last executing test programs: 1m15.985938043s ago: executing program 4 (id=608): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r1, &(0x7f0000001a40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, r2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r3}, [@IFLA_MTU={0x8, 0x4, 0x100}]}, 0x28}}, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x0, 0xd, &(0x7f00000004c0)=@raw=[@jmp={0x5, 0x0, 0x7, 0x1, 0x3, 0xfffffffffffffff4, 0xfffffffffffffff0}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1070509}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000001400)='syzkaller\x00'}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7, "18797792"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_int(r5, 0x0, 0xa, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="ac0000001200000125bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="8080040085000000400018800c000180080001000900000018000180140005009011960698bb403a3f592783c265ef8404000180140001800500060001000000080801007f0000001d002200831a48bcdc0f24c679f6780d0ef333252269311b8f04ab3e13000000050021000d000000140003006c6f000000000000000000000000000008002c0004000000087a6c00ffffffff"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4008880) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 1m12.003426802s ago: executing program 4 (id=612): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r7, 0x8004500f, &(0x7f0000000980)) accept4(r6, 0x0, 0x0, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000a40)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x9, [{}, {}, {0x0, 0x4000}], 0x0, 0x0, 0x0, 0x0, 0x7}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) 1m8.530998593s ago: executing program 4 (id=615): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa00010, &(0x7f0000000e40)=ANY=[@ANYBLOB='umask=00000000000000000000003,unhide,lastblock=00000000000000000034,novrs,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c696163637972696c6c69630200"/27, @ANYRESDEC=0x0, @ANYBLOB=',unhide,uid=forget,\x00'], 0x1, 0xc43, &(0x7f00000001c0)="$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") sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) creat(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) recvmsg(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/128, 0x80}], 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x804, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000004c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@handle}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xe, 0x0, &(0x7f0000000a00)=[@clear_death], 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) 1m6.079626482s ago: executing program 4 (id=621): socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000080)=0xff, 0x4) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 30.852032903s ago: executing program 0 (id=690): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x3, 0x1800, 0x10000) 27.065251137s ago: executing program 0 (id=696): r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 21.463433481s ago: executing program 0 (id=704): syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net/softnet_stat\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001400), 0xffffffffffffffff) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgrp(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000002c0), 0x4) recvmmsg(r2, &(0x7f0000003280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003200)=""/67, 0x43}}], 0x1, 0x0, 0x0) syz_read_part_table(0x5c0, &(0x7f0000000000)="$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") socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x42, &(0x7f0000000200)={0x0, 0xfffffffffffffecd}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) inotify_init1(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) r5 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)={[{0x0, 'rlimit'}]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 18.971216211s ago: executing program 0 (id=706): getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x6) 18.670532373s ago: executing program 0 (id=707): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000080)=""/43, 0x2b) getdents(r4, 0xfffffffffffffffd, 0x58) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getpid() r5 = accept4$x25(r0, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000080)={0x0, 0xaf4, 0x6, 0x0, 0x4, 0x26, 0x28, "85f28e481fc01a4fd93df3fa52e3ad9303fce420", "7642438074a3125daf7abaaadd85c33e6584cdcf"}) open(0x0, 0x30000, 0x130) 16.314835061s ago: executing program 0 (id=709): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000e00)='./file0\x00', 0x200000, &(0x7f0000000f40)={[{@grpjquota}, {@noauto_da_alloc}, {}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x85c5}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xfe, 0x576, &(0x7f00000024c0)="$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") r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0x8, 0x7f, 0x0, 0x0, 0x3, "f06fc539471398450104663ea5b3e92dad434f"}) r5 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="b40000001800801c2020fffd04c802002000000c00090001001020121d429dedec0dfaa754fbebbd3895efc69c74b8a7c14240ff7a56edef6e5bf1d490d1fd16246cdbb10ffe86146bc4bf00c4811cd81a11c0430dceea8022d3c0624bd41d39a659d5115e54212c3e3fd97a23faf4e9bb7967d2bb6647064986bff200"/147, @ANYRES32=0x0, @ANYBLOB="840013000000000000000000000f0f00000002000000000000000000000000000000010000000f00000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000010000000000000001000000000000000300000000000000000005001a0001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000015}, 0x4004) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0x1, 0x0, 0x0, 0x0) write$UHID_INPUT(r4, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 11.349512517s ago: executing program 2 (id=717): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x8000, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000002c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000"]) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{}]}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="8a8fa9a4fd711518fe0e9e4149db868356ddc80d3106a3ba4ba182e556b3c69cc44209ebc21772952577d924f8d11d62aaab7f93861471f6e33ead6ee3645d3ab96f814699cd4c867ee2297f9c56e59ee2228666c904c002cc20ecffd7b1d93bc02da6386285d19c1a366709f10be4e63ff4d2179581e6855e1dd48bf1efd11c6b1a8c27fa9ca79dce16359b4b1ad14c7b3c5a5c8e0fb954047a6be5", 0x9c}, {0x0}], 0x2, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@multicast1}, {@in6=@remote, 0x0, 0x32}, @in=@dev}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_SET_MARK={0x8}, @replay_esn_val={0x1c, 0x1f}]}, 0x15c}}, 0x0) 8.830954333s ago: executing program 2 (id=719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) semget$private(0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{0x7}, 0x1}}}, 0x7) syz_read_part_table(0x5fd, &(0x7f0000001a40)="$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") creat(&(0x7f0000000140)='./file1\x00', 0x0) syz_emit_vhci(0x0, 0xf) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000580)="ea41fdf41451514ea181eeae2ec22c225cd5402272b9b414b08f0719a48af2247a64345c5b8ca209dbb24493c24bc0971484e88e954f41cfa8f63e1e491105de10a51a6b2cc6b0430073761878d3f26aef6f220d91eb2e85dd17102ff8fbddb9bc924b08d99f2c574c54caee9c947c61efaf7ed18d0c7f6c326288f1761885ab8c5208961186085a267756cf2e6f4e2fc3b7795f735da01858b0d9fff28b7a703351901cf50a777413c9415ab78b2010e13db027", 0xb4) readahead(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=cp936,dm00000000000230,\x00'/47], 0x1, 0x14d3, &(0x7f00000015c0)="$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") mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x2b}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0xab, 0xf, "2d49e8", 0x7347}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2, 0x5, 0x3, "cae1d5", 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x55, 0x7f, "426992", 0x2}]}}}, 0x2e) renameat2(0xffffffffffffffff, &(0x7f00000004c0)='./bus/file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) io_setup(0x7fb, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f00000014c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}]) 6.874507823s ago: executing program 3 (id=724): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x0, 0xc56, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 6.77153894s ago: executing program 1 (id=725): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) getsockname(r1, &(0x7f0000000280)=@xdp, &(0x7f0000000040)=0x80) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) 6.616219568s ago: executing program 3 (id=726): r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000080)=0x6) 6.57353084s ago: executing program 1 (id=727): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0xd, 0x0, 0x0) 6.391377828s ago: executing program 3 (id=728): r0 = gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff3ae644850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc83df03395287fd51a700ea6553f304000000815dcf00c3eebc52267b042d196bde7c382d21ff79a8583a7482c5994747e19325b1ee980cbd800d845dacbcf5ad8cdbc7abf9"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x24, 0x7, @val=@iter={&(0x7f0000000140), 0x10}}, 0x40) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}]}}}]}, 0x44}}, 0x0) 6.191003327s ago: executing program 1 (id=730): socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b"}}}}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r4, 0x0, 0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x3, r3, 0x5}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 6.078014458s ago: executing program 2 (id=731): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0xde, {0x2, 0x0, @multicast1=0xe000cc02}}) 5.883546202s ago: executing program 2 (id=732): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @window, @timestamp, @mss, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 5.8819297s ago: executing program 3 (id=733): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804000, &(0x7f00000007c0)={[], [{@hash}, {@obj_type={'obj_type', 0x3d, '\xc8\xce\xe8\xf0\xabr\x04d\xdb\xa2\x9a\x9d.\v\x87\x12J\xfcB\xfe9\xa2.N9\xf92{\x18\xe0\x13>\x0e\x83\xc2\xe0t\x19b\x92\xa0\xd5\xc1\x8a\xc9\xcb:\xceM`\r\xbb\xecW\xa3\xf9\xde\xa9\xeb\xa8\x1cl\xf6\xd2\xb5\xd7\x96\x92z\xd8\xda\xf6W\x17\xca`!\xe9\xe7\x87\x801\xfc\x98R\xa2@2\x9e\x02\xf5o l\x8e\x12\x8a\xc3TS\xa7\xa1\x01N\x02W\x03\xb2t\xc0N\xda\xf0=\xd2\x00\x9a\xd5\xf3;c\xa16b\xfe\xfa]\xa8\x816\xb7\x99-\xf2\xd6\xf8\xb3)u\x8e\xff\xb2\xebD\xa2\x88E\x842D\xb0<\rhR\x18\xf0\x96\xa5\xc8\xe7\x84/Z\xbd\xe6\xd6x}'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x38, 0x62, 0x64, 0x33, 0x35, 0x39], 0x2d, [0x34, 0x32, 0x36, 0x39], 0x2d, [0x66, 0x65, 0x66, 0x33], 0x2d, [0x37, 0x34, 0x36, 0x63], 0x2d, [0x34, 0x37, 0x34, 0x39, 0x32, 0x37, 0x6b, 0x65]}}}, {@measure}, {@fowner_gt}, {@smackfshat={'smackfshat', 0x3d, '/dev/hwrng\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-\\\xe6!\\+/}'}}, {@uid_lt}]}, 0x0, 0x4e9, &(0x7f0000000cc0)="$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") ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102383, 0x18fef}], 0x1, 0x0, 0x0) r2 = io_uring_setup(0x806224, &(0x7f0000000180)={0x0, 0x637f, 0x800, 0x40001, 0x89}) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r5, &(0x7f000001b540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000380)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'virt_wifi0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000540)={0x5, &(0x7f0000000580)=[{0x45, 0x2}, {0x4}, {0x7, 0x20, 0xf1}, {0x24}, {0x6, 0x1}]}) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10065, 0x0) close_range(r2, r6, 0x0) 2.139267901s ago: executing program 2 (id=734): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) modify_ldt$write(0x1, &(0x7f0000000200)={0x1000}, 0x10) modify_ldt$read(0x0, &(0x7f0000001880)=""/4096, 0x1000) 2.046021528s ago: executing program 1 (id=735): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x0, 0xc56, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.613656849s ago: executing program 1 (id=736): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) getsockname(r1, &(0x7f0000000280)=@xdp, &(0x7f0000000040)=0x80) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) 1.514228516s ago: executing program 2 (id=737): r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) 1.467430165s ago: executing program 4 (id=642): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, 0xffffffffffffffff, 0x5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) 1.42375763s ago: executing program 1 (id=738): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000e00)='./file0\x00', 0x200000, &(0x7f0000000f40)={[{@grpjquota}, {@noauto_da_alloc}, {}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x85c5}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xfe, 0x576, &(0x7f00000024c0)="$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") r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0x8, 0x7f, 0x0, 0x0, 0x3, "f06fc539471398450104663ea5b3e92dad434f"}) r5 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="b40000001800801c2020fffd04c802002000000c00090001001020121d429dedec0dfaa754fbebbd3895efc69c74b8a7c14240ff7a56edef6e5bf1d490d1fd16246cdbb10ffe86146bc4bf00c4811cd81a11c0430dceea8022d3c0624bd41d39a659d5115e54212c3e3fd97a23faf4e9bb7967d2bb6647064986bff200"/147, @ANYRES32=0x0, @ANYBLOB="840013000000000000000000000f0f00000002000000000000000000000000000000010000000f00000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000010000000000000001000000000000000300000000000000000005001a0001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000015}, 0x4004) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0x1, 0x0, 0x0, 0x0) write$UHID_INPUT(r4, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 1.42171395s ago: executing program 3 (id=739): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x1008801, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x2, 0x1f1, &(0x7f0000000ac0)="$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") open$dir(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 163.423427ms ago: executing program 4 (id=740): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371"}}}}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5, 0x0, 0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 0s ago: executing program 3 (id=741): syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net/softnet_stat\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001400), 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgrp(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x7933, 0x4) recvmmsg(r1, &(0x7f0000003280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003200)=""/67, 0x43}}], 0x1, 0x0, 0x0) syz_read_part_table(0x5c0, &(0x7f0000000000)="$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") socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) inotify_init1(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x0, 'rlimit'}]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): [ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 746.604296][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 746.604325][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 746.604353][ C1] do_syscall_64+0x100/0x230 [ 746.604370][ C1] ? clear_bhb_loop+0x35/0x90 [ 746.604393][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.604413][ C1] RIP: 0033:0x7ff338f75bd9 [ 746.604427][ C1] RSP: 002b:00007ffeef47cd08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 746.604445][ C1] RAX: 0000000000000000 RBX: 000000000007fdd2 RCX: 00007ff338f75bd9 [ 746.604458][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 746.604470][ C1] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000001def47d02f [ 746.604483][ C1] R10: 00007ff338e00000 R11: 0000000000000246 R12: 00007ff339103f6c [ 746.604497][ C1] R13: 0000000000000032 R14: 00007ff339105a60 R15: 00007ff339103f60 [ 746.604522][ C1] [ 746.604529][ C1] DEBUG: waiting rtnl_mutex for 4833 jiffies. [ 746.604539][ C1] task:syz-executor state:D stack:20208 pid:9256 tgid:9256 ppid:1 flags:0x00004006 [ 746.604567][ C1] Call Trace: [ 746.604574][ C1] [ 746.604585][ C1] __schedule+0x1800/0x4a60 [ 746.604621][ C1] ? __pfx___schedule+0x10/0x10 [ 746.604645][ C1] ? __pfx_lock_release+0x10/0x10 [ 746.604668][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 746.604702][ C1] ? schedule+0x90/0x320 [ 746.604722][ C1] schedule+0x14b/0x320 [ 746.604744][ C1] schedule_preempt_disabled+0x13/0x30 [ 746.604764][ C1] __mutex_lock+0x6a4/0xd70 [ 746.604790][ C1] ? __mutex_lock+0x527/0xd70 [ 746.604815][ C1] ? tun_chr_close+0x3e/0x1b0 [ 746.604833][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 746.604865][ C1] ? get_rtnl_holder+0x144/0x190 [ 746.604885][ C1] tun_chr_close+0x3e/0x1b0 [ 746.604901][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 746.604919][ C1] __fput+0x24a/0x8a0 [ 746.604951][ C1] task_work_run+0x24f/0x310 [ 746.604976][ C1] ? __pfx_task_work_run+0x10/0x10 [ 746.604995][ C1] ? do_exit+0xa2a/0x27f0 [ 746.605018][ C1] ? kmem_cache_free+0x145/0x350 [ 746.605046][ C1] do_exit+0xa2f/0x27f0 [ 746.605077][ C1] ? __pfx_do_exit+0x10/0x10 [ 746.605102][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 746.605124][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 746.605149][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 746.605171][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 746.605194][ C1] do_group_exit+0x207/0x2c0 [ 746.605218][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 746.605239][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 746.605266][ C1] get_signal+0x16a1/0x1740 [ 746.605293][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 746.605319][ C1] ? kfree+0x4e/0x360 [ 746.605343][ C1] ? __pfx_get_signal+0x10/0x10 [ 746.605361][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 746.605387][ C1] ? do_sock_setsockopt+0x3e2/0x720 [ 746.605413][ C1] arch_do_signal_or_restart+0x96/0x860 [ 746.605437][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 746.605458][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 746.605490][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 746.605518][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 746.605545][ C1] do_syscall_64+0x100/0x230 [ 746.605562][ C1] ? clear_bhb_loop+0x35/0x90 [ 746.605585][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.605605][ C1] RIP: 