syscall_64+0x100/0x230 [ 1040.473061][ C1] ? clear_bhb_loop+0x35/0x90 [ 1040.473079][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.473092][ C1] RIP: 0033:0x7f745a977299 [ 1040.473109][ C1] RSP: 002b:00007ffe190a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1040.473124][ C1] RAX: 0000000000000000 RBX: 00007f745ab07a80 RCX: 00007f745a977299 [ 1040.473134][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1040.473143][ C1] RBP: 00007f745ab07a80 R08: 00007f745aaf2000 R09: 00007ffe190a23cf [ 1040.473152][ C1] R10: 00000000005f2cc4 R11: 0000000000000246 R12: 00000000000f6ec7 [ 1040.473161][ C1] R13: 00007ffe190a21e0 R14: 00007ffe190a2200 R15: ffffffffffffffff [ 1040.473184][ C1] [ 1040.473189][ C1] DEBUG: waiting rtnl_mutex for 2656 jiffies. [ 1040.473197][ C1] task:kworker/u8:1 state:D stack:20600 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 1040.473221][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 1040.473240][ C1] Call Trace: [ 1040.473245][ C1] [ 1040.473254][ C1] __schedule+0x1800/0x4a60 [ 1040.473288][ C1] ? __pfx___schedule+0x10/0x10 [ 1040.473307][ C1] ? __pfx_lock_release+0x10/0x10 [ 1040.473324][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1040.473338][ C1] ? kthread_data+0x52/0xd0 [ 1040.473354][ C1] ? schedule+0x90/0x320 [ 1040.473369][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1040.473387][ C1] ? schedule+0x90/0x320 [ 1040.473402][ C1] schedule+0x14b/0x320 [ 1040.473420][ C1] schedule_preempt_disabled+0x13/0x30 [ 1040.473435][ C1] __mutex_lock+0x6a4/0xd70 [ 1040.473451][ C1] ? __mutex_lock+0x527/0xd70 [ 1040.473465][ C1] ? addrconf_verify_work+0x19/0x30 [ 1040.473482][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1040.473493][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1040.473512][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1040.473533][ C1] ? get_rtnl_holder+0x144/0x190 [ 1040.473547][ C1] ? process_scheduled_works+0x945/0x1830 [ 1040.473562][ C1] addrconf_verify_work+0x19/0x30 [ 1040.473578][ C1] process_scheduled_works+0xa2c/0x1830 [ 1040.473616][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1040.473639][ C1] ? assign_work+0x364/0x3d0 [ 1040.473658][ C1] worker_thread+0x86d/0xd40 [ 1040.473686][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1040.473705][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1040.473720][ C1] kthread+0x2f0/0x390 [ 1040.473732][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1040.473747][ C1] ? __pfx_kthread+0x10/0x10 [ 1040.473760][ C1] ret_from_fork+0x4b/0x80 [ 1040.473775][ C1] ? __pfx_kthread+0x10/0x10 [ 1040.473788][ C1] ret_from_fork_asm+0x1a/0x30 [ 1040.473816][ C1] [ 1040.473822][ C1] DEBUG: waiting rtnl_mutex for 2625 jiffies. [ 1040.473829][ C1] task:syz.3.3039 state:D stack:23800 pid:17746 tgid:17745 ppid:14163 flags:0x00000004 [ 1040.473851][ C1] Call Trace: [ 1040.473856][ C1] [ 1040.473865][ C1] __schedule+0x1800/0x4a60 [ 1040.473903][ C1] ? __pfx___schedule+0x10/0x10 [ 1040.473922][ C1] ? __pfx_lock_release+0x10/0x10 [ 1040.473939][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1040.473961][ C1] ? schedule+0x90/0x320 [ 1040.473976][ C1] schedule+0x14b/0x320 [ 1040.473994][ C1] schedule_preempt_disabled+0x13/0x30 [ 1040.474010][ C1] __mutex_lock+0x6a4/0xd70 [ 1040.474021][ C1] ? mark_lock+0x9a/0x360 [ 1040.474039][ C1] ? __mutex_lock+0x527/0xd70 [ 1040.474053][ C1] ? bpf_xdp_link_attach+0x112/0x700 [ 1040.474069][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1040.474090][ C1] ? get_rtnl_holder+0x144/0x190 [ 1040.474106][ C1] bpf_xdp_link_attach+0x112/0x700 [ 1040.474123][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1040.474139][ C1] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 1040.474169][ C1] ? __fget_files+0x3f6/0x470 [ 1040.474181][ C1] ? __fget_files+0x29/0x470 [ 1040.474197][ C1] ? attach_type_to_prog_type+0x316/0x460 [ 1040.474211][ C1] ? bpf_prog_attach_check_attach_type+0x2cb/0x4b0 [ 1040.474227][ C1] link_create+0x47c/0x8b0 [ 1040.474239][ C1] ? bpf_lsm_bpf+0x9/0x10 [ 1040.474257][ C1] __sys_bpf+0x4bc/0x810 [ 1040.474275][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 1040.474301][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1040.474320][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1040.474337][ C1] ? do_syscall_64+0x100/0x230 [ 1040.474353][ C1] __x64_sys_bpf+0x7c/0x90 [ 1040.474370][ C1] do_syscall_64+0xf3/0x230 [ 1040.474383][ C1] ? clear_bhb_loop+0x35/0x90 [ 1040.474399][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.474412][ C1] RIP: 0033:0x7f7717177299 [ 1040.474425][ C1] RSP: 002b:00007f7717ec7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1040.474438][ C1] RAX: ffffffffffffffda RBX: 00007f7717305f80 RCX: 00007f7717177299 [ 1040.474448][ C1] RDX: 0000000000000010 RSI: 0000000020000580 RDI: 000000000000001c [ 1040.474457][ C1] RBP: 00007f77171e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 1040.474465][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.474473][ C1] R13: 000000000000000b R14: 00007f7717305f80 R15: 00007ffd1bdabf38 [ 1040.474495][ C1] [ 1040.474500][ C1] DEBUG: holding rtnl_mutex for 2932 jiffies. [ 1040.474507][ C1] task:kworker/u8:10 state:D stack:18648 pid:6025 tgid:6025 ppid:2 flags:0x00004000 [ 1040.474529][ C1] Workqueue: netns cleanup_net [ 1040.474543][ C1] Call Trace: [ 1040.474548][ C1] [ 1040.474557][ C1] __schedule+0x1800/0x4a60 [ 1040.474590][ C1] ? __pfx___schedule+0x10/0x10 [ 1040.474609][ C1] ? __pfx_lock_release+0x10/0x10 [ 1040.474623][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1040.474644][ C1] ? kthread_data+0x52/0xd0 [ 1040.474661][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1040.474678][ C1] ? schedule+0x90/0x320 [ 1040.474694][ C1] schedule+0x14b/0x320 [ 1040.474711][ C1] synchronize_rcu_expedited+0x684/0x830 [ 1040.474728][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1040.474754][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1040.474768][ C1] ? __pfx___might_resched+0x10/0x10 [ 1040.474781][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1040.474797][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1040.474814][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1040.474839][ C1] synchronize_rcu+0x11b/0x360 [ 1040.474852][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 1040.474875][ C1] lockdep_unregister_key+0x4b7/0x540 [ 1040.474899][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1040.474918][ C1] ? rcu_is_watching+0x15/0xb0 [ 1040.474930][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 1040.474948][ C1] __qdisc_destroy+0x165/0x410 [ 1040.474965][ C1] dev_shutdown+0x9b/0x450 [ 1040.474982][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 1040.475010][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1040.475039][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1040.475061][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1040.475081][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1040.475102][ C1] ? __pfx___might_resched+0x10/0x10 [ 1040.475118][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1040.475137][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1040.475153][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1040.475167][ C1] cleanup_net+0x89d/0xcc0 [ 1040.475186][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1040.475208][ C1] ? process_scheduled_works+0x945/0x1830 [ 1040.475223][ C1] process_scheduled_works+0xa2c/0x1830 [ 1040.475260][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1040.475283][ C1] ? assign_work+0x364/0x3d0 [ 1040.475303][ C1] worker_thread+0x86d/0xd40 [ 1040.475330][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1040.475350][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1040.475365][ C1] kthread+0x2f0/0x390 [ 1040.475377][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1040.475392][ C1] ? __pfx_kthread+0x10/0x10 [ 1040.475404][ C1] ret_from_fork+0x4b/0x80 [ 1040.475419][ C1] ? __pfx_kthread+0x10/0x10 [ 1040.475431][ C1] ret_from_fork_asm+0x1a/0x30 [ 1040.475458][ C1] [ 1040.475464][ C1] DEBUG: waiting rtnl_mutex for 2931 jiffies. [ 1040.475471][ C1] task:syz-executor state:D stack:21728 pid:17094 tgid:17094 ppid:17061 flags:0x00000000 [ 1040.475491][ C1] Call Trace: [ 1040.475496][ C1] [ 1040.475505][ C1] __schedule+0x1800/0x4a60 [ 1040.475539][ C1] ? __pfx___schedule+0x10/0x10 [ 1040.475557][ C1] ? __pfx_lock_release+0x10/0x10 [ 1040.475574][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1040.475595][ C1] ? schedule+0x90/0x320 [ 1040.475610][ C1] schedule+0x14b/0x320 [ 1040.475628][ C1] schedule_preempt_disabled+0x13/0x30 [ 1040.475643][ C1] __mutex_lock+0x6a4/0xd70 [ 1040.475659][ C1] ? __mutex_lock+0x527/0xd70 [ 1040.475673][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1040.475691][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1040.475713][ C1] ? get_rtnl_holder+0x144/0x190 [ 1040.475728][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1040.475743][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1040.475760][ C1] ? __lock_acquire+0x1384/0x2050 [ 1040.475777][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1040.475807][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1040.475822][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1040.475840][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1040.475871][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1040.475889][ C1] netlink_unicast+0x7f6/0x990 [ 1040.475914][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1040.475928][ C1] ? __virt_addr_valid+0x183/0x530 [ 1040.475944][ C1] ? __check_object_size+0x49c/0x900 [ 1040.475957][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1040.475977][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1040.476000][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1040.476012][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1040.476030][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1040.476047][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1040.476058][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1040.476073][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1040.476085][ C1] __sock_sendmsg+0x221/0x270 [ 1040.476105][ C1] __sys_sendto+0x3a4/0x4f0 [ 1040.476124][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1040.476158][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1040.476177][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1040.476198][ C1] __x64_sys_sendto+0xde/0x100 [ 1040.476214][ C1] do_syscall_64+0xf3/0x230 [ 1040.476227][ C1] ? clear_bhb_loop+0x35/0x90 [ 1040.476243][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.476256][ C1] RIP: 0033:0x7f4eb757902c [ 1040.476268][ C1] RSP: 002b:00007ffc904f9180 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1040.476282][ C1] RAX: ffffffffffffffda RBX: 00007f4eb8234620 RCX: 00007f4eb757902c [ 1040.476291][ C1] RDX: 0000000000000044 RSI: 00007f4eb8234670 RDI: 0000000000000003 [ 1040.476300][ C1] RBP: 0000000000000000 R08: 00007ffc904f91d4 R09: 000000000000000c [ 1040.476308][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1040.476316][ C1] R13: 0000000000000000 R14: 00007f4eb8234670 R15: 0000000000000000 [ 1040.476337][ C1] [ 1040.476342][ C1] DEBUG: waiting rtnl_mutex for 2864 jiffies. [ 1040.476349][ C1] task:kworker/1:10 state:D stack:18360 pid:6309 tgid:6309 ppid:2 flags:0x00004000 [ 1040.476371][ C1] Workqueue: events linkwatch_event [ 1040.476384][ C1] Call Trace: [ 1040.476390][ C1] [ 1040.476398][ C1] __schedule+0x1800/0x4a60 [ 1040.476432][ C1] ? __pfx___schedule+0x10/0x10 [ 1040.476449][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1040.476465][ C1] ? __pfx_lock_release+0x10/0x10 [ 1040.476481][ C1] ? kick_pool+0x45c/0x620 [ 1040.476499][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1040.476516][ C1] ? schedule+0x90/0x320 [ 1040.476531][ C1] schedule+0x14b/0x320 [ 1040.476548][ C1] schedule_preempt_disabled+0x13/0x30 [ 1040.476564][ C1] __mutex_lock+0x6a4/0xd70 [ 1040.476579][ C1] ? __mutex_lock+0x527/0xd70 [ 1040.476593][ C1] ? linkwatch_event+0xe/0x60 [ 1040.476607][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1040.476628][ C1] ? get_rtnl_holder+0x144/0x190 [ 1040.476642][ C1] ? process_scheduled_works+0x945/0x1830 [ 1040.476657][ C1] linkwatch_event+0xe/0x60 [ 1040.476669][ C1] process_scheduled_works+0xa2c/0x1830 [ 1040.476706][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1040.476729][ C1] ? assign_work+0x364/0x3d0 [ 1040.476749][ C1] worker_thread+0x86d/0xd40 [ 1040.476776][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1040.476795][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1040.476810][ C1] kthread+0x2f0/0x390 [ 1040.476822][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1040.476837][ C1] ? __pfx_kthread+0x10/0x10 [ 1040.476849][ C1] ret_from_fork+0x4b/0x80 [ 1040.476864][ C1] ? __pfx_kthread+0x10/0x10 [ 1040.476876][ C1] ret_from_fork_asm+0x1a/0x30 [ 1040.476908][ C1] [ 1040.476914][ C1] [ 1040.476914][ C1] Showing all locks held in the system: [ 1040.476921][ C1] 3 locks held by kworker/u8:1/12: [ 1040.476930][ C1] #0: ffff88802a778148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1040.476967][ C1] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1040.477003][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1040.477045][ C1] 5 locks held by kworker/u8:4/66: [ 1040.477072][ C1] 3 locks held by kworker/u8:7/2550: [ 1040.477082][ C1] 2 locks held by kworker/u8:9/2944: [ 1040.477091][ C1] 2 locks held by getty/4977: [ 1040.477098][ C1] #0: ffff88802b1940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1040.477135][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1040.477169][ C1] 1 lock held by syz-executor/5218: [ 1040.477178][ C1] 5 locks held by kworker/u8:10/6025: [ 1040.477185][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1040.477221][ C1] #1: ffffc9000361fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1040.477255][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1040.477288][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1040.477319][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1040.477353][ C1] 3 locks held by kworker/1:10/6309: [ 1040.477360][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1040.477395][ C1] #1: ffffc900094dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1040.477429][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1040.477463][ C1] 2 locks held by syz.2.1976/12758: [ 1040.477473][ C1] 1 lock held by syz-executor/14217: [ 1040.477482][ C1] 2 locks held by syz-executor/14266: [ 1040.477491][ C1] 1 lock held by syz-executor/17094: [ 1040.477499][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1040.477535][ C1] 2 locks held by syz.4.3018/17611: [ 1040.477543][ C1] #0: ffff88807e97dc08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1040.477582][ C1] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 1040.477614][ C1] 1 lock held by syz.3.3039/17746: [ 1040.477622][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: bpf_xdp_link_attach+0x112/0x700 [ 1040.477656][ C1] 5 locks held by syz.0.3044/17768: [ 1040.477663][ C1] #0: ffff88807bc320e0 (&type->s_umount_key#77/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 1040.477706][ C1] #1: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1040.477741][ C1] #2: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1040.477775][ C1] #3: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1040.477808][ C1] #4: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1040.477844][ C1] [ 1040.477848][ C1] ============================================= [ 1040.477848][ C1] [ 1041.516234][ C1] DEBUG: waiting rtnl_mutex for 3039 jiffies. [ 1041.516251][ C1] task:syz.4.3018 state:D stack:24672 pid:17611 tgid:17611 ppid:14266 flags:0x00004004 [ 1041.516278][ C1] Call Trace: [ 1041.516284][ C1] [ 1041.516294][ C1] __schedule+0x1800/0x4a60 [ 1041.516333][ C1] ? __pfx___schedule+0x10/0x10 [ 1041.516352][ C1] ? __pfx_lock_release+0x10/0x10 [ 1041.516371][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1041.516393][ C1] ? schedule+0x90/0x320 [ 1041.516408][ C1] schedule+0x14b/0x320 [ 1041.516426][ C1] schedule_preempt_disabled+0x13/0x30 [ 1041.516442][ C1] __mutex_lock+0x6a4/0xd70 [ 1041.516458][ C1] ? __mutex_lock+0x527/0xd70 [ 1041.516472][ C1] ? raw_release+0x1b8/0x8b0 [ 1041.516487][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1041.516506][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1041.516522][ C1] ? get_rtnl_holder+0x144/0x190 [ 1041.516540][ C1] raw_release+0x1b8/0x8b0 [ 1041.516555][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1041.516573][ C1] sock_close+0xbc/0x240 [ 1041.516589][ C1] ? __pfx_sock_close+0x10/0x10 [ 1041.516612][ C1] __fput+0x24a/0x8a0 [ 1041.516638][ C1] task_work_run+0x24f/0x310 [ 1041.516657][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1041.516674][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1041.516694][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 1041.516714][ C1] do_syscall_64+0x100/0x230 [ 1041.516726][ C1] ? clear_bhb_loop+0x35/0x90 [ 1041.516744][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.516757][ C1] RIP: 0033:0x7f745a977299 [ 1041.516775][ C1] RSP: 002b:00007ffe190a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1041.516789][ C1] RAX: 0000000000000000 RBX: 00007f745ab07a80 RCX: 00007f745a977299 [ 1041.516799][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1041.516808][ C1] RBP: 00007f745ab07a80 R08: 00007f745aaf2000 R09: 00007ffe190a23cf [ 1041.516817][ C1] R10: 00000000005f2cc4 R11: 0000000000000246 R12: 00000000000f6ec7 [ 1041.516826][ C1] R13: 00007ffe190a21e0 R14: 00007ffe190a2200 R15: ffffffffffffffff [ 1041.516849][ C1] [ 1041.516855][ C1] DEBUG: waiting rtnl_mutex for 2760 jiffies. [ 1041.516863][ C1] task:kworker/u8:1 state:D stack:20600 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 1041.516886][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 1041.516905][ C1] Call Trace: [ 1041.516910][ C1] [ 1041.516919][ C1] __schedule+0x1800/0x4a60 [ 1041.516953][ C1] ? __pfx___schedule+0x10/0x10 [ 1041.516972][ C1] ? __pfx_lock_release+0x10/0x10 [ 1041.516989][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1041.517003][ C1] ? kthread_data+0x52/0xd0 [ 1041.517019][ C1] ? schedule+0x90/0x320 [ 1041.517034][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1041.517052][ C1] ? schedule+0x90/0x320 [ 1041.517067][ C1] schedule+0x14b/0x320 [ 1041.517085][ C1] schedule_preempt_disabled+0x13/0x30 [ 1041.517101][ C1] __mutex_lock+0x6a4/0xd70 [ 1041.517116][ C1] ? __mutex_lock+0x527/0xd70 [ 1041.517130][ C1] ? addrconf_verify_work+0x19/0x30 [ 1041.517147][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1041.517158][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1041.517177][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1041.517198][ C1] ? get_rtnl_holder+0x144/0x190 [ 1041.517213][ C1] ? process_scheduled_works+0x945/0x1830 [ 1041.517227][ C1] addrconf_verify_work+0x19/0x30 [ 1041.517244][ C1] process_scheduled_works+0xa2c/0x1830 [ 1041.517281][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1041.517304][ C1] ? assign_work+0x364/0x3d0 [ 1041.517324][ C1] worker_thread+0x86d/0xd40 [ 1041.517351][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1041.517370][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1041.517386][ C1] kthread+0x2f0/0x390 [ 1041.517398][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1041.517413][ C1] ? __pfx_kthread+0x10/0x10 [ 1041.517426][ C1] ret_from_fork+0x4b/0x80 [ 1041.517441][ C1] ? __pfx_kthread+0x10/0x10 [ 1041.517453][ C1] ret_from_fork_asm+0x1a/0x30 [ 1041.517481][ C1] [ 1041.517487][ C1] DEBUG: waiting rtnl_mutex for 2729 jiffies. [ 1041.517494][ C1] task:syz.3.3039 state:D stack:23800 pid:17746 tgid:17745 ppid:14163 flags:0x00000004 [ 1041.517516][ C1] Call Trace: [ 1041.517521][ C1] [ 1041.517530][ C1] __schedule+0x1800/0x4a60 [ 1041.517564][ C1] ? __pfx___schedule+0x10/0x10 [ 1041.517583][ C1] ? __pfx_lock_release+0x10/0x10 [ 1041.517603][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1041.517625][ C1] ? schedule+0x90/0x320 [ 1041.517640][ C1] schedule+0x14b/0x320 [ 1041.517658][ C1] schedule_preempt_disabled+0x13/0x30 [ 1041.517674][ C1] __mutex_lock+0x6a4/0xd70 [ 1041.517685][ C1] ? mark_lock+0x9a/0x360 [ 1041.517703][ C1] ? __mutex_lock+0x527/0xd70 [ 1041.517717][ C1] ? bpf_xdp_link_attach+0x112/0x700 [ 1041.517733][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1041.517754][ C1] ? get_rtnl_holder+0x144/0x190 [ 1041.517769][ C1] bpf_xdp_link_attach+0x112/0x700 [ 1041.517786][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1041.517802][ C1] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 1041.517832][ C1] ? __fget_files+0x3f6/0x470 [ 1041.517844][ C1] ? __fget_files+0x29/0x470 [ 1041.517860][ C1] ? attach_type_to_prog_type+0x316/0x460 [ 1041.517874][ C1] ? bpf_prog_attach_check_attach_type+0x2cb/0x4b0 [ 1041.517890][ C1] link_create+0x47c/0x8b0 [ 1041.517902][ C1] ? bpf_lsm_bpf+0x9/0x10 [ 1041.517919][ C1] __sys_bpf+0x4bc/0x810 [ 1041.517937][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 1041.517964][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1041.517982][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1041.518000][ C1] ? do_syscall_64+0x100/0x230 [ 1041.518016][ C1] __x64_sys_bpf+0x7c/0x90 [ 1041.518032][ C1] do_syscall_64+0xf3/0x230 [ 1041.518045][ C1] ? clear_bhb_loop+0x35/0x90 [ 1041.518060][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.518074][ C1] RIP: 0033:0x7f7717177299 [ 1041.518086][ C1] RSP: 002b:00007f7717ec7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1041.518100][ C1] RAX: ffffffffffffffda RBX: 00007f7717305f80 RCX: 00007f7717177299 [ 1041.518109][ C1] RDX: 0000000000000010 RSI: 0000000020000580 RDI: 000000000000001c [ 1041.518118][ C1] RBP: 00007f77171e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 1041.518126][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1041.518134][ C1] R13: 000000000000000b R14: 00007f7717305f80 R15: 00007ffd1bdabf38 [ 1041.518156][ C1] [ 1041.518161][ C1] DEBUG: holding rtnl_mutex for 3036 jiffies. [ 1041.518169][ C1] task:kworker/u8:10 state:D stack:18648 pid:6025 tgid:6025 ppid:2 flags:0x00004000 [ 1041.518190][ C1] Workqueue: netns cleanup_net [ 1041.518203][ C1] Call Trace: [ 1041.518208][ C1] [ 1041.518217][ C1] __schedule+0x1800/0x4a60 [ 1041.518251][ C1] ? __pfx___schedule+0x10/0x10 [ 1041.518270][ C1] ? __pfx_lock_release+0x10/0x10 [ 1041.518284][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1041.518305][ C1] ? kthread_data+0x52/0xd0 [ 1041.518322][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1041.518339][ C1] ? schedule+0x90/0x320 [ 1041.518354][ C1] schedule+0x14b/0x320 [ 1041.518372][ C1] synchronize_rcu_expedited+0x684/0x830 [ 1041.518389][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1041.518415][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1041.518428][ C1] ? __pfx___might_resched+0x10/0x10 [ 1041.518442][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1041.518458][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1041.518475][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1041.518500][ C1] synchronize_rcu+0x11b/0x360 [ 1041.518512][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 1041.518536][ C1] lockdep_unregister_key+0x4b7/0x540 [ 1041.518555][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1041.518574][ C1] ? rcu_is_watching+0x15/0xb0 [ 1041.518587][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 1041.518609][ C1] __qdisc_destroy+0x165/0x410 [ 1041.518625][ C1] dev_shutdown+0x9b/0x450 [ 1041.518641][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 1041.518670][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1041.518699][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1041.518720][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1041.518741][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1041.518762][ C1] ? __pfx___might_resched+0x10/0x10 [ 1041.518777][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1041.518797][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1041.518813][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1041.518827][ C1] cleanup_net+0x89d/0xcc0 [ 1041.518845][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1041.518868][ C1] ? process_scheduled_works+0x945/0x1830 [ 1041.518883][ C1] process_scheduled_works+0xa2c/0x1830 [ 1041.518921][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1041.518944][ C1] ? assign_work+0x364/0x3d0 [ 1041.518963][ C1] worker_thread+0x86d/0xd40 [ 1041.518991][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1041.519010][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1041.519026][ C1] kthread+0x2f0/0x390 [ 1041.519037][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1041.519052][ C1] ? __pfx_kthread+0x10/0x10 [ 1041.519064][ C1] ret_from_fork+0x4b/0x80 [ 1041.519079][ C1] ? __pfx_kthread+0x10/0x10 [ 1041.519091][ C1] ret_from_fork_asm+0x1a/0x30 [ 1041.519118][ C1] [ 1041.519124][ C1] DEBUG: waiting rtnl_mutex for 3035 jiffies. [ 1041.519131][ C1] task:syz-executor state:D stack:21728 pid:17094 tgid:17094 ppid:17061 flags:0x00000000 [ 1041.519152][ C1] Call Trace: [ 1041.519157][ C1] [ 1041.519166][ C1] __schedule+0x1800/0x4a60 [ 1041.519199][ C1] ? __pfx___schedule+0x10/0x10 [ 1041.519218][ C1] ? __pfx_lock_release+0x10/0x10 [ 1041.519235][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1041.519257][ C1] ? schedule+0x90/0x320 [ 1041.519272][ C1] schedule+0x14b/0x320 [ 1041.519289][ C1] schedule_preempt_disabled+0x13/0x30 [ 1041.519305][ C1] __mutex_lock+0x6a4/0xd70 [ 1041.519320][ C1] ? __mutex_lock+0x527/0xd70 [ 1041.519334][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1041.519352][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1041.519373][ C1] ? get_rtnl_holder+0x144/0x190 [ 1041.519388][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1041.519404][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1041.519422][ C1] ? __lock_acquire+0x1384/0x2050 [ 1041.519438][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1041.519468][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1041.519483][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1041.519501][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1041.519532][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1041.519547][ C1] netlink_unicast+0x7f6/0x990 [ 1041.519571][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1041.519586][ C1] ? __virt_addr_valid+0x183/0x530 [ 1041.519604][ C1] ? __check_object_size+0x49c/0x900 [ 1041.519618][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1041.519637][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1041.519660][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1041.519671][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1041.519689][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1041.519706][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1041.519717][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1041.519732][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1041.519744][ C1] __sock_sendmsg+0x221/0x270 [ 1041.519764][ C1] __sys_sendto+0x3a4/0x4f0 [ 1041.519783][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1041.519817][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1041.519835][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1041.519856][ C1] __x64_sys_sendto+0xde/0x100 [ 1041.519873][ C1] do_syscall_64+0xf3/0x230 [ 1041.519885][ C1] ? clear_bhb_loop+0x35/0x90 [ 1041.519901][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.519914][ C1] RIP: 0033:0x7f4eb757902c [ 1041.519926][ C1] RSP: 002b:00007ffc904f9180 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1041.519940][ C1] RAX: ffffffffffffffda RBX: 00007f4eb8234620 RCX: 00007f4eb757902c [ 1041.519949][ C1] RDX: 0000000000000044 RSI: 00007f4eb8234670 RDI: 0000000000000003 [ 1041.519957][ C1] RBP: 0000000000000000 R08: 00007ffc904f91d4 R09: 000000000000000c [ 1041.519965][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1041.519973][ C1] R13: 0000000000000000 R14: 00007f4eb8234670 R15: 0000000000000000 [ 1041.519994][ C1] [ 1041.520000][ C1] DEBUG: waiting rtnl_mutex for 2968 jiffies. [ 1041.520006][ C1] task:kworker/1:10 state:D stack:18360 pid:6309 tgid:6309 ppid:2 flags:0x00004000 [ 1041.520028][ C1] Workqueue: events linkwatch_event [ 1041.520042][ C1] Call Trace: [ 1041.520046][ C1] [ 1041.520055][ C1] __schedule+0x1800/0x4a60 [ 1041.520089][ C1] ? __pfx___schedule+0x10/0x10 [ 1041.520105][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1041.520121][ C1] ? __pfx_lock_release+0x10/0x10 [ 1041.520138][ C1] ? kick_pool+0x45c/0x620 [ 1041.520155][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1041.520173][ C1] ? schedule+0x90/0x320 [ 1041.520188][ C1] schedule+0x14b/0x320 [ 1041.520206][ C1] schedule_preempt_disabled+0x13/0x30 [ 1041.520221][ C1] __mutex_lock+0x6a4/0xd70 [ 1041.520236][ C1] ? __mutex_lock+0x527/0xd70 [ 1041.520251][ C1] ? linkwatch_event+0xe/0x60 [ 1041.520265][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1041.520285][ C1] ? get_rtnl_holder+0x144/0x190 [ 1041.520299][ C1] ? process_scheduled_works+0x945/0x1830 [ 1041.520314][ C1] linkwatch_event+0xe/0x60 [ 1041.520326][ C1] process_scheduled_works+0xa2c/0x1830 [ 1041.520363][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1041.520386][ C1] ? assign_work+0x364/0x3d0 [ 1041.520406][ C1] worker_thread+0x86d/0xd40 [ 1041.520433][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1041.520452][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1041.520467][ C1] kthread+0x2f0/0x390 [ 1041.520485][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1041.520501][ C1] ? __pfx_kthread+0x10/0x10 [ 1041.520513][ C1] ret_from_fork+0x4b/0x80 [ 1041.520528][ C1] ? __pfx_kthread+0x10/0x10 [ 1041.520540][ C1] ret_from_fork_asm+0x1a/0x30 [ 1041.520568][ C1] [ 1041.520574][ C1] [ 1041.520574][ C1] Showing all locks held in the system: [ 1041.520581][ C1] 3 locks held by kworker/u8:1/12: [ 1041.520590][ C1] #0: ffff88802a778148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1041.520635][ C1] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1041.520671][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1041.520713][ C1] 5 locks held by kworker/u8:4/66: [ 1041.520737][ C1] 3 locks held by kworker/u8:7/2550: [ 1041.520747][ C1] 2 locks held by kworker/u8:9/2944: [ 1041.520757][ C1] 2 locks held by getty/4977: [ 1041.520764][ C1] #0: ffff88802b1940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1041.520800][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1041.520835][ C1] 1 lock held by syz-executor/5218: [ 1041.520844][ C1] 5 locks held by kworker/u8:10/6025: [ 1041.520851][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1041.520886][ C1] #1: ffffc9000361fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1041.520921][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1041.520953][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1041.520985][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1041.521019][ C1] 3 locks held by kworker/1:10/6309: [ 1041.521026][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1041.521061][ C1] #1: ffffc900094dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1041.521095][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1041.521130][ C1] 2 locks held by syz.2.1976/12758: [ 1041.521139][ C1] 1 lock held by syz-executor/14217: [ 1041.521148][ C1] 2 locks held by syz-executor/14266: [ 1041.521158][ C1] 1 lock held by syz-executor/17094: [ 1041.521165][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1041.521202][ C1] 2 locks held by syz.4.3018/17611: [ 1041.521210][ C1] #0: ffff88807e97dc08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1041.521249][ C1] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 1041.521281][ C1] 1 lock held by syz.3.3039/17746: [ 1041.521288][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: bpf_xdp_link_attach+0x112/0x700 [ 1041.521322][ C1] 5 locks held by syz.0.3044/17768: [ 1041.521329][ C1] #0: ffff88807bc320e0 (&type->s_umount_key#77/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 1041.521372][ C1] #1: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1041.521407][ C1] #2: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1041.521441][ C1] #3: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1041.521474][ C1] #4: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1041.521511][ C1] [ 1041.521516][ C1] ============================================= [ 1041.521516][ C1] [ 1042.553076][ C1] DEBUG: waiting rtnl_mutex for 3143 jiffies. [ 1042.553093][ C1] task:syz.4.3018 state:D stack:24672 pid:17611 tgid:17611 ppid:14266 flags:0x00004004 [ 1042.553120][ C1] Call Trace: [ 1042.553126][ C1] [ 1042.553137][ C1] __schedule+0x1800/0x4a60 [ 1042.553177][ C1] ? __pfx___schedule+0x10/0x10 [ 1042.553197][ C1] ? __pfx_lock_release+0x10/0x10 [ 1042.553215][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1042.553237][ C1] ? schedule+0x90/0x320 [ 1042.553253][ C1] schedule+0x14b/0x320 [ 1042.553271][ C1] schedule_preempt_disabled+0x13/0x30 [ 1042.553287][ C1] __mutex_lock+0x6a4/0xd70 [ 1042.553303][ C1] ? __mutex_lock+0x527/0xd70 [ 1042.553317][ C1] ? raw_release+0x1b8/0x8b0 [ 1042.553332][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1042.553351][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1042.553368][ C1] ? get_rtnl_holder+0x144/0x190 [ 1042.553384][ C1] raw_release+0x1b8/0x8b0 [ 1042.553399][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1042.553417][ C1] sock_close+0xbc/0x240 [ 1042.553434][ C1] ? __pfx_sock_close+0x10/0x10 [ 1042.553451][ C1] __fput+0x24a/0x8a0 [ 1042.553477][ C1] task_work_run+0x24f/0x310 [ 1042.553496][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1042.553513][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1042.553534][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 1042.553554][ C1] do_syscall_64+0x100/0x230 [ 1042.553567][ C1] ? clear_bhb_loop+0x35/0x90 [ 1042.553584][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.553598][ C1] RIP: 0033:0x7f745a977299 [ 1042.553617][ C1] RSP: 002b:00007ffe190a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1042.553630][ C1] RAX: 0000000000000000 RBX: 00007f745ab07a80 RCX: 00007f745a977299 [ 1042.553640][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1042.553649][ C1] RBP: 00007f745ab07a80 R08: 00007f745aaf2000 R09: 00007ffe190a23cf [ 1042.553658][ C1] R10: 00000000005f2cc4 R11: 0000000000000246 R12: 00000000000f6ec7 [ 1042.553667][ C1] R13: 00007ffe190a21e0 R14: 00007ffe190a2200 R15: ffffffffffffffff [ 1042.553690][ C1] [ 1042.553696][ C1] DEBUG: waiting rtnl_mutex for 2864 jiffies. [ 1042.553703][ C1] task:kworker/u8:1 state:D stack:20600 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 1042.553726][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 1042.553749][ C1] Call Trace: [ 1042.553755][ C1] [ 1042.553764][ C1] __schedule+0x1800/0x4a60 [ 1042.553797][ C1] ? __pfx___schedule+0x10/0x10 [ 1042.553817][ C1] ? __pfx_lock_release+0x10/0x10 [ 1042.553833][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1042.553848][ C1] ? kthread_data+0x52/0xd0 [ 1042.553863][ C1] ? schedule+0x90/0x320 [ 1042.553878][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1042.553897][ C1] ? schedule+0x90/0x320 [ 1042.553912][ C1] schedule+0x14b/0x320 [ 1042.553930][ C1] schedule_preempt_disabled+0x13/0x30 [ 1042.553946][ C1] __mutex_lock+0x6a4/0xd70 [ 1042.553961][ C1] ? __mutex_lock+0x527/0xd70 [ 1042.553975][ C1] ? addrconf_verify_work+0x19/0x30 [ 1042.553993][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1042.554004][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1042.554022][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1042.554043][ C1] ? get_rtnl_holder+0x144/0x190 [ 1042.554058][ C1] ? process_scheduled_works+0x945/0x1830 [ 1042.554073][ C1] addrconf_verify_work+0x19/0x30 [ 1042.554090][ C1] process_scheduled_works+0xa2c/0x1830 [ 1042.554128][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1042.554150][ C1] ? assign_work+0x364/0x3d0 [ 1042.554170][ C1] worker_thread+0x86d/0xd40 [ 1042.554197][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1042.554217][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1042.554232][ C1] kthread+0x2f0/0x390 [ 1042.554244][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1042.554259][ C1] ? __pfx_kthread+0x10/0x10 [ 1042.554272][ C1] ret_from_fork+0x4b/0x80 [ 1042.554288][ C1] ? __pfx_kthread+0x10/0x10 [ 1042.554300][ C1] ret_from_fork_asm+0x1a/0x30 [ 1042.554328][ C1] [ 1042.554334][ C1] DEBUG: waiting rtnl_mutex for 2833 jiffies. [ 1042.554341][ C1] task:syz.3.3039 state:D stack:23800 pid:17746 tgid:17745 ppid:14163 flags:0x00000004 [ 1042.554364][ C1] Call Trace: [ 1042.554369][ C1] [ 1042.554378][ C1] __schedule+0x1800/0x4a60 [ 1042.554411][ C1] ? __pfx___schedule+0x10/0x10 [ 1042.554430][ C1] ? __pfx_lock_release+0x10/0x10 [ 1042.554447][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1042.554468][ C1] ? schedule+0x90/0x320 [ 1042.554483][ C1] schedule+0x14b/0x320 [ 1042.554501][ C1] schedule_preempt_disabled+0x13/0x30 [ 1042.554517][ C1] __mutex_lock+0x6a4/0xd70 [ 1042.554528][ C1] ? mark_lock+0x9a/0x360 [ 1042.554547][ C1] ? __mutex_lock+0x527/0xd70 [ 1042.554561][ C1] ? bpf_xdp_link_attach+0x112/0x700 [ 1042.554577][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1042.554598][ C1] ? get_rtnl_holder+0x144/0x190 [ 1042.554614][ C1] bpf_xdp_link_attach+0x112/0x700 [ 1042.554631][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1042.554647][ C1] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 1042.554677][ C1] ? __fget_files+0x3f6/0x470 [ 1042.554689][ C1] ? __fget_files+0x29/0x470 [ 1042.554706][ C1] ? attach_type_to_prog_type+0x316/0x460 [ 1042.554719][ C1] ? bpf_prog_attach_check_attach_type+0x2cb/0x4b0 [ 1042.554747][ C1] link_create+0x47c/0x8b0 [ 1042.554760][ C1] ? bpf_lsm_bpf+0x9/0x10 [ 1042.554778][ C1] __sys_bpf+0x4bc/0x810 [ 1042.554797][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 1042.554823][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1042.554848][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1042.554871][ C1] ? do_syscall_64+0x100/0x230 [ 1042.554887][ C1] __x64_sys_bpf+0x7c/0x90 [ 1042.554904][ C1] do_syscall_64+0xf3/0x230 [ 1042.554916][ C1] ? clear_bhb_loop+0x35/0x90 [ 1042.554932][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.554951][ C1] RIP: 0033:0x7f7717177299 [ 1042.554965][ C1] RSP: 002b:00007f7717ec7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1042.554978][ C1] RAX: ffffffffffffffda RBX: 00007f7717305f80 RCX: 00007f7717177299 [ 1042.554988][ C1] RDX: 0000000000000010 RSI: 0000000020000580 RDI: 000000000000001c [ 1042.554997][ C1] RBP: 00007f77171e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 1042.555005][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.555013][ C1] R13: 000000000000000b R14: 00007f7717305f80 R15: 00007ffd1bdabf38 [ 1042.555035][ C1] [ 1042.555040][ C1] DEBUG: holding rtnl_mutex for 3140 jiffies. [ 1042.555048][ C1] task:kworker/u8:10 state:D stack:18648 pid:6025 tgid:6025 ppid:2 flags:0x00004000 [ 1042.555070][ C1] Workqueue: netns cleanup_net [ 1042.555088][ C1] Call Trace: [ 1042.555094][ C1] [ 1042.555102][ C1] __schedule+0x1800/0x4a60 [ 1042.555136][ C1] ? __pfx___schedule+0x10/0x10 [ 1042.555155][ C1] ? __pfx_lock_release+0x10/0x10 [ 1042.555169][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1042.555189][ C1] ? kthread_data+0x52/0xd0 [ 1042.555206][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1042.555224][ C1] ? schedule+0x90/0x320 [ 1042.555239][ C1] schedule+0x14b/0x320 [ 1042.555257][ C1] synchronize_rcu_expedited+0x684/0x830 [ 1042.555273][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1042.555299][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1042.555313][ C1] ? __pfx___might_resched+0x10/0x10 [ 1042.555327][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1042.555343][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1042.555360][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1042.555385][ C1] synchronize_rcu+0x11b/0x360 [ 1042.555398][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 1042.555421][ C1] lockdep_unregister_key+0x4b7/0x540 [ 1042.555440][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1042.555460][ C1] ? rcu_is_watching+0x15/0xb0 [ 1042.555472][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 1042.555490][ C1] __qdisc_destroy+0x165/0x410 [ 1042.555506][ C1] dev_shutdown+0x9b/0x450 [ 1042.555523][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 1042.555552][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1042.555581][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1042.555603][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1042.555624][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1042.555645][ C1] ? __pfx___might_resched+0x10/0x10 [ 1042.555660][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1042.555680][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1042.555696][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1042.555711][ C1] cleanup_net+0x89d/0xcc0 [ 1042.555729][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1042.555756][ C1] ? process_scheduled_works+0x945/0x1830 [ 1042.555771][ C1] process_scheduled_works+0xa2c/0x1830 [ 1042.555809][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1042.555831][ C1] ? assign_work+0x364/0x3d0 [ 1042.555851][ C1] worker_thread+0x86d/0xd40 [ 1042.555878][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1042.555898][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1042.555913][ C1] kthread+0x2f0/0x390 [ 1042.555925][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1042.555940][ C1] ? __pfx_kthread+0x10/0x10 [ 1042.555953][ C1] ret_from_fork+0x4b/0x80 [ 1042.555967][ C1] ? __pfx_kthread+0x10/0x10 [ 1042.555980][ C1] ret_from_fork_asm+0x1a/0x30 [ 1042.556007][ C1] [ 1042.556012][ C1] DEBUG: waiting rtnl_mutex for 3139 jiffies. [ 1042.556019][ C1] task:syz-executor state:D stack:21728 pid:17094 tgid:17094 ppid:17061 flags:0x00000000 [ 1042.556041][ C1] Call Trace: [ 1042.556046][ C1] [ 1042.556055][ C1] __schedule+0x1800/0x4a60 [ 1042.556089][ C1] ? __pfx___schedule+0x10/0x10 [ 1042.556108][ C1] ? __pfx_lock_release+0x10/0x10 [ 1042.556125][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1042.556146][ C1] ? schedule+0x90/0x320 [ 1042.556162][ C1] schedule+0x14b/0x320 [ 1042.556180][ C1] schedule_preempt_disabled+0x13/0x30 [ 1042.556195][ C1] __mutex_lock+0x6a4/0xd70 [ 1042.556210][ C1] ? __mutex_lock+0x527/0xd70 [ 1042.556224][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1042.556243][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1042.556264][ C1] ? get_rtnl_holder+0x144/0x190 [ 1042.556279][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1042.556295][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1042.556312][ C1] ? __lock_acquire+0x1384/0x2050 [ 1042.556329][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1042.556359][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1042.556374][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1042.556392][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1042.556423][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1042.556439][ C1] netlink_unicast+0x7f6/0x990 [ 1042.556462][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1042.556477][ C1] ? __virt_addr_valid+0x183/0x530 [ 1042.556492][ C1] ? __check_object_size+0x49c/0x900 [ 1042.556506][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1042.556525][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1042.556547][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1042.556559][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1042.556577][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1042.556594][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1042.556605][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1042.556620][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1042.556631][ C1] __sock_sendmsg+0x221/0x270 [ 1042.556652][ C1] __sys_sendto+0x3a4/0x4f0 [ 1042.556670][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1042.556705][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1042.556723][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1042.556748][ C1] __x64_sys_sendto+0xde/0x100 [ 1042.556765][ C1] do_syscall_64+0xf3/0x230 [ 1042.556777][ C1] ? clear_bhb_loop+0x35/0x90 [ 1042.556793][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.556806][ C1] RIP: 0033:0x7f4eb757902c [ 1042.556819][ C1] RSP: 002b:00007ffc904f9180 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1042.556832][ C1] RAX: ffffffffffffffda RBX: 00007f4eb8234620 RCX: 00007f4eb757902c [ 1042.556841][ C1] RDX: 0000000000000044 RSI: 00007f4eb8234670 RDI: 0000000000000003 [ 1042.556850][ C1] RBP: 0000000000000000 R08: 00007ffc904f91d4 R09: 000000000000000c [ 1042.556858][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1042.556866][ C1] R13: 0000000000000000 R14: 00007f4eb8234670 R15: 0000000000000000 [ 1042.556887][ C1] [ 1042.556893][ C1] DEBUG: waiting rtnl_mutex for 3072 jiffies. [ 1042.556899][ C1] task:kworker/1:10 state:D stack:18360 pid:6309 tgid:6309 ppid:2 flags:0x00004000 [ 1042.556921][ C1] Workqueue: events linkwatch_event [ 1042.556934][ C1] Call Trace: [ 1042.556939][ C1] [ 1042.556948][ C1] __schedule+0x1800/0x4a60 [ 1042.556981][ C1] ? __pfx___schedule+0x10/0x10 [ 1042.556998][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1042.557014][ C1] ? __pfx_lock_release+0x10/0x10 [ 1042.557031][ C1] ? kick_pool+0x45c/0x620 [ 1042.557048][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1042.557065][ C1] ? schedule+0x90/0x320 [ 1042.557081][ C1] schedule+0x14b/0x320 [ 1042.557099][ C1] schedule_preempt_disabled+0x13/0x30 [ 1042.557114][ C1] __mutex_lock+0x6a4/0xd70 [ 1042.557130][ C1] ? __mutex_lock+0x527/0xd70 [ 1042.557144][ C1] ? linkwatch_event+0xe/0x60 [ 1042.557158][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1042.557178][ C1] ? get_rtnl_holder+0x144/0x190 [ 1042.557193][ C1] ? process_scheduled_works+0x945/0x1830 [ 1042.557207][ C1] linkwatch_event+0xe/0x60 [ 1042.557219][ C1] process_scheduled_works+0xa2c/0x1830 [ 1042.557256][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1042.557279][ C1] ? assign_work+0x364/0x3d0 [ 1042.557299][ C1] worker_thread+0x86d/0xd40 [ 1042.557326][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1042.557345][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1042.557360][ C1] kthread+0x2f0/0x390 [ 1042.557372][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1042.557387][ C1] ? __pfx_kthread+0x10/0x10 [ 1042.557400][ C1] ret_from_fork+0x4b/0x80 [ 1042.557414][ C1] ? __pfx_kthread+0x10/0x10 [ 1042.557427][ C1] ret_from_fork_asm+0x1a/0x30 [ 1042.557454][ C1] [ 1042.557461][ C1] [ 1042.557461][ C1] Showing all locks held in the system: [ 1042.557467][ C1] 3 locks held by kworker/u8:1/12: [ 1042.557476][ C1] #0: ffff88802a778148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1042.557514][ C1] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1042.557550][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1042.557592][ C1] 5 locks held by kworker/u8:4/66: [ 1042.557619][ C1] 3 locks held by kworker/u8:7/2550: [ 1042.557629][ C1] 2 locks held by kworker/u8:9/2944: [ 1042.557639][ C1] 2 locks held by getty/4977: [ 1042.557646][ C1] #0: ffff88802b1940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1042.557682][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1042.557716][ C1] 1 lock held by syz-executor/5218: [ 1042.557726][ C1] 5 locks held by kworker/u8:10/6025: [ 1042.557733][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1042.557773][ C1] #1: ffffc9000361fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1042.557808][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1042.557840][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1042.557872][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1042.557906][ C1] 3 locks held by kworker/1:10/6309: [ 1042.557913][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1042.557948][ C1] #1: ffffc900094dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1042.557983][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1042.558018][ C1] 2 locks held by syz.2.1976/12758: [ 1042.558028][ C1] 1 lock held by syz-executor/14217: [ 1042.558038][ C1] 2 locks held by syz-executor/14266: [ 1042.558047][ C1] 1 lock held by syz-executor/17094: [ 1042.558055][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1042.558092][ C1] 2 locks held by syz.4.3018/17611: [ 1042.558099][ C1] #0: ffff88807e97dc08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1042.558139][ C1] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 1042.558172][ C1] 1 lock held by syz.3.3039/17746: [ 1042.558180][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: bpf_xdp_link_attach+0x112/0x700 [ 1042.558213][ C1] 5 locks held by syz.0.3044/17768: [ 1042.558220][ C1] #0: ffff88807bc320e0 (&type->s_umount_key#77/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 1042.558263][ C1] #1: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1042.558299][ C1] #2: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1042.558333][ C1] #3: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1042.558366][ C1] #4: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1042.558404][ C1] [ 1042.558408][ C1] ============================================= [ 1042.558408][ C1] [ 1043.595754][ C1] DEBUG: waiting rtnl_mutex for 3247 jiffies. [ 1043.595771][ C1] task:syz.4.3018 state:D stack:24672 pid:17611 tgid:17611 ppid:14266 flags:0x00004004 [ 1043.595799][ C1] Call Trace: [ 1043.595805][ C1] [ 1043.595814][ C1] __schedule+0x1800/0x4a60 [ 1043.595854][ C1] ? __pfx___schedule+0x10/0x10 [ 1043.595874][ C1] ? __pfx_lock_release+0x10/0x10 [ 1043.595892][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1043.595914][ C1] ? schedule+0x90/0x320 [ 1043.595930][ C1] schedule+0x14b/0x320 [ 1043.595948][ C1] schedule_preempt_disabled+0x13/0x30 [ 1043.595963][ C1] __mutex_lock+0x6a4/0xd70 [ 1043.595979][ C1] ? __mutex_lock+0x527/0xd70 [ 1043.595993][ C1] ? raw_release+0x1b8/0x8b0 [ 1043.596008][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1043.596027][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1043.596044][ C1] ? get_rtnl_holder+0x144/0x190 [ 1043.596060][ C1] raw_release+0x1b8/0x8b0 [ 1043.596075][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1043.596094][ C1] sock_close+0xbc/0x240 [ 1043.596110][ C1] ? __pfx_sock_close+0x10/0x10 [ 1043.596128][ C1] __fput+0x24a/0x8a0 [ 1043.596153][ C1] task_work_run+0x24f/0x310 [ 1043.596172][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1043.596189][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1043.596210][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 1043.596229][ C1] do_syscall_64+0x100/0x230 [ 1043.596242][ C1] ? clear_bhb_loop+0x35/0x90 [ 1043.596259][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.596272][ C1] RIP: 0033:0x7f745a977299 [ 1043.596291][ C1] RSP: 002b:00007ffe190a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1043.596306][ C1] RAX: 0000000000000000 RBX: 00007f745ab07a80 RCX: 00007f745a977299 [ 1043.596315][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1043.596323][ C1] RBP: 00007f745ab07a80 R08: 00007f745aaf2000 R09: 00007ffe190a23cf [ 1043.596333][ C1] R10: 00000000005f2cc4 R11: 0000000000000246 R12: 00000000000f6ec7 [ 1043.596342][ C1] R13: 00007ffe190a21e0 R14: 00007ffe190a2200 R15: ffffffffffffffff [ 1043.596370][ C1] [ 1043.596376][ C1] DEBUG: waiting rtnl_mutex for 2968 jiffies. [ 1043.596384][ C1] task:kworker/u8:1 state:D stack:20600 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 1043.596407][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 1043.596426][ C1] Call Trace: [ 1043.596432][ C1] [ 1043.596441][ C1] __schedule+0x1800/0x4a60 [ 1043.596474][ C1] ? __pfx___schedule+0x10/0x10 [ 1043.596494][ C1] ? __pfx_lock_release+0x10/0x10 [ 1043.596511][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1043.596525][ C1] ? kthread_data+0x52/0xd0 [ 1043.596540][ C1] ? schedule+0x90/0x320 [ 1043.596555][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1043.596573][ C1] ? schedule+0x90/0x320 [ 1043.596588][ C1] schedule+0x14b/0x320 [ 1043.596606][ C1] schedule_preempt_disabled+0x13/0x30 [ 1043.596621][ C1] __mutex_lock+0x6a4/0xd70 [ 1043.596637][ C1] ? __mutex_lock+0x527/0xd70 [ 1043.596651][ C1] ? addrconf_verify_work+0x19/0x30 [ 1043.596668][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1043.596680][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1043.596698][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1043.596719][ C1] ? get_rtnl_holder+0x144/0x190 [ 1043.596734][ C1] ? process_scheduled_works+0x945/0x1830 [ 1043.596749][ C1] addrconf_verify_work+0x19/0x30 [ 1043.596765][ C1] process_scheduled_works+0xa2c/0x1830 [ 1043.596802][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.596825][ C1] ? assign_work+0x364/0x3d0 [ 1043.596844][ C1] worker_thread+0x86d/0xd40 [ 1043.596872][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1043.596891][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1043.596906][ C1] kthread+0x2f0/0x390 [ 1043.596918][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1043.596933][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.596946][ C1] ret_from_fork+0x4b/0x80 [ 1043.596961][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.596973][ C1] ret_from_fork_asm+0x1a/0x30 [ 1043.597002][ C1] [ 1043.597007][ C1] DEBUG: waiting rtnl_mutex for 2937 jiffies. [ 1043.597014][ C1] task:syz.3.3039 state:D stack:23800 pid:17746 tgid:17745 ppid:14163 flags:0x00000004 [ 1043.597036][ C1] Call Trace: [ 1043.597042][ C1] [ 1043.597050][ C1] __schedule+0x1800/0x4a60 [ 1043.597084][ C1] ? __pfx___schedule+0x10/0x10 [ 1043.597103][ C1] ? __pfx_lock_release+0x10/0x10 [ 1043.597120][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1043.597141][ C1] ? schedule+0x90/0x320 [ 1043.597157][ C1] schedule+0x14b/0x320 [ 1043.597174][ C1] schedule_preempt_disabled+0x13/0x30 [ 1043.597189][ C1] __mutex_lock+0x6a4/0xd70 [ 1043.597200][ C1] ? mark_lock+0x9a/0x360 [ 1043.597219][ C1] ? __mutex_lock+0x527/0xd70 [ 1043.597233][ C1] ? bpf_xdp_link_attach+0x112/0x700 [ 1043.597248][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1043.597269][ C1] ? get_rtnl_holder+0x144/0x190 [ 1043.597285][ C1] bpf_xdp_link_attach+0x112/0x700 [ 1043.597301][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1043.597317][ C1] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 1043.597348][ C1] ? __fget_files+0x3f6/0x470 [ 1043.597359][ C1] ? __fget_files+0x29/0x470 [ 1043.597380][ C1] ? attach_type_to_prog_type+0x316/0x460 [ 1043.597393][ C1] ? bpf_prog_attach_check_attach_type+0x2cb/0x4b0 [ 1043.597410][ C1] link_create+0x47c/0x8b0 [ 1043.597422][ C1] ? bpf_lsm_bpf+0x9/0x10 [ 1043.597439][ C1] __sys_bpf+0x4bc/0x810 [ 1043.597458][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 1043.597484][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1043.597503][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1043.597520][ C1] ? do_syscall_64+0x100/0x230 [ 1043.597536][ C1] __x64_sys_bpf+0x7c/0x90 [ 1043.597552][ C1] do_syscall_64+0xf3/0x230 [ 1043.597565][ C1] ? clear_bhb_loop+0x35/0x90 [ 1043.597581][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.597594][ C1] RIP: 0033:0x7f7717177299 [ 1043.597607][ C1] RSP: 002b:00007f7717ec7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1043.597620][ C1] RAX: ffffffffffffffda RBX: 00007f7717305f80 RCX: 00007f7717177299 [ 1043.597630][ C1] RDX: 0000000000000010 RSI: 0000000020000580 RDI: 000000000000001c [ 1043.597638][ C1] RBP: 00007f77171e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 1043.597647][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.597655][ C1] R13: 000000000000000b R14: 00007f7717305f80 R15: 00007ffd1bdabf38 [ 1043.597677][ C1] [ 1043.597682][ C1] DEBUG: holding rtnl_mutex for 3244 jiffies. [ 1043.597689][ C1] task:kworker/u8:10 state:D stack:18648 pid:6025 tgid:6025 ppid:2 flags:0x00004000 [ 1043.597711][ C1] Workqueue: netns cleanup_net [ 1043.597724][ C1] Call Trace: [ 1043.597729][ C1] [ 1043.597738][ C1] __schedule+0x1800/0x4a60 [ 1043.597772][ C1] ? __pfx___schedule+0x10/0x10 [ 1043.597791][ C1] ? __pfx_lock_release+0x10/0x10 [ 1043.597805][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1043.597825][ C1] ? kthread_data+0x52/0xd0 [ 1043.597842][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1043.597859][ C1] ? schedule+0x90/0x320 [ 1043.597875][ C1] schedule+0x14b/0x320 [ 1043.597892][ C1] synchronize_rcu_expedited+0x684/0x830 [ 1043.597909][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1043.597935][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1043.597948][ C1] ? __pfx___might_resched+0x10/0x10 [ 1043.597962][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1043.597978][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1043.597995][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1043.598019][ C1] synchronize_rcu+0x11b/0x360 [ 1043.598032][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 1043.598056][ C1] lockdep_unregister_key+0x4b7/0x540 [ 1043.598075][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1043.598094][ C1] ? rcu_is_watching+0x15/0xb0 [ 1043.598106][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 1043.598124][ C1] __qdisc_destroy+0x165/0x410 [ 1043.598140][ C1] dev_shutdown+0x9b/0x450 [ 1043.598157][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 1043.598185][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1043.598215][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1043.598236][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1043.598256][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1043.598277][ C1] ? __pfx___might_resched+0x10/0x10 [ 1043.598292][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1043.598311][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1043.598327][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1043.598342][ C1] cleanup_net+0x89d/0xcc0 [ 1043.598360][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1043.598387][ C1] ? process_scheduled_works+0x945/0x1830 [ 1043.598402][ C1] process_scheduled_works+0xa2c/0x1830 [ 1043.598439][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.598462][ C1] ? assign_work+0x364/0x3d0 [ 1043.598482][ C1] worker_thread+0x86d/0xd40 [ 1043.598509][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1043.598528][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1043.598544][ C1] kthread+0x2f0/0x390 [ 1043.598555][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1043.598570][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.598583][ C1] ret_from_fork+0x4b/0x80 [ 1043.598598][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.598610][ C1] ret_from_fork_asm+0x1a/0x30 [ 1043.598637][ C1] [ 1043.598642][ C1] DEBUG: waiting rtnl_mutex for 3243 jiffies. [ 1043.598649][ C1] task:syz-executor state:D stack:21728 pid:17094 tgid:17094 ppid:17061 flags:0x00000000 [ 1043.598670][ C1] Call Trace: [ 1043.598675][ C1] [ 1043.598684][ C1] __schedule+0x1800/0x4a60 [ 1043.598718][ C1] ? __pfx___schedule+0x10/0x10 [ 1043.598736][ C1] ? __pfx_lock_release+0x10/0x10 [ 1043.598753][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1043.598775][ C1] ? schedule+0x90/0x320 [ 1043.598789][ C1] schedule+0x14b/0x320 [ 1043.598807][ C1] schedule_preempt_disabled+0x13/0x30 [ 1043.598823][ C1] __mutex_lock+0x6a4/0xd70 [ 1043.598838][ C1] ? __mutex_lock+0x527/0xd70 [ 1043.598852][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1043.598870][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1043.598892][ C1] ? get_rtnl_holder+0x144/0x190 [ 1043.598907][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1043.598923][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1043.598940][ C1] ? __lock_acquire+0x1384/0x2050 [ 1043.598957][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1043.598987][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1043.599001][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1043.599019][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1043.599051][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1043.599065][ C1] netlink_unicast+0x7f6/0x990 [ 1043.599089][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1043.599104][ C1] ? __virt_addr_valid+0x183/0x530 [ 1043.599119][ C1] ? __check_object_size+0x49c/0x900 [ 1043.599132][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1043.599151][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1043.599174][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1043.599185][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1043.599203][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1043.599220][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1043.599231][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1043.599245][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1043.599257][ C1] __sock_sendmsg+0x221/0x270 [ 1043.599277][ C1] __sys_sendto+0x3a4/0x4f0 [ 1043.599296][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1043.599330][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1043.599348][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1043.599373][ C1] __x64_sys_sendto+0xde/0x100 [ 1043.599390][ C1] do_syscall_64+0xf3/0x230 [ 1043.599403][ C1] ? clear_bhb_loop+0x35/0x90 [ 1043.599419][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.599432][ C1] RIP: 0033:0x7f4eb757902c [ 1043.599444][ C1] RSP: 002b:00007ffc904f9180 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1043.599457][ C1] RAX: ffffffffffffffda RBX: 00007f4eb8234620 RCX: 00007f4eb757902c [ 1043.599466][ C1] RDX: 0000000000000044 RSI: 00007f4eb8234670 RDI: 0000000000000003 [ 1043.599475][ C1] RBP: 0000000000000000 R08: 00007ffc904f91d4 R09: 000000000000000c [ 1043.599483][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1043.599491][ C1] R13: 0000000000000000 R14: 00007f4eb8234670 R15: 0000000000000000 [ 1043.599512][ C1] [ 1043.599517][ C1] DEBUG: waiting rtnl_mutex for 3176 jiffies. [ 1043.599524][ C1] task:kworker/1:10 state:D stack:18360 pid:6309 tgid:6309 ppid:2 flags:0x00004000 [ 1043.599545][ C1] Workqueue: events linkwatch_event [ 1043.599558][ C1] Call Trace: [ 1043.599563][ C1] [ 1043.599572][ C1] __schedule+0x1800/0x4a60 [ 1043.599605][ C1] ? __pfx___schedule+0x10/0x10 [ 1043.599622][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1043.599638][ C1] ? __pfx_lock_release+0x10/0x10 [ 1043.599655][ C1] ? kick_pool+0x45c/0x620 [ 1043.599672][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1043.599689][ C1] ? schedule+0x90/0x320 [ 1043.599704][ C1] schedule+0x14b/0x320 [ 1043.599722][ C1] schedule_preempt_disabled+0x13/0x30 [ 1043.599737][ C1] __mutex_lock+0x6a4/0xd70 [ 1043.599753][ C1] ? __mutex_lock+0x527/0xd70 [ 1043.599767][ C1] ? linkwatch_event+0xe/0x60 [ 1043.599781][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1043.599801][ C1] ? get_rtnl_holder+0x144/0x190 [ 1043.599816][ C1] ? process_scheduled_works+0x945/0x1830 [ 1043.599830][ C1] linkwatch_event+0xe/0x60 [ 1043.599842][ C1] process_scheduled_works+0xa2c/0x1830 [ 1043.599880][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1043.599902][ C1] ? assign_work+0x364/0x3d0 [ 1043.599923][ C1] worker_thread+0x86d/0xd40 [ 1043.599950][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1043.599969][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1043.599984][ C1] kthread+0x2f0/0x390 [ 1043.599996][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1043.600011][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.600023][ C1] ret_from_fork+0x4b/0x80 [ 1043.600038][ C1] ? __pfx_kthread+0x10/0x10 [ 1043.600050][ C1] ret_from_fork_asm+0x1a/0x30 [ 1043.600077][ C1] [ 1043.600084][ C1] [ 1043.600084][ C1] Showing all locks held in the system: [ 1043.600091][ C1] 3 locks held by kworker/u8:1/12: [ 1043.600100][ C1] #0: ffff88802a778148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1043.600138][ C1] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1043.600174][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1043.600215][ C1] 5 locks held by kworker/u8:4/66: [ 1043.600241][ C1] 3 locks held by kworker/u8:7/2550: [ 1043.600251][ C1] 2 locks held by kworker/u8:9/2944: [ 1043.600261][ C1] 2 locks held by getty/4977: [ 1043.600268][ C1] #0: ffff88802b1940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1043.600304][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1043.600339][ C1] 1 lock held by syz-executor/5218: [ 1043.600348][ C1] 5 locks held by kworker/u8:10/6025: [ 1043.600355][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1043.600395][ C1] #1: ffffc9000361fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1043.600430][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1043.600462][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1043.600494][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1043.600528][ C1] 3 locks held by kworker/1:10/6309: [ 1043.600535][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1043.600570][ C1] #1: ffffc900094dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1043.600605][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1043.600642][ C1] 2 locks held by syz.2.1976/12758: [ 1043.600652][ C1] 1 lock held by syz-executor/14217: [ 1043.600662][ C1] 2 locks held by syz-executor/14266: [ 1043.600671][ C1] 1 lock held by syz-executor/17094: [ 1043.600678][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1043.600715][ C1] 2 locks held by syz.4.3018/17611: [ 1043.600722][ C1] #0: ffff88807e97dc08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1043.600762][ C1] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 1043.600794][ C1] 1 lock held by syz.3.3039/17746: [ 1043.600802][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: bpf_xdp_link_attach+0x112/0x700 [ 1043.600835][ C1] 5 locks held by syz.0.3044/17768: [ 1043.600843][ C1] #0: ffff88807bc320e0 (&type->s_umount_key#77/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 1043.600885][ C1] #1: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1043.600920][ C1] #2: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1043.600955][ C1] #3: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1043.600988][ C1] #4: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1043.601026][ C1] [ 1043.601030][ C1] ============================================= [ 1043.601030][ C1] [ 1044.634618][ C1] DEBUG: waiting rtnl_mutex for 3351 jiffies. [ 1044.634636][ C1] task:syz.4.3018 state:D stack:24672 pid:17611 tgid:17611 ppid:14266 flags:0x00004004 [ 1044.634664][ C1] Call Trace: [ 1044.634672][ C1] [ 1044.634682][ C1] __schedule+0x1800/0x4a60 [ 1044.634723][ C1] ? __pfx___schedule+0x10/0x10 [ 1044.634742][ C1] ? __pfx_lock_release+0x10/0x10 [ 1044.634761][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1044.634783][ C1] ? schedule+0x90/0x320 [ 1044.634799][ C1] schedule+0x14b/0x320 [ 1044.634817][ C1] schedule_preempt_disabled+0x13/0x30 [ 1044.634833][ C1] __mutex_lock+0x6a4/0xd70 [ 1044.634849][ C1] ? __mutex_lock+0x527/0xd70 [ 1044.634863][ C1] ? raw_release+0x1b8/0x8b0 [ 1044.634878][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1044.634897][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1044.634913][ C1] ? get_rtnl_holder+0x144/0x190 [ 1044.634931][ C1] raw_release+0x1b8/0x8b0 [ 1044.634945][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1044.634964][ C1] sock_close+0xbc/0x240 [ 1044.634980][ C1] ? __pfx_sock_close+0x10/0x10 [ 1044.634998][ C1] __fput+0x24a/0x8a0 [ 1044.635024][ C1] task_work_run+0x24f/0x310 [ 1044.635043][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1044.635060][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1044.635081][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 1044.635101][ C1] do_syscall_64+0x100/0x230 [ 1044.635114][ C1] ? clear_bhb_loop+0x35/0x90 [ 1044.635131][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.635145][ C1] RIP: 0033:0x7f745a977299 [ 1044.635164][ C1] RSP: 002b:00007ffe190a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1044.635178][ C1] RAX: 0000000000000000 RBX: 00007f745ab07a80 RCX: 00007f745a977299 [ 1044.635188][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1044.635196][ C1] RBP: 00007f745ab07a80 R08: 00007f745aaf2000 R09: 00007ffe190a23cf [ 1044.635206][ C1] R10: 00000000005f2cc4 R11: 0000000000000246 R12: 00000000000f6ec7 [ 1044.635219][ C1] R13: 00007ffe190a21e0 R14: 00007ffe190a2200 R15: ffffffffffffffff [ 1044.635242][ C1] [ 1044.635248][ C1] DEBUG: waiting rtnl_mutex for 3072 jiffies. [ 1044.635256][ C1] task:kworker/u8:1 state:D stack:20600 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 1044.635279][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 1044.635299][ C1] Call Trace: [ 1044.635304][ C1] [ 1044.635313][ C1] __schedule+0x1800/0x4a60 [ 1044.635347][ C1] ? __pfx___schedule+0x10/0x10 [ 1044.635366][ C1] ? __pfx_lock_release+0x10/0x10 [ 1044.635383][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1044.635397][ C1] ? kthread_data+0x52/0xd0 [ 1044.635412][ C1] ? schedule+0x90/0x320 [ 1044.635427][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1044.635445][ C1] ? schedule+0x90/0x320 [ 1044.635460][ C1] schedule+0x14b/0x320 [ 1044.635478][ C1] schedule_preempt_disabled+0x13/0x30 [ 1044.635493][ C1] __mutex_lock+0x6a4/0xd70 [ 1044.635509][ C1] ? __mutex_lock+0x527/0xd70 [ 1044.635523][ C1] ? addrconf_verify_work+0x19/0x30 [ 1044.635540][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1044.635551][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1044.635570][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1044.635591][ C1] ? get_rtnl_holder+0x144/0x190 [ 1044.635605][ C1] ? process_scheduled_works+0x945/0x1830 [ 1044.635620][ C1] addrconf_verify_work+0x19/0x30 [ 1044.635637][ C1] process_scheduled_works+0xa2c/0x1830 [ 1044.635674][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1044.635697][ C1] ? assign_work+0x364/0x3d0 [ 1044.635717][ C1] worker_thread+0x86d/0xd40 [ 1044.635744][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1044.635763][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1044.635778][ C1] kthread+0x2f0/0x390 [ 1044.635790][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1044.635805][ C1] ? __pfx_kthread+0x10/0x10 [ 1044.635818][ C1] ret_from_fork+0x4b/0x80 [ 1044.635834][ C1] ? __pfx_kthread+0x10/0x10 [ 1044.635846][ C1] ret_from_fork_asm+0x1a/0x30 [ 1044.635874][ C1] [ 1044.635880][ C1] DEBUG: waiting rtnl_mutex for 3041 jiffies. [ 1044.635887][ C1] task:syz.3.3039 state:D stack:23800 pid:17746 tgid:17745 ppid:14163 flags:0x00000004 [ 1044.635909][ C1] Call Trace: [ 1044.635915][ C1] [ 1044.635923][ C1] __schedule+0x1800/0x4a60 [ 1044.635957][ C1] ? __pfx___schedule+0x10/0x10 [ 1044.635976][ C1] ? __pfx_lock_release+0x10/0x10 [ 1044.635993][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1044.636015][ C1] ? schedule+0x90/0x320 [ 1044.636030][ C1] schedule+0x14b/0x320 [ 1044.636048][ C1] schedule_preempt_disabled+0x13/0x30 [ 1044.636063][ C1] __mutex_lock+0x6a4/0xd70 [ 1044.636075][ C1] ? mark_lock+0x9a/0x360 [ 1044.636094][ C1] ? __mutex_lock+0x527/0xd70 [ 1044.636108][ C1] ? bpf_xdp_link_attach+0x112/0x700 [ 1044.636123][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1044.636144][ C1] ? get_rtnl_holder+0x144/0x190 [ 1044.636160][ C1] bpf_xdp_link_attach+0x112/0x700 [ 1044.636177][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1044.636193][ C1] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 1044.636227][ C1] ? __fget_files+0x3f6/0x470 [ 1044.636239][ C1] ? __fget_files+0x29/0x470 [ 1044.636256][ C1] ? attach_type_to_prog_type+0x316/0x460 [ 1044.636270][ C1] ? bpf_prog_attach_check_attach_type+0x2cb/0x4b0 [ 1044.636286][ C1] link_create+0x47c/0x8b0 [ 1044.636299][ C1] ? bpf_lsm_bpf+0x9/0x10 [ 1044.636316][ C1] __sys_bpf+0x4bc/0x810 [ 1044.636335][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 1044.636361][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1044.636380][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1044.636397][ C1] ? do_syscall_64+0x100/0x230 [ 1044.636413][ C1] __x64_sys_bpf+0x7c/0x90 [ 1044.636430][ C1] do_syscall_64+0xf3/0x230 [ 1044.636442][ C1] ? clear_bhb_loop+0x35/0x90 [ 1044.636458][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.636471][ C1] RIP: 0033:0x7f7717177299 [ 1044.636484][ C1] RSP: 002b:00007f7717ec7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1044.636504][ C1] RAX: ffffffffffffffda RBX: 00007f7717305f80 RCX: 00007f7717177299 [ 1044.636514][ C1] RDX: 0000000000000010 RSI: 0000000020000580 RDI: 000000000000001c [ 1044.636523][ C1] RBP: 00007f77171e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 1044.636531][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1044.636540][ C1] R13: 000000000000000b R14: 00007f7717305f80 R15: 00007ffd1bdabf38 [ 1044.636561][ C1] [ 1044.636567][ C1] DEBUG: holding rtnl_mutex for 3348 jiffies. [ 1044.636574][ C1] task:kworker/u8:10 state:D stack:18648 pid:6025 tgid:6025 ppid:2 flags:0x00004000 [ 1044.636596][ C1] Workqueue: netns cleanup_net [ 1044.636610][ C1] Call Trace: [ 1044.636615][ C1] [ 1044.636624][ C1] __schedule+0x1800/0x4a60 [ 1044.636658][ C1] ? __pfx___schedule+0x10/0x10 [ 1044.636677][ C1] ? __pfx_lock_release+0x10/0x10 [ 1044.636691][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1044.636712][ C1] ? kthread_data+0x52/0xd0 [ 1044.636729][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1044.636747][ C1] ? schedule+0x90/0x320 [ 1044.636762][ C1] schedule+0x14b/0x320 [ 1044.636779][ C1] synchronize_rcu_expedited+0x684/0x830 [ 1044.636797][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1044.636822][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1044.636836][ C1] ? __pfx___might_resched+0x10/0x10 [ 1044.636850][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1044.636866][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1044.636882][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1044.636907][ C1] synchronize_rcu+0x11b/0x360 [ 1044.636920][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 1044.636943][ C1] lockdep_unregister_key+0x4b7/0x540 [ 1044.636963][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1044.636982][ C1] ? rcu_is_watching+0x15/0xb0 [ 1044.636994][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 1044.637013][ C1] __qdisc_destroy+0x165/0x410 [ 1044.637028][ C1] dev_shutdown+0x9b/0x450 [ 1044.637045][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 1044.637074][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1044.637103][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1044.637124][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1044.637146][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1044.637166][ C1] ? __pfx___might_resched+0x10/0x10 [ 1044.637182][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1044.637201][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1044.637222][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1044.637237][ C1] cleanup_net+0x89d/0xcc0 [ 1044.637255][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1044.637278][ C1] ? process_scheduled_works+0x945/0x1830 [ 1044.637293][ C1] process_scheduled_works+0xa2c/0x1830 [ 1044.637330][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1044.637353][ C1] ? assign_work+0x364/0x3d0 [ 1044.637373][ C1] worker_thread+0x86d/0xd40 [ 1044.637400][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1044.637419][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1044.637434][ C1] kthread+0x2f0/0x390 [ 1044.637446][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1044.637461][ C1] ? __pfx_kthread+0x10/0x10 [ 1044.637473][ C1] ret_from_fork+0x4b/0x80 [ 1044.637488][ C1] ? __pfx_kthread+0x10/0x10 [ 1044.637500][ C1] ret_from_fork_asm+0x1a/0x30 [ 1044.637528][ C1] [ 1044.637533][ C1] DEBUG: waiting rtnl_mutex for 3347 jiffies. [ 1044.637541][ C1] task:syz-executor state:D stack:21728 pid:17094 tgid:17094 ppid:17061 flags:0x00000000 [ 1044.637562][ C1] Call Trace: [ 1044.637567][ C1] [ 1044.637576][ C1] __schedule+0x1800/0x4a60 [ 1044.637609][ C1] ? __pfx___schedule+0x10/0x10 [ 1044.637628][ C1] ? __pfx_lock_release+0x10/0x10 [ 1044.637645][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1044.637666][ C1] ? schedule+0x90/0x320 [ 1044.637681][ C1] schedule+0x14b/0x320 [ 1044.637699][ C1] schedule_preempt_disabled+0x13/0x30 [ 1044.637714][ C1] __mutex_lock+0x6a4/0xd70 [ 1044.637729][ C1] ? __mutex_lock+0x527/0xd70 [ 1044.637743][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1044.637762][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1044.637783][ C1] ? get_rtnl_holder+0x144/0x190 [ 1044.637798][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1044.637814][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1044.637832][ C1] ? __lock_acquire+0x1384/0x2050 [ 1044.637849][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1044.637879][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1044.637893][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1044.637911][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1044.637943][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1044.637957][ C1] netlink_unicast+0x7f6/0x990 [ 1044.637982][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1044.637996][ C1] ? __virt_addr_valid+0x183/0x530 [ 1044.638012][ C1] ? __check_object_size+0x49c/0x900 [ 1044.638026][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1044.638045][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1044.638068][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1044.638079][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1044.638097][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1044.638114][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1044.638126][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1044.638140][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1044.638152][ C1] __sock_sendmsg+0x221/0x270 [ 1044.638172][ C1] __sys_sendto+0x3a4/0x4f0 [ 1044.638191][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1044.638228][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1044.638247][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1044.638268][ C1] __x64_sys_sendto+0xde/0x100 [ 1044.638285][ C1] do_syscall_64+0xf3/0x230 [ 1044.638297][ C1] ? clear_bhb_loop+0x35/0x90 [ 1044.638313][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.638327][ C1] RIP: 0033:0x7f4eb757902c [ 1044.638339][ C1] RSP: 002b:00007ffc904f9180 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1044.638352][ C1] RAX: ffffffffffffffda RBX: 00007f4eb8234620 RCX: 00007f4eb757902c [ 1044.638362][ C1] RDX: 0000000000000044 RSI: 00007f4eb8234670 RDI: 0000000000000003 [ 1044.638371][ C1] RBP: 0000000000000000 R08: 00007ffc904f91d4 R09: 000000000000000c [ 1044.638379][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1044.638387][ C1] R13: 0000000000000000 R14: 00007f4eb8234670 R15: 0000000000000000 [ 1044.638408][ C1] [ 1044.638413][ C1] DEBUG: waiting rtnl_mutex for 3280 jiffies. [ 1044.638420][ C1] task:kworker/1:10 state:D stack:18360 pid:6309 tgid:6309 ppid:2 flags:0x00004000 [ 1044.638442][ C1] Workqueue: events linkwatch_event [ 1044.638455][ C1] Call Trace: [ 1044.638460][ C1] [ 1044.638469][ C1] __schedule+0x1800/0x4a60 [ 1044.638503][ C1] ? __pfx___schedule+0x10/0x10 [ 1044.638519][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1044.638535][ C1] ? __pfx_lock_release+0x10/0x10 [ 1044.638552][ C1] ? kick_pool+0x45c/0x620 [ 1044.638569][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1044.638586][ C1] ? schedule+0x90/0x320 [ 1044.638601][ C1] schedule+0x14b/0x320 [ 1044.638619][ C1] schedule_preempt_disabled+0x13/0x30 [ 1044.638635][ C1] __mutex_lock+0x6a4/0xd70 [ 1044.638650][ C1] ? __mutex_lock+0x527/0xd70 [ 1044.638664][ C1] ? linkwatch_event+0xe/0x60 [ 1044.638678][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1044.638699][ C1] ? get_rtnl_holder+0x144/0x190 [ 1044.638713][ C1] ? process_scheduled_works+0x945/0x1830 [ 1044.638728][ C1] linkwatch_event+0xe/0x60 [ 1044.638740][ C1] process_scheduled_works+0xa2c/0x1830 [ 1044.638778][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1044.638801][ C1] ? assign_work+0x364/0x3d0 [ 1044.638820][ C1] worker_thread+0x86d/0xd40 [ 1044.638847][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1044.638866][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1044.638882][ C1] kthread+0x2f0/0x390 [ 1044.638893][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1044.638908][ C1] ? __pfx_kthread+0x10/0x10 [ 1044.638921][ C1] ret_from_fork+0x4b/0x80 [ 1044.638936][ C1] ? __pfx_kthread+0x10/0x10 [ 1044.638948][ C1] ret_from_fork_asm+0x1a/0x30 [ 1044.638975][ C1] [ 1044.638982][ C1] [ 1044.638982][ C1] Showing all locks held in the system: [ 1044.638989][ C1] 3 locks held by kworker/u8:1/12: [ 1044.638998][ C1] #0: ffff88802a778148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1044.639036][ C1] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1044.639072][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1044.639114][ C1] 5 locks held by kworker/u8:4/66: [ 1044.639140][ C1] 3 locks held by kworker/u8:7/2550: [ 1044.639150][ C1] 2 locks held by kworker/u8:9/2944: [ 1044.639159][ C1] 2 locks held by getty/4977: [ 1044.639167][ C1] #0: ffff88802b1940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1044.639203][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1044.639241][ C1] 1 lock held by syz-executor/5218: [ 1044.639250][ C1] 5 locks held by kworker/u8:10/6025: [ 1044.639258][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1044.639293][ C1] #1: ffffc9000361fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1044.639327][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1044.639360][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1044.639392][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1044.639425][ C1] 3 locks held by kworker/1:10/6309: [ 1044.639433][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1044.639468][ C1] #1: ffffc900094dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1044.639503][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1044.639538][ C1] 2 locks held by syz.2.1976/12758: [ 1044.639548][ C1] 1 lock held by syz-executor/14217: [ 1044.639557][ C1] 2 locks held by syz-executor/14266: [ 1044.639566][ C1] 1 lock held by syz-executor/17094: [ 1044.639574][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1044.639611][ C1] 2 locks held by syz.4.3018/17611: [ 1044.639618][ C1] #0: ffff88807e97dc08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1044.639658][ C1] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 1044.639690][ C1] 1 lock held by syz.3.3039/17746: [ 1044.639698][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: bpf_xdp_link_attach+0x112/0x700 [ 1044.639731][ C1] 5 locks held by syz.0.3044/17768: [ 1044.639739][ C1] #0: ffff88807bc320e0 (&type->s_umount_key#77/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 1044.639782][ C1] #1: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1044.639818][ C1] #2: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1044.639852][ C1] #3: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1044.639885][ C1] #4: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1044.639923][ C1] [ 1044.639927][ C1] ============================================= [ 1044.639927][ C1] [ 1045.676389][ C1] DEBUG: waiting rtnl_mutex for 3455 jiffies. [ 1045.676416][ C1] task:syz.4.3018 state:D stack:24672 pid:17611 tgid:17611 ppid:14266 flags:0x00004004 [ 1045.676475][ C1] Call Trace: [ 1045.676489][ C1] [ 1045.676517][ C1] __schedule+0x1800/0x4a60 [ 1045.676599][ C1] ? __pfx___schedule+0x10/0x10 [ 1045.676639][ C1] ? __pfx_lock_release+0x10/0x10 [ 1045.676674][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1045.676717][ C1] ? schedule+0x90/0x320 [ 1045.676747][ C1] schedule+0x14b/0x320 [ 1045.676783][ C1] schedule_preempt_disabled+0x13/0x30 [ 1045.676815][ C1] __mutex_lock+0x6a4/0xd70 [ 1045.676846][ C1] ? __mutex_lock+0x527/0xd70 [ 1045.676873][ C1] ? raw_release+0x1b8/0x8b0 [ 1045.676901][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1045.676938][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1045.676970][ C1] ? get_rtnl_holder+0x144/0x190 [ 1045.677002][ C1] raw_release+0x1b8/0x8b0 [ 1045.677031][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1045.677067][ C1] sock_close+0xbc/0x240 [ 1045.677098][ C1] ? __pfx_sock_close+0x10/0x10 [ 1045.677140][ C1] __fput+0x24a/0x8a0 [ 1045.677189][ C1] task_work_run+0x24f/0x310 [ 1045.677224][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1045.677258][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1045.677297][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 1045.677336][ C1] do_syscall_64+0x100/0x230 [ 1045.677360][ C1] ? clear_bhb_loop+0x35/0x90 [ 1045.677390][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.677416][ C1] RIP: 0033:0x7f745a977299 [ 1045.677445][ C1] RSP: 002b:00007ffe190a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1045.677472][ C1] RAX: 0000000000000000 RBX: 00007f745ab07a80 RCX: 00007f745a977299 [ 1045.677490][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1045.677507][ C1] RBP: 00007f745ab07a80 R08: 00007f745aaf2000 R09: 00007ffe190a23cf [ 1045.677524][ C1] R10: 00000000005f2cc4 R11: 0000000000000246 R12: 00000000000f6ec7 [ 1045.677541][ C1] R13: 00007ffe190a21e0 R14: 00007ffe190a2200 R15: ffffffffffffffff [ 1045.677585][ C1] [ 1045.677596][ C1] DEBUG: waiting rtnl_mutex for 3176 jiffies. [ 1045.677610][ C1] task:kworker/u8:1 state:D stack:20600 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 1045.677652][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 1045.677689][ C1] Call Trace: [ 1045.677699][ C1] [ 1045.677716][ C1] __schedule+0x1800/0x4a60 [ 1045.677782][ C1] ? __pfx___schedule+0x10/0x10 [ 1045.677820][ C1] ? __pfx_lock_release+0x10/0x10 [ 1045.677854][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1045.677882][ C1] ? kthread_data+0x52/0xd0 [ 1045.677912][ C1] ? schedule+0x90/0x320 [ 1045.677942][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1045.677978][ C1] ? schedule+0x90/0x320 [ 1045.678008][ C1] schedule+0x14b/0x320 [ 1045.678044][ C1] schedule_preempt_disabled+0x13/0x30 [ 1045.678075][ C1] __mutex_lock+0x6a4/0xd70 [ 1045.678105][ C1] ? __mutex_lock+0x527/0xd70 [ 1045.678138][ C1] ? addrconf_verify_work+0x19/0x30 [ 1045.678173][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1045.678195][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1045.678231][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1045.678274][ C1] ? get_rtnl_holder+0x144/0x190 [ 1045.678303][ C1] ? process_scheduled_works+0x945/0x1830 [ 1045.678332][ C1] addrconf_verify_work+0x19/0x30 [ 1045.678364][ C1] process_scheduled_works+0xa2c/0x1830 [ 1045.678438][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1045.678483][ C1] ? assign_work+0x364/0x3d0 [ 1045.678521][ C1] worker_thread+0x86d/0xd40 [ 1045.678574][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1045.678612][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1045.678643][ C1] kthread+0x2f0/0x390 [ 1045.678665][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1045.678694][ C1] ? __pfx_kthread+0x10/0x10 [ 1045.678718][ C1] ret_from_fork+0x4b/0x80 [ 1045.678749][ C1] ? __pfx_kthread+0x10/0x10 [ 1045.678773][ C1] ret_from_fork_asm+0x1a/0x30 [ 1045.678828][ C1] [ 1045.678839][ C1] DEBUG: waiting rtnl_mutex for 3145 jiffies. [ 1045.678853][ C1] task:syz.3.3039 state:D stack:23800 pid:17746 tgid:17745 ppid:14163 flags:0x00000004 [ 1045.678893][ C1] Call Trace: [ 1045.678904][ C1] [ 1045.678920][ C1] __schedule+0x1800/0x4a60 [ 1045.678987][ C1] ? __pfx___schedule+0x10/0x10 [ 1045.679024][ C1] ? __pfx_lock_release+0x10/0x10 [ 1045.679057][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1045.679100][ C1] ? schedule+0x90/0x320 [ 1045.679136][ C1] schedule+0x14b/0x320 [ 1045.679171][ C1] schedule_preempt_disabled+0x13/0x30 [ 1045.679202][ C1] __mutex_lock+0x6a4/0xd70 [ 1045.679224][ C1] ? mark_lock+0x9a/0x360 [ 1045.679261][ C1] ? __mutex_lock+0x527/0xd70 [ 1045.679288][ C1] ? bpf_xdp_link_attach+0x112/0x700 [ 1045.679318][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1045.679359][ C1] ? get_rtnl_holder+0x144/0x190 [ 1045.679389][ C1] bpf_xdp_link_attach+0x112/0x700 [ 1045.679422][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1045.679452][ C1] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 1045.679512][ C1] ? __fget_files+0x3f6/0x470 [ 1045.679535][ C1] ? __fget_files+0x29/0x470 [ 1045.679567][ C1] ? attach_type_to_prog_type+0x316/0x460 [ 1045.679593][ C1] ? bpf_prog_attach_check_attach_type+0x2cb/0x4b0 [ 1045.679624][ C1] link_create+0x47c/0x8b0 [ 1045.679647][ C1] ? bpf_lsm_bpf+0x9/0x10 [ 1045.679681][ C1] __sys_bpf+0x4bc/0x810 [ 1045.679717][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 1045.679770][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1045.679807][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1045.679842][ C1] ? do_syscall_64+0x100/0x230 [ 1045.679873][ C1] __x64_sys_bpf+0x7c/0x90 [ 1045.679906][ C1] do_syscall_64+0xf3/0x230 [ 1045.679930][ C1] ? clear_bhb_loop+0x35/0x90 [ 1045.679960][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.679986][ C1] RIP: 0033:0x7f7717177299 [ 1045.680012][ C1] RSP: 002b:00007f7717ec7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1045.680039][ C1] RAX: ffffffffffffffda RBX: 00007f7717305f80 RCX: 00007f7717177299 [ 1045.680058][ C1] RDX: 0000000000000010 RSI: 0000000020000580 RDI: 000000000000001c [ 1045.680074][ C1] RBP: 00007f77171e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 1045.680091][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1045.680107][ C1] R13: 000000000000000b R14: 00007f7717305f80 R15: 00007ffd1bdabf38 [ 1045.680156][ C1] [ 1045.680166][ C1] DEBUG: holding rtnl_mutex for 3452 jiffies. [ 1045.680180][ C1] task:kworker/u8:10 state:D stack:18648 pid:6025 tgid:6025 ppid:2 flags:0x00004000 [ 1045.680221][ C1] Workqueue: netns cleanup_net [ 1045.680246][ C1] Call Trace: [ 1045.680256][ C1] [ 1045.680273][ C1] __schedule+0x1800/0x4a60 [ 1045.680340][ C1] ? __pfx___schedule+0x10/0x10 [ 1045.680377][ C1] ? __pfx_lock_release+0x10/0x10 [ 1045.680405][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1045.680446][ C1] ? kthread_data+0x52/0xd0 [ 1045.680479][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1045.680513][ C1] ? schedule+0x90/0x320 [ 1045.680543][ C1] schedule+0x14b/0x320 [ 1045.680577][ C1] synchronize_rcu_expedited+0x684/0x830 [ 1045.680609][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1045.680659][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1045.680686][ C1] ? __pfx___might_resched+0x10/0x10 [ 1045.680712][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1045.680744][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1045.680778][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1045.680826][ C1] synchronize_rcu+0x11b/0x360 [ 1045.680851][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 1045.680897][ C1] lockdep_unregister_key+0x4b7/0x540 [ 1045.680936][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1045.680973][ C1] ? rcu_is_watching+0x15/0xb0 [ 1045.680997][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 1045.681032][ C1] __qdisc_destroy+0x165/0x410 [ 1045.681063][ C1] dev_shutdown+0x9b/0x450 [ 1045.681095][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 1045.681158][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1045.681216][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1045.681259][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1045.681299][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1045.681339][ C1] ? __pfx___might_resched+0x10/0x10 [ 1045.681370][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1045.681408][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1045.681438][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1045.681465][ C1] cleanup_net+0x89d/0xcc0 [ 1045.681501][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1045.681546][ C1] ? process_scheduled_works+0x945/0x1830 [ 1045.681575][ C1] process_scheduled_works+0xa2c/0x1830 [ 1045.681650][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1045.681696][ C1] ? assign_work+0x364/0x3d0 [ 1045.681735][ C1] worker_thread+0x86d/0xd40 [ 1045.681789][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1045.681827][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1045.681858][ C1] kthread+0x2f0/0x390 [ 1045.681881][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1045.681910][ C1] ? __pfx_kthread+0x10/0x10 [ 1045.681935][ C1] ret_from_fork+0x4b/0x80 [ 1045.681965][ C1] ? __pfx_kthread+0x10/0x10 [ 1045.681989][ C1] ret_from_fork_asm+0x1a/0x30 [ 1045.682043][ C1] [ 1045.682054][ C1] DEBUG: waiting rtnl_mutex for 3451 jiffies. [ 1045.682067][ C1] task:syz-executor state:D stack:21728 pid:17094 tgid:17094 ppid:17061 flags:0x00000000 [ 1045.682108][ C1] Call Trace: [ 1045.682117][ C1] [ 1045.682143][ C1] __schedule+0x1800/0x4a60 [ 1045.682648][ C1] ? __pfx___schedule+0x10/0x10 [ 1045.682689][ C1] ? __pfx_lock_release+0x10/0x10 [ 1045.682722][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1045.682761][ C1] ? schedule+0x90/0x320 [ 1045.682788][ C1] schedule+0x14b/0x320 [ 1045.682819][ C1] schedule_preempt_disabled+0x13/0x30 [ 1045.682850][ C1] __mutex_lock+0x6a4/0xd70 [ 1045.682877][ C1] ? __mutex_lock+0x527/0xd70 [ 1045.682900][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1045.682933][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1045.682966][ C1] ? get_rtnl_holder+0x144/0x190 [ 1045.682991][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1045.683017][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1045.683047][ C1] ? __lock_acquire+0x1384/0x2050 [ 1045.683084][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1045.683114][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2706 jiffies s: 85913 root: 0x2/. [ 1045.683143][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1045.683151][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 1045.683163][ T19] Sending NMI from CPU 0 to CPUs 1: [ 1045.683197][ C1] NMI backtrace for cpu 1 [ 1045.683209][ C1] CPU: 1 UID: 0 PID: 17768 Comm: syz.0.3044 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0 [ 1045.683229][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1045.683240][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0xab/0x120 [ 1045.683269][ C1] Code: 24 20 65 4c 8b 1c 25 40 d7 03 00 31 d2 eb 08 48 ff c2 49 39 d2 74 71 4c 8b 74 d6 10 65 8b 05 c4 05 70 7e a9 00 01 ff 00 74 11 00 01 00 00 74 de 41 83 bb 1c 16 00 00 00 74 d4 41 8b 83 f8 15 [ 1045.683284][ C1] RSP: 0018:ffffc90000a182b8 EFLAGS: 00000006 [ 1045.683299][ C1] RAX: 0000000000000101 RBX: 0000000000000003 RCX: dffffc0000000000 [ 1045.683311][ C1] RDX: 0000000000000000 RSI: ffffffff8e92f300 RDI: 0000000000000003 [ 1045.683323][ C1] RBP: ffffc90000a184f0 R08: 0000000000000005 R09: ffffffff81749c3d [ 1045.683336][ C1] R10: 0000000000000004 R11: ffff888029b98000 R12: 00000001000031cd [ 1045.683348][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 00000001000031cd [ 1045.683361][ C1] FS: 00007fe50e3836c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1045.683376][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1045.683387][ C1] CR2: 00007fe50d55a4a0 CR3: 000000004f020000 CR4: 00000000003506f0 [ 1045.683403][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1045.683414][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1045.683425][ C1] Call Trace: [ 1045.683432][ C1] [ 1045.683439][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1045.683460][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1045.683484][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1045.683504][ C1] ? nmi_handle+0x2a/0x5a0 [ 1045.683530][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1045.683552][ C1] ? nmi_handle+0x14f/0x5a0 [ 1045.683569][ C1] ? nmi_handle+0x2a/0x5a0 [ 1045.683587][ C1] ? __sanitizer_cov_trace_switch+0xab/0x120 [ 1045.683613][ C1] ? default_do_nmi+0x63/0x160 [ 1045.683634][ C1] ? exc_nmi+0x123/0x1f0 [ 1045.683654][ C1] ? end_repeat_nmi+0xf/0x53 [ 1045.683677][ C1] ? prb_reserve+0x3cd/0x12e0 [ 1045.683704][ C1] ? __sanitizer_cov_trace_switch+0xab/0x120 [ 1045.683730][ C1] ? __sanitizer_cov_trace_switch+0xab/0x120 [ 1045.683758][ C1] ? __sanitizer_cov_trace_switch+0xab/0x120 [ 1045.683784][ C1] [ 1045.683790][ C1] [ 1045.683797][ C1] prb_reserve+0x3cd/0x12e0 [ 1045.683828][ C1] ? __pfx_format_decode+0x10/0x10 [ 1045.683850][ C1] ? __pfx_prb_reserve+0x10/0x10 [ 1045.683873][ C1] ? widen_string+0x3a/0x310 [ 1045.683892][ C1] ? string+0x26a/0x2b0 [ 1045.683913][ C1] ? vsnprintf+0x1ccd/0x1da0 [ 1045.683936][ C1] ? __pfx_vsnprintf+0x10/0x10 [ 1045.683961][ C1] vprintk_store+0x930/0x1160 [ 1045.683987][ C1] ? __pfx_vprintk_store+0x10/0x10 [ 1045.684018][ C1] ? __lock_acquire+0x1384/0x2050 [ 1045.684044][ C1] ? mark_lock+0x9a/0x360 [ 1045.684076][ C1] vprintk_emit+0x1de/0x900 [ 1045.684094][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1045.684121][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1045.684143][ C1] ? rcu_read_unlock_special+0x3f9/0x550 [ 1045.684166][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1045.684197][ C1] _printk+0xd5/0x120 [ 1045.684222][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1045.684247][ C1] ? wq_watchdog_touch+0xe5/0x180 [ 1045.684267][ C1] ? __pfx__printk+0x10/0x10 [ 1045.684290][ C1] ? __rcu_read_unlock+0xa1/0x110 [ 1045.684313][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 1045.684330][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 1045.684349][ C1] ? wq_watchdog_touch+0xef/0x180 [ 1045.684370][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1045.684394][ C1] show_trace_log_lvl+0x43a/0x520 [ 1045.684427][ C1] ? netlink_unicast+0x7f6/0x990 [ 1045.684454][ C1] sched_show_task+0x506/0x6d0 [ 1045.684474][ C1] ? report_rtnl_holders+0x2a5/0x400 [ 1045.684499][ C1] ? __pfx__printk+0x10/0x10 [ 1045.684523][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 1045.684542][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1045.684566][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1045.684594][ C1] report_rtnl_holders+0x327/0x400 [ 1045.684623][ C1] call_timer_fn+0x18e/0x650 [ 1045.684641][ C1] ? call_timer_fn+0xc0/0x650 [ 1045.684658][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1045.684682][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1045.684701][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1045.684726][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1045.684749][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1045.684771][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1045.684794][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1045.684817][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1045.684841][ C1] __run_timer_base+0x66a/0x8e0 [ 1045.684873][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1045.684908][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1045.684937][ C1] run_timer_softirq+0xb7/0x170 [ 1045.684953][ C1] handle_softirqs+0x2c4/0x970 [ 1045.684978][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 1045.685003][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1045.685027][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 1045.685053][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 1045.685076][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1045.685103][ C1] irq_exit_rcu+0x9/0x30 [ 1045.685130][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1045.685155][ C1] [ 1045.685161][ C1] [ 1045.685168][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1045.685189][ C1] RIP: 0010:console_flush_all+0x9f7/0xf50 [ 1045.685210][ C1] Code: 20 00 90 0f 0b 90 e9 f3 f9 ff ff e8 83 1c 20 00 e8 0e e7 45 0a 4d 85 f6 74 c0 e8 74 1c 20 00 fb 49 bd 00 00 00 00 00 fc ff df <43> 80 3c 2f 00 48 8b 5c 24 30 74 08 48 89 df e8 85 a1 87 00 4c 8b [ 1045.685226][ C1] RSP: 0018:ffffc90003d8f320 EFLAGS: 00000246 [ 1045.685240][ C1] RAX: ffffffff8173aeec RBX: 0000000000000000 RCX: 0000000000040000 [ 1045.685253][ C1] RDX: ffffc9000b941000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1045.685265][ C1] RBP: ffffc90003d8f4b0 R08: ffffffff8173ae93 R09: 1ffffffff26e6f00 [ 1045.685279][ C1] R10: dffffc0000000000 R11: fffffbfff26e6f01 R12: ffffffff8f131800 [ 1045.685293][ C1] R13: dffffc0000000000 R14: 0000000000000200 R15: 1ffffffff1e2630b [ 1045.685310][ C1] ? console_flush_all+0x993/0xf50 [ 1045.685328][ C1] ? console_flush_all+0x9ec/0xf50 [ 1045.685356][ C1] ? console_flush_all+0x147/0xf50 [ 1045.685380][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1045.685402][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1045.685427][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1045.685455][ C1] console_unlock+0x13b/0x4d0 [ 1045.685476][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1045.685494][ C1] ? _printk+0xd5/0x120 [ 1045.685517][ C1] ? _printk+0xd5/0x120 [ 1045.685540][ C1] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 1045.685569][ C1] vprintk_emit+0x7a1/0x900 [ 1045.685590][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1045.685610][ C1] ? mark_lock+0x9a/0x360 [ 1045.685636][ C1] ? __lock_acquire+0x1384/0x2050 [ 1045.685662][ C1] _printk+0xd5/0x120 [ 1045.685687][ C1] ? f2fs_printk+0x22d/0x470 [ 1045.685705][ C1] ? __pfx__printk+0x10/0x10 [ 1045.685737][ C1] f2fs_printk+0x3e1/0x470 [ 1045.685755][ C1] ? f2fs_fill_super+0x76f7/0x7b80 [ 1045.685776][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1045.685797][ C1] ? f2fs_fill_super+0x782c/0x7b80 [ 1045.685820][ C1] ? __pfx_f2fs_printk+0x10/0x10 [ 1045.685840][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1045.685865][ C1] f2fs_fill_super+0x7928/0x7b80 [ 1045.685913][ C1] ? __pfx_f2fs_fill_super+0x10/0x10 [ 1045.685937][ C1] ? sb_set_blocksize+0xb3/0xf0 [ 1045.685958][ C1] ? setup_bdev_super+0x4e6/0x5d0 [ 1045.685986][ C1] mount_bdev+0x20a/0x2d0 [ 1045.686031][ C1] ? __pfx_f2fs_fill_super+0x10/0x10 [ 1045.686054][ C1] ? __pfx_mount_bdev+0x10/0x10 [ 1045.686078][ C1] ? vfs_parse_fs_string+0x190/0x230 [ 1045.686109][ C1] legacy_get_tree+0xee/0x190 [ 1045.686132][ C1] ? __pfx_f2fs_mount+0x10/0x10 [ 1045.686156][ C1] vfs_get_tree+0x90/0x2a0 [ 1045.686174][ C1] do_new_mount+0x2be/0xb40 [ 1045.686194][ C1] ? __pfx_do_new_mount+0x10/0x10 [ 1045.686216][ C1] __se_sys_mount+0x2d6/0x3c0 [ 1045.686236][ C1] ? __pfx___se_sys_mount+0x10/0x10 [ 1045.686254][ C1] ? exc_page_fault+0x590/0x8c0 [ 1045.686280][ C1] ? __x64_sys_mount+0x20/0xc0 [ 1045.686298][ C1] do_syscall_64+0xf3/0x230 [ 1045.686314][ C1] ? clear_bhb_loop+0x35/0x90 [ 1045.686336][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.686356][ C1] RIP: 0033:0x7fe50d57899a [ 1045.686371][ C1] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1045.686386][ C1] RSP: 002b:00007fe50e382e78 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1045.686403][ C1] RAX: ffffffffffffffda RBX: 00007fe50e382f00 RCX: 00007fe50d57899a [ 1045.686416][ C1] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 00007fe50e382ec0 [ 1045.686429][ C1] RBP: 0000000020000040 R08: 00007fe50e382f00 R09: 0000000000000000 [ 1045.686440][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200000c0 [ 1045.686452][ C1] R13: 00007fe50e382ec0 R14: 0000000000005530 R15: 0000000020005700 [ 1045.686473][ C1] [ 1045.683172][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1045.686504][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1045.686557][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1045.686582][ C1] netlink_unicast+0x7f6/0x990 [ 1045.686622][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1045.686648][ C1] ? __virt_addr_valid+0x183/0x530 [ 1045.686674][ C1] ? __check_object_size+0x49c/0x900 [ 1045.686697][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1045.686730][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1045.686768][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1045.686788][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1045.686819][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1045.686847][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1045.686866][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1045.686891][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1045.686911][ C1] __sock_sendmsg+0x221/0x270 [ 1045.686945][ C1] __sys_sendto+0x3a4/0x4f0 [ 1045.686977][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1045.687034][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1045.687066][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1045.687102][ C1] __x64_sys_sendto+0xde/0x100 [ 1045.687135][ C1] do_syscall_64+0xf3/0x230 [ 1045.687156][ C1] ? clear_bhb_loop+0x35/0x90 [ 1045.687184][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.687207][ C1] RIP: 0033:0x7f4eb757902c [ 1045.687232][ C1] RSP: 002b:00007ffc904f9180 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1045.687255][ C1] RAX: ffffffffffffffda RBX: 00007f4eb8234620 RCX: 00007f4eb757902c [ 1045.687271][ C1] RDX: 0000000000000044 RSI: 00007f4eb8234670 RDI: 0000000000000003 [ 1045.687286][ C1] RBP: 0000000000000000 R08: 00007ffc904f91d4 R09: 000000000000000c [ 1045.687302][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1045.687316][ C1] R13: 0000000000000000 R14: 00007f4eb8234670 R15: 0000000000000000 [ 1045.687350][ C1] [ 1045.687358][ C1] DEBUG: waiting rtnl_mutex for 3385 jiffies. [ 1045.687366][ C1] task:kworker/1:10 state:D stack:18360 pid:6309 tgid:6309 ppid:2 flags:0x00004000 [ 1045.687391][ C1] Workqueue: events linkwatch_event [ 1045.687406][ C1] Call Trace: [ 1045.687411][ C1] [ 1045.687420][ C1] __schedule+0x1800/0x4a60 [ 1045.687455][ C1] ? __pfx___schedule+0x10/0x10 [ 1045.687472][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1045.687488][ C1] ? __pfx_lock_release+0x10/0x10 [ 1045.687505][ C1] ? kick_pool+0x45c/0x620 [ 1045.687523][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1045.687541][ C1] ? schedule+0x90/0x320 [ 1045.687556][ C1] schedule+0x14b/0x320 [ 1045.687574][ C1] schedule_preempt_disabled+0x13/0x30 [ 1045.687589][ C1] __mutex_lock+0x6a4/0xd70 [ 1045.687605][ C1] ? __mutex_lock+0x527/0xd70 [ 1045.687619][ C1] ? linkwatch_event+0xe/0x60 [ 1045.687633][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1045.687653][ C1] ? get_rtnl_holder+0x144/0x190 [ 1045.687668][ C1] ? process_scheduled_works+0x945/0x1830 [ 1045.687682][ C1] linkwatch_event+0xe/0x60 [ 1045.687694][ C1] process_scheduled_works+0xa2c/0x1830 [ 1045.687732][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1045.687755][ C1] ? assign_work+0x364/0x3d0 [ 1045.687774][ C1] worker_thread+0x86d/0xd40 [ 1045.687802][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1045.687821][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1045.687836][ C1] kthread+0x2f0/0x390 [ 1045.687849][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1045.687864][ C1] ? __pfx_kthread+0x10/0x10 [ 1045.687876][ C1] ret_from_fork+0x4b/0x80 [ 1045.687891][ C1] ? __pfx_kthread+0x10/0x10 [ 1045.687904][ C1] ret_from_fork_asm+0x1a/0x30 [ 1045.687931][ C1] [ 1045.687938][ C1] [ 1045.687938][ C1] Showing all locks held in the system: [ 1045.687945][ C1] 3 locks held by kworker/u8:1/12: [ 1045.687954][ C1] #0: ffff88802a778148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1045.687992][ C1] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1045.688028][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1045.688067][ C1] 4 locks held by kworker/u8:2/35: [ 1045.688078][ C1] 3 locks held by kworker/u8:4/66: [ 1045.688105][ C1] 3 locks held by kworker/u8:7/2550: [ 1045.688114][ C1] 3 locks held by kworker/u8:9/2944: [ 1045.688129][ C1] 2 locks held by getty/4977: [ 1045.688136][ C1] #0: ffff88802b1940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1045.688173][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1045.688208][ C1] 5 locks held by kworker/u8:10/6025: [ 1045.688216][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1045.688251][ C1] #1: ffffc9000361fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1045.688285][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1045.688317][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1045.688350][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1045.688386][ C1] 3 locks held by kworker/1:10/6309: [ 1045.688393][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1045.688428][ C1] #1: ffffc900094dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1045.688462][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1045.688496][ C1] 2 locks held by syz.2.1976/12758: [ 1045.688505][ C1] 1 lock held by syz-executor/14217: [ 1045.688514][ C1] 2 locks held by syz-executor/14266: [ 1045.688525][ C1] 1 lock held by syz-executor/17094: [ 1045.688532][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1045.688569][ C1] 2 locks held by syz.4.3018/17611: [ 1045.688577][ C1] #0: ffff88807e97dc08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1045.688616][ C1] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 1045.688650][ C1] 1 lock held by syz.3.3039/17746: [ 1045.688658][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: bpf_xdp_link_attach+0x112/0x700 [ 1045.688691][ C1] 5 locks held by syz.0.3044/17768: [ 1045.688699][ C1] #0: ffff88807bc320e0 (&type->s_umount_key#77/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 1045.688741][ C1] #1: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1045.688777][ C1] #2: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1045.688811][ C1] #3: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1045.688843][ C1] #4: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1045.688921][ C1] [ 1045.688928][ C1] ============================================= [ 1045.688928][ C1] [ 1046.713022][ C1] DEBUG: waiting rtnl_mutex for 3559 jiffies. [ 1046.713047][ C1] task:syz.4.3018 state:D stack:24672 pid:17611 tgid:17611 ppid:14266 flags:0x00004004 [ 1046.713087][ C1] Call Trace: [ 1046.713097][ C1] [ 1046.713114][ C1] __schedule+0x1800/0x4a60 [ 1046.713178][ C1] ? __pfx___schedule+0x10/0x10 [ 1046.713215][ C1] ? __pfx_lock_release+0x10/0x10 [ 1046.713249][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1046.713291][ C1] ? schedule+0x90/0x320 [ 1046.713328][ C1] schedule+0x14b/0x320 [ 1046.713364][ C1] schedule_preempt_disabled+0x13/0x30 [ 1046.713393][ C1] __mutex_lock+0x6a4/0xd70 [ 1046.713423][ C1] ? __mutex_lock+0x527/0xd70 [ 1046.713451][ C1] ? raw_release+0x1b8/0x8b0 [ 1046.713477][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1046.713513][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1046.713546][ C1] ? get_rtnl_holder+0x144/0x190 [ 1046.713577][ C1] raw_release+0x1b8/0x8b0 [ 1046.713606][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1046.713642][ C1] sock_close+0xbc/0x240 [ 1046.713672][ C1] ? __pfx_sock_close+0x10/0x10 [ 1046.713708][ C1] __fput+0x24a/0x8a0 [ 1046.713757][ C1] task_work_run+0x24f/0x310 [ 1046.713788][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1046.713815][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1046.713849][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 1046.713885][ C1] do_syscall_64+0x100/0x230 [ 1046.713906][ C1] ? clear_bhb_loop+0x35/0x90 [ 1046.713936][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.713963][ C1] RIP: 0033:0x7f745a977299 [ 1046.713990][ C1] RSP: 002b:00007ffe190a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1046.714016][ C1] RAX: 0000000000000000 RBX: 00007f745ab07a80 RCX: 00007f745a977299 [ 1046.714033][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1046.714048][ C1] RBP: 00007f745ab07a80 R08: 00007f745aaf2000 R09: 00007ffe190a23cf [ 1046.714065][ C1] R10: 00000000005f2cc4 R11: 0000000000000246 R12: 00000000000f6ec7 [ 1046.714081][ C1] R13: 00007ffe190a21e0 R14: 00007ffe190a2200 R15: ffffffffffffffff [ 1046.714125][ C1] [ 1046.714135][ C1] DEBUG: waiting rtnl_mutex for 3280 jiffies. [ 1046.714149][ C1] task:kworker/u8:1 state:D stack:20600 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 1046.714190][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 1046.714224][ C1] Call Trace: [ 1046.714233][ C1] [ 1046.714251][ C1] __schedule+0x1800/0x4a60 [ 1046.714319][ C1] ? __pfx___schedule+0x10/0x10 [ 1046.714346][ C1] ? __pfx_lock_release+0x10/0x10 [ 1046.714363][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1046.714378][ C1] ? kthread_data+0x52/0xd0 [ 1046.714393][ C1] ? schedule+0x90/0x320 [ 1046.714408][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1046.714427][ C1] ? schedule+0x90/0x320 [ 1046.714442][ C1] schedule+0x14b/0x320 [ 1046.714460][ C1] schedule_preempt_disabled+0x13/0x30 [ 1046.714476][ C1] __mutex_lock+0x6a4/0xd70 [ 1046.714491][ C1] ? __mutex_lock+0x527/0xd70 [ 1046.714505][ C1] ? addrconf_verify_work+0x19/0x30 [ 1046.714523][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1046.714534][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1046.714552][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1046.714573][ C1] ? get_rtnl_holder+0x144/0x190 [ 1046.714589][ C1] ? process_scheduled_works+0x945/0x1830 [ 1046.714603][ C1] addrconf_verify_work+0x19/0x30 [ 1046.714620][ C1] process_scheduled_works+0xa2c/0x1830 [ 1046.714658][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1046.714680][ C1] ? assign_work+0x364/0x3d0 [ 1046.714700][ C1] worker_thread+0x86d/0xd40 [ 1046.714727][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1046.714746][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1046.714762][ C1] kthread+0x2f0/0x390 [ 1046.714774][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1046.714788][ C1] ? __pfx_kthread+0x10/0x10 [ 1046.714801][ C1] ret_from_fork+0x4b/0x80 [ 1046.714817][ C1] ? __pfx_kthread+0x10/0x10 [ 1046.714829][ C1] ret_from_fork_asm+0x1a/0x30 [ 1046.714857][ C1] [ 1046.714863][ C1] DEBUG: waiting rtnl_mutex for 3249 jiffies. [ 1046.714870][ C1] task:syz.3.3039 state:D stack:23800 pid:17746 tgid:17745 ppid:14163 flags:0x00000004 [ 1046.714893][ C1] Call Trace: [ 1046.714899][ C1] [ 1046.714908][ C1] __schedule+0x1800/0x4a60 [ 1046.714941][ C1] ? __pfx___schedule+0x10/0x10 [ 1046.714960][ C1] ? __pfx_lock_release+0x10/0x10 [ 1046.714977][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1046.714999][ C1] ? schedule+0x90/0x320 [ 1046.715014][ C1] schedule+0x14b/0x320 [ 1046.715032][ C1] schedule_preempt_disabled+0x13/0x30 [ 1046.715047][ C1] __mutex_lock+0x6a4/0xd70 [ 1046.715059][ C1] ? mark_lock+0x9a/0x360 [ 1046.715077][ C1] ? __mutex_lock+0x527/0xd70 [ 1046.715091][ C1] ? bpf_xdp_link_attach+0x112/0x700 [ 1046.715107][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1046.715128][ C1] ? get_rtnl_holder+0x144/0x190 [ 1046.715144][ C1] bpf_xdp_link_attach+0x112/0x700 [ 1046.715160][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1046.715176][ C1] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 1046.715207][ C1] ? __fget_files+0x3f6/0x470 [ 1046.715219][ C1] ? __fget_files+0x29/0x470 [ 1046.715235][ C1] ? attach_type_to_prog_type+0x316/0x460 [ 1046.715249][ C1] ? bpf_prog_attach_check_attach_type+0x2cb/0x4b0 [ 1046.715265][ C1] link_create+0x47c/0x8b0 [ 1046.715277][ C1] ? bpf_lsm_bpf+0x9/0x10 [ 1046.715295][ C1] __sys_bpf+0x4bc/0x810 [ 1046.715318][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 1046.715345][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1046.715363][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1046.715380][ C1] ? do_syscall_64+0x100/0x230 [ 1046.715396][ C1] __x64_sys_bpf+0x7c/0x90 [ 1046.715412][ C1] do_syscall_64+0xf3/0x230 [ 1046.715424][ C1] ? clear_bhb_loop+0x35/0x90 [ 1046.715440][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.715453][ C1] RIP: 0033:0x7f7717177299 [ 1046.715467][ C1] RSP: 002b:00007f7717ec7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1046.715481][ C1] RAX: ffffffffffffffda RBX: 00007f7717305f80 RCX: 00007f7717177299 [ 1046.715491][ C1] RDX: 0000000000000010 RSI: 0000000020000580 RDI: 000000000000001c [ 1046.715500][ C1] RBP: 00007f77171e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 1046.715508][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.715516][ C1] R13: 000000000000000b R14: 00007f7717305f80 R15: 00007ffd1bdabf38 [ 1046.715538][ C1] [ 1046.715544][ C1] DEBUG: holding rtnl_mutex for 3556 jiffies. [ 1046.715551][ C1] task:kworker/u8:10 state:D stack:18648 pid:6025 tgid:6025 ppid:2 flags:0x00004000 [ 1046.715573][ C1] Workqueue: netns cleanup_net [ 1046.715587][ C1] Call Trace: [ 1046.715592][ C1] [ 1046.715601][ C1] __schedule+0x1800/0x4a60 [ 1046.715635][ C1] ? __pfx___schedule+0x10/0x10 [ 1046.715654][ C1] ? __pfx_lock_release+0x10/0x10 [ 1046.715668][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1046.715689][ C1] ? kthread_data+0x52/0xd0 [ 1046.715706][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1046.715723][ C1] ? schedule+0x90/0x320 [ 1046.715738][ C1] schedule+0x14b/0x320 [ 1046.715756][ C1] synchronize_rcu_expedited+0x684/0x830 [ 1046.715774][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1046.715800][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1046.715814][ C1] ? __pfx___might_resched+0x10/0x10 [ 1046.715827][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1046.715843][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1046.715860][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1046.715884][ C1] synchronize_rcu+0x11b/0x360 [ 1046.715897][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 1046.715921][ C1] lockdep_unregister_key+0x4b7/0x540 [ 1046.715940][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1046.715959][ C1] ? rcu_is_watching+0x15/0xb0 [ 1046.715971][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 1046.715990][ C1] __qdisc_destroy+0x165/0x410 [ 1046.716006][ C1] dev_shutdown+0x9b/0x450 [ 1046.716023][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 1046.716051][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1046.716080][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1046.716101][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1046.716122][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1046.716142][ C1] ? __pfx___might_resched+0x10/0x10 [ 1046.716158][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1046.716177][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1046.716193][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1046.716208][ C1] cleanup_net+0x89d/0xcc0 [ 1046.716226][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1046.716249][ C1] ? process_scheduled_works+0x945/0x1830 [ 1046.716263][ C1] process_scheduled_works+0xa2c/0x1830 [ 1046.716305][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1046.716327][ C1] ? assign_work+0x364/0x3d0 [ 1046.716347][ C1] worker_thread+0x86d/0xd40 [ 1046.716374][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1046.716394][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1046.716409][ C1] kthread+0x2f0/0x390 [ 1046.716421][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1046.716436][ C1] ? __pfx_kthread+0x10/0x10 [ 1046.716448][ C1] ret_from_fork+0x4b/0x80 [ 1046.716463][ C1] ? __pfx_kthread+0x10/0x10 [ 1046.716475][ C1] ret_from_fork_asm+0x1a/0x30 [ 1046.716503][ C1] [ 1046.716508][ C1] DEBUG: waiting rtnl_mutex for 3555 jiffies. [ 1046.716516][ C1] task:syz-executor state:D stack:21728 pid:17094 tgid:17094 ppid:17061 flags:0x00000000 [ 1046.716538][ C1] Call Trace: [ 1046.716543][ C1] [ 1046.716552][ C1] __schedule+0x1800/0x4a60 [ 1046.716585][ C1] ? __pfx___schedule+0x10/0x10 [ 1046.716604][ C1] ? __pfx_lock_release+0x10/0x10 [ 1046.716621][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1046.716642][ C1] ? schedule+0x90/0x320 [ 1046.716658][ C1] schedule+0x14b/0x320 [ 1046.716676][ C1] schedule_preempt_disabled+0x13/0x30 [ 1046.716691][ C1] __mutex_lock+0x6a4/0xd70 [ 1046.716706][ C1] ? __mutex_lock+0x527/0xd70 [ 1046.716720][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1046.716738][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1046.716760][ C1] ? get_rtnl_holder+0x144/0x190 [ 1046.716775][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1046.716790][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1046.716808][ C1] ? __lock_acquire+0x1384/0x2050 [ 1046.716825][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1046.716855][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1046.716869][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1046.716888][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1046.716919][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1046.716934][ C1] netlink_unicast+0x7f6/0x990 [ 1046.716958][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1046.716973][ C1] ? __virt_addr_valid+0x183/0x530 [ 1046.716988][ C1] ? __check_object_size+0x49c/0x900 [ 1046.717002][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1046.717021][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1046.717044][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1046.717056][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1046.717073][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1046.717091][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1046.717102][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1046.717117][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1046.717129][ C1] __sock_sendmsg+0x221/0x270 [ 1046.717149][ C1] __sys_sendto+0x3a4/0x4f0 [ 1046.717168][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1046.717202][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1046.717220][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1046.717241][ C1] __x64_sys_sendto+0xde/0x100 [ 1046.717258][ C1] do_syscall_64+0xf3/0x230 [ 1046.717271][ C1] ? clear_bhb_loop+0x35/0x90 [ 1046.717287][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.717303][ C1] RIP: 0033:0x7f4eb757902c [ 1046.717316][ C1] RSP: 002b:00007ffc904f9180 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1046.717329][ C1] RAX: ffffffffffffffda RBX: 00007f4eb8234620 RCX: 00007f4eb757902c [ 1046.717339][ C1] RDX: 0000000000000044 RSI: 00007f4eb8234670 RDI: 0000000000000003 [ 1046.717347][ C1] RBP: 0000000000000000 R08: 