last executing test programs: 3m14.672124525s ago: executing program 2 (id=5316): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 3m13.65169482s ago: executing program 2 (id=5318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 2m37.15436085s ago: executing program 2 (id=5318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 1m58.83322381s ago: executing program 2 (id=5318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 1m8.687841838s ago: executing program 2 (id=5318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 50.728950818s ago: executing program 2 (id=5318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 48.55775148s ago: executing program 1 (id=5632): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128)\x00'}, 0x6e) 48.424634689s ago: executing program 1 (id=5633): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40) close(r0) 48.021532762s ago: executing program 1 (id=5635): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0xa8, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_REG_RULES={0x7c, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}]}]}, 0xa8}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) 47.770869862s ago: executing program 1 (id=5636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1bbac77, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x4b]}}]}) 47.362813075s ago: executing program 1 (id=5639): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}]}, 0x20}}, 0x0) 47.181258084s ago: executing program 1 (id=5641): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x0, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, 0x0, 0x0) unshare(0x62040200) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="290000001a00190f00003fffffffda0602000000ffe80001dd0000040d001800ea1101650005000000", 0x29}], 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@local}, 0x14) syz_emit_ethernet(0x46, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) 26.32677286s ago: executing program 3 (id=5696): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) io_setup(0x685, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x8}, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) io_pgetevents(0x0, 0x2, 0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0)={&(0x7f0000000080)={[0x100000000]}, 0x8}) 24.599511388s ago: executing program 3 (id=5700): socket$alg(0x26, 0x5, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x98cc1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg$can_j1939(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 23.417212409s ago: executing program 3 (id=5706): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000002ec0)=""/4096, 0x1000) 22.948054711s ago: executing program 3 (id=5707): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_io_uring_setup(0x4173, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 20.528103969s ago: executing program 3 (id=5710): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) io_setup(0x685, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x8}, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) io_pgetevents(0x0, 0x2, 0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0)={&(0x7f0000000080)={[0x100000000]}, 0x8}) 13.072188727s ago: executing program 3 (id=5721): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r5, 0x1, 0x2d, &(0x7f00000001c0)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0x820, 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000740)=0x3ee) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r7) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x60, r8, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24044884}, 0x8081) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6e, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000225fedbdf2505000000080e9027a1a2192c5d706480220007010700000005000500060000003c0001800800060000000000bbffffff00"/68, @ANYRES32=r3, @ANYBLOB="08000300e0000001080003006401010108000700", @ANYRES32=r9, @ANYBLOB="0500020040000000060005004e22000004000180"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x808) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r8, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}}, 0x50) 9.074999592s ago: executing program 0 (id=5725): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000009780), 0x1, 0x96d4, &(0x7f0000012ec0)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0205838, 0x0) 7.818108045s ago: executing program 0 (id=5726): syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@random="a94f3c5562f8", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe90000005dc9393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bbf8ed38adb72bbf4b9aeb7f4eb1927c4619f91394c02bcfbbb7d71138537d68e2d2c6393"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 