0033:0x7fa5795779ca [ 746.605619][ C1] RSP: 002b:00007ffce0c5f0f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 746.605637][ C1] RAX: 0000000000000000 RBX: 00007ffce0c5f180 RCX: 00007fa5795779ca [ 746.605650][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 746.605662][ C1] RBP: 0000000000000003 R08: 0000000000000558 R09: 0079746972756365 [ 746.605674][ C1] R10: 00007fa5796d0a60 R11: 0000000000000202 R12: 00007fa5796d0a00 [ 746.605687][ C1] R13: 00007ffce0c5f11c R14: 0000000000000000 R15: 00007fa5796d1e40 [ 746.605712][ C1] [ 746.605719][ C1] DEBUG: waiting rtnl_mutex for 3932 jiffies. [ 746.605729][ C1] task:kworker/1:5 state:D stack:22360 pid:5185 tgid:5185 ppid:2 flags:0x00004000 [ 746.605756][ C1] Workqueue: events switchdev_deferred_process_work [ 746.605777][ C1] Call Trace: [ 746.605784][ C1] [ 746.605795][ C1] __schedule+0x1800/0x4a60 [ 746.605831][ C1] ? __pfx___schedule+0x10/0x10 [ 746.605853][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 746.605875][ C1] ? __pfx_lock_release+0x10/0x10 [ 746.605898][ C1] ? kick_pool+0x45c/0x620 [ 746.605922][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 746.605944][ C1] ? schedule+0x90/0x320 [ 746.605963][ C1] schedule+0x14b/0x320 [ 746.605991][ C1] schedule_preempt_disabled+0x13/0x30 [ 746.606011][ C1] __mutex_lock+0x6a4/0xd70 [ 746.606037][ C1] ? __mutex_lock+0x527/0xd70 [ 746.606062][ C1] ? switchdev_deferred_process_work+0xe/0x20 [ 746.606082][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 746.606113][ C1] ? get_rtnl_holder+0x144/0x190 [ 746.606132][ C1] ? process_scheduled_works+0x945/0x1830 [ 746.606153][ C1] switchdev_deferred_process_work+0xe/0x20 [ 746.606171][ C1] process_scheduled_works+0xa2c/0x1830 [ 746.606213][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 746.606242][ C1] ? assign_work+0x364/0x3d0 [ 746.606266][ C1] worker_thread+0x86d/0xd40 [ 746.606294][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 746.606318][ C1] ? __kthread_parkme+0x169/0x1d0 [ 746.606343][ C1] ? __pfx_worker_thread+0x10/0x10 [ 746.606365][ C1] kthread+0x2f0/0x390 [ 746.606388][ C1] ? __pfx_worker_thread+0x10/0x10 [ 746.606409][ C1] ? __pfx_kthread+0x10/0x10 [ 746.606434][ C1] ret_from_fork+0x4b/0x80 [ 746.606457][ C1] ? __pfx_kthread+0x10/0x10 [ 746.606481][ C1] ret_from_fork_asm+0x1a/0x30 [ 746.606516][ C1] [ 746.606523][ C1] DEBUG: waiting rtnl_mutex for 2532 jiffies. [ 746.606532][ C1] task:syz-executor state:D stack:24992 pid:9700 tgid:9700 ppid:9680 flags:0x00000000 [ 746.606560][ C1] Call Trace: [ 746.606567][ C1] [ 746.606578][ C1] __schedule+0x1800/0x4a60 [ 746.606614][ C1] ? __pfx___schedule+0x10/0x10 [ 746.606637][ C1] ? __pfx_lock_release+0x10/0x10 [ 746.606660][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 746.606694][ C1] ? schedule+0x90/0x320 [ 746.606714][ C1] schedule+0x14b/0x320 [ 746.606736][ C1] schedule_preempt_disabled+0x13/0x30 [ 746.606756][ C1] __mutex_lock+0x6a4/0xd70 [ 746.606782][ C1] ? __mutex_lock+0x527/0xd70 [ 746.606813][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 746.606839][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 746.606870][ C1] ? get_rtnl_holder+0x144/0x190 [ 746.606891][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 746.606919][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 746.606947][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 746.606980][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 746.607011][ C1] ? __pfx_validate_chain+0x10/0x10 [ 746.607037][ C1] ? __pfx_validate_chain+0x10/0x10 [ 746.607063][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 746.607088][ C1] ? mark_lock+0x9a/0x360 [ 746.607110][ C1] ? __pfx_validate_chain+0x10/0x10 [ 746.607138][ C1] ? __lock_acquire+0x1359/0x2000 [ 746.607171][ C1] ? mark_lock+0x9a/0x360 [ 746.607197][ C1] ? __lock_acquire+0x1359/0x2000 [ 746.607234][ C1] netlink_rcv_skb+0x1e3/0x430 [ 746.607263][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 746.607290][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 746.607333][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 746.607352][ C1] netlink_unicast+0x7f0/0x990 [ 746.607383][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 746.607406][ C1] ? __virt_addr_valid+0x183/0x530 [ 746.607434][ C1] ? __check_object_size+0x49c/0x900 [ 746.607455][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 746.607481][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 746.607507][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.607527][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 746.607549][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 746.607572][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 746.607599][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.607615][ C1] __sock_sendmsg+0x221/0x270 [ 746.607644][ C1] __sys_sendto+0x3a4/0x4f0 [ 746.607668][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 746.607706][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 746.607731][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 746.607754][ C1] ? exc_page_fault+0x590/0x8c0 [ 746.607780][ C1] __x64_sys_sendto+0xde/0x100 [ 746.607802][ C1] do_syscall_64+0xf3/0x230 [ 746.607819][ C1] ? clear_bhb_loop+0x35/0x90 [ 746.607842][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.607861][ C1] RIP: 0033:0x7f9c9e37796c [ 746.607875][ C1] RSP: 002b:00007ffeb9270710 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 746.607893][ C1] RAX: ffffffffffffffda RBX: 00007f9c9f034620 RCX: 00007f9c9e37796c [ 746.607907][ C1] RDX: 0000000000000028 RSI: 00007f9c9f034670 RDI: 0000000000000003 [ 746.607919][ C1] RBP: 0000000000000000 R08: 00007ffeb9270764 R09: 000000000000000c [ 746.607931][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 746.607942][ C1] R13: 0000000000000000 R14: 00007f9c9f034670 R15: 0000000000000000 [ 746.607971][ C1] [ 746.607978][ C1] DEBUG: waiting rtnl_mutex for 2133 jiffies. [ 746.607988][ C1] task:syz-executor state:D stack:21024 pid:9636 tgid:9636 ppid:1 flags:0x00004006 [ 746.608015][ C1] Call Trace: [ 746.608022][ C1] [ 746.608033][ C1] __schedule+0x1800/0x4a60 [ 746.608069][ C1] ? __pfx___schedule+0x10/0x10 [ 746.608092][ C1] ? __pfx_lock_release+0x10/0x10 [ 746.608115][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 746.608149][ C1] ? schedule+0x90/0x320 [ 746.608169][ C1] schedule+0x14b/0x320 [ 746.608191][ C1] schedule_preempt_disabled+0x13/0x30 [ 746.608211][ C1] __mutex_lock+0x6a4/0xd70 [ 746.608237][ C1] ? __mutex_lock+0x527/0xd70 [ 746.608262][ C1] ? tun_chr_close+0x3e/0x1b0 [ 746.608280][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 746.608311][ C1] ? get_rtnl_holder+0x144/0x190 [ 746.608332][ C1] tun_chr_close+0x3e/0x1b0 [ 746.608348][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 746.608365][ C1] __fput+0x24a/0x8a0 [ 746.608397][ C1] task_work_run+0x24f/0x310 [ 746.608418][ C1] ? __pfx_task_work_run+0x10/0x10 [ 746.608437][ C1] ? do_exit+0xa2a/0x27f0 [ 746.608460][ C1] ? kmem_cache_free+0x145/0x350 [ 746.608489][ C1] do_exit+0xa2f/0x27f0 [ 746.608520][ C1] ? __pfx_do_exit+0x10/0x10 [ 746.608545][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 746.608567][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 746.608592][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 746.608613][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 746.608637][ C1] do_group_exit+0x207/0x2c0 [ 746.608661][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 746.608681][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 746.608707][ C1] get_signal+0x16a1/0x1740 [ 746.608735][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 746.608755][ C1] ? __pfx_get_signal+0x10/0x10 [ 746.608782][ C1] arch_do_signal_or_restart+0x96/0x860 [ 746.608806][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 746.608828][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 746.608860][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 746.608888][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 746.608916][ C1] do_syscall_64+0x100/0x230 [ 746.608932][ C1] ? clear_bhb_loop+0x35/0x90 [ 746.608955][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.608984][ C1] RIP: 0033:0x7f9eef57796c [ 746.608998][ C1] RSP: 002b:00007ffc6396d770 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 746.609016][ C1] RAX: 0000000000000068 RBX: 00007f9ef0234620 RCX: 00007f9eef57796c [ 746.609029][ C1] RDX: 0000000000000068 RSI: 00007f9ef0234670 RDI: 0000000000000003 [ 746.609041][ C1] RBP: 0000000000000000 R08: 00007ffc6396d7c4 R09: 000000000000000c [ 746.609053][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 746.609065][ C1] R13: 0000000000000000 R14: 00007f9ef0234670 R15: 0000000000000000 [ 746.609088][ C1] [ 746.609098][ C1] [ 746.609098][ C1] Showing all locks held in the system: [ 746.609107][ C1] 2 locks held by kworker/0:0/8: [ 746.609119][ C1] 3 locks held by kworker/u8:0/11: [ 746.609131][ C1] 3 locks held by kworker/u8:1/12: [ 746.609144][ C1] 3 locks held by kworker/u8:2/29: [ 746.609158][ C1] 3 locks held by kworker/u8:4/62: [ 746.609169][ C1] #0: ffff88802a08d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 746.609221][ C1] #1: ffffc900015d7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 746.609272][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 746.609331][ C1] 3 locks held by kworker/u8:6/949: [ 746.609355][ C1] 3 locks held by kworker/u8:7/2478: [ 746.609367][ C1] 3 locks held by kworker/u8:8/2793: [ 746.609379][ C1] 3 locks held by kworker/u8:9/2826: [ 746.609391][ C1] 1 lock held by udevd/4548: [ 746.609403][ C1] 2 locks held by getty/4858: [ 746.609413][ C1] #0: ffff88802aafb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 746.609466][ C1] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 746.609516][ C1] 4 locks held by kworker/0:4/5147: [ 746.609527][ C1] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 746.609647][ C1] #1: ffffc90003c8fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 746.609696][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 746.609748][ C1] #3: ffff88806ef88768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_check_chans_work+0x164/0xfd0 [ 746.609799][ C1] 3 locks held by kworker/0:7/5152: [ 746.609810][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 746.609859][ C1] #1: ffffc90004237d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 746.609907][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 746.609953][ C1] 3 locks held by kworker/1:5/5185: [ 746.609964][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 746.610018][ C1] #1: ffffc900042d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 746.610066][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 746.610113][ C1] 3 locks held by kworker/u8:11/7357: [ 746.610125][ C1] 4 locks held by kworker/0:1/8673: [ 746.610136][ C1] 1 lock held by syz-executor/8802: [ 746.610148][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 746.610195][ C1] 1 lock held by syz-executor/9256: [ 746.610206][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 746.610251][ C1] 2 locks held by kworker/u8:12/9338: [ 746.610262][ C1] 6 locks held by syz.0.709/9565: [ 746.610273][ C1] 1 lock held by kmmpd-loop0/9557: [ 746.610284][ C1] 1 lock held by syz-executor/9636: [ 746.610294][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 746.610338][ C1] 3 locks held by syz.1.738/9654: [ 746.610349][ C1] #0: ffff8880665840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 746.610401][ C1] #1: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 746.610445][ C1] #2: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 746.610496][ C1] 1 lock held by syz.3.741/9667: [ 746.610507][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 746.610551][ C1] 1 lock held by syz-executor/9679: [ 746.610562][ C1] 4 locks held by kworker/u8:13/9681: [ 746.610573][ C1] 1 lock held by syz-executor/9693: [ 746.610584][ C1] 1 lock held by syz-executor/9700: [ 746.610595][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 746.610650][ C1] 1 lock held by syz-executor/9704: [ 746.610661][ C1] [ 746.610666][ C1] ============================================= [ 746.610666][ C1] [ 747.640703][ C1] DEBUG: waiting rtnl_mutex for 10637 jiffies. [ 747.640731][ C1] task:kworker/u8:4 state:D stack:21008 pid:62 tgid:62 ppid:2 flags:0x00004000 [ 747.640783][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 747.640827][ C1] Call Trace: [ 747.640839][ C1] [ 747.640857][ C1] __schedule+0x1800/0x4a60 [ 747.640912][ C1] ? __pfx___schedule+0x10/0x10 [ 747.640954][ C1] ? __pfx_lock_release+0x10/0x10 [ 747.640989][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 747.641030][ C1] ? kthread_data+0x52/0xd0 [ 747.641061][ C1] ? schedule+0x90/0x320 [ 747.641090][ C1] ? wq_worker_sleeping+0x66/0x240 [ 747.641126][ C1] ? schedule+0x90/0x320 [ 747.641154][ C1] schedule+0x14b/0x320 [ 747.641197][ C1] schedule_preempt_disabled+0x13/0x30 [ 747.641228][ C1] __mutex_lock+0x6a4/0xd70 [ 747.641266][ C1] ? __mutex_lock+0x527/0xd70 [ 747.641302][ C1] ? addrconf_verify_work+0x19/0x30 [ 747.641340][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 747.641371][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 747.641408][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 747.641449][ C1] ? get_rtnl_holder+0x144/0x190 [ 747.641479][ C1] ? process_scheduled_works+0x945/0x1830 [ 747.641509][ C1] addrconf_verify_work+0x19/0x30 [ 747.641545][ C1] process_scheduled_works+0xa2c/0x1830 [ 747.641608][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 747.641650][ C1] ? assign_work+0x364/0x3d0 [ 747.641687][ C1] worker_thread+0x86d/0xd40 [ 747.641728][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 747.641764][ C1] ? __kthread_parkme+0x169/0x1d0 [ 747.641802][ C1] ? __pfx_worker_thread+0x10/0x10 [ 747.641833][ C1] kthread+0x2f0/0x390 [ 747.641869][ C1] ? __pfx_worker_thread+0x10/0x10 [ 747.641899][ C1] ? __pfx_kthread+0x10/0x10 [ 747.641942][ C1] ret_from_fork+0x4b/0x80 [ 747.641975][ C1] ? __pfx_kthread+0x10/0x10 [ 747.642011][ C1] ret_from_fork_asm+0x1a/0x30 [ 747.642064][ C1] [ 747.642076][ C1] DEBUG: holding rtnl_mutex for 14735 jiffies. [ 747.642091][ C1] task:kworker/0:4 state:D stack:20824 pid:5147 tgid:5147 ppid:2 flags:0x00004000 [ 747.642134][ C1] Workqueue: events_power_efficient reg_check_chans_work [ 747.642171][ C1] Call Trace: [ 747.642182][ C1] [ 747.642198][ C1] __schedule+0x1800/0x4a60 [ 747.642254][ C1] ? __pfx___schedule+0x10/0x10 [ 747.642285][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 747.642318][ C1] ? __pfx_lock_release+0x10/0x10 [ 747.642352][ C1] ? kick_pool+0x1c9/0x620 [ 747.642390][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 747.642419][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 747.642455][ C1] ? schedule+0x90/0x320 [ 747.642484][ C1] schedule+0x14b/0x320 [ 747.642513][ C1] schedule_preempt_disabled+0x13/0x30 [ 747.642542][ C1] __mutex_lock+0x6a4/0xd70 [ 747.642580][ C1] ? __mutex_lock+0x527/0xd70 [ 747.642616][ C1] ? reg_check_chans_work+0x164/0xfd0 [ 747.642651][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 747.642704][ C1] reg_check_chans_work+0x164/0xfd0 [ 747.642757][ C1] ? __pfx_reg_check_chans_work+0x10/0x10 [ 747.642792][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 747.642835][ C1] ? process_scheduled_works+0x945/0x1830 [ 747.642864][ C1] process_scheduled_works+0xa2c/0x1830 [ 747.642933][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 747.642975][ C1] ? assign_work+0x364/0x3d0 [ 747.643011][ C1] worker_thread+0x86d/0xd40 [ 747.643059][ C1] ? __kthread_parkme+0x169/0x1d0 [ 747.643096][ C1] ? __pfx_worker_thread+0x10/0x10 [ 747.643126][ C1] kthread+0x2f0/0x390 [ 747.643161][ C1] ? __pfx_worker_thread+0x10/0x10 [ 747.643192][ C1] ? __pfx_kthread+0x10/0x10 [ 747.643229][ C1] ret_from_fork+0x4b/0x80 [ 747.643262][ C1] ? __pfx_kthread+0x10/0x10 [ 747.643297][ C1] ret_from_fork_asm+0x1a/0x30 [ 747.643350][ C1] [ 747.643362][ C1] DEBUG: waiting rtnl_mutex for 14636 jiffies. [ 747.643377][ C1] task:kworker/0:7 state:D stack:22256 pid:5152 tgid:5152 ppid:2 flags:0x00004000 [ 747.643421][ C1] Workqueue: events linkwatch_event [ 747.643449][ C1] Call Trace: [ 747.643459][ C1] [ 747.643476][ C1] __schedule+0x1800/0x4a60 [ 747.643531][ C1] ? __pfx___schedule+0x10/0x10 [ 747.643563][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 747.643596][ C1] ? __pfx_lock_release+0x10/0x10 [ 747.643630][ C1] ? kick_pool+0x45c/0x620 [ 747.643668][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 747.643696][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 747.643731][ C1] ? schedule+0x90/0x320 [ 747.643760][ C1] schedule+0x14b/0x320 [ 747.643793][ C1] schedule_preempt_disabled+0x13/0x30 [ 747.643824][ C1] __mutex_lock+0x6a4/0xd70 [ 747.643861][ C1] ? __mutex_lock+0x527/0xd70 [ 747.643897][ C1] ? linkwatch_event+0xe/0x60 [ 747.643933][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 747.643977][ C1] ? get_rtnl_holder+0x144/0x190 [ 747.644007][ C1] ? process_scheduled_works+0x945/0x1830 [ 747.644037][ C1] linkwatch_event+0xe/0x60 [ 747.644061][ C1] process_scheduled_works+0xa2c/0x1830 [ 747.644122][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 747.644162][ C1] ? assign_work+0x364/0x3d0 [ 747.644199][ C1] worker_thread+0x86d/0xd40 [ 747.644237][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 747.644270][ C1] ? __kthread_parkme+0x169/0x1d0 [ 747.644306][ C1] ? __pfx_worker_thread+0x10/0x10 [ 747.644336][ C1] kthread+0x2f0/0x390 [ 747.644360][ C1] ? __pfx_worker_thread+0x10/0x10 [ 747.644381][ C1] ? __pfx_kthread+0x10/0x10 [ 747.644406][ C1] ret_from_fork+0x4b/0x80 [ 747.644429][ C1] ? __pfx_kthread+0x10/0x10 [ 747.644454][ C1] ret_from_fork_asm+0x1a/0x30 [ 747.644489][ C1] [ 747.644497][ C1] DEBUG: waiting rtnl_mutex for 9936 jiffies. [ 747.644506][ C1] task:syz-executor state:D stack:19728 pid:8802 tgid:8802 ppid:1 flags:0x00004006 [ 747.644536][ C1] Call Trace: [ 747.644543][ C1] [ 747.644554][ C1] __schedule+0x1800/0x4a60 [ 747.644591][ C1] ? __pfx___schedule+0x10/0x10 [ 747.644614][ C1] ? __pfx_lock_release+0x10/0x10 [ 747.644638][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 747.644672][ C1] ? schedule+0x90/0x320 [ 747.644692][ C1] schedule+0x14b/0x320 [ 747.644714][ C1] schedule_preempt_disabled+0x13/0x30 [ 747.644735][ C1] __mutex_lock+0x6a4/0xd70 [ 747.644761][ C1] ? __mutex_lock+0x527/0xd70 [ 747.644786][ C1] ? tun_chr_close+0x3e/0x1b0 [ 747.644804][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 