00007ffc904f91d4 R09: 000000000000000c [ 1046.717356][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1046.717364][ C1] R13: 0000000000000000 R14: 00007f4eb8234670 R15: 0000000000000000 [ 1046.717385][ C1] [ 1046.717390][ C1] DEBUG: waiting rtnl_mutex for 3488 jiffies. [ 1046.717397][ C1] task:kworker/1:10 state:D stack:18360 pid:6309 tgid:6309 ppid:2 flags:0x00004000 [ 1046.717419][ C1] Workqueue: events linkwatch_event [ 1046.717432][ C1] Call Trace: [ 1046.717437][ C1] [ 1046.717446][ C1] __schedule+0x1800/0x4a60 [ 1046.717480][ C1] ? __pfx___schedule+0x10/0x10 [ 1046.717497][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1046.717513][ C1] ? __pfx_lock_release+0x10/0x10 [ 1046.717530][ C1] ? kick_pool+0x45c/0x620 [ 1046.717547][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1046.717564][ C1] ? schedule+0x90/0x320 [ 1046.717579][ C1] schedule+0x14b/0x320 [ 1046.717597][ C1] schedule_preempt_disabled+0x13/0x30 [ 1046.717613][ C1] __mutex_lock+0x6a4/0xd70 [ 1046.717628][ C1] ? __mutex_lock+0x527/0xd70 [ 1046.717642][ C1] ? linkwatch_event+0xe/0x60 [ 1046.717656][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1046.717677][ C1] ? get_rtnl_holder+0x144/0x190 [ 1046.717691][ C1] ? process_scheduled_works+0x945/0x1830 [ 1046.717706][ C1] linkwatch_event+0xe/0x60 [ 1046.717718][ C1] process_scheduled_works+0xa2c/0x1830 [ 1046.717755][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1046.717778][ C1] ? assign_work+0x364/0x3d0 [ 1046.717798][ C1] worker_thread+0x86d/0xd40 [ 1046.717825][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1046.717844][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1046.717859][ C1] kthread+0x2f0/0x390 [ 1046.717871][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1046.717886][ C1] ? __pfx_kthread+0x10/0x10 [ 1046.717898][ C1] ret_from_fork+0x4b/0x80 [ 1046.717913][ C1] ? __pfx_kthread+0x10/0x10 [ 1046.717925][ C1] ret_from_fork_asm+0x1a/0x30 [ 1046.717953][ C1] [ 1046.717959][ C1] [ 1046.717959][ C1] Showing all locks held in the system: [ 1046.717966][ C1] 3 locks held by kworker/u8:1/12: [ 1046.717975][ C1] #0: ffff88802a778148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1046.718013][ C1] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1046.718049][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1046.718089][ C1] 4 locks held by kworker/u8:2/35: [ 1046.718100][ C1] 3 locks held by kworker/u8:4/66: [ 1046.718129][ C1] 3 locks held by kworker/u8:7/2550: [ 1046.718139][ C1] 3 locks held by kworker/u8:9/2944: [ 1046.718149][ C1] 2 locks held by getty/4977: [ 1046.718156][ C1] #0: ffff88802b1940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1046.718193][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1046.718228][ C1] 5 locks held by kworker/u8:10/6025: [ 1046.718236][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1046.718271][ C1] #1: ffffc9000361fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1046.718310][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1046.718342][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1046.718374][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1046.718408][ C1] 3 locks held by kworker/1:10/6309: [ 1046.718415][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1046.718450][ C1] #1: ffffc900094dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1046.718484][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1046.718519][ C1] 2 locks held by syz.2.1976/12758: [ 1046.718528][ C1] 1 lock held by syz-executor/14217: [ 1046.718538][ C1] 2 locks held by syz-executor/14266: [ 1046.718548][ C1] 1 lock held by syz-executor/17094: [ 1046.718555][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1046.718591][ C1] 2 locks held by syz.4.3018/17611: [ 1046.718599][ C1] #0: ffff88807e97dc08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1046.718638][ C1] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 1046.718671][ C1] 1 lock held by syz.3.3039/17746: [ 1046.718679][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: bpf_xdp_link_attach+0x112/0x700 [ 1046.718712][ C1] 5 locks held by syz.0.3044/17768: [ 1046.718719][ C1] #0: ffff88807bc320e0 (&type->s_umount_key#77/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 1046.718763][ C1] #1: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1046.718798][ C1] #2: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1046.718832][ C1] #3: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1046.718865][ C1] #4: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1046.718903][ C1] [ 1046.718907][ C1] ============================================= [ 1046.718907][ C1] [ 1047.756437][ C1] DEBUG: waiting rtnl_mutex for 3663 jiffies. [ 1047.756454][ C1] task:syz.4.3018 state:D stack:24672 pid:17611 tgid:17611 ppid:14266 flags:0x00004004 [ 1047.756481][ C1] Call Trace: [ 1047.756487][ C1] [ 1047.756496][ C1] __schedule+0x1800/0x4a60 [ 1047.756536][ C1] ? __pfx___schedule+0x10/0x10 [ 1047.756556][ C1] ? __pfx_lock_release+0x10/0x10 [ 1047.756574][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1047.756596][ C1] ? schedule+0x90/0x320 [ 1047.756611][ C1] schedule+0x14b/0x320 [ 1047.756630][ C1] schedule_preempt_disabled+0x13/0x30 [ 1047.756645][ C1] __mutex_lock+0x6a4/0xd70 [ 1047.756662][ C1] ? __mutex_lock+0x527/0xd70 [ 1047.756676][ C1] ? raw_release+0x1b8/0x8b0 [ 1047.756690][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1047.756709][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1047.756725][ C1] ? get_rtnl_holder+0x144/0x190 [ 1047.756742][ C1] raw_release+0x1b8/0x8b0 [ 1047.756757][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1047.756775][ C1] sock_close+0xbc/0x240 [ 1047.756792][ C1] ? __pfx_sock_close+0x10/0x10 [ 1047.756809][ C1] __fput+0x24a/0x8a0 [ 1047.756835][ C1] task_work_run+0x24f/0x310 [ 1047.756854][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1047.756871][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1047.756891][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 1047.756911][ C1] do_syscall_64+0x100/0x230 [ 1047.756923][ C1] ? clear_bhb_loop+0x35/0x90 [ 1047.756941][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.756954][ C1] RIP: 0033:0x7f745a977299 [ 1047.756972][ C1] RSP: 002b:00007ffe190a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1047.756986][ C1] RAX: 0000000000000000 RBX: 00007f745ab07a80 RCX: 00007f745a977299 [ 1047.756995][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1047.757004][ C1] RBP: 00007f745ab07a80 R08: 00007f745aaf2000 R09: 00007ffe190a23cf [ 1047.757013][ C1] R10: 00000000005f2cc4 R11: 0000000000000246 R12: 00000000000f6ec7 [ 1047.757022][ C1] R13: 00007ffe190a21e0 R14: 00007ffe190a2200 R15: ffffffffffffffff [ 1047.757050][ C1] [ 1047.757056][ C1] DEBUG: waiting rtnl_mutex for 3384 jiffies. [ 1047.757063][ C1] task:kworker/u8:1 state:D stack:20600 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 1047.757086][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 1047.757105][ C1] Call Trace: [ 1047.757110][ C1] [ 1047.757120][ C1] __schedule+0x1800/0x4a60 [ 1047.757153][ C1] ? __pfx___schedule+0x10/0x10 [ 1047.757172][ C1] ? __pfx_lock_release+0x10/0x10 [ 1047.757189][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1047.757203][ C1] ? kthread_data+0x52/0xd0 [ 1047.757218][ C1] ? schedule+0x90/0x320 [ 1047.757234][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1047.757252][ C1] ? schedule+0x90/0x320 [ 1047.757267][ C1] schedule+0x14b/0x320 [ 1047.757285][ C1] schedule_preempt_disabled+0x13/0x30 [ 1047.757300][ C1] __mutex_lock+0x6a4/0xd70 [ 1047.757316][ C1] ? __mutex_lock+0x527/0xd70 [ 1047.757329][ C1] ? addrconf_verify_work+0x19/0x30 [ 1047.757347][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1047.757358][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1047.757377][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1047.757397][ C1] ? get_rtnl_holder+0x144/0x190 [ 1047.757412][ C1] ? process_scheduled_works+0x945/0x1830 [ 1047.757426][ C1] addrconf_verify_work+0x19/0x30 [ 1047.757443][ C1] process_scheduled_works+0xa2c/0x1830 [ 1047.757480][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1047.757503][ C1] ? assign_work+0x364/0x3d0 [ 1047.757522][ C1] worker_thread+0x86d/0xd40 [ 1047.757550][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1047.757569][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1047.757584][ C1] kthread+0x2f0/0x390 [ 1047.757596][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1047.757611][ C1] ? __pfx_kthread+0x10/0x10 [ 1047.757624][ C1] ret_from_fork+0x4b/0x80 [ 1047.757639][ C1] ? __pfx_kthread+0x10/0x10 [ 1047.757651][ C1] ret_from_fork_asm+0x1a/0x30 [ 1047.757680][ C1] [ 1047.757686][ C1] DEBUG: waiting rtnl_mutex for 3353 jiffies. [ 1047.757693][ C1] task:syz.3.3039 state:D stack:23800 pid:17746 tgid:17745 ppid:14163 flags:0x00000004 [ 1047.757715][ C1] Call Trace: [ 1047.757720][ C1] [ 1047.757729][ C1] __schedule+0x1800/0x4a60 [ 1047.757763][ C1] ? __pfx___schedule+0x10/0x10 [ 1047.757782][ C1] ? __pfx_lock_release+0x10/0x10 [ 1047.757799][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1047.757821][ C1] ? schedule+0x90/0x320 [ 1047.757836][ C1] schedule+0x14b/0x320 [ 1047.757854][ C1] schedule_preempt_disabled+0x13/0x30 [ 1047.757870][ C1] __mutex_lock+0x6a4/0xd70 [ 1047.757881][ C1] ? mark_lock+0x9a/0x360 [ 1047.757899][ C1] ? __mutex_lock+0x527/0xd70 [ 1047.757913][ C1] ? bpf_xdp_link_attach+0x112/0x700 [ 1047.757928][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1047.757949][ C1] ? get_rtnl_holder+0x144/0x190 [ 1047.757965][ C1] bpf_xdp_link_attach+0x112/0x700 [ 1047.757982][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1047.757998][ C1] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 1047.758028][ C1] ? __fget_files+0x3f6/0x470 [ 1047.758047][ C1] ? __fget_files+0x29/0x470 [ 1047.758063][ C1] ? attach_type_to_prog_type+0x316/0x460 [ 1047.758077][ C1] ? bpf_prog_attach_check_attach_type+0x2cb/0x4b0 [ 1047.758093][ C1] link_create+0x47c/0x8b0 [ 1047.758106][ C1] ? bpf_lsm_bpf+0x9/0x10 [ 1047.758123][ C1] __sys_bpf+0x4bc/0x810 [ 1047.758141][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 1047.758167][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1047.758185][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1047.758202][ C1] ? do_syscall_64+0x100/0x230 [ 1047.758218][ C1] __x64_sys_bpf+0x7c/0x90 [ 1047.758235][ C1] do_syscall_64+0xf3/0x230 [ 1047.758247][ C1] ? clear_bhb_loop+0x35/0x90 [ 1047.758263][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.758276][ C1] RIP: 0033:0x7f7717177299 [ 1047.758289][ C1] RSP: 002b:00007f7717ec7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1047.758303][ C1] RAX: ffffffffffffffda RBX: 00007f7717305f80 RCX: 00007f7717177299 [ 1047.758312][ C1] RDX: 0000000000000010 RSI: 0000000020000580 RDI: 000000000000001c [ 1047.758321][ C1] RBP: 00007f77171e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 1047.758329][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.758337][ C1] R13: 000000000000000b R14: 00007f7717305f80 R15: 00007ffd1bdabf38 [ 1047.758359][ C1] [ 1047.758365][ C1] DEBUG: holding rtnl_mutex for 3660 jiffies. [ 1047.758372][ C1] task:kworker/u8:10 state:D stack:18648 pid:6025 tgid:6025 ppid:2 flags:0x00004000 [ 1047.758394][ C1] Workqueue: netns cleanup_net [ 1047.758408][ C1] Call Trace: [ 1047.758413][ C1] [ 1047.758422][ C1] __schedule+0x1800/0x4a60 [ 1047.758455][ C1] ? __pfx___schedule+0x10/0x10 [ 1047.758474][ C1] ? __pfx_lock_release+0x10/0x10 [ 1047.758488][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1047.758509][ C1] ? kthread_data+0x52/0xd0 [ 1047.758526][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1047.758544][ C1] ? schedule+0x90/0x320 [ 1047.758559][ C1] schedule+0x14b/0x320 [ 1047.758576][ C1] synchronize_rcu_expedited+0x684/0x830 [ 1047.758594][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1047.758619][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1047.758633][ C1] ? __pfx___might_resched+0x10/0x10 [ 1047.758647][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1047.758663][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1047.758679][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1047.758704][ C1] synchronize_rcu+0x11b/0x360 [ 1047.758716][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 1047.758740][ C1] lockdep_unregister_key+0x4b7/0x540 [ 1047.758760][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1047.758779][ C1] ? rcu_is_watching+0x15/0xb0 [ 1047.758791][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 1047.758809][ C1] __qdisc_destroy+0x165/0x410 [ 1047.758825][ C1] dev_shutdown+0x9b/0x450 [ 1047.758842][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 1047.758871][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1047.758900][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1047.758921][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1047.758942][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1047.758962][ C1] ? __pfx___might_resched+0x10/0x10 [ 1047.758978][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1047.758998][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1047.759013][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1047.759028][ C1] cleanup_net+0x89d/0xcc0 [ 1047.759050][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1047.759073][ C1] ? process_scheduled_works+0x945/0x1830 [ 1047.759088][ C1] process_scheduled_works+0xa2c/0x1830 [ 1047.759126][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1047.759148][ C1] ? assign_work+0x364/0x3d0 [ 1047.759168][ C1] worker_thread+0x86d/0xd40 [ 1047.759195][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1047.759214][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1047.759229][ C1] kthread+0x2f0/0x390 [ 1047.759241][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1047.759256][ C1] ? __pfx_kthread+0x10/0x10 [ 1047.759269][ C1] ret_from_fork+0x4b/0x80 [ 1047.759284][ C1] ? __pfx_kthread+0x10/0x10 [ 1047.759296][ C1] ret_from_fork_asm+0x1a/0x30 [ 1047.759323][ C1] [ 1047.759329][ C1] DEBUG: waiting rtnl_mutex for 3659 jiffies. [ 1047.759336][ C1] task:syz-executor state:D stack:21728 pid:17094 tgid:17094 ppid:17061 flags:0x00000000 [ 1047.759357][ C1] Call Trace: [ 1047.759362][ C1] [ 1047.759371][ C1] __schedule+0x1800/0x4a60 [ 1047.759404][ C1] ? __pfx___schedule+0x10/0x10 [ 1047.759423][ C1] ? __pfx_lock_release+0x10/0x10 [ 1047.759440][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1047.759461][ C1] ? schedule+0x90/0x320 [ 1047.759476][ C1] schedule+0x14b/0x320 [ 1047.759494][ C1] schedule_preempt_disabled+0x13/0x30 [ 1047.759509][ C1] __mutex_lock+0x6a4/0xd70 [ 1047.759525][ C1] ? __mutex_lock+0x527/0xd70 [ 1047.759538][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1047.759556][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1047.759578][ C1] ? get_rtnl_holder+0x144/0x190 [ 1047.759593][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1047.759608][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1047.759626][ C1] ? __lock_acquire+0x1384/0x2050 [ 1047.759643][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1047.759673][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1047.759688][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1047.759706][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1047.759737][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1047.759752][ C1] netlink_unicast+0x7f6/0x990 [ 1047.759776][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1047.759790][ C1] ? __virt_addr_valid+0x183/0x530 [ 1047.759805][ C1] ? __check_object_size+0x49c/0x900 [ 1047.759819][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1047.759837][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1047.759860][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1047.759872][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1047.759890][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1047.759907][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1047.759918][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1047.759933][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1047.759944][ C1] __sock_sendmsg+0x221/0x270 [ 1047.759965][ C1] __sys_sendto+0x3a4/0x4f0 [ 1047.759983][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1047.760017][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1047.760036][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1047.760060][ C1] __x64_sys_sendto+0xde/0x100 [ 1047.760077][ C1] do_syscall_64+0xf3/0x230 [ 1047.760090][ C1] ? clear_bhb_loop+0x35/0x90 [ 1047.760106][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.760119][ C1] RIP: 0033:0x7f4eb757902c [ 1047.760131][ C1] RSP: 002b:00007ffc904f9180 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1047.760145][ C1] RAX: ffffffffffffffda RBX: 00007f4eb8234620 RCX: 00007f4eb757902c [ 1047.760154][ C1] RDX: 0000000000000044 RSI: 00007f4eb8234670 RDI: 0000000000000003 [ 1047.760163][ C1] RBP: 0000000000000000 R08: 00007ffc904f91d4 R09: 000000000000000c [ 1047.760171][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1047.760179][ C1] R13: 0000000000000000 R14: 00007f4eb8234670 R15: 0000000000000000 [ 1047.760200][ C1] [ 1047.760205][ C1] DEBUG: waiting rtnl_mutex for 3592 jiffies. [ 1047.760212][ C1] task:kworker/1:10 state:D stack:18360 pid:6309 tgid:6309 ppid:2 flags:0x00004000 [ 1047.760233][ C1] Workqueue: events linkwatch_event [ 1047.760246][ C1] Call Trace: [ 1047.760251][ C1] [ 1047.760260][ C1] __schedule+0x1800/0x4a60 [ 1047.760294][ C1] ? __pfx___schedule+0x10/0x10 [ 1047.760311][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1047.760327][ C1] ? __pfx_lock_release+0x10/0x10 [ 1047.760343][ C1] ? kick_pool+0x45c/0x620 [ 1047.760361][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1047.760378][ C1] ? schedule+0x90/0x320 [ 1047.760393][ C1] schedule+0x14b/0x320 [ 1047.760411][ C1] schedule_preempt_disabled+0x13/0x30 [ 1047.760426][ C1] __mutex_lock+0x6a4/0xd70 [ 1047.760442][ C1] ? __mutex_lock+0x527/0xd70 [ 1047.760456][ C1] ? linkwatch_event+0xe/0x60 [ 1047.760469][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1047.760490][ C1] ? get_rtnl_holder+0x144/0x190 [ 1047.760504][ C1] ? process_scheduled_works+0x945/0x1830 [ 1047.760519][ C1] linkwatch_event+0xe/0x60 [ 1047.760531][ C1] process_scheduled_works+0xa2c/0x1830 [ 1047.760568][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1047.760591][ C1] ? assign_work+0x364/0x3d0 [ 1047.760611][ C1] worker_thread+0x86d/0xd40 [ 1047.760641][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1047.760661][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1047.760676][ C1] kthread+0x2f0/0x390 [ 1047.760688][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1047.760702][ C1] ? __pfx_kthread+0x10/0x10 [ 1047.760715][ C1] ret_from_fork+0x4b/0x80 [ 1047.760729][ C1] ? __pfx_kthread+0x10/0x10 [ 1047.760742][ C1] ret_from_fork_asm+0x1a/0x30 [ 1047.760769][ C1] [ 1047.760775][ C1] [ 1047.760775][ C1] Showing all locks held in the system: [ 1047.760783][ C1] 3 locks held by kworker/u8:1/12: [ 1047.760792][ C1] #0: ffff88802a778148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1047.760830][ C1] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1047.760866][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1047.760905][ C1] 4 locks held by kworker/u8:2/35: [ 1047.760916][ C1] 3 locks held by kworker/u8:4/66: [ 1047.760942][ C1] 3 locks held by kworker/u8:7/2550: [ 1047.760951][ C1] 3 locks held by kworker/u8:9/2944: [ 1047.760961][ C1] 2 locks held by getty/4977: [ 1047.760968][ C1] #0: ffff88802b1940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1047.761005][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1047.761043][ C1] 5 locks held by kworker/u8:10/6025: [ 1047.761051][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1047.761087][ C1] #1: ffffc9000361fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1047.761121][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1047.761154][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1047.761185][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1047.761219][ C1] 3 locks held by kworker/1:10/6309: [ 1047.761226][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1047.761261][ C1] #1: ffffc900094dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1047.761296][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1047.761330][ C1] 2 locks held by syz.2.1976/12758: [ 1047.761340][ C1] 1 lock held by syz-executor/14217: [ 1047.761349][ C1] 2 locks held by syz-executor/14266: [ 1047.761358][ C1] 1 lock held by syz-executor/17094: [ 1047.761366][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1047.761403][ C1] 2 locks held by syz.4.3018/17611: [ 1047.761411][ C1] #0: ffff88807e97dc08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1047.761451][ C1] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 1047.761483][ C1] 1 lock held by syz.3.3039/17746: [ 1047.761491][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: bpf_xdp_link_attach+0x112/0x700 [ 1047.761524][ C1] 5 locks held by syz.0.3044/17768: [ 1047.761532][ C1] #0: ffff88807bc320e0 (&type->s_umount_key#77/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 1047.761574][ C1] #1: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1047.761610][ C1] #2: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1047.761645][ C1] #3: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1047.761677][ C1] #4: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1047.761715][ C1] [ 1047.761719][ C1] ============================================= [ 1047.761719][ C1] [ 1048.793322][ C1] DEBUG: waiting rtnl_mutex for 3767 jiffies. [ 1048.793340][ C1] task:syz.4.3018 state:D stack:24672 pid:17611 tgid:17611 ppid:14266 flags:0x00004004 [ 1048.793368][ C1] Call Trace: [ 1048.793374][ C1] [ 1048.793386][ C1] __schedule+0x1800/0x4a60 [ 1048.793426][ C1] ? __pfx___schedule+0x10/0x10 [ 1048.793446][ C1] ? __pfx_lock_release+0x10/0x10 [ 1048.793464][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1048.793486][ C1] ? schedule+0x90/0x320 [ 1048.793502][ C1] schedule+0x14b/0x320 [ 1048.793520][ C1] schedule_preempt_disabled+0x13/0x30 [ 1048.793536][ C1] __mutex_lock+0x6a4/0xd70 [ 1048.793551][ C1] ? __mutex_lock+0x527/0xd70 [ 1048.793565][ C1] ? raw_release+0x1b8/0x8b0 [ 1048.793580][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1048.793598][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1048.793615][ C1] ? get_rtnl_holder+0x144/0x190 [ 1048.793632][ C1] raw_release+0x1b8/0x8b0 [ 1048.793647][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1048.793665][ C1] sock_close+0xbc/0x240 [ 1048.793681][ C1] ? __pfx_sock_close+0x10/0x10 [ 1048.793698][ C1] __fput+0x24a/0x8a0 [ 1048.793724][ C1] task_work_run+0x24f/0x310 [ 1048.793743][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1048.793760][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1048.793780][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 1048.793800][ C1] do_syscall_64+0x100/0x230 [ 1048.793813][ C1] ? clear_bhb_loop+0x35/0x90 [ 1048.793830][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.793844][ C1] RIP: 0033:0x7f745a977299 [ 1048.793862][ C1] RSP: 002b:00007ffe190a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1048.793882][ C1] RAX: 0000000000000000 RBX: 00007f745ab07a80 RCX: 00007f745a977299 [ 1048.793891][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1048.793899][ C1] RBP: 00007f745ab07a80 R08: 00007f745aaf2000 R09: 00007ffe190a23cf [ 1048.793909][ C1] R10: 00000000005f2cc4 R11: 0000000000000246 R12: 00000000000f6ec7 [ 1048.793918][ C1] R13: 00007ffe190a21e0 R14: 00007ffe190a2200 R15: ffffffffffffffff [ 1048.793940][ C1] [ 1048.793946][ C1] DEBUG: waiting rtnl_mutex for 3488 jiffies. [ 1048.793953][ C1] task:kworker/u8:1 state:D stack:20600 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 1048.793976][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 1048.793995][ C1] Call Trace: [ 1048.794000][ C1] [ 1048.794010][ C1] __schedule+0x1800/0x4a60 [ 1048.794043][ C1] ? __pfx___schedule+0x10/0x10 [ 1048.794062][ C1] ? __pfx_lock_release+0x10/0x10 [ 1048.794079][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1048.794093][ C1] ? kthread_data+0x52/0xd0 [ 1048.794108][ C1] ? schedule+0x90/0x320 [ 1048.794123][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1048.794142][ C1] ? schedule+0x90/0x320 [ 1048.794157][ C1] schedule+0x14b/0x320 [ 1048.794175][ C1] schedule_preempt_disabled+0x13/0x30 [ 