747.644836][ C1] ? get_rtnl_holder+0x144/0x190 [ 747.644857][ C1] tun_chr_close+0x3e/0x1b0 [ 747.644873][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 747.644890][ C1] __fput+0x24a/0x8a0 [ 747.644929][ C1] task_work_run+0x24f/0x310 [ 747.644951][ C1] ? __pfx_task_work_run+0x10/0x10 [ 747.644970][ C1] ? do_exit+0xa2a/0x27f0 [ 747.644994][ C1] ? kmem_cache_free+0x145/0x350 [ 747.645023][ C1] do_exit+0xa2f/0x27f0 [ 747.645055][ C1] ? __pfx_do_exit+0x10/0x10 [ 747.645080][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 747.645103][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 747.645128][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 747.645149][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 747.645175][ C1] do_group_exit+0x207/0x2c0 [ 747.645200][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 747.645219][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 747.645248][ C1] get_signal+0x16a1/0x1740 [ 747.645280][ C1] ? __pfx_get_signal+0x10/0x10 [ 747.645300][ C1] ? iterate_dir+0x645/0x810 [ 747.645322][ C1] arch_do_signal_or_restart+0x96/0x860 [ 747.645348][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 747.645369][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 747.645401][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 747.645429][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 747.645457][ C1] do_syscall_64+0x100/0x230 [ 747.645475][ C1] ? clear_bhb_loop+0x35/0x90 [ 747.645498][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.645520][ C1] RIP: 0033:0x7fe5d65a7c73 [ 747.645535][ C1] RSP: 002b:00007ffc53e96c28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 747.645555][ C1] RAX: fffffffffffffe00 RBX: 000055557b9e0640 RCX: 00007fe5d65a7c73 [ 747.645568][ C1] RDX: 0000000000008000 RSI: 000055557b9e0640 RDI: 0000000000000006 [ 747.645581][ C1] RBP: 000055557b9e0614 R08: 0000000000000000 R09: 0000000000000000 [ 747.645593][ C1] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 747.645606][ C1] R13: 0000000000000016 R14: 000055557b9e0610 R15: 000000000007f4dd [ 747.645630][ C1] [ 747.645638][ C1] DEBUG: waiting rtnl_mutex for 6835 jiffies. [ 747.645648][ C1] task:syz.3.741 state:D stack:23984 pid:9667 tgid:9667 ppid:8856 flags:0x00004006 [ 747.645676][ C1] Call Trace: [ 747.645683][ C1] [ 747.645694][ C1] __schedule+0x1800/0x4a60 [ 747.645731][ C1] ? __pfx___schedule+0x10/0x10 [ 747.645754][ C1] ? __pfx_lock_release+0x10/0x10 [ 747.645777][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 747.645812][ C1] ? schedule+0x90/0x320 [ 747.645831][ C1] schedule+0x14b/0x320 [ 747.645854][ C1] schedule_preempt_disabled+0x13/0x30 [ 747.645874][ C1] __mutex_lock+0x6a4/0xd70 [ 747.645900][ C1] ? __mutex_lock+0x527/0xd70 [ 747.645930][ C1] ? tun_chr_close+0x3e/0x1b0 [ 747.645949][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 747.645980][ C1] ? get_rtnl_holder+0x144/0x190 [ 747.646001][ C1] tun_chr_close+0x3e/0x1b0 [ 747.646017][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 747.646034][ C1] __fput+0x24a/0x8a0 [ 747.646066][ C1] task_work_run+0x24f/0x310 [ 747.646087][ C1] ? __pfx_task_work_run+0x10/0x10 [ 747.646106][ C1] ? do_exit+0xa2a/0x27f0 [ 747.646129][ C1] ? kmem_cache_free+0x145/0x350 [ 747.646158][ C1] do_exit+0xa2f/0x27f0 [ 747.646189][ C1] ? __pfx_do_exit+0x10/0x10 [ 747.646214][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 747.646236][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 747.646261][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 747.646282][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 747.646306][ C1] do_group_exit+0x207/0x2c0 [ 747.646330][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 747.646350][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 747.646377][ C1] get_signal+0x16a1/0x1740 [ 747.646407][ C1] ? __pfx_get_signal+0x10/0x10 [ 747.646433][ C1] arch_do_signal_or_restart+0x96/0x860 [ 747.646458][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 747.646479][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 747.646512][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 747.646539][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 747.646567][ C1] do_syscall_64+0x100/0x230 [ 747.646583][ C1] ? clear_bhb_loop+0x35/0x90 [ 747.646607][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.646627][ C1] RIP: 0033:0x7ff338f75bd9 [ 747.646641][ C1] RSP: 002b:00007ffeef47cd08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 747.646659][ C1] RAX: 0000000000000000 RBX: 000000000007fdd2 RCX: 00007ff338f75bd9 [ 747.646672][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 747.646684][ C1] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000001def47d02f [ 747.646697][ C1] R10: 00007ff338e00000 R11: 0000000000000246 R12: 00007ff339103f6c [ 747.646710][ C1] R13: 0000000000000032 R14: 00007ff339105a60 R15: 00007ff339103f60 [ 747.646735][ C1] [ 747.646742][ C1] DEBUG: waiting rtnl_mutex for 4937 jiffies. [ 747.646752][ C1] task:syz-executor state:D stack:20208 pid:9256 tgid:9256 ppid:1 flags:0x00004006 [ 747.646779][ C1] Call Trace: [ 747.646786][ C1] [ 747.646797][ C1] __schedule+0x1800/0x4a60 [ 747.646833][ C1] ? __pfx___schedule+0x10/0x10 [ 747.646857][ C1] ? __pfx_lock_release+0x10/0x10 [ 747.646880][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 747.646918][ C1] ? schedule+0x90/0x320 [ 747.646938][ C1] schedule+0x14b/0x320 [ 747.646960][ C1] schedule_preempt_disabled+0x13/0x30 [ 747.646981][ C1] __mutex_lock+0x6a4/0xd70 [ 747.647007][ C1] ? __mutex_lock+0x527/0xd70 [ 747.647032][ C1] ? tun_chr_close+0x3e/0x1b0 [ 747.647050][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 747.647081][ C1] ? get_rtnl_holder+0x144/0x190 [ 747.647102][ C1] tun_chr_close+0x3e/0x1b0 [ 747.647118][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 747.647135][ C1] __fput+0x24a/0x8a0 [ 747.647167][ C1] task_work_run+0x24f/0x310 [ 747.647188][ C1] ? __pfx_task_work_run+0x10/0x10 [ 747.647207][ C1] ? do_exit+0xa2a/0x27f0 [ 747.647230][ C1] ? kmem_cache_free+0x145/0x350 [ 747.647258][ C1] do_exit+0xa2f/0x27f0 [ 747.647290][ C1] ? __pfx_do_exit+0x10/0x10 [ 747.647314][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 747.647337][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 747.647362][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 747.647383][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 747.647407][ C1] do_group_exit+0x207/0x2c0 [ 747.647431][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 747.647451][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 747.647477][ C1] get_signal+0x16a1/0x1740 [ 747.647504][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 747.647531][ C1] ? kfree+0x4e/0x360 [ 747.647554][ C1] ? __pfx_get_signal+0x10/0x10 [ 747.647572][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 747.647599][ C1] ? do_sock_setsockopt+0x3e2/0x720 [ 747.647624][ C1] arch_do_signal_or_restart+0x96/0x860 [ 747.647649][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 747.647670][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 747.647702][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 747.647730][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 747.647757][ C1] do_syscall_64+0x100/0x230 [ 747.647774][ C1] ? clear_bhb_loop+0x35/0x90 [ 747.647797][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.647817][ C1] RIP: 0033:0x7fa5795779ca [ 747.647830][ C1] RSP: 002b:00007ffce0c5f0f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 747.647849][ C1] RAX: 0000000000000000 RBX: 00007ffce0c5f180 RCX: 00007fa5795779ca [ 747.647862][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 747.647874][ C1] RBP: 0000000000000003 R08: 0000000000000558 R09: 0079746972756365 [ 747.647886][ C1] R10: 00007fa5796d0a60 R11: 0000000000000202 R12: 00007fa5796d0a00 [ 747.647899][ C1] R13: 00007ffce0c5f11c R14: 0000000000000000 R15: 00007fa5796d1e40 [ 747.647928][ C1] [ 747.647936][ C1] DEBUG: waiting rtnl_mutex for 4036 jiffies. [ 747.647946][ C1] task:kworker/1:5 state:D stack:22360 pid:5185 tgid:5185 ppid:2 flags:0x00004000 [ 747.647974][ C1] Workqueue: events switchdev_deferred_process_work [ 747.647995][ C1] Call Trace: [ 747.648002][ C1] [ 747.648013][ C1] __schedule+0x1800/0x4a60 [ 747.648050][ C1] ? __pfx___schedule+0x10/0x10 [ 747.648071][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 747.648094][ C1] ? __pfx_lock_release+0x10/0x10 [ 747.648117][ C1] ? kick_pool+0x45c/0x620 [ 747.648141][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 747.648163][ C1] ? schedule+0x90/0x320 [ 747.648182][ C1] schedule+0x14b/0x320 [ 747.648204][ C1] schedule_preempt_disabled+0x13/0x30 [ 747.648225][ C1] __mutex_lock+0x6a4/0xd70 [ 747.648251][ C1] ? __mutex_lock+0x527/0xd70 [ 747.648275][ C1] ? switchdev_deferred_process_work+0xe/0x20 [ 747.648296][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 747.648326][ C1] ? get_rtnl_holder+0x144/0x190 [ 747.648346][ C1] ? process_scheduled_works+0x945/0x1830 [ 747.648367][ C1] switchdev_deferred_process_work+0xe/0x20 [ 747.648386][ C1] process_scheduled_works+0xa2c/0x1830 [ 747.648428][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 747.648456][ C1] ? assign_work+0x364/0x3d0 [ 747.648481][ C1] worker_thread+0x86d/0xd40 [ 747.648509][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 747.648533][ C1] ? __kthread_parkme+0x169/0x1d0 [ 747.648558][ C1] ? __pfx_worker_thread+0x10/0x10 [ 747.648580][ C1] kthread+0x2f0/0x390 [ 747.648604][ C1] ? __pfx_worker_thread+0x10/0x10 [ 747.648625][ C1] ? __pfx_kthread+0x10/0x10 [ 747.648650][ C1] ret_from_fork+0x4b/0x80 [ 747.648673][ C1] ? __pfx_kthread+0x10/0x10 [ 747.648697][ C1] ret_from_fork_asm+0x1a/0x30 [ 747.648732][ C1] [ 747.648739][ C1] DEBUG: waiting rtnl_mutex for 2636 jiffies. [ 747.648749][ C1] task:syz-executor state:D stack:24992 pid:9700 tgid:9700 ppid:9680 flags:0x00000000 [ 747.648775][ C1] Call Trace: [ 747.648783][ C1] [ 747.648793][ C1] __schedule+0x1800/0x4a60 [ 747.648830][ C1] ? __pfx___schedule+0x10/0x10 [ 747.648853][ C1] ? __pfx_lock_release+0x10/0x10 [ 747.648876][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 747.648910][ C1] ? schedule+0x90/0x320 [ 747.648934][ C1] schedule+0x14b/0x320 [ 747.648956][ C1] schedule_preempt_disabled+0x13/0x30 [ 747.648977][ C1] __mutex_lock+0x6a4/0xd70 [ 747.649003][ C1] ? __mutex_lock+0x527/0xd70 [ 747.649027][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 747.649054][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 747.649085][ C1] ? get_rtnl_holder+0x144/0x190 [ 747.649105][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 747.649134][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 747.649162][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 747.649186][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 747.649217][ C1] ? __pfx_validate_chain+0x10/0x10 [ 747.649242][ C1] ? __pfx_validate_chain+0x10/0x10 [ 747.649269][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 747.649306][ C1] ? mark_lock+0x9a/0x360 [ 747.649328][ C1] ? __pfx_validate_chain+0x10/0x10 [ 747.649354][ C1] ? __lock_acquire+0x1359/0x2000 [ 747.649386][ C1] ? mark_lock+0x9a/0x360 [ 747.649412][ C1] ? __lock_acquire+0x1359/0x2000 [ 747.649447][ C1] netlink_rcv_skb+0x1e3/0x430 [ 747.649475][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 747.649501][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 747.649608][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 747.649635][ C1] netlink_unicast+0x7f0/0x990 [ 747.649675][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 747.649704][ C1] ? __virt_addr_valid+0x183/0x530 [ 747.649741][ C1] ? __check_object_size+0x49c/0x900 [ 747.649771][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 747.649805][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 747.649842][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.649868][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 747.649896][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 747.649937][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 747.649965][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.649981][ C1] __sock_sendmsg+0x221/0x270 [ 747.650009][ C1] __sys_sendto+0x3a4/0x4f0 [ 747.650051][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 747.650090][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 747.650115][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 747.650138][ C1] ? exc_page_fault+0x590/0x8c0 [ 747.650164][ C1] __x64_sys_sendto+0xde/0x100 [ 747.650186][ C1] do_syscall_64+0xf3/0x230 [ 747.650203][ C1] ? clear_bhb_loop+0x35/0x90 [ 747.650226][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.650246][ C1] RIP: 0033:0x7f9c9e37796c [ 747.650260][ C1] RSP: 002b:00007ffeb9270710 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 747.650280][ C1] RAX: ffffffffffffffda RBX: 00007f9c9f034620 RCX: 00007f9c9e37796c [ 747.650293][ C1] RDX: 0000000000000028 RSI: 00007f9c9f034670 RDI: 0000000000000003 [ 747.650306][ C1] RBP: 0000000000000000 R08: 00007ffeb9270764 R09: 000000000000000c [ 747.650318][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 747.650330][ C1] R13: 0000000000000000 R14: 00007f9c9f034670 R15: 0000000000000000 [ 747.650353][ C1] [ 747.650361][ C1] DEBUG: waiting rtnl_mutex for 2238 jiffies. [ 747.650371][ C1] task:syz-executor state:D stack:21024 pid:9636 tgid:9636 ppid:1 flags:0x00004006 [ 747.650399][ C1] Call Trace: [ 747.650407][ C1] [ 747.650417][ C1] __schedule+0x1800/0x4a60 [ 747.650454][ C1] ? __pfx___schedule+0x10/0x10 [ 747.650478][ C1] ? __pfx_lock_release+0x10/0x10 [ 747.650501][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 747.650535][ C1] ? schedule+0x90/0x320 [ 747.650555][ C1] schedule+0x14b/0x320 [ 747.650577][ C1] schedule_preempt_disabled+0x13/0x30 [ 747.650597][ C1] __mutex_lock+0x6a4/0xd70 [ 747.650624][ C1] ? __mutex_lock+0x527/0xd70 [ 747.650648][ C1] ? tun_chr_close+0x3e/0x1b0 [ 747.650666][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 747.650698][ C1] ? get_rtnl_holder+0x144/0x190 [ 747.650719][ C1] tun_chr_close+0x3e/0x1b0 [ 747.650735][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 747.650752][ C1] __fput+0x24a/0x8a0 [ 747.650784][ C1] task_work_run+0x24f/0x310 [ 747.650805][ C1] ? __pfx_task_work_run+0x10/0x10 [ 747.650824][ C1] ? do_exit+0xa2a/0x27f0 [ 747.650847][ C1] ? kmem_cache_free+0x145/0x350 [ 747.650875][ C1] do_exit+0xa2f/0x27f0 [ 747.650906][ C1] ? __pfx_do_exit+0x10/0x10 [ 747.650941][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 747.650964][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 747.650989][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 747.651010][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 747.651034][ C1] do_group_exit+0x207/0x2c0 [ 747.651058][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 747.651078][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 747.651104][ C1] get_signal+0x16a1/0x1740 [ 747.651132][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 747.651152][ C1] ? __pfx_get_signal+0x10/0x10 [ 747.651179][ C1] arch_do_signal_or_restart+0x96/0x860 [ 747.651204][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 747.651225][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 747.651258][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 747.651285][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 747.651313][ C1] do_syscall_64+0x100/0x230 [ 747.651330][ C1] ? clear_bhb_loop+0x35/0x90 [ 747.651353][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.651373][ C1] RIP: 0033:0x7f9eef57796c [ 747.651386][ C1] RSP: 002b:00007ffc6396d770 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 747.651406][ C1] RAX: 0000000000000068 RBX: 00007f9ef0234620 RCX: 00007f9eef57796c [ 747.651419][ C1] RDX: 0000000000000068 RSI: 00007f9ef0234670 RDI: 0000000000000003 [ 747.651431][ C1] RBP: 0000000000000000 R08: 00007ffc6396d7c4 R09: 000000000000000c [ 747.651443][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 747.651455][ C1] R13: 0000000000000000 R14: 00007f9ef0234670 R15: 0000000000000000 [ 747.651479][ C1] [ 747.651488][ C1] [ 747.651488][ C1] Showing all locks held in the system: [ 747.651497][ C1] 1 lock held by pool_workqueue_/3: [ 747.651508][ C1] #0: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 747.651568][ C1] 5 locks held by kworker/0:0/8: [ 747.651578][ C1] 3 locks held by kworker/u8:0/11: [ 747.651590][ C1] 3 locks held by kworker/u8:1/12: [ 747.651603][ C1] 3 locks held by kworker/u8:2/29: [ 747.651618][ C1] 3 locks held by kworker/u8:4/62: [ 747.651628][ C1] #0: ffff88802a08d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 747.651678][ C1] #1: ffffc900015d7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 747.651729][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 747.651788][ C1] 3 locks held by kworker/u8:6/949: [ 747.651812][ C1] 3 locks held by kworker/u8:7/2478: [ 747.651825][ C1] 3 locks held by kworker/u8:8/2793: [ 747.651836][ C1] 3 locks held by kworker/u8:9/2826: [ 747.651849][ C1] 2 locks held by getty/4858: [ 747.651860][ C1] #0: ffff88802aafb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 747.651912][ C1] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 747.651966][ C1] 4 locks held by kworker/0:4/5147: [ 747.651976][ C1] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 747.652026][ C1] #1: ffffc90003c8fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 747.652075][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 747.652127][ C1] #3: ffff88806ef88768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_check_chans_work+0x164/0xfd0 [ 747.652179][ C1] 3 locks held by kworker/0:7/5152: [ 747.652190][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 747.652239][ C1] #1: ffffc90004237d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 747.652288][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 747.652334][ C1] 3 locks held by kworker/1:5/5185: [ 747.652344][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 747.652393][ C1] #1: ffffc900042d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 747.652442][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 747.652490][ C1] 4 locks held by kworker/0:1/8673: [ 747.652501][ C1] 1 lock held by syz-executor/8802: [ 747.652512][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 747.652559][ C1] 1 lock held by syz-executor/9256: [ 747.652570][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 