1048.794190][ C1] __mutex_lock+0x6a4/0xd70 [ 1048.794205][ C1] ? __mutex_lock+0x527/0xd70 [ 1048.794219][ C1] ? addrconf_verify_work+0x19/0x30 [ 1048.794237][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1048.794248][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1048.794267][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1048.794288][ C1] ? get_rtnl_holder+0x144/0x190 [ 1048.794302][ C1] ? process_scheduled_works+0x945/0x1830 [ 1048.794317][ C1] addrconf_verify_work+0x19/0x30 [ 1048.794333][ C1] process_scheduled_works+0xa2c/0x1830 [ 1048.794371][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1048.794393][ C1] ? assign_work+0x364/0x3d0 [ 1048.794413][ C1] worker_thread+0x86d/0xd40 [ 1048.794441][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1048.794460][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1048.794475][ C1] kthread+0x2f0/0x390 [ 1048.794488][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1048.794502][ C1] ? __pfx_kthread+0x10/0x10 [ 1048.794515][ C1] ret_from_fork+0x4b/0x80 [ 1048.794530][ C1] ? __pfx_kthread+0x10/0x10 [ 1048.794543][ C1] ret_from_fork_asm+0x1a/0x30 [ 1048.794571][ C1] [ 1048.794577][ C1] DEBUG: waiting rtnl_mutex for 3457 jiffies. [ 1048.794584][ C1] task:syz.3.3039 state:D stack:23800 pid:17746 tgid:17745 ppid:14163 flags:0x00000004 [ 1048.794605][ C1] Call Trace: [ 1048.794611][ C1] [ 1048.794620][ C1] __schedule+0x1800/0x4a60 [ 1048.794653][ C1] ? __pfx___schedule+0x10/0x10 [ 1048.794672][ C1] ? __pfx_lock_release+0x10/0x10 [ 1048.794689][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1048.794711][ C1] ? schedule+0x90/0x320 [ 1048.794726][ C1] schedule+0x14b/0x320 [ 1048.794744][ C1] schedule_preempt_disabled+0x13/0x30 [ 1048.794759][ C1] __mutex_lock+0x6a4/0xd70 [ 1048.794770][ C1] ? mark_lock+0x9a/0x360 [ 1048.794789][ C1] ? __mutex_lock+0x527/0xd70 [ 1048.794803][ C1] ? bpf_xdp_link_attach+0x112/0x700 [ 1048.794818][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1048.794839][ C1] ? get_rtnl_holder+0x144/0x190 [ 1048.794855][ C1] bpf_xdp_link_attach+0x112/0x700 [ 1048.794876][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1048.794892][ C1] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 1048.794923][ C1] ? __fget_files+0x3f6/0x470 [ 1048.794935][ C1] ? __fget_files+0x29/0x470 [ 1048.794951][ C1] ? attach_type_to_prog_type+0x316/0x460 [ 1048.794965][ C1] ? bpf_prog_attach_check_attach_type+0x2cb/0x4b0 [ 1048.794981][ C1] link_create+0x47c/0x8b0 [ 1048.794993][ C1] ? bpf_lsm_bpf+0x9/0x10 [ 1048.795010][ C1] __sys_bpf+0x4bc/0x810 [ 1048.795029][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 1048.795056][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1048.795074][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1048.795092][ C1] ? do_syscall_64+0x100/0x230 [ 1048.795107][ C1] __x64_sys_bpf+0x7c/0x90 [ 1048.795124][ C1] do_syscall_64+0xf3/0x230 [ 1048.795136][ C1] ? clear_bhb_loop+0x35/0x90 [ 1048.795152][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.795165][ C1] RIP: 0033:0x7f7717177299 [ 1048.795178][ C1] RSP: 002b:00007f7717ec7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1048.795192][ C1] RAX: ffffffffffffffda RBX: 00007f7717305f80 RCX: 00007f7717177299 [ 1048.795202][ C1] RDX: 0000000000000010 RSI: 0000000020000580 RDI: 000000000000001c [ 1048.795210][ C1] RBP: 00007f77171e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 1048.795219][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.795227][ C1] R13: 000000000000000b R14: 00007f7717305f80 R15: 00007ffd1bdabf38 [ 1048.795249][ C1] [ 1048.795254][ C1] DEBUG: holding rtnl_mutex for 3764 jiffies. [ 1048.795262][ C1] task:kworker/u8:10 state:D stack:18648 pid:6025 tgid:6025 ppid:2 flags:0x00004000 [ 1048.795283][ C1] Workqueue: netns cleanup_net [ 1048.795297][ C1] Call Trace: [ 1048.795302][ C1] [ 1048.795311][ C1] __schedule+0x1800/0x4a60 [ 1048.795344][ C1] ? __pfx___schedule+0x10/0x10 [ 1048.795363][ C1] ? __pfx_lock_release+0x10/0x10 [ 1048.795377][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1048.795398][ C1] ? kthread_data+0x52/0xd0 [ 1048.795415][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1048.795432][ C1] ? schedule+0x90/0x320 [ 1048.795448][ C1] schedule+0x14b/0x320 [ 1048.795465][ C1] synchronize_rcu_expedited+0x684/0x830 [ 1048.795483][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1048.795509][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1048.795523][ C1] ? __pfx___might_resched+0x10/0x10 [ 1048.795537][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1048.795553][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1048.795570][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1048.795594][ C1] synchronize_rcu+0x11b/0x360 [ 1048.795607][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 1048.795631][ C1] lockdep_unregister_key+0x4b7/0x540 [ 1048.795651][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1048.795669][ C1] ? rcu_is_watching+0x15/0xb0 [ 1048.795682][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 1048.795700][ C1] __qdisc_destroy+0x165/0x410 [ 1048.795716][ C1] dev_shutdown+0x9b/0x450 [ 1048.795733][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 1048.795761][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1048.795791][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1048.795812][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1048.795833][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1048.795853][ C1] ? __pfx___might_resched+0x10/0x10 [ 1048.795869][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1048.795892][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1048.795908][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1048.795922][ C1] cleanup_net+0x89d/0xcc0 [ 1048.795941][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1048.795963][ C1] ? process_scheduled_works+0x945/0x1830 [ 1048.795978][ C1] process_scheduled_works+0xa2c/0x1830 [ 1048.796015][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1048.796038][ C1] ? assign_work+0x364/0x3d0 [ 1048.796058][ C1] worker_thread+0x86d/0xd40 [ 1048.796085][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1048.796105][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1048.796120][ C1] kthread+0x2f0/0x390 [ 1048.796132][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1048.796147][ C1] ? __pfx_kthread+0x10/0x10 [ 1048.796160][ C1] ret_from_fork+0x4b/0x80 [ 1048.796174][ C1] ? __pfx_kthread+0x10/0x10 [ 1048.796187][ C1] ret_from_fork_asm+0x1a/0x30 [ 1048.796214][ C1] [ 1048.796220][ C1] DEBUG: waiting rtnl_mutex for 3763 jiffies. [ 1048.796227][ C1] task:syz-executor state:D stack:21728 pid:17094 tgid:17094 ppid:17061 flags:0x00000000 [ 1048.796249][ C1] Call Trace: [ 1048.796254][ C1] [ 1048.796263][ C1] __schedule+0x1800/0x4a60 [ 1048.796296][ C1] ? __pfx___schedule+0x10/0x10 [ 1048.796315][ C1] ? __pfx_lock_release+0x10/0x10 [ 1048.796332][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1048.796353][ C1] ? schedule+0x90/0x320 [ 1048.796368][ C1] schedule+0x14b/0x320 [ 1048.796386][ C1] schedule_preempt_disabled+0x13/0x30 [ 1048.796401][ C1] __mutex_lock+0x6a4/0xd70 [ 1048.796417][ C1] ? __mutex_lock+0x527/0xd70 [ 1048.796431][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1048.796449][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1048.796470][ C1] ? get_rtnl_holder+0x144/0x190 [ 1048.796485][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1048.796501][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1048.796519][ C1] ? __lock_acquire+0x1384/0x2050 [ 1048.796535][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1048.796565][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1048.796580][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1048.796599][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1048.796630][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1048.796645][ C1] netlink_unicast+0x7f6/0x990 [ 1048.796669][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1048.796684][ C1] ? __virt_addr_valid+0x183/0x530 [ 1048.796699][ C1] ? __check_object_size+0x49c/0x900 [ 1048.796713][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1048.796732][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1048.796755][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.796767][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1048.796784][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1048.796802][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1048.796813][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1048.796828][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.796839][ C1] __sock_sendmsg+0x221/0x270 [ 1048.796860][ C1] __sys_sendto+0x3a4/0x4f0 [ 1048.796882][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1048.796917][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1048.796935][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1048.796956][ C1] __x64_sys_sendto+0xde/0x100 [ 1048.796974][ C1] do_syscall_64+0xf3/0x230 [ 1048.796986][ C1] ? clear_bhb_loop+0x35/0x90 [ 1048.797002][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.797016][ C1] RIP: 0033:0x7f4eb757902c [ 1048.797028][ C1] RSP: 002b:00007ffc904f9180 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1048.797042][ C1] RAX: ffffffffffffffda RBX: 00007f4eb8234620 RCX: 00007f4eb757902c [ 1048.797051][ C1] RDX: 0000000000000044 RSI: 00007f4eb8234670 RDI: 0000000000000003 [ 1048.797060][ C1] RBP: 0000000000000000 R08: 00007ffc904f91d4 R09: 000000000000000c [ 1048.797068][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1048.797076][ C1] R13: 0000000000000000 R14: 00007f4eb8234670 R15: 0000000000000000 [ 1048.797097][ C1] [ 1048.797103][ C1] DEBUG: waiting rtnl_mutex for 3696 jiffies. [ 1048.797110][ C1] task:kworker/1:10 state:D stack:18360 pid:6309 tgid:6309 ppid:2 flags:0x00004000 [ 1048.797131][ C1] Workqueue: events linkwatch_event [ 1048.797145][ C1] Call Trace: [ 1048.797150][ C1] [ 1048.797159][ C1] __schedule+0x1800/0x4a60 [ 1048.797195][ C1] ? __pfx___schedule+0x10/0x10 [ 1048.797213][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1048.797228][ C1] ? __pfx_lock_release+0x10/0x10 [ 1048.797246][ C1] ? kick_pool+0x45c/0x620 [ 1048.797265][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1048.797282][ C1] ? schedule+0x90/0x320 [ 1048.797297][ C1] schedule+0x14b/0x320 [ 1048.797317][ C1] schedule_preempt_disabled+0x13/0x30 [ 1048.797332][ C1] __mutex_lock+0x6a4/0xd70 [ 1048.797348][ C1] ? __mutex_lock+0x527/0xd70 [ 1048.797363][ C1] ? linkwatch_event+0xe/0x60 [ 1048.797377][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1048.797398][ C1] ? get_rtnl_holder+0x144/0x190 [ 1048.797412][ C1] ? process_scheduled_works+0x945/0x1830 [ 1048.797427][ C1] linkwatch_event+0xe/0x60 [ 1048.797439][ C1] process_scheduled_works+0xa2c/0x1830 [ 1048.797477][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1048.797499][ C1] ? assign_work+0x364/0x3d0 [ 1048.797519][ C1] worker_thread+0x86d/0xd40 [ 1048.797546][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1048.797565][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1048.797581][ C1] kthread+0x2f0/0x390 [ 1048.797592][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1048.797607][ C1] ? __pfx_kthread+0x10/0x10 [ 1048.797620][ C1] ret_from_fork+0x4b/0x80 [ 1048.797636][ C1] ? __pfx_kthread+0x10/0x10 [ 1048.797649][ C1] ret_from_fork_asm+0x1a/0x30 [ 1048.797676][ C1] [ 1048.797683][ C1] [ 1048.797683][ C1] Showing all locks held in the system: [ 1048.797690][ C1] 3 locks held by kworker/u8:1/12: [ 1048.797698][ C1] #0: ffff88802a778148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1048.797736][ C1] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1048.797773][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1048.797812][ C1] 4 locks held by kworker/u8:2/35: [ 1048.797824][ C1] 3 locks held by kworker/u8:4/66: [ 1048.797851][ C1] 3 locks held by kworker/u8:7/2550: [ 1048.797861][ C1] 3 locks held by kworker/u8:9/2944: [ 1048.797875][ C1] 2 locks held by getty/4977: [ 1048.797882][ C1] #0: ffff88802b1940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1048.797920][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1048.797955][ C1] 5 locks held by kworker/u8:10/6025: [ 1048.797963][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1048.797998][ C1] #1: ffffc9000361fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1048.798033][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1048.798065][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1048.798097][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1048.798130][ C1] 3 locks held by kworker/1:10/6309: [ 1048.798137][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1048.798172][ C1] #1: ffffc900094dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1048.798207][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1048.798244][ C1] 2 locks held by syz.2.1976/12758: [ 1048.798254][ C1] 1 lock held by syz-executor/14217: [ 1048.798265][ C1] 2 locks held by syz-executor/14266: [ 1048.798275][ C1] 1 lock held by syz-executor/17094: [ 1048.798284][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1048.798321][ C1] 2 locks held by syz.4.3018/17611: [ 1048.798331][ C1] #0: ffff88807e97dc08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1048.798372][ C1] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 1048.798407][ C1] 1 lock held by syz.3.3039/17746: [ 1048.798414][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: bpf_xdp_link_attach+0x112/0x700 [ 1048.798453][ C1] 5 locks held by syz.0.3044/17768: [ 1048.798461][ C1] #0: ffff88807bc320e0 (&type->s_umount_key#77/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 1048.798507][ C1] #1: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1048.798544][ C1] #2: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1048.798579][ C1] #3: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1048.798617][ C1] #4: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1048.798655][ C1] [ 1048.798659][ C1] ============================================= [ 1048.798659][ C1] [ 1049.837301][ C1] DEBUG: waiting rtnl_mutex for 3871 jiffies. [ 1049.837317][ C1] task:syz.4.3018 state:D stack:24672 pid:17611 tgid:17611 ppid:14266 flags:0x00004004 [ 1049.837345][ C1] Call Trace: [ 1049.837351][ C1] [ 1049.837360][ C1] __schedule+0x1800/0x4a60 [ 1049.837400][ C1] ? __pfx___schedule+0x10/0x10 [ 1049.837419][ C1] ? __pfx_lock_release+0x10/0x10 [ 1049.837437][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1049.837459][ C1] ? schedule+0x90/0x320 [ 1049.837474][ C1] schedule+0x14b/0x320 [ 1049.837492][ C1] schedule_preempt_disabled+0x13/0x30 [ 1049.837508][ C1] __mutex_lock+0x6a4/0xd70 [ 1049.837524][ C1] ? __mutex_lock+0x527/0xd70 [ 1049.837538][ C1] ? raw_release+0x1b8/0x8b0 [ 1049.837553][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1049.837572][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1049.837588][ C1] ? get_rtnl_holder+0x144/0x190 [ 1049.837606][ C1] raw_release+0x1b8/0x8b0 [ 1049.837620][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1049.837639][ C1] sock_close+0xbc/0x240 [ 1049.837655][ C1] ? __pfx_sock_close+0x10/0x10 [ 1049.837672][ C1] __fput+0x24a/0x8a0 [ 1049.837699][ C1] task_work_run+0x24f/0x310 [ 1049.837718][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1049.837734][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1049.837755][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 1049.837775][ C1] do_syscall_64+0x100/0x230 [ 1049.837793][ C1] ? clear_bhb_loop+0x35/0x90 [ 1049.837810][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.837824][ C1] RIP: 0033:0x7f745a977299 [ 1049.837842][ C1] RSP: 002b:00007ffe190a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1049.837856][ C1] RAX: 0000000000000000 RBX: 00007f745ab07a80 RCX: 00007f745a977299 [ 1049.837866][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1049.837875][ C1] RBP: 00007f745ab07a80 R08: 00007f745aaf2000 R09: 00007ffe190a23cf [ 1049.837883][ C1] R10: 00000000005f2cc4 R11: 0000000000000246 R12: 00000000000f6ec7 [ 1049.837892][ C1] R13: 00007ffe190a21e0 R14: 00007ffe190a2200 R15: ffffffffffffffff [ 1049.837915][ C1] [ 1049.837921][ C1] DEBUG: waiting rtnl_mutex for 3592 jiffies. [ 1049.837928][ C1] task:kworker/u8:1 state:D stack:20600 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 1049.837951][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 1049.837970][ C1] Call Trace: [ 1049.837975][ C1] [ 1049.837985][ C1] __schedule+0x1800/0x4a60 [ 1049.838018][ C1] ? __pfx___schedule+0x10/0x10 [ 1049.838037][ C1] ? __pfx_lock_release+0x10/0x10 [ 1049.838053][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1049.838068][ C1] ? kthread_data+0x52/0xd0 [ 1049.838082][ C1] ? schedule+0x90/0x320 [ 1049.838098][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1049.838116][ C1] ? schedule+0x90/0x320 [ 1049.838131][ C1] schedule+0x14b/0x320 [ 1049.838149][ C1] schedule_preempt_disabled+0x13/0x30 [ 1049.838164][ C1] __mutex_lock+0x6a4/0xd70 [ 1049.838179][ C1] ? __mutex_lock+0x527/0xd70 [ 1049.838193][ C1] ? addrconf_verify_work+0x19/0x30 [ 1049.838210][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1049.838221][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1049.838240][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1049.838261][ C1] ? get_rtnl_holder+0x144/0x190 [ 1049.838275][ C1] ? process_scheduled_works+0x945/0x1830 [ 1049.838290][ C1] addrconf_verify_work+0x19/0x30 [ 1049.838306][ C1] process_scheduled_works+0xa2c/0x1830 [ 1049.838344][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1049.838366][ C1] ? assign_work+0x364/0x3d0 [ 1049.838387][ C1] worker_thread+0x86d/0xd40 [ 1049.838414][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1049.838433][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1049.838448][ C1] kthread+0x2f0/0x390 [ 1049.838460][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1049.838475][ C1] ? __pfx_kthread+0x10/0x10 [ 1049.838488][ C1] ret_from_fork+0x4b/0x80 [ 1049.838503][ C1] ? __pfx_kthread+0x10/0x10 [ 1049.838515][ C1] ret_from_fork_asm+0x1a/0x30 [ 1049.838545][ C1] [ 1049.838550][ C1] DEBUG: waiting rtnl_mutex for 3561 jiffies. [ 1049.838557][ C1] task:syz.3.3039 state:D stack:23800 pid:17746 tgid:17745 ppid:14163 flags:0x00000004 [ 1049.838579][ C1] Call Trace: [ 1049.838584][ C1] [ 1049.838593][ C1] __schedule+0x1800/0x4a60 [ 1049.838627][ C1] ? __pfx___schedule+0x10/0x10 [ 1049.838646][ C1] ? __pfx_lock_release+0x10/0x10 [ 1049.838662][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1049.838684][ C1] ? schedule+0x90/0x320 [ 1049.838703][ C1] schedule+0x14b/0x320 [ 1049.838721][ C1] schedule_preempt_disabled+0x13/0x30 [ 1049.838736][ C1] __mutex_lock+0x6a4/0xd70 [ 1049.838748][ C1] ? mark_lock+0x9a/0x360 [ 1049.838766][ C1] ? __mutex_lock+0x527/0xd70 [ 1049.838784][ C1] ? bpf_xdp_link_attach+0x112/0x700 [ 1049.838799][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1049.838821][ C1] ? get_rtnl_holder+0x144/0x190 [ 1049.838836][ C1] bpf_xdp_link_attach+0x112/0x700 [ 1049.838853][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1049.838869][ C1] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 1049.838899][ C1] ? __fget_files+0x3f6/0x470 [ 1049.838910][ C1] ? __fget_files+0x29/0x470 [ 1049.838927][ C1] ? attach_type_to_prog_type+0x316/0x460 [ 1049.838940][ C1] ? bpf_prog_attach_check_attach_type+0x2cb/0x4b0 [ 1049.838957][ C1] link_create+0x47c/0x8b0 [ 1049.838969][ C1] ? bpf_lsm_bpf+0x9/0x10 [ 1049.838986][ C1] __sys_bpf+0x4bc/0x810 [ 1049.839004][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 1049.839031][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1049.839049][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1049.839066][ C1] ? do_syscall_64+0x100/0x230 [ 1049.839082][ C1] __x64_sys_bpf+0x7c/0x90 [ 1049.839098][ C1] do_syscall_64+0xf3/0x230 [ 1049.839111][ C1] ? clear_bhb_loop+0x35/0x90 [ 1049.839126][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.839139][ C1] RIP: 0033:0x7f7717177299 [ 1049.839152][ C1] RSP: 002b:00007f7717ec7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1049.839166][ C1] RAX: ffffffffffffffda RBX: 00007f7717305f80 RCX: 00007f7717177299 [ 1049.839176][ C1] RDX: 0000000000000010 RSI: 0000000020000580 RDI: 000000000000001c [ 1049.839184][ C1] RBP: 00007f77171e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 1049.839193][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.839201][ C1] R13: 000000000000000b R14: 00007f7717305f80 R15: 00007ffd1bdabf38 [ 1049.839222][ C1] [ 1049.839228][ C1] DEBUG: holding rtnl_mutex for 3868 jiffies. [ 1049.839235][ C1] task:kworker/u8:10 state:D stack:18648 pid:6025 tgid:6025 ppid:2 flags:0x00004000 [ 1049.839257][ C1] Workqueue: netns cleanup_net [ 1049.839271][ C1] Call Trace: [ 1049.839276][ C1] [ 1049.839285][ C1] __schedule+0x1800/0x4a60 [ 1049.839318][ C1] ? __pfx___schedule+0x10/0x10 [ 1049.839337][ C1] ? __pfx_lock_release+0x10/0x10 [ 1049.839351][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1049.839372][ C1] ? kthread_data+0x52/0xd0 [ 1049.839389][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1049.839406][ C1] ? schedule+0x90/0x320 [ 1049.839421][ C1] schedule+0x14b/0x320 [ 1049.839439][ C1] synchronize_rcu_expedited+0x684/0x830 [ 1049.839456][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1049.839482][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1049.839496][ C1] ? __pfx___might_resched+0x10/0x10 [ 1049.839510][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1049.839526][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1049.839543][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1049.839567][ C1] synchronize_rcu+0x11b/0x360 [ 1049.839580][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 1049.839604][ C1] lockdep_unregister_key+0x4b7/0x540 [ 1049.839623][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1049.839642][ C1] ? rcu_is_watching+0x15/0xb0 [ 1049.839654][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 1049.839672][ C1] __qdisc_destroy+0x165/0x410 [ 1049.839688][ C1] dev_shutdown+0x9b/0x450 [ 1049.839705][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 1049.839733][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1049.839763][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1049.839788][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1049.839809][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1049.839829][ C1] ? __pfx___might_resched+0x10/0x10 [ 1049.839845][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1049.839864][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1049.839880][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1049.839894][ C1] cleanup_net+0x89d/0xcc0 [ 1049.839912][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1049.839935][ C1] ? process_scheduled_works+0x945/0x1830 [ 1049.839950][ C1] process_scheduled_works+0xa2c/0x1830 [ 1049.839987][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1049.840010][ C1] ? assign_work+0x364/0x3d0 [ 1049.840029][ C1] worker_thread+0x86d/0xd40 [ 1049.840056][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1049.840076][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1049.840091][ C1] kthread+0x2f0/0x390 [ 1049.840103][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1049.840118][ C1] ? __pfx_kthread+0x10/0x10 [ 1049.840131][ C1] ret_from_fork+0x4b/0x80 [ 1049.840145][ C1] ? __pfx_kthread+0x10/0x10 [ 1049.840157][ C1] ret_from_fork_asm+0x1a/0x30 [ 1049.840185][ C1] [ 1049.840190][ C1] DEBUG: waiting rtnl_mutex for 3867 jiffies. [ 1049.840197][ C1] task:syz-executor state:D stack:21728 pid:17094 tgid:17094 ppid:17061 flags:0x00000000 [ 1049.840218][ C1] Call Trace: [ 1049.840223][ C1] [ 1049.840232][ C1] __schedule+0x1800/0x4a60 [ 1049.840265][ C1] ? __pfx___schedule+0x10/0x10 [ 1049.840284][ C1] ? __pfx_lock_release+0x10/0x10 [ 1049.840300][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1049.840322][ C1] ? schedule+0x90/0x320 [ 1049.840337][ C1] schedule+0x14b/0x320 [ 1049.840354][ C1] schedule_preempt_disabled+0x13/0x30 [ 1049.840370][ C1] __mutex_lock+0x6a4/0xd70 [ 1049.840385][ C1] ? __mutex_lock+0x527/0xd70 [ 1049.840399][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1049.840416][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1049.840438][ C1] ? get_rtnl_holder+0x144/0x190 [ 1049.840453][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1049.840469][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1049.840486][ C1] ? __lock_acquire+0x1384/0x2050 [ 1049.840503][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1049.840533][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1049.840548][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1049.840566][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1049.840602][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1049.840617][ C1] netlink_unicast+0x7f6/0x990 [ 1049.840648][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1049.840663][ C1] ? __virt_addr_valid+0x183/0x530 [ 1049.840679][ C1] ? __check_object_size+0x49c/0x900 [ 1049.840693][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1049.840712][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1049.840735][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1049.840747][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1049.840764][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1049.840787][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1049.840798][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1049.840813][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1049.840824][ C1] __sock_sendmsg+0x221/0x270 [ 1049.840845][ C1] __sys_sendto+0x3a4/0x4f0 [ 1049.840864][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1049.840898][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1049.840916][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1049.840937][ C1] __x64_sys_sendto+0xde/0x100 [ 1049.840954][ C1] do_syscall_64+0xf3/0x230 [ 1049.840967][ C1] ? clear_bhb_loop+0x35/0x90 [ 1049.840983][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.840995][ C1] RIP: 0033:0x7f4eb757902c [ 1049.841008][ C1] RSP: 002b:00007ffc904f9180 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1049.841021][ C1] RAX: ffffffffffffffda RBX: 00007f4eb8234620 RCX: 00007f4eb757902c [ 1049.841031][ C1] RDX: 0000000000000044 RSI: 00007f4eb8234670 RDI: 0000000000000003 [ 1049.841040][ C1] RBP: 0000000000000000 R08: 00007ffc904f91d4 R09: 000000000000000c [ 1049.841048][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1049.841056][ C1] R13: 0000000000000000 R14: 00007f4eb8234670 R15: 0000000000000000 [ 1049.841077][ C1] [ 1049.841083][ C1] DEBUG: waiting rtnl_mutex for 3800 jiffies. [ 1049.841090][ C1] task:kworker/1:10 state:D stack:18360 pid:6309 tgid:6309 ppid:2 flags:0x00004000 [ 1049.841111][ C1] Workqueue: events linkwatch_event [ 1049.841124][ C1] Call Trace: [ 1049.841130][ C1] [ 1049.841139][ C1] __schedule+0x1800/0x4a60 [ 1049.841172][ C1] ? __pfx___schedule+0x10/0x10 [ 1049.841189][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1049.841205][ C1] ? __pfx_lock_release+0x10/0x10 [ 1049.841221][ C1] ? kick_pool+0x45c/0x620 [ 1049.841239][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1049.841256][ C1] ? schedule+0x90/0x320 [ 1049.841271][ C1] schedule+0x14b/0x320 [ 1049.841289][ C1] schedule_preempt_disabled+0x13/0x30 [ 1049.841304][ C1] __mutex_lock+0x6a4/0xd70 [ 1049.841320][ C1] ? __mutex_lock+0x527/0xd70 [ 1049.841333][ C1] ? linkwatch_event+0xe/0x60 [ 1049.841347][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1049.841368][ C1] ? get_rtnl_holder+0x144/0x190 [ 1049.841382][ C1] ? process_scheduled_works+0x945/0x1830 [ 1049.841397][ C1] linkwatch_event+0xe/0x60 [ 1049.841409][ C1] process_scheduled_works+0xa2c/0x1830 [ 1049.841447][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1049.841469][ C1] ? assign_work+0x364/0x3d0 [ 1049.841489][ C1] worker_thread+0x86d/0xd40 [ 1049.841516][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1049.841535][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1049.841550][ C1] kthread+0x2f0/0x390 [ 1049.841562][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1049.841577][ C1] ? __pfx_kthread+0x10/0x10 [ 1049.841590][ C1] ret_from_fork+0x4b/0x80 [ 1049.841604][ C1] ? __pfx_kthread+0x10/0x10 [ 1049.841616][ C1] ret_from_fork_asm+0x1a/0x30 [ 1049.841644][ C1] [ 1049.841650][ C1] [ 1049.841650][ C1] Showing all locks held in the system: [ 1049.841657][ C1] 3 locks held by kworker/u8:1/12: [ 1049.841666][ C1] #0: ffff88802a778148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1049.841704][ C1] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1049.841740][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1049.841787][ C1] 4 locks held by kworker/u8:2/35: [ 1049.841798][ C1] 3 locks held by kworker/u8:4/66: [ 1049.841825][ C1] 3 locks held by kworker/u8:6/2470: [ 1049.841833][ C1] 3 locks held by kworker/u8:7/2550: [ 1049.841842][ C1] 3 locks held by kworker/u8:9/2944: [ 1049.841852][ C1] 2 locks held by getty/4977: [ 1049.841859][ C1] #0: ffff88802b1940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1049.841896][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1049.841931][ C1] 5 locks held by kworker/u8:10/6025: [ 1049.841938][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1049.841973][ C1] #1: ffffc9000361fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1049.842007][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1049.842039][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1049.842071][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1049.842104][ C1] 3 locks held by kworker/1:10/6309: [ 1049.842112][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1049.842146][ C1] #1: ffffc900094dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1049.842181][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1049.842280][ C1] 3 locks held by kworker/u8:12/9014: [ 1049.842296][ C1] 2 locks held by syz.2.1976/12758: [ 1049.842313][ C1] 1 lock held by syz-executor/14217: [ 1049.842327][ C1] 2 locks held by syz-executor/14266: [ 1049.842343][ C1] 1 lock held by syz-executor/17094: [ 1049.842355][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1049.842421][ C1] 2 locks held by syz.4.3018/17611: [ 1049.842434][ C1] #0: ffff88807e97dc08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1049.842509][ C1] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 1049.842571][ C1] 1 lock held by syz.3.3039/17746: [ 1049.842583][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: bpf_xdp_link_attach+0x112/0x700 [ 1049.842623][ C1] 5 locks held by syz.0.3044/17768: [ 1049.842631][ C1] #0: ffff88807bc320e0 (&type->s_umount_key#77/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 1049.842674][ C1] #1: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1049.842709][ C1] #2: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1049.842743][ C1] #3: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1049.842776][ C1] #4: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1049.842817][ C1] 3 locks held by f2fs_gc-7:0/17788: [ 1049.842826][ C1] 1 lock held by syz-executor/17789: [ 1049.842836][ C1] [ 1049.842840][ C1] ============================================= [ 1049.842840][ C1] [ 1050.872711][ C1] DEBUG: waiting rtnl_mutex for 3975 jiffies. [ 1050.872728][ C1] task:syz.4.3018 state:D stack:24672 pid:17611 tgid:17611 ppid:14266 flags:0x00004004 [ 1050.872756][ C1] Call Trace: [ 1050.872763][ C1] [ 1050.872774][ C1] __schedule+0x1800/0x4a60 [ 1050.872815][ C1] ? __pfx___schedule+0x10/0x10 [ 1050.872834][ C1] ? __pfx_lock_release+0x10/0x10 [ 1050.872853][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1050.872875][ C1] ? schedule+0x90/0x320 [ 1050.872890][ C1] schedule+0x14b/0x320 [ 1050.872908][ C1] schedule_preempt_disabled+0x13/0x30 [ 1050.872929][ C1] __mutex_lock+0x6a4/0xd70 [ 1050.872945][ C1] ? __mutex_lock+0x527/0xd70 [ 1050.872958][ C1] ? raw_release+0x1b8/0x8b0 [ 1050.872973][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1050.872992][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1050.873008][ C1] ? get_rtnl_holder+0x144/0x190 [ 1050.873026][ C1] raw_release+0x1b8/0x8b0 [ 1050.873040][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1050.873058][ C1] sock_close+0xbc/0x240 [ 1050.873075][ C1] ? __pfx_sock_close+0x10/0x10 [ 1050.873092][ C1] __fput+0x24a/0x8a0 [ 1050.873118][ C1] task_work_run+0x24f/0x310 [ 1050.873137][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1050.873154][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1050.873174][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 1050.873194][ C1] do_syscall_64+0x100/0x230 [ 1050.873206][ C1] ? clear_bhb_loop+0x35/0x90 [ 1050.873224][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.873238][ C1] RIP: 0033:0x7f745a977299 [ 1050.873257][ C1] RSP: 002b:00007ffe190a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1050.873271][ C1] RAX: 0000000000000000 RBX: 00007f745ab07a80 RCX: 00007f745a977299 [ 1050.873280][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1050.873289][ C1] RBP: 00007f745ab07a80 R08: 00007f745aaf2000 R09: 00007ffe190a23cf [ 1050.873298][ C1] R10: 00000000005f2cc4 R11: 0000000000000246 R12: 00000000000f6ec7 [ 1050.873307][ C1] R13: 00007ffe190a21e0 R14: 00007ffe190a2200 R15: ffffffffffffffff [ 1050.873330][ C1] [ 1050.873335][ C1] DEBUG: waiting rtnl_mutex for 3696 jiffies. [ 1050.873343][ C1] task:kworker/u8:1 state:D stack:20600 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 1050.873365][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 1050.873384][ C1] Call Trace: [ 1050.873389][ C1] [ 1050.873398][ C1] __schedule+0x1800/0x4a60 [ 1050.873432][ C1] ? __pfx___schedule+0x10/0x10 [ 1050.873451][ C1] ? __pfx_lock_release+0x10/0x10 [ 1050.873467][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1050.873482][ C1] ? kthread_data+0x52/0xd0 [ 1050.873497][ C1] ? schedule+0x90/0x320 [ 1050.873512][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1050.873530][ C1] ? schedule+0x90/0x320 [ 1050.873545][ C1] schedule+0x14b/0x320 [ 1050.873563][ C1] schedule_preempt_disabled+0x13/0x30 [ 1050.873578][ C1] __mutex_lock+0x6a4/0xd70 [ 1050.873594][ C1] ? __mutex_lock+0x527/0xd70 [ 1050.873607][ C1] ? addrconf_verify_work+0x19/0x30 [ 1050.873625][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1050.873636][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1050.873654][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1050.873677][ C1] ? get_rtnl_holder+0x144/0x190 [ 1050.873691][ C1] ? process_scheduled_works+0x945/0x1830 [ 1050.873706][ C1] addrconf_verify_work+0x19/0x30 [ 1050.873722][ C1] process_scheduled_works+0xa2c/0x1830 [ 1050.873760][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1050.873782][ C1] ? assign_work+0x364/0x3d0 [ 1050.873802][ C1] worker_thread+0x86d/0xd40 [ 1050.873829][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1050.873848][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1050.873864][ C1] kthread+0x2f0/0x390 [ 1050.873875][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1050.873890][ C1] ? __pfx_kthread+0x10/0x10 [ 1050.873903][ C1] ret_from_fork+0x4b/0x80 [ 1050.873922][ C1] ? __pfx_kthread+0x10/0x10 [ 1050.873935][ C1] ret_from_fork_asm+0x1a/0x30 [ 1050.873964][ C1] [ 1050.873969][ C1] DEBUG: waiting rtnl_mutex for 3665 jiffies. [ 1050.873977][ C1] task:syz.3.3039 state:D stack:23800 pid:17746 tgid:17745 ppid:14163 flags:0x00000004 [ 1050.873999][ C1] Call Trace: [ 1050.874004][ C1] [ 1050.874013][ C1] __schedule+0x1800/0x4a60 [ 1050.874046][ C1] ? __pfx___schedule+0x10/0x10 [ 1050.874065][ C1] ? __pfx_lock_release+0x10/0x10 [ 1050.874082][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1050.874103][ C1] ? schedule+0x90/0x320 [ 1050.874119][ C1] schedule+0x14b/0x320 [ 1050.874136][ C1] schedule_preempt_disabled+0x13/0x30 [ 1050.874152][ C1] __mutex_lock+0x6a4/0xd70 [ 1050.874163][ C1] ? mark_lock+0x9a/0x360 [ 1050.874182][ C1] ? __mutex_lock+0x527/0xd70 [ 1050.874196][ C1] ? bpf_xdp_link_attach+0x112/0x700 [ 1050.874211][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1050.874232][ C1] ? get_rtnl_holder+0x144/0x190 [ 1050.874248][ C1] bpf_xdp_link_attach+0x112/0x700 [ 1050.874264][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1050.874280][ C1] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 1050.874310][ C1] ? __fget_files+0x3f6/0x470 [ 1050.874322][ C1] ? __fget_files+0x29/0x470 [ 1050.874338][ C1] ? attach_type_to_prog_type+0x316/0x460 [ 1050.874352][ C1] ? bpf_prog_attach_check_attach_type+0x2cb/0x4b0 [ 1050.874368][ C1] link_create+0x47c/0x8b0 [ 1050.874380][ C1] ? bpf_lsm_bpf+0x9/0x10 [ 1050.874396][ C1] __sys_bpf+0x4bc/0x810 [ 1050.874415][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 1050.874441][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1050.874459][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1050.874476][ C1] ? do_syscall_64+0x100/0x230 [ 1050.874492][ C1] __x64_sys_bpf+0x7c/0x90 [ 1050.874508][ C1] do_syscall_64+0xf3/0x230 [ 1050.874521][ C1] ? clear_bhb_loop+0x35/0x90 [ 1050.874537][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.874550][ C1] RIP: 0033:0x7f7717177299 [ 1050.874564][ C1] RSP: 002b:00007f7717ec7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1050.874577][ C1] RAX: ffffffffffffffda RBX: 00007f7717305f80 RCX: 00007f7717177299 [ 1050.874587][ C1] RDX: 0000000000000010 RSI: 0000000020000580 RDI: 000000000000001c [ 1050.874595][ C1] RBP: 00007f77171e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 1050.874604][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1050.874612][ C1] R13: 000000000000000b R14: 00007f7717305f80 R15: 00007ffd1bdabf38 [ 1050.874634][ C1] [ 1050.874639][ C1] DEBUG: holding rtnl_mutex for 3972 jiffies. [ 1050.874646][ C1] task:kworker/u8:10 state:D stack:18648 pid:6025 tgid:6025 ppid:2 flags:0x00004000 [ 1050.874668][ C1] Workqueue: netns cleanup_net [ 1050.874684][ C1] Call Trace: [ 1050.874688][ C1] [ 1050.874697][ C1] __schedule+0x1800/0x4a60 [ 1050.874731][ C1] ? __pfx___schedule+0x10/0x10 [ 1050.874750][ C1] ? __pfx_lock_release+0x10/0x10 [ 1050.874764][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1050.874784][ C1] ? kthread_data+0x52/0xd0 [ 1050.874801][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1050.874818][ C1] ? schedule+0x90/0x320 [ 1050.874833][ C1] schedule+0x14b/0x320 [ 1050.874851][ C1] synchronize_rcu_expedited+0x684/0x830 [ 1050.874868][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1050.874893][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1050.874907][ C1] ? __pfx___might_resched+0x10/0x10 [ 1050.874925][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1050.874942][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1050.874958][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1050.874983][ C1] synchronize_rcu+0x11b/0x360 [ 1050.874996][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 1050.875020][ C1] lockdep_unregister_key+0x4b7/0x540 [ 1050.875039][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1050.875058][ C1] ? rcu_is_watching+0x15/0xb0 [ 1050.875070][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 1050.875088][ C1] __qdisc_destroy+0x165/0x410 [ 1050.875104][ C1] dev_shutdown+0x9b/0x450 [ 1050.875120][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 1050.875149][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1050.875178][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1050.875199][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1050.875220][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1050.875241][ C1] ? __pfx___might_resched+0x10/0x10 [ 1050.875257][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1050.875276][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1050.875292][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1050.875306][ C1] cleanup_net+0x89d/0xcc0 [ 1050.875324][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1050.875347][ C1] ? process_scheduled_works+0x945/0x1830 [ 1050.875362][ C1] process_scheduled_works+0xa2c/0x1830 [ 1050.875400][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1050.875422][ C1] ? assign_work+0x364/0x3d0 [ 1050.875445][ C1] worker_thread+0x86d/0xd40 [ 1050.875472][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1050.875491][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1050.875506][ C1] kthread+0x2f0/0x390 [ 1050.875518][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1050.875533][ C1] ? __pfx_kthread+0x10/0x10 [ 1050.875545][ C1] ret_from_fork+0x4b/0x80 [ 1050.875560][ C1] ? __pfx_kthread+0x10/0x10 [ 1050.875572][ C1] ret_from_fork_asm+0x1a/0x30 [ 1050.875600][ C1] [ 1050.875605][ C1] DEBUG: waiting rtnl_mutex for 3971 jiffies. [ 1050.875612][ C1] task:syz-executor state:D stack:21728 pid:17094 tgid:17094 ppid:17061 flags:0x00000000 [ 1050.875634][ C1] Call Trace: [ 1050.875639][ C1] [ 1050.875648][ C1] __schedule+0x1800/0x4a60 [ 1050.875684][ C1] ? __pfx___schedule+0x10/0x10 [ 1050.875703][ C1] ? __pfx_lock_release+0x10/0x10 [ 1050.875719][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1050.875741][ C1] ? schedule+0x90/0x320 [ 1050.875755][ C1] schedule+0x14b/0x320 [ 1050.875779][ C1] schedule_preempt_disabled+0x13/0x30 [ 1050.875794][ C1] __mutex_lock+0x6a4/0xd70 [ 1050.875809][ C1] ? __mutex_lock+0x527/0xd70 [ 1050.875823][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1050.875841][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1050.875863][ C1] ? get_rtnl_holder+0x144/0x190 [ 1050.875881][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1050.875898][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1050.875915][ C1] ? __lock_acquire+0x1384/0x2050 [ 1050.875936][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1050.875966][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1050.875981][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1050.875999][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1050.876030][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1050.876045][ C1] netlink_unicast+0x7f6/0x990 [ 1050.876069][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1050.876084][ C1] ? __virt_addr_valid+0x183/0x530 [ 1050.876099][ C1] ? __check_object_size+0x49c/0x900 [ 1050.876113][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1050.876132][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1050.876155][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1050.876167][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1050.876185][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1050.876202][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1050.876213][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1050.876228][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1050.876240][ C1] __sock_sendmsg+0x221/0x270 [ 1050.876260][ C1] __sys_sendto+0x3a4/0x4f0 [ 1050.876279][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1050.876314][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1050.876332][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1050.876353][ C1] __x64_sys_sendto+0xde/0x100 [ 1050.876370][ C1] do_syscall_64+0xf3/0x230 [ 1050.876383][ C1] ? clear_bhb_loop+0x35/0x90 [ 1050.876399][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.876412][ C1] RIP: 0033:0x7f4eb757902c [ 1050.876424][ C1] RSP: 002b:00007ffc904f9180 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1050.876437][ C1] RAX: ffffffffffffffda RBX: 00007f4eb8234620 RCX: 00007f4eb757902c [ 1050.876451][ C1] RDX: 0000000000000044 RSI: 00007f4eb8234670 RDI: 0000000000000003 [ 1050.876459][ C1] RBP: 0000000000000000 R08: 00007ffc904f91d4 R09: 000000000000000c [ 1050.876468][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1050.876476][ C1] R13: 0000000000000000 R14: 00007f4eb8234670 R15: 0000000000000000 [ 1050.876497][ C1] [ 1050.876502][ C1] DEBUG: waiting rtnl_mutex for 3904 jiffies. [ 1050.876509][ C1] task:kworker/1:10 state:D stack:18360 pid:6309 tgid:6309 ppid:2 flags:0x00004000 [ 1050.876531][ C1] Workqueue: events linkwatch_event [ 1050.876545][ C1] Call Trace: [ 1050.876550][ C1] [ 1050.876559][ C1] __schedule+0x1800/0x4a60 [ 1050.876592][ C1] ? __pfx___schedule+0x10/0x10 [ 1050.876609][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1050.876625][ C1] ? __pfx_lock_release+0x10/0x10 [ 1050.876641][ C1] ? kick_pool+0x45c/0x620 [ 1050.876659][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1050.876678][ C1] ? schedule+0x90/0x320 [ 1050.876693][ C1] schedule+0x14b/0x320 [ 1050.876716][ C1] schedule_preempt_disabled+0x13/0x30 [ 1050.876731][ C1] __mutex_lock+0x6a4/0xd70 [ 1050.876747][ C1] ? __mutex_lock+0x527/0xd70 [ 1050.876761][ C1] ? linkwatch_event+0xe/0x60 [ 1050.876775][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1050.876795][ C1] ? get_rtnl_holder+0x144/0x190 [ 1050.876809][ C1] ? process_scheduled_works+0x945/0x1830 [ 1050.876824][ C1] linkwatch_event+0xe/0x60 [ 1050.876836][ C1] process_scheduled_works+0xa2c/0x1830 [ 1050.876873][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1050.876896][ C1] ? assign_work+0x364/0x3d0 [ 1050.876915][ C1] worker_thread+0x86d/0xd40 [ 1050.876954][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1050.876976][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1050.876996][ C1] kthread+0x2f0/0x390 [ 1050.877008][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1050.877022][ C1] ? __pfx_kthread+0x10/0x10 [ 1050.877035][ C1] ret_from_fork+0x4b/0x80 [ 1050.877050][ C1] ? __pfx_kthread+0x10/0x10 [ 1050.877062][ C1] ret_from_fork_asm+0x1a/0x30 [ 1050.877089][ C1] [ 1050.877096][ C1] [ 1050.877096][ C1] Showing all locks held in the system: [ 1050.877102][ C1] 3 locks held by kworker/u8:1/12: [ 1050.877111][ C1] #0: ffff88802a778148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1050.877150][ C1] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1050.877190][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1050.877228][ C1] 4 locks held by kworker/u8:2/35: [ 1050.877240][ C1] 3 locks held by kworker/u8:4/66: [ 1050.877266][ C1] 3 locks held by kworker/u8:6/2470: [ 1050.877274][ C1] 3 locks held by kworker/u8:7/2550: [ 1050.877283][ C1] 3 locks held by kworker/u8:9/2944: [ 1050.877294][ C1] 2 locks held by getty/4977: [ 1050.877301][ C1] #0: ffff88802b1940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1050.877338][ C1] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1050.877373][ C1] 5 locks held by kworker/u8:10/6025: [ 1050.877381][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1050.877416][ C1] #1: ffffc9000361fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1050.877451][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1050.877483][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1050.877515][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1050.877548][ C1] 3 locks held by kworker/1:10/6309: [ 1050.877556][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1050.877590][ C1] #1: ffffc900094dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1050.877625][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1050.877658][ C1] 3 locks held by kworker/u8:12/9014: [ 1050.877669][ C1] 2 locks held by syz.2.1976/12758: [ 1050.877684][ C1] 1 lock held by syz-executor/14217: [ 1050.877694][ C1] 2 locks held by syz-executor/14266: [ 1050.877703][ C1] 1 lock held by syz-executor/17094: [ 1050.877711][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1050.877749][ C1] 2 locks held by syz.4.3018/17611: [ 1050.877756][ C1] #0: ffff88807e97dc08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1050.877796][ C1] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 1050.877828][ C1] 1 lock held by syz.3.3039/17746: [ 1050.877840][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: bpf_xdp_link_attach+0x112/0x700 [ 1050.877874][ C1] 5 locks held by syz.0.3044/17768: [ 1050.877881][ C1] #0: ffff88807bc320e0 (&type->s_umount_key#77/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 1050.877928][ C1] #1: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1050.877963][ C1] #2: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1050.877998][ C1] #3: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1050.878031][ C1] #4: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1050.878067][ C1] 3 locks held by f2fs_gc-7:0/17788: [ 1050.878075][ C1] 1 lock held by syz-executor/17789: [ 1050.878084][ C1] [ 1050.878088][ C1] ============================================= [ 1050.878088][ C1] [ 1051.914316][ C1] DEBUG: waiting rtnl_mutex for 4079 jiffies. [ 1051.914332][ C1] task:syz.4.3018 state:D stack:24672 pid:17611 tgid:17611 ppid:14266 flags:0x00004004 [ 1051.914360][ C1] Call Trace: [ 1051.914366][ C1] [ 1051.914376][ C1] __schedule+0x1800/0x4a60 [ 1051.914415][ C1] ? __pfx___schedule+0x10/0x10 [ 1051.914435][ C1] ? __pfx_lock_release+0x10/0x10 [ 1051.914453][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1051.914475][ C1] ? schedule+0x90/0x320