747.652615][ C1] 2 locks held by kworker/u8:12/9338: [ 747.652626][ C1] 6 locks held by syz.0.709/9565: [ 747.652638][ C1] 1 lock held by syz-executor/9636: [ 747.652648][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 747.652693][ C1] 4 locks held by syz.1.738/9654: [ 747.652704][ C1] #0: ffff8880665840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 747.652756][ C1] #1: ffff888066584130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: tty_write_lock+0x5c/0x90 [ 747.652807][ C1] #2: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 747.652851][ C1] #3: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 747.652903][ C1] 1 lock held by syz.3.741/9667: [ 747.652920][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 747.652965][ C1] 1 lock held by syz-executor/9679: [ 747.652976][ C1] 4 locks held by kworker/u8:13/9681: [ 747.652988][ C1] 1 lock held by syz-executor/9693: [ 747.652999][ C1] 1 lock held by syz-executor/9700: [ 747.653009][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 747.653063][ C1] 1 lock held by syz-executor/9704: [ 747.653074][ C1] [ 747.653080][ C1] ============================================= [ 747.653080][ C1] [ 748.280505][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.280577][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.679611][ C1] DEBUG: waiting rtnl_mutex for 10741 jiffies. [ 748.679637][ C1] task:kworker/u8:4 state:D stack:21008 pid:62 tgid:62 ppid:2 flags:0x00004000 [ 748.679672][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 748.679704][ C1] Call Trace: [ 748.679712][ C1] [ 748.679724][ C1] __schedule+0x1800/0x4a60 [ 748.679764][ C1] ? __pfx___schedule+0x10/0x10 [ 748.679793][ C1] ? __pfx_lock_release+0x10/0x10 [ 748.679817][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 748.679845][ C1] ? kthread_data+0x52/0xd0 [ 748.679867][ C1] ? schedule+0x90/0x320 [ 748.679887][ C1] ? wq_worker_sleeping+0x66/0x240 [ 748.679911][ C1] ? schedule+0x90/0x320 [ 748.679930][ C1] schedule+0x14b/0x320 [ 748.679953][ C1] schedule_preempt_disabled+0x13/0x30 [ 748.679974][ C1] __mutex_lock+0x6a4/0xd70 [ 748.680000][ C1] ? __mutex_lock+0x527/0xd70 [ 748.680025][ C1] ? addrconf_verify_work+0x19/0x30 [ 748.680057][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 748.680079][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 748.680104][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 748.680131][ C1] ? get_rtnl_holder+0x144/0x190 [ 748.680151][ C1] ? process_scheduled_works+0x945/0x1830 [ 748.680173][ C1] addrconf_verify_work+0x19/0x30 [ 748.680198][ C1] process_scheduled_works+0xa2c/0x1830 [ 748.680240][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 748.680269][ C1] ? assign_work+0x364/0x3d0 [ 748.680294][ C1] worker_thread+0x86d/0xd40 [ 748.680322][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 748.680346][ C1] ? __kthread_parkme+0x169/0x1d0 [ 748.680371][ C1] ? __pfx_worker_thread+0x10/0x10 [ 748.680393][ C1] kthread+0x2f0/0x390 [ 748.680417][ C1] ? __pfx_worker_thread+0x10/0x10 [ 748.680439][ C1] ? __pfx_kthread+0x10/0x10 [ 748.680463][ C1] ret_from_fork+0x4b/0x80 [ 748.680487][ C1] ? __pfx_kthread+0x10/0x10 [ 748.680511][ C1] ret_from_fork_asm+0x1a/0x30 [ 748.680548][ C1] [ 748.680555][ C1] DEBUG: holding rtnl_mutex for 14839 jiffies. [ 748.680565][ C1] task:kworker/0:4 state:D stack:20824 pid:5147 tgid:5147 ppid:2 flags:0x00004000 [ 748.680595][ C1] Workqueue: events_power_efficient reg_check_chans_work [ 748.680621][ C1] Call Trace: [ 748.680628][ C1] [ 748.680639][ C1] __schedule+0x1800/0x4a60 [ 748.680675][ C1] ? __pfx___schedule+0x10/0x10 [ 748.680697][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 748.680720][ C1] ? __pfx_lock_release+0x10/0x10 [ 748.680743][ C1] ? kick_pool+0x1c9/0x620 [ 748.680769][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 748.680796][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 748.680821][ C1] ? schedule+0x90/0x320 [ 748.680840][ C1] schedule+0x14b/0x320 [ 748.680863][ C1] schedule_preempt_disabled+0x13/0x30 [ 748.680883][ C1] __mutex_lock+0x6a4/0xd70 [ 748.680909][ C1] ? __mutex_lock+0x527/0xd70 [ 748.680933][ C1] ? reg_check_chans_work+0x164/0xfd0 [ 748.680958][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 748.680993][ C1] reg_check_chans_work+0x164/0xfd0 [ 748.681028][ C1] ? __pfx_reg_check_chans_work+0x10/0x10 [ 748.681053][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 748.681085][ C1] ? process_scheduled_works+0x945/0x1830 [ 748.681105][ C1] process_scheduled_works+0xa2c/0x1830 [ 748.681147][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 748.681176][ C1] ? assign_work+0x364/0x3d0 [ 748.681201][ C1] worker_thread+0x86d/0xd40 [ 748.681233][ C1] ? __kthread_parkme+0x169/0x1d0 [ 748.681258][ C1] ? __pfx_worker_thread+0x10/0x10 [ 748.681280][ C1] kthread+0x2f0/0x390 [ 748.681304][ C1] ? __pfx_worker_thread+0x10/0x10 [ 748.681325][ C1] ? __pfx_kthread+0x10/0x10 [ 748.681350][ C1] ret_from_fork+0x4b/0x80 [ 748.681373][ C1] ? __pfx_kthread+0x10/0x10 [ 748.681397][ C1] ret_from_fork_asm+0x1a/0x30 [ 748.681432][ C1] [ 748.681440][ C1] DEBUG: waiting rtnl_mutex for 14740 jiffies. [ 748.681450][ C1] task:kworker/0:7 state:D stack:22256 pid:5152 tgid:5152 ppid:2 flags:0x00004000 [ 748.681479][ C1] Workqueue: events linkwatch_event [ 748.681498][ C1] Call Trace: [ 748.681505][ C1] [ 748.681516][ C1] __schedule+0x1800/0x4a60 [ 748.681552][ C1] ? __pfx___schedule+0x10/0x10 [ 748.681574][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 748.681597][ C1] ? __pfx_lock_release+0x10/0x10 [ 748.681620][ C1] ? kick_pool+0x45c/0x620 [ 748.681645][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 748.681665][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 748.681689][ C1] ? schedule+0x90/0x320 [ 748.681709][ C1] schedule+0x14b/0x320 [ 748.681731][ C1] schedule_preempt_disabled+0x13/0x30 [ 748.681752][ C1] __mutex_lock+0x6a4/0xd70 [ 748.681782][ C1] ? __mutex_lock+0x527/0xd70 [ 748.681807][ C1] ? linkwatch_event+0xe/0x60 [ 748.681826][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 748.681857][ C1] ? get_rtnl_holder+0x144/0x190 [ 748.681876][ C1] ? process_scheduled_works+0x945/0x1830 [ 748.681897][ C1] linkwatch_event+0xe/0x60 [ 748.681914][ C1] process_scheduled_works+0xa2c/0x1830 [ 748.681956][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 748.681984][ C1] ? assign_work+0x364/0x3d0 [ 748.682009][ C1] worker_thread+0x86d/0xd40 [ 748.682037][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 748.682061][ C1] ? __kthread_parkme+0x169/0x1d0 [ 748.682086][ C1] ? __pfx_worker_thread+0x10/0x10 [ 748.682108][ C1] kthread+0x2f0/0x390 [ 748.682131][ C1] ? __pfx_worker_thread+0x10/0x10 [ 748.682152][ C1] ? __pfx_kthread+0x10/0x10 [ 748.682177][ C1] ret_from_fork+0x4b/0x80 [ 748.682200][ C1] ? __pfx_kthread+0x10/0x10 [ 748.682224][ C1] ret_from_fork_asm+0x1a/0x30 [ 748.682259][ C1] [ 748.682266][ C1] DEBUG: waiting rtnl_mutex for 10040 jiffies. [ 748.682276][ C1] task:syz-executor state:D stack:19728 pid:8802 tgid:8802 ppid:1 flags:0x00004006 [ 748.682302][ C1] Call Trace: [ 748.682309][ C1] [ 748.682320][ C1] __schedule+0x1800/0x4a60 [ 748.682356][ C1] ? __pfx___schedule+0x10/0x10 [ 748.682379][ C1] ? __pfx_lock_release+0x10/0x10 [ 748.682402][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 748.682436][ C1] ? schedule+0x90/0x320 [ 748.682456][ C1] schedule+0x14b/0x320 [ 748.682478][ C1] schedule_preempt_disabled+0x13/0x30 [ 748.682499][ C1] __mutex_lock+0x6a4/0xd70 [ 748.682525][ C1] ? __mutex_lock+0x527/0xd70 [ 748.682549][ C1] ? tun_chr_close+0x3e/0x1b0 [ 748.682568][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 748.682600][ C1] ? get_rtnl_holder+0x144/0x190 [ 748.682620][ C1] tun_chr_close+0x3e/0x1b0 [ 748.682636][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 748.682654][ C1] __fput+0x24a/0x8a0 [ 748.682687][ C1] task_work_run+0x24f/0x310 [ 748.682708][ C1] ? __pfx_task_work_run+0x10/0x10 [ 748.682727][ C1] ? do_exit+0xa2a/0x27f0 [ 748.682751][ C1] ? kmem_cache_free+0x145/0x350 [ 748.682785][ C1] do_exit+0xa2f/0x27f0 [ 748.682816][ C1] ? __pfx_do_exit+0x10/0x10 [ 748.682841][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 748.682864][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 748.682889][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 748.682911][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 748.682934][ C1] do_group_exit+0x207/0x2c0 [ 748.682959][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 748.682978][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 748.683005][ C1] get_signal+0x16a1/0x1740 [ 748.683036][ C1] ? __pfx_get_signal+0x10/0x10 [ 748.683055][ C1] ? iterate_dir+0x645/0x810 [ 748.683077][ C1] arch_do_signal_or_restart+0x96/0x860 [ 748.683102][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 748.683124][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 748.683156][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 748.683184][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 748.683212][ C1] do_syscall_64+0x100/0x230 [ 748.683229][ C1] ? clear_bhb_loop+0x35/0x90 [ 748.683253][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.683274][ C1] RIP: 0033:0x7fe5d65a7c73 [ 748.683290][ C1] RSP: 002b:00007ffc53e96c28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 748.683309][ C1] RAX: fffffffffffffe00 RBX: 000055557b9e0640 RCX: 00007fe5d65a7c73 [ 748.683323][ C1] RDX: 0000000000008000 RSI: 000055557b9e0640 RDI: 0000000000000006 [ 748.683336][ C1] RBP: 000055557b9e0614 R08: 0000000000000000 R09: 0000000000000000 [ 748.683348][ C1] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 748.683361][ C1] R13: 0000000000000016 R14: 000055557b9e0610 R15: 000000000007f4dd [ 748.683385][ C1] [ 748.683392][ C1] DEBUG: waiting rtnl_mutex for 6939 jiffies. [ 748.683402][ C1] task:syz.3.741 state:D stack:23984 pid:9667 tgid:9667 ppid:8856 flags:0x00004006 [ 748.683430][ C1] Call Trace: [ 748.683437][ C1] [ 748.683448][ C1] __schedule+0x1800/0x4a60 [ 748.683484][ C1] ? __pfx___schedule+0x10/0x10 [ 748.683508][ C1] ? __pfx_lock_release+0x10/0x10 [ 748.683531][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 748.683565][ C1] ? schedule+0x90/0x320 [ 748.683585][ C1] schedule+0x14b/0x320 [ 748.683606][ C1] schedule_preempt_disabled+0x13/0x30 [ 748.683627][ C1] __mutex_lock+0x6a4/0xd70 [ 748.683653][ C1] ? __mutex_lock+0x527/0xd70 [ 748.683678][ C1] ? tun_chr_close+0x3e/0x1b0 [ 748.683696][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 748.683727][ C1] ? get_rtnl_holder+0x144/0x190 [ 748.683748][ C1] tun_chr_close+0x3e/0x1b0 [ 748.683764][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 748.683787][ C1] __fput+0x24a/0x8a0 [ 748.683818][ C1] task_work_run+0x24f/0x310 [ 748.683840][ C1] ? __pfx_task_work_run+0x10/0x10 [ 748.683859][ C1] ? do_exit+0xa2a/0x27f0 [ 748.683882][ C1] ? kmem_cache_free+0x145/0x350 [ 748.683910][ C1] do_exit+0xa2f/0x27f0 [ 748.683941][ C1] ? __pfx_do_exit+0x10/0x10 [ 748.683966][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 748.683989][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 748.684013][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 748.684035][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 748.684059][ C1] do_group_exit+0x207/0x2c0 [ 748.684083][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 748.684103][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 748.684129][ C1] get_signal+0x16a1/0x1740 [ 748.684159][ C1] ? __pfx_get_signal+0x10/0x10 [ 748.684186][ C1] arch_do_signal_or_restart+0x96/0x860 [ 748.684210][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 748.684232][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 748.684264][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 748.684291][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 748.684319][ C1] do_syscall_64+0x100/0x230 [ 748.684336][ C1] ? clear_bhb_loop+0x35/0x90 [ 748.684359][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.684380][ C1] RIP: 0033:0x7ff338f75bd9 [ 748.684393][ C1] RSP: 002b:00007ffeef47cd08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 748.684412][ C1] RAX: 0000000000000000 RBX: 000000000007fdd2 RCX: 00007ff338f75bd9 [ 748.684425][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 748.684436][ C1] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000001def47d02f [ 748.684449][ C1] R10: 00007ff338e00000 R11: 0000000000000246 R12: 00007ff339103f6c [ 748.684462][ C1] R13: 0000000000000032 R14: 00007ff339105a60 R15: 00007ff339103f60 [ 748.684487][ C1] [ 748.684494][ C1] DEBUG: waiting rtnl_mutex for 5041 jiffies. [ 748.684504][ C1] task:syz-executor state:D stack:20208 pid:9256 tgid:9256 ppid:1 flags:0x00004006 [ 748.684531][ C1] Call Trace: [ 748.684538][ C1] [ 748.684549][ C1] __schedule+0x1800/0x4a60 [ 748.684585][ C1] ? __pfx___schedule+0x10/0x10 [ 748.684608][ C1] ? __pfx_lock_release+0x10/0x10 [ 748.684632][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 748.684666][ C1] ? schedule+0x90/0x320 [ 748.684685][ C1] schedule+0x14b/0x320 [ 748.684707][ C1] schedule_preempt_disabled+0x13/0x30 [ 748.684728][ C1] __mutex_lock+0x6a4/0xd70 [ 748.684754][ C1] ? __mutex_lock+0x527/0xd70 [ 748.684783][ C1] ? tun_chr_close+0x3e/0x1b0 [ 748.684801][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 748.684832][ C1] ? get_rtnl_holder+0x144/0x190 [ 748.684853][ C1] tun_chr_close+0x3e/0x1b0 [ 748.684869][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 748.684887][ C1] __fput+0x24a/0x8a0 [ 748.684918][ C1] task_work_run+0x24f/0x310 [ 748.684940][ C1] ? __pfx_task_work_run+0x10/0x10 [ 748.684958][ C1] ? do_exit+0xa2a/0x27f0 [ 748.684981][ C1] ? kmem_cache_free+0x145/0x350 [ 748.685010][ C1] do_exit+0xa2f/0x27f0 [ 748.685041][ C1] ? __pfx_do_exit+0x10/0x10 [ 748.685066][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 748.685088][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 748.685113][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 748.685135][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 748.685158][ C1] do_group_exit+0x207/0x2c0 [ 748.685182][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 748.685202][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 748.685229][ C1] get_signal+0x16a1/0x1740 [ 748.685260][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 748.685287][ C1] ? kfree+0x4e/0x360 [ 748.685310][ C1] ? __pfx_get_signal+0x10/0x10 [ 748.685328][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 748.685354][ C1] ? do_sock_setsockopt+0x3e2/0x720 [ 748.685380][ C1] arch_do_signal_or_restart+0x96/0x860 [ 748.685405][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 748.685426][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 748.685459][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 748.685486][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 748.685514][ C1] do_syscall_64+0x100/0x230 [ 748.685530][ C1] ? clear_bhb_loop+0x35/0x90 [ 748.685554][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.685574][ C1] RIP: 0033:0x7fa5795779ca [ 748.685587][ C1] RSP: 002b:00007ffce0c5f0f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 748.685605][ C1] RAX: 0000000000000000 RBX: 00007ffce0c5f180 RCX: 00007fa5795779ca [ 748.685618][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 748.685629][ C1] RBP: 0000000000000003 R08: 0000000000000558 R09: 0079746972756365 [ 748.685641][ C1] R10: 00007fa5796d0a60 R11: 0000000000000202 R12: 00007fa5796d0a00 [ 748.685654][ C1] R13: 00007ffce0c5f11c R14: 0000000000000000 R15: 00007fa5796d1e40 [ 748.685679][ C1] [ 748.685686][ C1] DEBUG: waiting rtnl_mutex for 4140 jiffies. [ 748.685696][ C1] task:kworker/1:5 state:D stack:22360 pid:5185 tgid:5185 ppid:2 flags:0x00004000 [ 748.685722][ C1] Workqueue: events switchdev_deferred_process_work [ 748.685744][ C1] Call Trace: [ 748.685750][ C1] [ 748.685761][ C1] __schedule+0x1800/0x4a60 [ 748.685842][ C1] ? __pfx___schedule+0x10/0x10 [ 748.685864][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 748.685887][ C1] ? __pfx_lock_release+0x10/0x10 [ 748.685910][ C1] ? kick_pool+0x45c/0x620 [ 748.685933][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 748.685955][ C1] ? schedule+0x90/0x320 [ 748.685975][ C1] schedule+0x14b/0x320 [ 748.685997][ C1] schedule_preempt_disabled+0x13/0x30 [ 748.686018][ C1] __mutex_lock+0x6a4/0xd70 [ 748.686044][ C1] ? __mutex_lock+0x527/0xd70 [ 748.686068][ C1] ? switchdev_deferred_process_work+0xe/0x20 [ 748.686089][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 748.686119][ C1] ? get_rtnl_holder+0x144/0x190 [ 748.686139][ C1] ? process_scheduled_works+0x945/0x1830 [ 748.686160][ C1] switchdev_deferred_process_work+0xe/0x20 [ 748.686178][ C1] process_scheduled_works+0xa2c/0x1830 [ 748.686220][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 748.686248][ C1] ? assign_work+0x364/0x3d0 [ 748.686273][ C1] worker_thread+0x86d/0xd40 [ 748.686301][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 748.686325][ C1] ? __kthread_parkme+0x169/0x1d0 [ 748.686350][ C1] ? __pfx_worker_thread+0x10/0x10 [ 748.686372][ C1] kthread+0x2f0/0x390 [ 748.686396][ C1] ? __pfx_worker_thread+0x10/0x10 [ 748.686417][ C1] ? __pfx_kthread+0x10/0x10 [ 748.686442][ C1] ret_from_fork+0x4b/0x80 [ 748.686465][ C1] ? __pfx_kthread+0x10/0x10 [ 748.686489][ C1] ret_from_fork_asm+0x1a/0x30 [ 748.686524][ C1] [ 748.686531][ C1] DEBUG: waiting rtnl_mutex for 2740 jiffies. [ 748.686541][ C1] task:syz-executor state:D stack:24992 pid:9700 tgid:9700 ppid:9680 flags:0x00000000 [ 748.686569][ C1] Call Trace: [ 748.686576][ C1] [ 748.686587][ C1] __schedule+0x1800/0x4a60 [ 748.686624][ C1] ? __pfx___schedule+0x10/0x10 [ 748.686647][ C1] ? __pfx_lock_release+0x10/0x10 [ 748.686670][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 748.686704][ C1] ? schedule+0x90/0x320 [ 748.686723][ C1] schedule+0x14b/0x320 [ 748.686745][ C1] schedule_preempt_disabled+0x13/0x30 [ 748.686766][ C1] __mutex_lock+0x6a4/0xd70 [ 748.686797][ C1] ? __mutex_lock+0x527/0xd70 [ 748.686821][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 748.686848][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 748.686880][ C1] ? get_rtnl_holder+0x144/0x190 [ 748.686900][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 748.686929][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 748.686957][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 748.686981][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 748.687011][ C1] ? __pfx_validate_chain+0x10/0x10 [ 748.687037][ C1] ? __pfx_validate_chain+0x10/0x10 [ 748.687063][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 748.687088][ C1] ? mark_lock+0x9a/0x360 [ 748.687110][ C1] ? __pfx_validate_chain+0x10/0x10 [ 748.687138][ C1] ? __lock_acquire+0x1359/0x2000 [ 748.687171][ C1] ? mark_lock+0x9a/0x360 [ 748.687197][ C1] ? __lock_acquire+0x1359/0x2000 [ 748.687234][ C1] netlink_rcv_skb+0x1e3/0x430 [ 748.687262][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 748.687289][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 748.687332][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 748.687351][ C1] netlink_unicast+0x7f0/0x990 [ 748.687382][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 748.687405][ C1] ? __virt_addr_valid+0x183/0x530 [ 748.687433][ C1] ? __check_object_size+0x49c/0x900 [ 748.687455][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 748.687480][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 748.687507][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.687527][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 748.687549][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 748.687573][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 748.687599][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.687619][ C1] __sock_sendmsg+0x221/0x270 [ 748.687648][ C1] __sys_sendto+0x3a4/0x4f0 [ 748.687672][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 748.687710][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 748.687735][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 748.687759][ C1] ? exc_page_fault+0x590/0x8c0 [ 748.687791][ C1] __x64_sys_sendto+0xde/0x100 [ 748.687814][ C1] do_syscall_64+0xf3/0x230 [ 748.687830][ C1] ? clear_bhb_loop+0x35/0x90 [ 748.687853][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.687873][ C1] RIP: 0033:0x7f9c9e37796c [ 748.687887][ C1] RSP: 002b:00007ffeb9270710 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 748.687905][ C1] RAX: ffffffffffffffda RBX: 00007f9c9f034620 RCX: 00007f9c9e37796c [ 748.687918][ C1] RDX: 0000000000000028 RSI: 00007f9c9f034670 RDI: 0000000000000003 [ 748.687931][ C1] RBP: 0000000000000000 R08: 00007ffeb9270764 R09: 000000000000000c [ 748.687943][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 748.687957][ C1] R13: 0000000000000000 R14: 00007f9c9f034670 R15: 0000000000000000 [ 748.687984][ C1] [ 748.687991][ C1] DEBUG: waiting rtnl_mutex for 2341 jiffies. [ 748.688000][ C1] task:syz-executor state:D stack:21024 pid:9636 tgid:9636 ppid:1 flags:0x00004006 [ 748.688029][ C1] Call Trace: [ 748.688036][ C1] [ 748.688047][ C1] __schedule+0x1800/0x4a60 [ 748.688086][ C1] ? __pfx___schedule+0x10/0x10 [ 748.688110][ C1] ? __pfx_lock_release+0x10/0x10 [ 748.688133][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 748.688167][ C1] ? schedule+0x90/0x320 [ 748.688187][ C1] schedule+0x14b/0x320 [ 748.688213][ C1] schedule_preempt_disabled+0x13/0x30 [ 748.688234][ C1] __mutex_lock+0x6a4/0xd70 [ 748.688261][ C1] ? __mutex_lock+0x527/0xd70 [ 748.688285][ C1] ? tun_chr_close+0x3e/0x1b0 [ 748.688306][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 748.688337][ C1] ? get_rtnl_holder+0x144/0x190 [ 748.688358][ C1] tun_chr_close+0x3e/0x1b0 [ 748.688374][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 748.688394][ C1] __fput+0x24a/0x8a0 [ 748.688425][ C1] task_work_run+0x24f/0x310 [ 748.688447][ C1] ? __pfx_task_work_run+0x10/0x10 [ 748.688466][ C1] ? do_exit+0xa2a/0x27f0 [ 748.688488][ C1] ? kmem_cache_free+0x145/0x350 [ 748.688517][ C1] do_exit+0xa2f/0x27f0 [ 748.688548][ C1] ? __pfx_do_exit+0x10/0x10 [ 748.688573][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 748.688595][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 748.688620][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 748.688641][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 748.688664][ C1] do_group_exit+0x207/0x2c0 [ 748.688689][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 748.688708][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 748.688734][ C1] get_signal+0x16a1/0x1740 [ 748.688762][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 748.688786][ C1] ? __pfx_get_signal+0x10/0x10 [ 748.688813][ C1] arch_do_signal_or_restart+0x96/0x860 [ 748.688837][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 748.688859][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 748.688891][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 748.688918][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 748.688946][ C1] do_syscall_64+0x100/0x230 [ 748.688963][ C1] ? clear_bhb_loop+0x35/0x90 [ 748.688986][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.689006][ C1] RIP: 0033:0x7f9eef57796c [ 748.689020][ C1] RSP: 002b:00007ffc6396d770 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 748.689040][ C1] RAX: 0000000000000068 RBX: 00007f9ef0234620 RCX: 00007f9eef57796c [ 748.689053][ C1] RDX: 0000000000000068 RSI: 00007f9ef0234670 RDI: 0000000000000003 [ 748.689065][ C1] RBP: 0000000000000000 R08: 00007ffc6396d7c4 R09: 000000000000000c [ 748.689077][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 748.689089][ C1] R13: 0000000000000000 R14: 00007f9ef0234670 R15: 0000000000000000 [ 748.689113][ C1] [ 748.689122][ C1] [ 748.689122][ C1] Showing all locks held in the system: [ 748.689131][ C1] 1 lock held by pool_workqueue_/3: [ 748.689142][ C1] #0: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 748.689201][ C1] 5 locks held by kworker/0:0/8: [ 748.689212][ C1] 3 locks held by kworker/u8:0/11: [ 748.689223][ C1] 4 locks held by kworker/u8:1/12: [ 748.689237][ C1] 3 locks held by kworker/u8:2/29: [ 748.689251][ C1] 2 locks held by kworker/u8:3/52: [ 748.689263][ C1] 3 locks held by kworker/u8:4/62: [ 748.689273][ C1] #0: ffff88802a08d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 748.689323][ C1] #1: ffffc900015d7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 748.689373][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 748.689432][ C1] 3 locks held by kworker/u8:6/949: [ 748.689456][ C1] 3 locks held by kworker/u8:7/2478: [ 748.689469][ C1] 3 locks held by kworker/u8:8/2793: [ 748.689480][ C1] 3 locks held by kworker/u8:9/2826: [ 748.689494][ C1] 2 locks held by getty/4858: [ 748.689504][ C1] #0: ffff88802aafb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 748.689628][ C1] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 748.689683][ C1] 4 locks held by kworker/0:4/5147: [ 748.689694][ C1] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 748.689744][ C1] #1: ffffc90003c8fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 748.689798][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 748.689849][ C1] #3: ffff88806ef88768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_check_chans_work+0x164/0xfd0 [ 748.689900][ C1] 3 locks held by kworker/0:7/5152: [ 748.689911][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 748.689960][ C1] #1: ffffc90004237d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 748.690008][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 748.690053][ C1] 3 locks held by kworker/1:5/5185: [ 748.690064][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 748.690112][ C1] #1: ffffc900042d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 748.690160][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 748.690208][ C1] 4 locks held by kworker/0:1/8673: [ 748.690220][ C1] 1 lock held by syz-executor/8802: [ 748.690230][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 748.690277][ C1] 1 lock held by syz-executor/9256: [ 748.690287][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 748.690332][ C1] 2 locks held by kworker/u8:12/9338: [ 748.690343][ C1] 6 locks held by syz.0.709/9565: [ 748.690354][ C1] 1 lock held by syz-executor/9636: [ 748.690365][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 748.690409][ C1] 3 locks held by syz.1.738/9654: [ 748.690420][ C1] #0: ffff8880665840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 748.690471][ C1] #1: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 748.690515][ C1] #2: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 748.690566][ C1] 1 lock held by kmmpd-loop1/9658: [ 748.690577][ C1] #0: ffff88807f06e420 (sb_writers#4){.+.+}-{0:0}, at: kmmpd+0x424/0xaa0 [ 748.690630][ C1] 1 lock held by syz.3.741/9667: [ 748.690640][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 748.690685][ C1] 1 lock held by syz-executor/9679: [ 748.690696][ C1] 4 locks held by kworker/u8:13/9681: [ 748.690707][ C1] 1 lock held by syz-executor/9693: [ 748.690718][ C1] 1 lock held by syz-executor/9700: [ 748.690729][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 748.690787][ C1] 2 locks held by syz-executor/9704: [ 748.690799][ C1] [ 748.690805][ C1] ============================================= [ 748.690805][ C1] [ 749.719577][ C1] DEBUG: waiting rtnl_mutex for 10845 jiffies. [ 749.719607][ C1] task:kworker/u8:4 state:D stack:21008 pid:62 tgid:62 ppid:2 flags:0x00004000 [ 749.719653][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 749.719685][ C1] Call Trace: [ 749.719694][ C1] [ 749.719706][ C1] __schedule+0x1800/0x4a60 [ 749.719752][ C1] ? __pfx___schedule+0x10/0x10 [ 749.719777][ C1] ? __pfx_lock_release+0x10/0x10 [ 749.719802][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 749.719830][ C1] ? kthread_data+0x52/0xd0 [ 749.719852][ C1] ? schedule+0x90/0x320 [ 749.719872][ C1] ? wq_worker_sleeping+0x66/0x240 [ 749.719896][ C1] ? schedule+0x90/0x320 [ 749.719915][ C1] schedule+0x14b/0x320 [ 749.719938][ C1] schedule_preempt_disabled+0x13/0x30 [ 749.719960][ C1] __mutex_lock+0x6a4/0xd70 [ 749.719986][ C1] ? __mutex_lock+0x527/0xd70 [ 749.720011][ C1] ? addrconf_verify_work+0x19/0x30 [ 749.720036][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 749.720058][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 749.720084][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 749.720111][ C1] ? get_rtnl_holder+0x144/0x190 [ 749.720132][ C1] ? process_scheduled_works+0x945/0x1830 [ 749.720153][ C1] addrconf_verify_work+0x19/0x30 [ 749.720178][ C1] process_scheduled_works+0xa2c/0x1830 [ 749.720220][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 749.720248][ C1] ? assign_work+0x364/0x3d0 [ 749.720273][ C1] worker_thread+0x86d/0xd40 [ 749.720302][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 749.720326][ C1] ? __kthread_parkme+0x169/0x1d0 [ 749.720351][ C1] ? __pfx_worker_thread+0x10/0x10 [ 749.720373][ C1] kthread+0x2f0/0x390 [ 749.720397][ C1] ? __pfx_worker_thread+0x10/0x10 [ 749.720419][ C1] ? __pfx_kthread+0x10/0x10 [ 749.720444][ C1] ret_from_fork+0x4b/0x80 [ 749.720468][ C1] ? __pfx_kthread+0x10/0x10 [ 749.720492][ C1] ret_from_fork_asm+0x1a/0x30 [ 749.720529][ C1] [ 749.720537][ C1] DEBUG: holding rtnl_mutex for 14943 jiffies. [ 749.720547][ C1] task:kworker/0:4 state:D stack:20824 pid:5147 tgid:5147 ppid:2 flags:0x00004000 [ 749.720577][ C1] Workqueue: events_power_efficient reg_check_chans_work [ 749.720603][ C1] Call Trace: [ 749.720611][ C1] [ 749.720621][ C1] __schedule+0x1800/0x4a60 [ 749.720659][ C1] ? __pfx___schedule+0x10/0x10 [ 749.720680][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 749.720703][ C1] ? __pfx_lock_release+0x10/0x10 [ 749.720726][ C1] ? kick_pool+0x1c9/0x620 [ 749.720757][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 749.720777][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 749.720803][ C1] ? schedule+0x90/0x320 [ 749.720822][ C1] schedule+0x14b/0x320 [ 749.720844][ C1] schedule_preempt_disabled+0x13/0x30 [ 749.720865][ C1] __mutex_lock+0x6a4/0xd70 [ 749.720891][ C1] ? __mutex_lock+0x527/0xd70 [ 749.720915][ C1] ? reg_check_chans_work+0x164/0xfd0 [ 749.720940][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 749.720976][ C1] reg_check_chans_work+0x164/0xfd0 [ 749.721011][ C1] ? __pfx_reg_check_chans_work+0x10/0x10 [ 749.721036][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 749.721068][ C1] ? process_scheduled_works+0x945/0x1830 [ 749.721089][ C1] process_scheduled_works+0xa2c/0x1830 [ 749.721131][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 749.721159][ C1] ? assign_work+0x364/0x3d0 [ 749.721184][ C1] worker_thread+0x86d/0xd40 [ 749.721216][ C1] ? __kthread_parkme+0x169/0x1d0 [ 749.721241][ C1] ? __pfx_worker_thread+0x10/0x10 [ 749.721263][ C1] kthread+0x2f0/0x390 [ 749.721288][ C1] ? __pfx_worker_thread+0x10/0x10 [ 749.721309][ C1] ? __pfx_kthread+0x10/0x10 [ 749.721334][ C1] ret_from_fork+0x4b/0x80 [ 749.721357][ C1] ? __pfx_kthread+0x10/0x10 [ 749.721381][ C1] ret_from_fork_asm+0x1a/0x30 [ 749.721417][ C1] [ 749.721424][ C1] DEBUG: waiting rtnl_mutex for 14844 jiffies. [ 749.721434][ C1] task:kworker/0:7 state:D stack:22256 pid:5152 tgid:5152 ppid:2 flags:0x00004000 [ 749.721463][ C1] Workqueue: events linkwatch_event [ 749.721483][ C1] Call Trace: [ 749.721490][ C1] [ 749.721501][ C1] __schedule+0x1800/0x4a60 [ 749.721538][ C1] ? __pfx___schedule+0x10/0x10 [ 749.721560][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 749.721583][ C1] ? __pfx_lock_release+0x10/0x10 [ 749.721606][ C1] ? kick_pool+0x45c/0x620 [ 749.721632][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 749.721652][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 749.721676][ C1] ? schedule+0x90/0x320 [ 749.721696][ C1] schedule+0x14b/0x320 [ 749.721718][ C1] schedule_preempt_disabled+0x13/0x30 [ 749.721739][ C1] __mutex_lock+0x6a4/0xd70 [ 749.721769][ C1] ? __mutex_lock+0x527/0xd70 [ 749.721794][ C1] ? linkwatch_event+0xe/0x60 [ 749.721813][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 749.721843][ C1] ? get_rtnl_holder+0x144/0x190 [ 749.721863][ C1] ? process_scheduled_works+0x945/0x1830 [ 749.721884][ C1] linkwatch_event+0xe/0x60 [ 749.721901][ C1] process_scheduled_works+0xa2c/0x1830 [ 749.721943][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 749.721972][ C1] ? assign_work+0x364/0x3d0 [ 749.721997][ C1] worker_thread+0x86d/0xd40 [ 749.722025][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 749.722049][ C1] ? __kthread_parkme+0x169/0x1d0 [ 749.722074][ C1] ? __pfx_worker_thread+0x10/0x10 [ 749.722096][ C1] kthread+0x2f0/0x390 [ 749.722120][ C1] ? __pfx_worker_thread+0x10/0x10 [ 749.722141][ C1] ? __pfx_kthread+0x10/0x10 [ 749.722166][ C1] ret_from_fork+0x4b/0x80 [ 749.722188][ C1] ? __pfx_kthread+0x10/0x10 [ 749.722213][ C1] ret_from_fork_asm+0x1a/0x30 [ 749.722248][ C1] [ 749.722255][ C1] DEBUG: waiting rtnl_mutex for 10144 jiffies. [ 749.722265][ C1] task:syz-executor state:D stack:19728 pid:8802 tgid:8802 ppid:1 flags:0x00004006 [ 749.722291][ C1] Call Trace: [ 749.722298][ C1] [ 749.722309][ C1] __schedule+0x1800/0x4a60 [ 749.722346][ C1] ? __pfx___schedule+0x10/0x10 [ 749.722369][ C1] ? __pfx_lock_release+0x10/0x10 [ 749.722405][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 749.722438][ C1] ? schedule+0x90/0x320 [ 749.722457][ C1] schedule+0x14b/0x320 [ 749.722497][ C1] schedule_preempt_disabled+0x13/0x30 [ 749.722518][ C1] __mutex_lock+0x6a4/0xd70 [ 749.722543][ C1] ? __mutex_lock+0x527/0xd70 [ 749.722568][ C1] ? tun_chr_close+0x3e/0x1b0 [ 749.722587][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 749.722618][ C1] ? get_rtnl_holder+0x144/0x190 [ 749.722639][ C1] tun_chr_close+0x3e/0x1b0 [ 749.722655][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 749.722673][ C1] __fput+0x24a/0x8a0 [ 749.722706][ C1] task_work_run+0x24f/0x310 [ 749.722727][ C1] ? __pfx_task_work_run+0x10/0x10 [ 749.722751][ C1] ? do_exit+0xa2a/0x27f0 [ 749.722775][ C1] ? kmem_cache_free+0x145/0x350 [ 749.722804][ C1] do_exit+0xa2f/0x27f0 [ 749.722836][ C1] ? __pfx_do_exit+0x10/0x10 [ 749.722860][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 749.722883][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 749.722908][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 749.722930][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 749.722954][ C1] do_group_exit+0x207/0x2c0 [ 749.722978][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 749.722998][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 749.723025][ C1] get_signal+0x16a1/0x1740 [ 749.723055][ C1] ? __pfx_get_signal+0x10/0x10 [ 749.723075][ C1] ? iterate_dir+0x645/0x810 [ 749.723097][ C1] arch_do_signal_or_restart+0x96/0x860 [ 749.723123][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 749.723145][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 749.723177][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 749.723205][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 749.723234][ C1] do_syscall_64+0x100/0x230 [ 749.723250][ C1] ? clear_bhb_loop+0x35/0x90 [ 749.723274][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.723296][ C1] RIP: 0033:0x7fe5d65a7c73 [ 749.723311][ C1] RSP: 002b:00007ffc53e96c28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 749.723331][ C1] RAX: fffffffffffffe00 RBX: 000055557b9e0640 RCX: 00007fe5d65a7c73 [ 749.723345][ C1] RDX: 0000000000008000 RSI: 000055557b9e0640 RDI: 0000000000000006 [ 749.723358][ C1] RBP: 000055557b9e0614 R08: 0000000000000000 R09: 0000000000000000 [ 749.723370][ C1] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 749.723383][ C1] R13: 0000000000000016 R14: 000055557b9e0610 R15: 000000000007f4dd [ 749.723408][ C1] [ 749.723415][ C1] DEBUG: waiting rtnl_mutex for 7043 jiffies. [ 749.723425][ C1] task:syz.3.741 state:D stack:23984 pid:9667 tgid:9667 ppid:8856 flags:0x00004006 [ 749.723453][ C1] Call Trace: [ 749.723460][ C1] [ 749.723471][ C1] __schedule+0x1800/0x4a60 [ 749.723508][ C1] ? __pfx___schedule+0x10/0x10 [ 749.723531][ C1] ? __pfx_lock_release+0x10/0x10 [ 749.723555][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 749.723589][ C1] ? schedule+0x90/0x320 [ 749.723608][ C1] schedule+0x14b/0x320 [ 749.723630][ C1] schedule_preempt_disabled+0x13/0x30 [ 749.723651][ C1] __mutex_lock+0x6a4/0xd70 [ 749.723677][ C1] ? __mutex_lock+0x527/0xd70 [ 749.723702][ C1] ? tun_chr_close+0x3e/0x1b0 [ 749.723720][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 749.723755][ C1] ? get_rtnl_holder+0x144/0x190 [ 749.723776][ C1] tun_chr_close+0x3e/0x1b0 [ 749.723792][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 749.723809][ C1] __fput+0x24a/0x8a0 [ 749.723841][ C1] task_work_run+0x24f/0x310 [ 749.723863][ C1] ? __pfx_task_work_run+0x10/0x10 [ 749.723882][ C1] ? do_exit+0xa2a/0x27f0 [ 749.723905][ C1] ? kmem_cache_free+0x145/0x350 [ 749.723934][ C1] do_exit+0xa2f/0x27f0 [ 749.723965][ C1] ? __pfx_do_exit+0x10/0x10 [ 749.723990][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 749.724012][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 749.724037][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 749.724059][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 749.724083][ C1] do_group_exit+0x207/0x2c0 [ 749.724107][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 749.724127][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 749.724153][ C1] get_signal+0x16a1/0x1740 [ 749.724183][ C1] ? __pfx_get_signal+0x10/0x10 [ 749.724210][ C1] arch_do_signal_or_restart+0x96/0x860 [ 749.724235][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 749.724256][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 749.724288][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 749.724316][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 749.724344][ C1] do_syscall_64+0x100/0x230 [ 749.724360][ C1] ? clear_bhb_loop+0x35/0x90 [ 749.724384][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.724404][ C1] RIP: 0033:0x7ff338f75bd9 [ 749.724418][ C1] RSP: 002b:00007ffeef47cd08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 749.724437][ C1] RAX: 0000000000000000 RBX: 000000000007fdd2 RCX: 00007ff338f75bd9 [ 749.724450][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 749.724462][ C1] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000001def47d02f [ 749.724475][ C1] R10: 00007ff338e00000 R11: 0000000000000246 R12: 00007ff339103f6c [ 749.724487][ C1] R13: 0000000000000032 R14: 00007ff339105a60 R15: 00007ff339103f60 [ 749.724513][ C1] [ 749.724520][ C1] DEBUG: waiting rtnl_mutex for 5145 jiffies. [ 749.724530][ C1] task:syz-executor state:D stack:20208 pid:9256 tgid:9256 ppid:1 flags:0x00004006 [ 749.724556][ C1] Call Trace: [ 749.724563][ C1] [ 749.724574][ C1] __schedule+0x1800/0x4a60 [ 749.724611][ C1] ? __pfx___schedule+0x10/0x10 [ 749.724634][ C1] ? __pfx_lock_release+0x10/0x10 [ 749.724657][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 749.724692][ C1] ? schedule+0x90/0x320 [ 749.724711][ C1] schedule+0x14b/0x320 [ 749.724734][ C1] schedule_preempt_disabled+0x13/0x30 [ 749.724759][ C1] __mutex_lock+0x6a4/0xd70 [ 749.724785][ C1] ? __mutex_lock+0x527/0xd70 [ 749.724809][ C1] ? tun_chr_close+0x3e/0x1b0 [ 749.724827][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 749.724859][ C1] ? get_rtnl_holder+0x144/0x190 [ 749.724880][ C1] tun_chr_close+0x3e/0x1b0 [ 749.724896][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 749.724913][ C1] __fput+0x24a/0x8a0 [ 749.724945][ C1] task_work_run+0x24f/0x310 [ 749.724967][ C1] ? __pfx_task_work_run+0x10/0x10 [ 749.724986][ C1] ? do_exit+0xa2a/0x27f0 [ 749.725009][ C1] ? kmem_cache_free+0x145/0x350 [ 749.725037][ C1] do_exit+0xa2f/0x27f0 [ 749.725069][ C1] ? __pfx_do_exit+0x10/0x10 [ 749.725093][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 749.725116][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 749.725141][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 749.725162][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 749.725186][ C1] do_group_exit+0x207/0x2c0 [ 749.725211][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 749.725230][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 749.725259][ C1] get_signal+0x16a1/0x1740 [ 749.725286][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 749.725312][ C1] ? kfree+0x4e/0x360 [ 749.725336][ C1] ? __pfx_get_signal+0x10/0x10 [ 749.725354][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 749.725381][ C1] ? do_sock_setsockopt+0x3e2/0x720 [ 749.725407][ C1] arch_do_signal_or_restart+0x96/0x860 [ 749.725431][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 749.725453][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 749.725487][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 749.725515][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 749.725543][ C1] do_syscall_64+0x100/0x230 [ 749.725560][ C1] ? clear_bhb_loop+0x35/0x90 [ 749.725583][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.725603][ C1] RIP: 0033:0x7fa5795779ca [ 749.725617][ C1] RSP: 002b:00007ffce0c5f0f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 749.725635][ C1] RAX: 0000000000000000 RBX: 00007ffce0c5f180 RCX: 00007fa5795779ca [ 749.725648][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 749.725660][ C1] RBP: 0000000000000003 R08: 0000000000000558 R09: 0079746972756365 [ 749.725672][ C1] R10: 00007fa5796d0a60 R11: 0000000000000202 R12: 00007fa5796d0a00 [ 749.725685][ C1] R13: 00007ffce0c5f11c R14: 0000000000000000 R15: 00007fa5796d1e40 [ 749.725710][ C1] [ 749.725717][ C1] DEBUG: waiting rtnl_mutex for 4244 jiffies. [ 749.725727][ C1] task:kworker/1:5 state:D stack:22360 pid:5185 tgid:5185 ppid:2 flags:0x00004000 [ 749.725758][ C1] Workqueue: events switchdev_deferred_process_work [ 749.725779][ C1] Call Trace: [ 749.725786][ C1] [ 749.725797][ C1] __schedule+0x1800/0x4a60 [ 749.725833][ C1] ? __pfx___schedule+0x10/0x10 [ 749.725855][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 749.725878][ C1] ? __pfx_lock_release+0x10/0x10 [ 749.725901][ C1] ? kick_pool+0x45c/0x620 [ 749.725925][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 749.725947][ C1] ? schedule+0x90/0x320 [ 749.725967][ C1] schedule+0x14b/0x320 [ 749.725989][ C1] schedule_preempt_disabled+0x13/0x30 [ 749.726010][ C1] __mutex_lock+0x6a4/0xd70 [ 749.726036][ C1] ? __mutex_lock+0x527/0xd70 [ 749.726060][ C1] ? switchdev_deferred_process_work+0xe/0x20 [ 749.726081][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 749.726111][ C1] ? get_rtnl_holder+0x144/0x190 [ 749.726131][ C1] ? process_scheduled_works+0x945/0x1830 [ 749.726152][ C1] switchdev_deferred_process_work+0xe/0x20 [ 749.726171][ C1] process_scheduled_works+0xa2c/0x1830 [ 749.726213][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 749.726241][ C1] ? assign_work+0x364/0x3d0 [ 749.726266][ C1] worker_thread+0x86d/0xd40 [ 749.726294][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 749.726318][ C1] ? __kthread_parkme+0x169/0x1d0 [ 749.726343][ C1] ? __pfx_worker_thread+0x10/0x10 [ 749.726365][ C1] kthread+0x2f0/0x390 [ 749.726389][ C1] ? __pfx_worker_thread+0x10/0x10 [ 749.726410][ C1] ? __pfx_kthread+0x10/0x10 [ 749.726435][ C1] ret_from_fork+0x4b/0x80 [ 749.726458][ C1] ? __pfx_kthread+0x10/0x10 [ 749.726482][ C1] ret_from_fork_asm+0x1a/0x30 [ 749.726518][ C1] [ 749.726525][ C1] DEBUG: waiting rtnl_mutex for 2844 jiffies. [ 749.726535][ C1] task:syz-executor state:D stack:24992 pid:9700 tgid:9700 ppid:9680 flags:0x00000000 [ 749.726563][ C1] Call Trace: [ 749.726571][ C1] [ 749.726581][ C1] __schedule+0x1800/0x4a60 [ 749.726618][ C1] ? __pfx___schedule+0x10/0x10 [ 749.726641][ C1] ? __pfx_lock_release+0x10/0x10 [ 749.726665][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 749.726699][ C1] ? schedule+0x90/0x320 [ 749.726718][ C1] schedule+0x14b/0x320 [ 749.726741][ C1] schedule_preempt_disabled+0x13/0x30 [ 749.726766][ C1] __mutex_lock+0x6a4/0xd70 [ 749.726792][ C1] ? __mutex_lock+0x527/0xd70 [ 749.726816][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 749.726843][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 749.726874][ C1] ? get_rtnl_holder+0x144/0x190 [ 749.726895][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 749.726924][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 749.726951][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 749.726976][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 749.727006][ C1] ? __pfx_validate_chain+0x10/0x10 [ 749.727032][ C1] ? __pfx_validate_chain+0x10/0x10 [ 749.727059][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 749.727084][ C1] ? mark_lock+0x9a/0x360 [ 749.727106][ C1] ? __pfx_validate_chain+0x10/0x10 [ 749.727133][ C1] ? __lock_acquire+0x1359/0x2000 [ 749.727166][ C1] ? mark_lock+0x9a/0x360 [ 749.727193][ C1] ? __lock_acquire+0x1359/0x2000 [ 749.727230][ C1] netlink_rcv_skb+0x1e3/0x430 [ 749.727258][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 749.727286][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 749.727329][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 749.727348][ C1] netlink_unicast+0x7f0/0x990 [ 749.727379][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 749.727402][ C1] ? __virt_addr_valid+0x183/0x530 [ 749.727429][ C1] ? __check_object_size+0x49c/0x900 [ 749.727451][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 749.727476][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 749.727504][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.727524][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 749.727545][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 749.727569][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 749.727596][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.727613][ C1] __sock_sendmsg+0x221/0x270 [ 749.727641][ C1] __sys_sendto+0x3a4/0x4f0 [ 749.727666][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 749.727704][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 749.727729][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 749.727756][ C1] ? exc_page_fault+0x590/0x8c0 [ 749.727782][ C1] __x64_sys_sendto+0xde/0x100 [ 749.727805][ C1] do_syscall_64+0xf3/0x230 [ 749.727822][ C1] ? clear_bhb_loop+0x35/0x90 [ 749.727845][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.727865][ C1] RIP: 0033:0x7f9c9e37796c [ 749.727878][ C1] RSP: 002b:00007ffeb9270710 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 749.727897][ C1] RAX: ffffffffffffffda RBX: 00007f9c9f034620 RCX: 00007f9c9e37796c [ 749.727911][ C1] RDX: 0000000000000028 RSI: 00007f9c9f034670 RDI: 0000000000000003 [ 749.727923][ C1] RBP: 0000000000000000 R08: 00007ffeb9270764 R09: 000000000000000c [ 749.727935][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 749.727946][ C1] R13: 0000000000000000 R14: 00007f9c9f034670 R15: 0000000000000000 [ 749.727970][ C1] [ 749.727977][ C1] DEBUG: waiting rtnl_mutex for 2445 jiffies. [ 749.727987][ C1] task:syz-executor state:D stack:21024 pid:9636 tgid:9636 ppid:1 flags:0x00004006 [ 749.728013][ C1] Call Trace: [ 749.728020][ C1] [ 749.728030][ C1] __schedule+0x1800/0x4a60 [ 749.728067][ C1] ? __pfx___schedule+0x10/0x10 [ 749.728090][ C1] ? __pfx_lock_release+0x10/0x10 [ 749.728113][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 749.728148][ C1] ? schedule+0x90/0x320 [ 749.728167][ C1] schedule+0x14b/0x320 [ 749.728189][ C1] schedule_preempt_disabled+0x13/0x30 [ 749.728209][ C1] __mutex_lock+0x6a4/0xd70 [ 749.728235][ C1] ? __mutex_lock+0x527/0xd70 [ 749.728260][ C1] ? tun_chr_close+0x3e/0x1b0 [ 749.728278][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 749.728309][ C1] ? get_rtnl_holder+0x144/0x190 [ 749.728330][ C1] tun_chr_close+0x3e/0x1b0 [ 749.728346][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 749.728364][ C1] __fput+0x24a/0x8a0 [ 749.728395][ C1] task_work_run+0x24f/0x310 [ 749.728417][ C1] ? __pfx_task_work_run+0x10/0x10 [ 749.728436][ C1] ? do_exit+0xa2a/0x27f0 [ 749.728458][ C1] ? kmem_cache_free+0x145/0x350 [ 749.728487][ C1] do_exit+0xa2f/0x27f0 [ 749.728518][ C1] ? __pfx_do_exit+0x10/0x10 [ 749.728543][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 749.728565][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 749.728590][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 749.728612][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 749.728635][ C1] do_group_exit+0x207/0x2c0 [ 749.728660][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 749.728679][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 749.728706][ C1] get_signal+0x16a1/0x1740 [ 749.728734][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 749.728758][ C1] ? __pfx_get_signal+0x10/0x10 [ 749.728785][ C1] arch_do_signal_or_restart+0x96/0x860 [ 749.728810][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 749.728831][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 749.728863][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 749.728891][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 749.728919][ C1] do_syscall_64+0x100/0x230 [ 749.728935][ C1] ? clear_bhb_loop+0x35/0x90 [ 749.728959][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.728979][ C1] RIP: 0033:0x7f9eef57796c [ 749.728992][ C1] RSP: 002b:00007ffc6396d770 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 749.729011][ C1] RAX: 0000000000000068 RBX: 00007f9ef0234620 RCX: 00007f9eef57796c [ 749.729024][ C1] RDX: 0000000000000068 RSI: 00007f9ef0234670 RDI: 0000000000000003 [ 749.729036][ C1] RBP: 0000000000000000 R08: 00007ffc6396d7c4 R09: 000000000000000c [ 749.729048][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 749.729060][ C1] R13: 0000000000000000 R14: 00007f9ef0234670 R15: 0000000000000000 [ 749.729084][ C1] [ 749.729094][ C1] [ 749.729094][ C1] Showing all locks held in the system: [ 749.729103][ C1] 1 lock held by pool_workqueue_/3: [ 749.729115][ C1] #0: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 749.729175][ C1] 5 locks held by kworker/0:0/8: [ 749.729186][ C1] 3 locks held by kworker/u8:0/11: [ 749.729197][ C1] 4 locks held by kworker/u8:1/12: [ 749.729212][ C1] 3 locks held by kworker/u8:2/29: [ 749.729225][ C1] 2 locks held by kworker/u8:3/52: [ 749.729237][ C1] 3 locks held by kworker/u8:4/62: [ 749.729248][ C1] #0: ffff88802a08d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 749.729301][ C1] #1: ffffc900015d7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 749.729351][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 749.729412][ C1] 3 locks held by kworker/u8:6/949: [ 749.729436][ C1] 3 locks held by kworker/u8:7/2478: [ 749.729449][ C1] 3 locks held by kworker/u8:8/2793: [ 749.729460][ C1] 3 locks held by kworker/u8:9/2826: [ 749.729474][ C1] 2 locks held by getty/4858: [ 749.729484][ C1] #0: ffff88802aafb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 749.729592][ C1] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 749.729661][ C1] 4 locks held by kworker/0:4/5147: [ 749.729672][ C1] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 749.729723][ C1] #1: ffffc90003c8fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 749.729778][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 749.729829][ C1] #3: ffff88806ef88768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_check_chans_work+0x164/0xfd0 [ 749.729882][ C1] 3 locks held by kworker/0:7/5152: [ 749.729893][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 749.729942][ C1] #1: ffffc90004237d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 749.729991][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 749.730038][ C1] 3 locks held by kworker/1:5/5185: [ 749.730049][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 749.730098][ C1] #1: ffffc900042d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 749.730147][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 749.730196][ C1] 4 locks held by kworker/0:1/8673: [ 749.730207][ C1] 1 lock held by syz-executor/8802: [ 749.730217][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 749.730266][ C1] 1 lock held by syz-executor/9256: [ 749.730276][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 749.730322][ C1] 2 locks held by kworker/u8:12/9338: [ 749.730334][ C1] 6 locks held by syz.0.709/9565: [ 749.730345][ C1] 1 lock held by syz-executor/9636: [ 749.730355][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 749.730401][ C1] 5 locks held by syz.1.738/9654: [ 749.730411][ C1] #0: ffff8880665840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 749.730464][ C1] #1: ffff888066584130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: tty_write_lock+0x5c/0x90 [ 749.730515][ C1] #2: ffff8880665840e8 (&lock->wait_lock){+.+.}-{2:2}, at: __mutex_lock+0x3ae/0xd70 [ 749.730567][ C1] #3: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 749.730612][ C1] #4: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 749.730666][ C1] 1 lock held by kmmpd-loop1/9658: [ 749.730677][ C1] #0: ffff88807f06e420 (sb_writers#4){.+.+}-{0:0}, at: kmmpd+0x424/0xaa0 [ 749.730731][ C1] 1 lock held by syz.3.741/9667: [ 749.730760][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 749.730806][ C1] 1 lock held by syz-executor/9679: [ 749.730818][ C1] 4 locks held by kworker/u8:13/9681: [ 749.730829][ C1] 1 lock held by syz-executor/9693: [ 749.730841][ C1] 1 lock held by syz-executor/9700: [ 749.730853][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 749.730908][ C1] 2 locks held by syz-executor/9704: [ 749.730919][ C1] [ 749.730924][ C1] ============================================= [ 749.730924][ C1] [ 750.759605][ C1] DEBUG: waiting rtnl_mutex for 10949 jiffies. [ 750.759636][ C1] task:kworker/u8:4 state:D stack:21008 pid:62 tgid:62 ppid:2 flags:0x00004000 [ 750.759670][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 750.759703][ C1] Call Trace: [ 750.759711][ C1] [ 750.759724][ C1] __schedule+0x1800/0x4a60 [ 750.759764][ C1] ? __pfx___schedule+0x10/0x10 [ 750.759788][ C1] ? __pfx_lock_release+0x10/0x10 [ 750.759812][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 750.759841][ C1] ? kthread_data+0x52/0xd0 [ 750.759862][ C1] ? schedule+0x90/0x320 [ 750.759882][ C1] ? wq_worker_sleeping+0x66/0x240 [ 750.759907][ C1] ? schedule+0x90/0x320 [ 750.759926][ C1] schedule+0x14b/0x320 [ 750.759949][ C1] schedule_preempt_disabled+0x13/0x30 [ 750.759970][ C1] __mutex_lock+0x6a4/0xd70 [ 750.759997][ C1] ? __mutex_lock+0x527/0xd70 [ 750.760021][ C1] ? addrconf_verify_work+0x19/0x30 [ 750.760047][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 750.760069][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.760095][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 750.760122][ C1] ? get_rtnl_holder+0x144/0x190 [ 750.760142][ C1] ? process_scheduled_works+0x945/0x1830 [ 750.760163][ C1] addrconf_verify_work+0x19/0x30 [ 750.760188][ C1] process_scheduled_works+0xa2c/0x1830 [ 750.760230][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 750.760259][ C1] ? assign_work+0x364/0x3d0 [ 750.760284][ C1] worker_thread+0x86d/0xd40 [ 750.760313][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 750.760338][ C1] ? __kthread_parkme+0x169/0x1d0 [ 750.760363][ C1] ? __pfx_worker_thread+0x10/0x10 [ 750.760385][ C1] kthread+0x2f0/0x390 [ 750.760409][ C1] ? __pfx_worker_thread+0x10/0x10 [ 750.760431][ C1] ? __pfx_kthread+0x10/0x10 [ 750.760456][ C1] ret_from_fork+0x4b/0x80 [ 750.760479][ C1] ? __pfx_kthread+0x10/0x10 [ 750.760504][ C1] ret_from_fork_asm+0x1a/0x30 [ 750.760539][ C1] [ 750.760547][ C1] DEBUG: holding rtnl_mutex for 15047 jiffies. [ 750.760557][ C1] task:kworker/0:4 state:D stack:20824 pid:5147 tgid:5147 ppid:2 flags:0x00004000 [ 750.760586][ C1] Workqueue: events_power_efficient reg_check_chans_work [ 750.760612][ C1] Call Trace: [ 750.760619][ C1] [ 750.760634][ C1] __schedule+0x1800/0x4a60 [ 750.760671][ C1] ? __pfx___schedule+0x10/0x10 [ 750.760693][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.760716][ C1] ? __pfx_lock_release+0x10/0x10 [ 750.760739][ C1] ? kick_pool+0x1c9/0x620 [ 750.760765][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 750.760784][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 750.760810][ C1] ? schedule+0x90/0x320 [ 750.760829][ C1] schedule+0x14b/0x320 [ 750.760851][ C1] schedule_preempt_disabled+0x13/0x30 [ 750.760872][ C1] __mutex_lock+0x6a4/0xd70 [ 750.760898][ C1] ? __mutex_lock+0x527/0xd70 [ 750.760923][ C1] ? reg_check_chans_work+0x164/0xfd0 [ 750.760947][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 750.760983][ C1] reg_check_chans_work+0x164/0xfd0 [ 750.761018][ C1] ? __pfx_reg_check_chans_work+0x10/0x10 [ 750.761043][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 750.761075][ C1] ? process_scheduled_works+0x945/0x1830 [ 750.761095][ C1] process_scheduled_works+0xa2c/0x1830 [ 750.761137][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 750.761165][ C1] ? assign_work+0x364/0x3d0 [ 750.761190][ C1] worker_thread+0x86d/0xd40 [ 750.761223][ C1] ? __kthread_parkme+0x169/0x1d0 [ 750.761248][ C1] ? __pfx_worker_thread+0x10/0x10 [ 750.761269][ C1] kthread+0x2f0/0x390 [ 750.761294][ C1] ? __pfx_worker_thread+0x10/0x10 [ 750.761315][ C1] ? __pfx_kthread+0x10/0x10 [ 750.761340][ C1] ret_from_fork+0x4b/0x80 [ 750.761362][ C1] ? __pfx_kthread+0x10/0x10 [ 750.761387][ C1] ret_from_fork_asm+0x1a/0x30 [ 750.761422][ C1] [ 750.761430][ C1] DEBUG: waiting rtnl_mutex for 14948 jiffies. [ 750.761440][ C1] task:kworker/0:7 state:D stack:22256 pid:5152 tgid:5152 ppid:2 flags:0x00004000 [ 750.761469][ C1] Workqueue: events linkwatch_event [ 750.761488][ C1] Call Trace: [ 750.761495][ C1] [ 750.761506][ C1] __schedule+0x1800/0x4a60 [ 750.761542][ C1] ? __pfx___schedule+0x10/0x10 [ 750.761564][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.761586][ C1] ? __pfx_lock_release+0x10/0x10 [ 750.761610][ C1] ? kick_pool+0x45c/0x620 [ 750.761640][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 750.761660][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 750.761685][ C1] ? schedule+0x90/0x320 [ 750.761704][ C1] schedule+0x14b/0x320 [ 750.761727][ C1] schedule_preempt_disabled+0x13/0x30 [ 750.761748][ C1] __mutex_lock+0x6a4/0xd70 [ 750.761774][ C1] ? __mutex_lock+0x527/0xd70 [ 750.761798][ C1] ? linkwatch_event+0xe/0x60 [ 750.761817][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 750.761848][ C1] ? get_rtnl_holder+0x144/0x190 [ 750.761867][ C1] ? process_scheduled_works+0x945/0x1830 [ 750.761888][ C1] linkwatch_event+0xe/0x60 [ 750.761906][ C1] process_scheduled_works+0xa2c/0x1830 [ 750.761947][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 750.761976][ C1] ? assign_work+0x364/0x3d0 [ 750.762001][ C1] worker_thread+0x86d/0xd40 [ 750.762029][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 750.762053][ C1] ? __kthread_parkme+0x169/0x1d0 [ 750.762078][ C1] ? __pfx_worker_thread+0x10/0x10 [ 750.762100][ C1] kthread+0x2f0/0x390 [ 750.762124][ C1] ? __pfx_worker_thread+0x10/0x10 [ 750.762145][ C1] ? __pfx_kthread+0x10/0x10 [ 750.762170][ C1] ret_from_fork+0x4b/0x80 [ 750.762192][ C1] ? __pfx_kthread+0x10/0x10 [ 750.762217][ C1] ret_from_fork_asm+0x1a/0x30 [ 750.762252][ C1] [ 750.762259][ C1] DEBUG: waiting rtnl_mutex for 10248 jiffies. [ 750.762269][ C1] task:syz-executor state:D stack:19728 pid:8802 tgid:8802 ppid:1 flags:0x00004006 [ 750.762296][ C1] Call Trace: [ 750.762303][ C1] [ 750.762314][ C1] __schedule+0x1800/0x4a60 [ 750.762350][ C1] ? __pfx___schedule+0x10/0x10 [ 750.762373][ C1] ? __pfx_lock_release+0x10/0x10 [ 750.762396][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 750.762430][ C1] ? schedule+0x90/0x320 [ 750.762450][ C1] schedule+0x14b/0x320 [ 750.762472][ C1] schedule_preempt_disabled+0x13/0x30 [ 750.762493][ C1] __mutex_lock+0x6a4/0xd70 [ 750.762519][ C1] ? __mutex_lock+0x527/0xd70 [ 750.762543][ C1] ? tun_chr_close+0x3e/0x1b0 [ 750.762561][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 750.762594][ C1] ? get_rtnl_holder+0x144/0x190 [ 750.762614][ C1] tun_chr_close+0x3e/0x1b0 [ 750.762635][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 750.762652][ C1] __fput+0x24a/0x8a0 [ 750.762685][ C1] task_work_run+0x24f/0x310 [ 750.762706][ C1] ? __pfx_task_work_run+0x10/0x10 [ 750.762726][ C1] ? do_exit+0xa2a/0x27f0 [ 750.762749][ C1] ? kmem_cache_free+0x145/0x350 [ 750.762778][ C1] do_exit+0xa2f/0x27f0 [ 750.762810][ C1] ? __pfx_do_exit+0x10/0x10 [ 750.762835][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 750.762858][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.762883][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 750.762904][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 750.762928][ C1] do_group_exit+0x207/0x2c0 [ 750.762953][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 750.762973][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 750.762999][ C1] get_signal+0x16a1/0x1740 [ 750.763030][ C1] ? __pfx_get_signal+0x10/0x10 [ 750.763050][ C1] ? iterate_dir+0x645/0x810 [ 750.763072][ C1] arch_do_signal_or_restart+0x96/0x860 [ 750.763097][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 750.763119][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.763151][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 750.763179][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 750.763207][ C1] do_syscall_64+0x100/0x230 [ 750.763224][ C1] ? clear_bhb_loop+0x35/0x90 [ 750.763249][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.763270][ C1] RIP: 0033:0x7fe5d65a7c73 [ 750.763285][ C1] RSP: 002b:00007ffc53e96c28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 750.763304][ C1] RAX: fffffffffffffe00 RBX: 000055557b9e0640 RCX: 00007fe5d65a7c73 [ 750.763318][ C1] RDX: 0000000000008000 RSI: 000055557b9e0640 RDI: 0000000000000006 [ 750.763331][ C1] RBP: 000055557b9e0614 R08: 0000000000000000 R09: 0000000000000000 [ 750.763344][ C1] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 750.763356][ C1] R13: 0000000000000016 R14: 000055557b9e0610 R15: 000000000007f4dd [ 750.763381][ C1] [ 750.763389][ C1] DEBUG: waiting rtnl_mutex for 7147 jiffies. [ 750.763398][ C1] task:syz.3.741 state:D stack:23984 pid:9667 tgid:9667 ppid:8856 flags:0x00004006 [ 750.763427][ C1] Call Trace: [ 750.763434][ C1] [ 750.763444][ C1] __schedule+0x1800/0x4a60 [ 750.763481][ C1] ? __pfx___schedule+0x10/0x10 [ 750.763504][ C1] ? __pfx_lock_release+0x10/0x10 [ 750.763528][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 750.763562][ C1] ? schedule+0x90/0x320 [ 750.763581][ C1] schedule+0x14b/0x320 [ 750.763603][ C1] schedule_preempt_disabled+0x13/0x30 [ 750.763629][ C1] __mutex_lock+0x6a4/0xd70 [ 750.763655][ C1] ? __mutex_lock+0x527/0xd70 [ 750.763679][ C1] ? tun_chr_close+0x3e/0x1b0 [ 750.763697][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 750.763729][ C1] ? get_rtnl_holder+0x144/0x190 [ 750.763750][ C1] tun_chr_close+0x3e/0x1b0 [ 750.763766][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 750.763783][ C1] __fput+0x24a/0x8a0 [ 750.763815][ C1] task_work_run+0x24f/0x310 [ 750.763836][ C1] ? __pfx_task_work_run+0x10/0x10 [ 750.763855][ C1] ? do_exit+0xa2a/0x27f0 [ 750.763879][ C1] ? kmem_cache_free+0x145/0x350 [ 750.763907][ C1] do_exit+0xa2f/0x27f0 [ 750.763938][ C1] ? __pfx_do_exit+0x10/0x10 [ 750.763963][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 750.763986][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.764011][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 750.764032][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 750.764056][ C1] do_group_exit+0x207/0x2c0 [ 750.764081][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 750.764100][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 750.764127][ C1] get_signal+0x16a1/0x1740 [ 750.764157][ C1] ? __pfx_get_signal+0x10/0x10 [ 750.764183][ C1] arch_do_signal_or_restart+0x96/0x860 [ 750.764208][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 750.764229][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.764261][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 750.764289][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 750.764317][ C1] do_syscall_64+0x100/0x230 [ 750.764334][ C1] ? clear_bhb_loop+0x35/0x90 [ 750.764357][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.764377][ C1] RIP: 0033:0x7ff338f75bd9 [ 750.764391][ C1] RSP: 002b:00007ffeef47cd08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 750.764410][ C1] RAX: 0000000000000000 RBX: 000000000007fdd2 RCX: 00007ff338f75bd9 [ 750.764422][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 750.764434][ C1] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000001def47d02f [ 750.764447][ C1] R10: 00007ff338e00000 R11: 0000000000000246 R12: 00007ff339103f6c [ 750.764460][ C1] R13: 0000000000000032 R14: 00007ff339105a60 R15: 00007ff339103f60 [ 750.764485][ C1] [ 750.764492][ C1] DEBUG: waiting rtnl_mutex for 5249 jiffies. [ 750.764502][ C1] task:syz-executor state:D stack:20208 pid:9256 tgid:9256 ppid:1 flags:0x00004006 [ 750.764529][ C1] Call Trace: [ 750.764536][ C1] [ 750.764547][ C1] __schedule+0x1800/0x4a60 [ 750.764584][ C1] ? __pfx___schedule+0x10/0x10 [ 750.764607][ C1] ? __pfx_lock_release+0x10/0x10 [ 750.764636][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 750.764670][ C1] ? schedule+0x90/0x320 [ 750.764690][ C1] schedule+0x14b/0x320 [ 750.764712][ C1] schedule_preempt_disabled+0x13/0x30 [ 750.764733][ C1] __mutex_lock+0x6a4/0xd70 [ 750.764759][ C1] ? __mutex_lock+0x527/0xd70 [ 750.764783][ C1] ? tun_chr_close+0x3e/0x1b0 [ 750.764801][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 750.764833][ C1] ? get_rtnl_holder+0x144/0x190 [ 750.764853][ C1] tun_chr_close+0x3e/0x1b0 [ 750.764869][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 750.764887][ C1] __fput+0x24a/0x8a0 [ 750.764919][ C1] task_work_run+0x24f/0x310 [ 750.764940][ C1] ? __pfx_task_work_run+0x10/0x10 [ 750.764959][ C1] ? do_exit+0xa2a/0x27f0 [ 750.764983][ C1] ? kmem_cache_free+0x145/0x350 [ 750.765011][ C1] do_exit+0xa2f/0x27f0 [ 750.765043][ C1] ? __pfx_do_exit+0x10/0x10 [ 750.765067][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 750.765090][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.765115][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 750.765136][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 750.765160][ C1] do_group_exit+0x207/0x2c0 [ 750.765184][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 750.765204][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 750.765230][ C1] get_signal+0x16a1/0x1740 [ 750.765260][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 750.765286][ C1] ? kfree+0x4e/0x360 [ 750.765309][ C1] ? __pfx_get_signal+0x10/0x10 [ 750.765328][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 750.765354][ C1] ? do_sock_setsockopt+0x3e2/0x720 [ 750.765380][ C1] arch_do_signal_or_restart+0x96/0x860 [ 750.765404][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 750.765426][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.765458][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 750.765485][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 750.765513][ C1] do_syscall_64+0x100/0x230 [ 750.765530][ C1] ? clear_bhb_loop+0x35/0x90 [ 750.765553][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.765573][ C1] RIP: 0033:0x7fa5795779ca [ 750.765587][ C1] RSP: 002b:00007ffce0c5f0f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 750.765605][ C1] RAX: 0000000000000000 RBX: 00007ffce0c5f180 RCX: 00007fa5795779ca [ 750.765618][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 750.765634][ C1] RBP: 0000000000000003 R08: 0000000000000558 R09: 0079746972756365 [ 750.765646][ C1] R10: 00007fa5796d0a60 R11: 0000000000000202 R12: 00007fa5796d0a00 [ 750.765659][ C1] R13: 00007ffce0c5f11c R14: 0000000000000000 R15: 00007fa5796d1e40 [ 750.765683][ C1] [ 750.765691][ C1] DEBUG: waiting rtnl_mutex for 4348 jiffies. [ 750.765700][ C1] task:kworker/1:5 state:D stack:22360 pid:5185 tgid:5185 ppid:2 flags:0x00004000 [ 750.765728][ C1] Workqueue: events switchdev_deferred_process_work [ 750.765748][ C1] Call Trace: [ 750.765755][ C1] [ 750.765766][ C1] __schedule+0x1800/0x4a60 [ 750.765803][ C1] ? __pfx___schedule+0x10/0x10 [ 750.765825][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.765848][ C1] ? __pfx_lock_release+0x10/0x10 [ 750.765871][ C1] ? kick_pool+0x45c/0x620 [ 750.765894][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 750.765916][ C1] ? schedule+0x90/0x320 [ 750.765936][ C1] schedule+0x14b/0x320 [ 750.765958][ C1] schedule_preempt_disabled+0x13/0x30 [ 750.765979][ C1] __mutex_lock+0x6a4/0xd70 [ 750.766005][ C1] ? __mutex_lock+0x527/0xd70 [ 750.766030][ C1] ? switchdev_deferred_process_work+0xe/0x20 [ 750.766050][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 750.766081][ C1] ? get_rtnl_holder+0x144/0x190 [ 750.766100][ C1] ? process_scheduled_works+0x945/0x1830 [ 750.766121][ C1] switchdev_deferred_process_work+0xe/0x20 [ 750.766140][ C1] process_scheduled_works+0xa2c/0x1830 [ 750.766182][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 750.766210][ C1] ? assign_work+0x364/0x3d0 [ 750.766235][ C1] worker_thread+0x86d/0xd40 [ 750.766263][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 750.766287][ C1] ? __kthread_parkme+0x169/0x1d0 [ 750.766312][ C1] ? __pfx_worker_thread+0x10/0x10 [ 750.766334][ C1] kthread+0x2f0/0x390 [ 750.766358][ C1] ? __pfx_worker_thread+0x10/0x10 [ 750.766380][ C1] ? __pfx_kthread+0x10/0x10 [ 750.766405][ C1] ret_from_fork+0x4b/0x80 [ 750.766427][ C1] ? __pfx_kthread+0x10/0x10 [ 750.766451][ C1] ret_from_fork_asm+0x1a/0x30 [ 750.766486][ C1] [ 750.766494][ C1] DEBUG: waiting rtnl_mutex for 2948 jiffies. [ 750.766503][ C1] task:syz-executor state:D stack:24992 pid:9700 tgid:9700 ppid:9680 flags:0x00000000 [ 750.766530][ C1] Call Trace: [ 750.766537][ C1] [ 750.766548][ C1] __schedule+0x1800/0x4a60 [ 750.766585][ C1] ? __pfx___schedule+0x10/0x10 [ 750.766608][ C1] ? __pfx_lock_release+0x10/0x10 [ 750.766636][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 750.766670][ C1] ? schedule+0x90/0x320 [ 750.766689][ C1] schedule+0x14b/0x320 [ 750.766712][ C1] schedule_preempt_disabled+0x13/0x30 [ 750.766732][ C1] __mutex_lock+0x6a4/0xd70 [ 750.766758][ C1] ? __mutex_lock+0x527/0xd70 [ 750.766783][ C1] ? rtnetlink_rcv_msg+0x847/0x1180 [ 750.766809][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 750.766841][ C1] ? get_rtnl_holder+0x144/0x190 [ 750.766861][ C1] rtnetlink_rcv_msg+0x847/0x1180 [ 750.766890][ C1] ? rtnetlink_rcv_msg+0x208/0x1180 [ 750.766917][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 750.766942][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 750.766972][ C1] ? __pfx_validate_chain+0x10/0x10 [ 750.766998][ C1] ? __pfx_validate_chain+0x10/0x10 [ 750.767025][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 750.767050][ C1] ? mark_lock+0x9a/0x360 [ 750.767072][ C1] ? __pfx_validate_chain+0x10/0x10 [ 750.767099][ C1] ? __lock_acquire+0x1359/0x2000 [ 750.767132][ C1] ? mark_lock+0x9a/0x360 [ 750.767159][ C1] ? __lock_acquire+0x1359/0x2000 [ 750.767196][ C1] netlink_rcv_skb+0x1e3/0x430 [ 750.767224][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 750.767252][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 750.767295][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 750.767314][ C1] netlink_unicast+0x7f0/0x990 [ 750.767345][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 750.767368][ C1] ? __virt_addr_valid+0x183/0x530 [ 750.767395][ C1] ? __check_object_size+0x49c/0x900 [ 750.767417][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 750.767442][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 750.767469][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 750.767489][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 750.767511][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 750.767535][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 750.767561][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 750.767578][ C1] __sock_sendmsg+0x221/0x270 [ 750.767607][ C1] __sys_sendto+0x3a4/0x4f0 [ 750.767634][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 750.767673][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.767698][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 750.767722][ C1] ? exc_page_fault+0x590/0x8c0 [ 750.767747][ C1] __x64_sys_sendto+0xde/0x100 [ 750.767769][ C1] do_syscall_64+0xf3/0x230 [ 750.767786][ C1] ? clear_bhb_loop+0x35/0x90 [ 750.767809][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.767829][ C1] RIP: 0033:0x7f9c9e37796c [ 750.767843][ C1] RSP: 002b:00007ffeb9270710 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 750.767861][ C1] RAX: ffffffffffffffda RBX: 00007f9c9f034620 RCX: 00007f9c9e37796c [ 750.767874][ C1] RDX: 0000000000000028 RSI: 00007f9c9f034670 RDI: 0000000000000003 [ 750.767886][ C1] RBP: 0000000000000000 R08: 00007ffeb9270764 R09: 000000000000000c [ 750.767898][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 750.767909][ C1] R13: 0000000000000000 R14: 00007f9c9f034670 R15: 0000000000000000 [ 750.767933][ C1] [ 750.767940][ C1] DEBUG: waiting rtnl_mutex for 2549 jiffies. [ 750.767950][ C1] task:syz-executor state:D stack:21024 pid:9636 tgid:9636 ppid:1 flags:0x00004006 [ 750.767977][ C1] Call Trace: [ 750.767984][ C1] [ 750.767995][ C1] __schedule+0x1800/0x4a60 [ 750.768032][ C1] ? __pfx___schedule+0x10/0x10 [ 750.768055][ C1] ? __pfx_lock_release+0x10/0x10 [ 750.768078][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 750.768112][ C1] ? schedule+0x90/0x320 [ 750.768132][ C1] schedule+0x14b/0x320 [ 750.768154][ C1] schedule_preempt_disabled+0x13/0x30 [ 750.768174][ C1] __mutex_lock+0x6a4/0xd70 [ 750.768200][ C1] ? __mutex_lock+0x527/0xd70 [ 750.768225][ C1] ? tun_chr_close+0x3e/0x1b0 [ 750.768243][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 750.768275][ C1] ? get_rtnl_holder+0x144/0x190 [ 750.768295][ C1] tun_chr_close+0x3e/0x1b0 [ 750.768311][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 750.768329][ C1] __fput+0x24a/0x8a0 [ 750.768360][ C1] task_work_run+0x24f/0x310 [ 750.768382][ C1] ? __pfx_task_work_run+0x10/0x10 [ 750.768401][ C1] ? do_exit+0xa2a/0x27f0 [ 750.768423][ C1] ? kmem_cache_free+0x145/0x350 [ 750.768463][ C1] do_exit+0xa2f/0x27f0 [ 750.768493][ C1] ? __pfx_do_exit+0x10/0x10 [ 750.768517][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 750.768539][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.768562][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 750.768583][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 750.768606][ C1] do_group_exit+0x207/0x2c0 [ 750.768634][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 750.768653][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 750.768678][ C1] get_signal+0x16a1/0x1740 [ 750.768705][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 750.768724][ C1] ? __pfx_get_signal+0x10/0x10 [ 750.768750][ C1] arch_do_signal_or_restart+0x96/0x860 [ 750.768773][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 750.768794][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.768824][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 750.768851][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 750.768878][ C1] do_syscall_64+0x100/0x230 [ 750.768893][ C1] ? clear_bhb_loop+0x35/0x90 [ 750.768916][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.768935][ C1] RIP: 0033:0x7f9eef57796c [ 750.768948][ C1] RSP: 002b:00007ffc6396d770 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 750.768966][ C1] RAX: 0000000000000068 RBX: 00007f9ef0234620 RCX: 00007f9eef57796c [ 750.768978][ C1] RDX: 0000000000000068 RSI: 00007f9ef0234670 RDI: 0000000000000003 [ 750.768990][ C1] RBP: 0000000000000000 R08: 00007ffc6396d7c4 R09: 000000000000000c [ 750.769001][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 750.769013][ C1] R13: 0000000000000000 R14: 00007f9ef0234670 R15: 0000000000000000 [ 750.769035][ C1] [ 750.769044][ C1] [ 750.769044][ C1] Showing all locks held in the system: [ 750.769053][ C1] 1 lock held by pool_workqueue_/3: [ 750.769065][ C1] #0: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 750.769140][ C1] 5 locks held by kworker/0:0/8: [ 750.769151][ C1] 3 locks held by kworker/u8:0/11: [ 750.769162][ C1] 4 locks held by kworker/u8:1/12: [ 750.769176][ C1] 3 locks held by kworker/u8:2/29: [ 750.769189][ C1] 2 locks held by kworker/u8:3/52: [ 750.769201][ C1] 3 locks held by kworker/u8:4/62: [ 750.769212][ C1] #0: ffff88802a08d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 750.769262][ C1] #1: ffffc900015d7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 750.769312][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 750.769372][ C1] 3 locks held by kworker/u8:6/949: [ 750.769396][ C1] 3 locks held by kworker/u8:7/2478: [ 750.769409][ C1] 3 locks held by kworker/u8:8/2793: [ 750.769419][ C1] 3 locks held by kworker/u8:9/2826: [ 750.769430][ C1] 3 locks held by kworker/u8:10/2871: [ 750.769444][ C1] 2 locks held by getty/4858: [ 750.769455][ C1] #0: ffff88802aafb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 750.769507][ C1] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 750.769617][ C1] 4 locks held by kworker/0:4/5147: [ 750.769635][ C1] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 750.769686][ C1] #1: ffffc90003c8fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 750.769735][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 750.769786][ C1] #3: ffff88806ef88768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_check_chans_work+0x164/0xfd0 [ 750.769842][ C1] 3 locks held by kworker/0:7/5152: [ 750.769853][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 750.769902][ C1] #1: ffffc90004237d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 750.769951][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 750.769997][ C1] 3 locks held by kworker/1:5/5185: [ 750.770008][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 750.770056][ C1] #1: ffffc900042d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 750.770105][ C1] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 750.770154][ C1] 4 locks held by kworker/0:1/8673: [ 750.770165][ C1] 1 lock held by syz-executor/8802: [ 750.770175][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 750.770223][ C1] 1 lock held by syz-executor/9256: [ 750.770234][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 750.770279][ C1] 2 locks held by kworker/u8:12/9338: [ 750.770290][ C1] 6 locks held by syz.0.709/9565: [ 750.770301][ C1] 1 lock held by syz-executor/9636: [ 750.770312][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 750.770356][ C1] 1 lock held by kmmpd-loop2/9641: [ 750.770367][ C1] #0: ffff8880582b8420 (sb_writers#4){.+.+}-{0:0}, at: kmmpd+0x424/0xaa0 [ 750.770421][ C1] 4 locks held by syz.1.738/9654: [ 750.770431][ C1] #0: ffff8880665840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 750.770483][ C1] #1: ffff888066584130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: tty_write_lock+0x5c/0x90 [ 750.770535][ C1] #2: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 750.770580][ C1] #3: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 750.770635][ C1] 1 lock held by kmmpd-loop1/9658: [ 750.770647][ C1] 1 lock held by syz.3.741/9667: [ 750.770657][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 750.770703][ C1] 1 lock held by syz-executor/9679: [ 750.770714][ C1] 4 locks held by kworker/u8:13/9681: [ 750.770726][ C1] 1 lock held by syz-executor/9693: [ 750.770737][ C1] 1 lock held by syz-executor/9700: [ 750.770747][ C1] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 750.770801][ C1] 2 locks held by syz-executor/9704: [ 750.770812][ C1] [ 750.770818][ C1] ============================================= [ 750.770818][ C1] [ 751.269743][ T31] INFO: task kworker/0:7:5152 blocked for more than 146 seconds. [ 751.269817][ T31] Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 751.269844][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 751.269858][ T31] task:kworker/0:7 state:D stack:22256 pid:5152 tgid:5152 ppid:2 flags:0x00004000 [ 751.269905][ T31] Workqueue: events linkwatch_event [ 751.269938][ T31] Call Trace: [ 751.269950][ T31] [ 751.269968][ T31] __schedule+0x1800/0x4a60 [ 751.270026][ T31] ? __pfx___schedule+0x10/0x10 [ 751.270058][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 751.270093][ T31] ? __pfx_lock_release+0x10/0x10 [ 751.270127][ T31] ? kick_pool+0x45c/0x620 [ 751.270166][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 751.270195][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 751.270230][ T31] ? schedule+0x90/0x320 [ 751.270259][ T31] schedule+0x14b/0x320 [ 751.270292][ T31] schedule_preempt_disabled+0x13/0x30 [ 751.270323][ T31] __mutex_lock+0x6a4/0xd70 [ 751.270361][ T31] ? __mutex_lock+0x527/0xd70 [ 751.270396][ T31] ? linkwatch_event+0xe/0x60 [ 751.270424][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 751.270470][ T31] ? get_rtnl_holder+0x144/0x190 [ 751.270500][ T31] ? process_scheduled_works+0x945/0x1830 [ 751.270531][ T31] linkwatch_event+0xe/0x60 [ 751.270557][ T31] process_scheduled_works+0xa2c/0x1830 [ 751.270618][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 751.270658][ T31] ? assign_work+0x364/0x3d0 [ 751.270692][ T31] worker_thread+0x86d/0xd40 [ 751.270731][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 751.270766][ T31] ? __kthread_parkme+0x169/0x1d0 [ 751.270802][ T31] ? __pfx_worker_thread+0x10/0x10 [ 751.270840][ T31] kthread+0x2f0/0x390 [ 751.270873][ T31] ? __pfx_worker_thread+0x10/0x10 [ 751.270904][ T31] ? __pfx_kthread+0x10/0x10 [ 751.270941][ T31] ret_from_fork+0x4b/0x80 [ 751.270974][ T31] ? __pfx_kthread+0x10/0x10 [ 751.271010][ T31] ret_from_fork_asm+0x1a/0x30 [ 751.271062][ T31] [ 751.271100][ T31] [ 751.271100][ T31] Showing all locks held in the system: [ 751.271112][ T31] 1 lock held by pool_workqueue_/3: [ 751.271128][ T31] #0: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 751.271213][ T31] 5 locks held by kworker/0:0/8: [ 751.271229][ T31] 3 locks held by kworker/u8:0/11: [ 751.271246][ T31] 4 locks held by kworker/u8:1/12: [ 751.271265][ T31] 3 locks held by kworker/u8:2/29: [ 751.271281][ T31] 1 lock held by khungtaskd/31: [ 751.271297][ T31] #0: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 751.271376][ T31] 2 locks held by kworker/u8:3/52: [ 751.271393][ T31] 3 locks held by kworker/u8:4/62: [ 751.271408][ T31] #0: ffff88802a08d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 751.271481][ T31] #1: ffffc900015d7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 751.271554][ T31] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 751.271638][ T31] 3 locks held by kworker/u8:6/949: [ 751.271669][ T31] 3 locks held by kworker/u8:7/2478: [ 751.271687][ T31] 3 locks held by kworker/u8:8/2793: [ 751.271703][ T31] 3 locks held by kworker/u8:9/2826: [ 751.271720][ T31] 3 locks held by kworker/u8:10/2871: [ 751.271738][ T31] 2 locks held by getty/4858: [ 751.271754][ T31] #0: ffff88802aafb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 751.271837][ T31] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 751.271910][ T31] 4 locks held by kworker/0:4/5147: [ 751.271926][ T31] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 751.271999][ T31] #1: ffffc90003c8fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 751.272071][ T31] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 751.272145][ T31] #3: ffff88806ef88768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_check_chans_work+0x164/0xfd0 [ 751.272220][ T31] 3 locks held by kworker/0:7/5152: [ 751.272236][ T31] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 751.272309][ T31] #1: ffffc90004237d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 751.272381][ T31] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 751.272449][ T31] 3 locks held by kworker/1:5/5185: [ 751.272464][ T31] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 751.272536][ T31] #1: ffffc900042d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 751.272607][ T31] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 751.272678][ T31] 4 locks held by kworker/0:1/8673: [ 751.272695][ T31] 1 lock held by syz-executor/8802: [ 751.272711][ T31] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 751.272778][ T31] 1 lock held by syz-executor/9256: [ 751.272793][ T31] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 751.272865][ T31] 2 locks held by kworker/u8:12/9338: [ 751.272882][ T31] 6 locks held by syz.0.709/9565: [ 751.272898][ T31] 1 lock held by syz-executor/9636: [ 751.272914][ T31] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 751.272979][ T31] 1 lock held by kmmpd-loop2/9641: [ 751.272996][ T31] #0: ffff8880582b8420 (sb_writers#4){.+.+}-{0:0}, at: kmmpd+0x424/0xaa0 [ 751.273072][ T31] 1 lock held by syz.1.738/9654: [ 751.273088][ T31] 1 lock held by syz.3.741/9667: [ 751.273104][ T31] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 751.273168][ T31] 1 lock held by syz-executor/9679: [ 751.273185][ T31] 4 locks held by kworker/u8:13/9681: [ 751.273201][ T31] 1 lock held by syz-executor/9693: [ 751.273218][ T31] 1 lock held by syz-executor/9700: [ 751.273233][ T31] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 751.273311][ T31] 2 locks held by syz-executor/9704: [ 751.273327][ T31] [ 751.273336][ T31] ============================================= [ 751.273336][ T31] [ 751.273361][ T31] NMI backtrace for cpu 0 [ 751.273380][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 751.273427][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 751.273443][ T31] Call Trace: [ 751.273454][ T31] [ 751.273465][ T31] dump_stack_lvl+0x241/0x360 [ 751.273506][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 751.273544][ T31] ? __pfx__printk+0x10/0x10 [ 751.273581][ T31] ? __pfx_vprintk_emit+0x10/0x10 [ 751.273613][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 751.273648][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 751.273675][ T31] ? _printk+0xd5/0x120 [ 751.273706][ T31] ? __pfx__printk+0x10/0x10 [ 751.273740][ T31] ? __wake_up_klogd+0x109/0x140 [ 751.273768][ T31] ? __pfx__printk+0x10/0x10 [ 751.273806][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 751.273843][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 751.273876][ T31] watchdog+0xfee/0x1030 [ 751.273912][ T31] ? watchdog+0x1ea/0x1030 [ 751.273953][ T31] ? __pfx_watchdog+0x10/0x10 [ 751.273985][ T31] kthread+0x2f0/0x390 [ 751.274019][ T31] ? __pfx_watchdog+0x10/0x10 [ 751.274052][ T31] ? __pfx_kthread+0x10/0x10 [ 751.274086][ T31] ret_from_fork+0x4b/0x80 [ 751.274116][ T31] ? __pfx_kthread+0x10/0x10 [ 751.274150][ T31] ret_from_fork_asm+0x1a/0x30 [ 751.274199][ T31] [ 751.274210][ T31] Sending NMI from CPU 0 to CPUs 1: [ 751.274247][ C1] NMI backtrace for cpu 1 [ 751.274260][ C1] CPU: 1 UID: 0 PID: 2793 Comm: kworker/u8:8 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 751.274282][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 751.274294][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 751.274320][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x81/0x90 [ 751.274350][ C1] Code: 8d 42 28 4c 39 c8 77 22 89 f8 89 f6 49 ff c2 4c 89 11 48 c7 44 0a 08 05 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 751.274367][ C1] RSP: 0018:ffffc90009487590 EFLAGS: 00000293 [ 751.274382][ C1] RAX: 0000000000000000 RBX: ffffc900094875c0 RCX: ffff88802b178000 [ 751.274396][ C1] RDX: ffff88802b178000 RSI: 0000000000000001 RDI: 0000000000000000 [ 751.274409][ C1] RBP: 0000000000000001 R08: ffffffff8140f5c7 R09: ffffffff814110bf [ 751.274422][ C1] R10: 0000000000000003 R11: ffff88802b178000 R12: ffff88802b178000 [ 751.274435][ C1] R13: ffffffff817f2bd0 R14: dffffc0000000000 R15: ffffc900094875c0 [ 751.274450][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 751.274465][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 751.274479][ C1] CR2: 0000563d79af2b00 CR3: 000000007f7c8000 CR4: 00000000003506f0 [ 751.274496][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 751.274508][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 751.274520][ C1] Call Trace: [ 751.274527][ C1] [ 751.274534][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 751.274556][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 751.274586][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 751.274608][ C1] ? nmi_handle+0x2a/0x5a0 [ 751.274634][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 751.274656][ C1] ? nmi_handle+0x14f/0x5a0 [ 751.274672][ C1] ? nmi_handle+0x2a/0x5a0 [ 751.274690][ C1] ? __sanitizer_cov_trace_const_cmp4+0x81/0x90 [ 751.274716][ C1] ? default_do_nmi+0x63/0x160 [ 751.274738][ C1] ? exc_nmi+0x123/0x1f0 [ 751.274759][ C1] ? end_repeat_nmi+0xf/0x53 [ 751.274782][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 751.274807][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 751.274834][ C1] ? unwind_get_return_address+0x37/0xc0 [ 751.274862][ C1] ? __sanitizer_cov_trace_const_cmp4+0x81/0x90 [ 751.274889][ C1] ? __sanitizer_cov_trace_const_cmp4+0x81/0x90 [ 751.274917][ C1] ? __sanitizer_cov_trace_const_cmp4+0x81/0x90 [ 751.274944][ C1] [ 751.274950][ C1] [ 751.274956][ C1] unwind_get_return_address+0x37/0xc0 [ 751.274983][ C1] ? stack_trace_save+0x118/0x1d0 [ 751.275005][ C1] arch_stack_walk+0x125/0x1b0 [ 751.275027][ C1] ? kasan_save_track+0x3f/0x80 [ 751.275050][ C1] stack_trace_save+0x118/0x1d0 [ 751.275074][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 751.275099][ C1] ? mark_lock+0x9a/0x360 [ 751.275129][ C1] kasan_save_track+0x3f/0x80 [ 751.275179][ C1] ? skb_release_data+0x64d/0x880 [ 751.275200][ C1] kasan_save_free_info+0x40/0x50 [ 751.275227][ C1] poison_slab_object+0xe0/0x150 [ 751.275248][ C1] ? skb_release_data+0x64d/0x880 [ 751.275270][ C1] __kasan_slab_free+0x37/0x60 [ 751.275290][ C1] kmem_cache_free+0x145/0x350 [ 751.275320][ C1] skb_release_data+0x64d/0x880 [ 751.275349][ C1] sk_skb_reason_drop+0x1a5/0x3d0 [ 751.275373][ C1] ieee80211_iface_work+0x272/0xf20 [ 751.275405][ C1] cfg80211_wiphy_work+0x2db/0x490 [ 751.275431][ C1] ? process_scheduled_works+0x945/0x1830 [ 751.275453][ C1] process_scheduled_works+0xa2c/0x1830 [ 751.275491][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 751.275519][ C1] ? assign_work+0x364/0x3d0 [ 751.275543][ C1] worker_thread+0x86d/0xd40 [ 751.275575][ C1] ? __kthread_parkme+0x169/0x1d0 [ 751.275606][ C1] ? __pfx_worker_thread+0x10/0x10 [ 751.275629][ C1] kthread+0x2f0/0x390 [ 751.275654][ C1] ? __pfx_worker_thread+0x10/0x10 [ 751.275676][ C1] ? __pfx_kthread+0x10/0x10 [ 751.275702][ C1] ret_from_fork+0x4b/0x80 [ 751.275726][ C1] ? __pfx_kthread+0x10/0x10 [ 751.275751][ C1] ret_from_fork_asm+0x1a/0x30 [ 751.275786][ C1] [ 751.276246][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 751.276261][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 751.276288][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 751.276303][ T31] Call Trace: [ 751.276313][ T31] [ 751.276323][ T31] dump_stack_lvl+0x241/0x360 [ 751.276364][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 751.276401][ T31] ? __pfx__printk+0x10/0x10 [ 751.276431][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 751.276470][ T31] ? vscnprintf+0x5d/0x90 [ 751.276500][ T31] panic+0x349/0x870 [ 751.276535][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 751.276565][ T31] ? __pfx_panic+0x10/0x10 [ 751.276596][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 751.276625][ T31] ? __irq_work_queue_local+0x137/0x410 [ 751.276661][ T31] ? irq_work_queue+0xca/0x150 [ 751.276692][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 751.276721][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 751.276751][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 751.276779][ T31] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 751.276812][ T31] watchdog+0x102d/0x1030 [ 751.276854][ T31] ? watchdog+0x1ea/0x1030 [ 751.276893][ T31] ? __pfx_watchdog+0x10/0x10 [ 751.276926][ T31] kthread+0x2f0/0x390 [ 751.276958][ T31] ? __pfx_watchdog+0x10/0x10 [ 751.276991][ T31] ? __pfx_kthread+0x10/0x10 [ 751.277024][ T31] ret_from_fork+0x4b/0x80 [ 751.277056][ T31] ? __pfx_kthread+0x10/0x10 [ 751.277090][ T31] ret_from_fork_asm+0x1a/0x30 [ 751.277138][ T31] [ 751.277446][ T31] Kernel Offset: disabled