7.753656688s ago: executing program 4 (id=5727): rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x0, 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 7.694764861s ago: executing program 4 (id=5728): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sched_setscheduler(0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) write$UHID_CREATE(r1, &(0x7f0000000280)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0}}, 0x120) 7.655863756s ago: executing program 0 (id=5729): bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)='(', 0x1}, {0x0}], 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x4e0}, 0x20000000) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0x9, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, &(0x7f0000000700), &(0x7f00000000c0)=0x24) 4.170495225s ago: executing program 0 (id=5730): rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000000340)=[{0x0, 0x0}, {0x8374, 0x0}, {0x0, 0x0}], 0x3, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208082, &(0x7f0000000180)={[{@grpquota}, {@jqfmt_vfsv1}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='reclaim_retry_zone\x00'}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sendfile(r1, r0, 0x0, 0x2c62) 4.080076328s ago: executing program 4 (id=5731): socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x48) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xd, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r4, r4, 0xa93, 0x0, 0x3fff}) 555.118702ms ago: executing program 0 (id=5733): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2b, 0x801, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) truncate(&(0x7f0000001700)='./file0\x00', 0x1) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xc5) r2 = open(&(0x7f0000000040)='./file0\x00', 0x10100, 0x89) r3 = inotify_init1(0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000100)={{}, 0x0, 0x0, @inherit={0x50, &(0x7f0000001840)={0x0, 0x1, 0xffffffff, 0x4, {0x8, 0x2, 0x1, 0x3ff, 0x98}, [0x68]}}, @name="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"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000001200)={"41e00553df175b74071729f5a119a6f5", 0x0, 0x0, {0x4, 0x6}, {0x4, 0x6}, 0xfff7, [0x0, 0x1000095, 0x2, 0x2, 0x3, 0x1, 0x0, 0x1, 0x7, 0x10001, 0x200, 0x7, 0xffffffffffff8000, 0x8, 0x7, 0x7]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002c80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000700)={{r4}, 0x0, 0x8, @unused=[0x2, 0xd7cd, 0x1, 0x20], @devid=r6}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000006c0)={{r2}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000600)=ANY=[@ANYRESOCT]}, @subvolid=0x3}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x518, 0x3a0, 0x0, 0x198, 0x3a0, 0x0, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@ipv6={@loopback={0x6200000000000000}, @mcast2, [], [], 'syzkaller1\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ip_vti0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "5d6954d77e6a21161d9c269dfa61b4186476f88191f8b18d04fd58839b0f"}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001800)={0x0, 0xfffffffffffffe6e, &(0x7f0000001780)={&(0x7f0000001840)=ANY=[], 0x26}}, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, &(0x7f00000000c0)}) r8 = dup2(r1, r5) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x2, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x3}}, 0xe8) connect$inet(r9, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000001bc0)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000001c80)={{r9}, r10, 0x1c, @unused=[0x7, 0x0, 0xffffffff, 0x80000000], @subvolid=0x7}) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000340)={'\x00', 0x0, 0x2, 0x10000, 0x4}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001740)) ioctl$BLKTRACESETUP(r8, 0x1274, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x8) ppoll(&(0x7f0000000200)=[{r0}], 0x1e, 0x0, 0x0, 0x0) 256.832353ms ago: executing program 4 (id=5734): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0xff) syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 112.01299ms ago: executing program 0 (id=5735): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000009780), 0x1, 0x96d4, &(0x7f0000012ec0)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0205838, 0x0) 68.19714ms ago: executing program 4 (id=5736): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x34) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x39) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x34) dup2(r2, r3) 0s ago: executing program 4 (id=5737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000001c0)=r0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x46) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000004700)=""/112, 0x70}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200000000", 0xc) r7 = accept$alg(r4, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/120], 0xc0}}, 0x0) write$binfmt_script(r7, &(0x7f0000004180), 0xff77) msgsnd(0x0, &(0x7f00000002c0)=ANY=[], 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) kernel console output (not intermixed with test programs): sabled+0x13/0x30 [ 1567.288443][ C0] __mutex_lock+0x6a4/0xd70 [ 1567.293056][ C0] ? __mutex_lock+0x527/0xd70 [ 1567.297848][ C0] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 1567.304376][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1567.309529][ C0] ? get_rtnl_holder+0x144/0x190 [ 1567.314562][ C0] unregister_netdevice_notifier_net+0x89/0x3a0 [ 1567.320922][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1567.325832][ C0] ? mntput_no_expire+0x2da/0x850 [ 1567.330984][ C0] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 1567.337977][ C0] ? __pfx_mntput_no_expire+0x10/0x10 [ 1567.343467][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1567.348406][ C0] ? simple_release_fs+0x9c/0xd0 [ 1567.353457][ C0] nsim_dev_hwstats_exit+0x81/0x290 [ 1567.358721][ C0] ? kfree+0x149/0x360 [ 1567.362911][ C0] nsim_dev_reload_destroy+0x2ad/0x490 [ 1567.368518][ C0] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1567.373933][ C0] nsim_drv_remove+0x58/0x160 [ 1567.378672][ C0] device_release_driver_internal+0x4a9/0x7c0 [ 1567.384893][ C0] bus_remove_device+0x34f/0x420 [ 1567.389954][ C0] device_del+0x57a/0x9b0 [ 1567.394355][ C0] ? __pfx_device_del+0x10/0x10 [ 1567.399368][ C0] device_unregister+0x20/0xc0 [ 1567.404196][ C0] del_device_store+0x363/0x480 [ 1567.409121][ C0] ? __pfx_del_device_store+0x10/0x10 [ 1567.414638][ C0] ? sysfs_kf_write+0x182/0x2a0 [ 1567.419595][ C0] ? bus_attr_store+0x4f/0xa0 [ 1567.424325][ C0] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1567.429619][ C0] kernfs_fop_write_iter+0x3a1/0x500 [ 1567.435002][ C0] vfs_write+0xa72/0xc90 [ 1567.439343][ C0] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1567.445209][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1567.450195][ C0] ksys_write+0x1a0/0x2c0 [ 1567.454621][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1567.459596][ C0] ? do_syscall_64+0x100/0x230 [ 1567.464457][ C0] ? do_syscall_64+0xb6/0x230 [ 1567.469347][ C0] do_syscall_64+0xf3/0x230 [ 1567.473901][ C0] ? clear_bhb_loop+0x35/0x90 [ 1567.478658][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.484680][ C0] RIP: 0033:0x7f83e617475f [ 1567.489146][ C0] RSP: 002b:00007ffe01e8a360 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1567.497693][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f83e617475f [ 1567.505789][ C0] RDX: 0000000000000001 RSI: 00007ffe01e8a3b0 RDI: 0000000000000005 [ 1567.513862][ C0] RBP: 00007f83e61e45a0 R08: 0000000000000000 R09: 00007ffe01e8a1b7 [ 1567.521956][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1567.530018][ C0] R13: 00007ffe01e8a3b0 R14: 00007f83e6e34620 R15: 0000000000000003 [ 1567.538102][ C0] [ 1567.541227][ C0] DEBUG: waiting rtnl_mutex for 507 jiffies. [ 1567.547241][ C0] task:syz-executor state:D stack:20368 pid:23759 tgid:23759 ppid:23758 flags:0x00004000 [ 1567.557540][ C0] Call Trace: [ 1567.560899][ C0] [ 1567.563922][ C0] __schedule+0x1800/0x4a60 [ 1567.568551][ C0] ? __pfx___schedule+0x10/0x10 [ 1567.573684][ C0] ? __pfx_lock_release+0x10/0x10 [ 1567.578776][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1567.584387][ C0] ? schedule+0x90/0x320 [ 1567.588710][ C0] schedule+0x14b/0x320 [ 1567.593022][ C0] schedule_preempt_disabled+0x13/0x30 [ 1567.598675][ C0] __mutex_lock+0x6a4/0xd70 [ 1567.603353][ C0] ? __mutex_lock+0x527/0xd70 [ 1567.608109][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1567.613442][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1567.618604][ C0] ? get_rtnl_holder+0x144/0x190 [ 1567.623646][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1567.628741][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1567.634091][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1567.639656][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 1567.645010][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1567.650335][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1567.655599][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1567.662044][ C0] ? preempt_schedule_notrace+0x100/0x140 [ 1567.667872][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 1567.674047][ C0] ? mark_lock+0x9a/0x360 [ 1567.678434][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1567.683792][ C0] ? __lock_acquire+0x1359/0x2000 [ 1567.688898][ C0] ? mark_lock+0x9a/0x360 [ 1567.693339][ C0] ? __lock_acquire+0x1359/0x2000 [ 1567.698486][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1567.703393][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1567.708935][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1567.714427][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1567.719736][ C0] netlink_unicast+0x7f0/0x990 [ 1567.724594][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1567.729978][ C0] ? __virt_addr_valid+0x183/0x530 [ 1567.735200][ C0] ? __check_object_size+0x49c/0x900 [ 1567.740587][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1567.745762][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1567.750668][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1567.756009][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1567.761050][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1567.766430][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1567.772008][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1567.777343][ C0] __sock_sendmsg+0x221/0x270 [ 1567.782156][ C0] __sys_sendto+0x3a4/0x4f0 [ 1567.786717][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1567.791857][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1567.797105][ C0] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 1567.803356][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1567.809641][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1567.816086][ C0] __x64_sys_sendto+0xde/0x100 [ 1567.820970][ C0] do_syscall_64+0xf3/0x230 [ 1567.825525][ C0] ? clear_bhb_loop+0x35/0x90 [ 1567.830331][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.836327][ C0] RIP: 0033:0x7f601b97796c [ 1567.840838][ C0] RSP: 002b:00007ffe14f47d70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1567.849375][ C0] RAX: ffffffffffffffda RBX: 00007f601c634620 RCX: 00007f601b97796c [ 1567.857420][ C0] RDX: 0000000000000064 RSI: 00007f601c634670 RDI: 0000000000000003 [ 1567.865507][ C0] RBP: 0000000000000000 R08: 00007ffe14f47dc4 R09: 000000000000000c [ 1567.873695][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1567.881796][ C0] R13: 0000000000000000 R14: 00007f601c634670 R15: 0000000000000000 [ 1567.889882][ C0] [ 1567.892956][ C0] DEBUG: holding rtnl_mutex for 537 jiffies. [ 1567.899038][ C0] task:kworker/u8:1 state:D stack:19728 pid:18683 tgid:18683 ppid:2 flags:0x00004000 [ 1567.909495][ C0] Workqueue: netns cleanup_net [ 1567.914364][ C0] Call Trace: [ 1567.917689][ C0] [ 1567.920745][ C0] __schedule+0x1800/0x4a60 [ 1567.925335][ C0] ? __pfx___schedule+0x10/0x10 [ 1567.930301][ C0] ? __pfx_lock_release+0x10/0x10 [ 1567.935425][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1567.941426][ C0] ? kthread_data+0x52/0xd0 [ 1567.945987][ C0] ? wq_worker_sleeping+0x66/0x240 [ 1567.951321][ C0] ? schedule+0x90/0x320 [ 1567.955619][ C0] schedule+0x14b/0x320 [ 1567.959885][ C0] synchronize_rcu_expedited+0x684/0x830 [ 1567.965622][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1567.971926][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1567.977274][ C0] ? __pfx___might_resched+0x10/0x10 [ 1567.982684][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1567.988739][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1567.994917][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1568.001471][ C0] synchronize_rcu+0x11b/0x360 [ 1568.006335][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 1568.011832][ C0] lockdep_unregister_key+0x556/0x610 [ 1568.017314][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1568.023418][ C0] ? rcu_is_watching+0x15/0xb0 [ 1568.028244][ C0] ? qdisc_reset+0x3bf/0x5b0 [ 1568.032966][ C0] __qdisc_destroy+0x165/0x410 [ 1568.037801][ C0] dev_shutdown+0x9b/0x440 [ 1568.042328][ C0] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 1568.048792][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1568.055708][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 1568.061714][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 1568.067978][ C0] default_device_exit_batch+0xa0f/0xa90 [ 1568.073741][ C0] ? __pfx___might_resched+0x10/0x10 [ 1568.079082][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1568.085388][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1568.090877][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1568.097099][ C0] cleanup_net+0x89d/0xcc0 [ 1568.101639][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1568.106683][ C0] ? process_scheduled_works+0x945/0x1830 [ 1568.112569][ C0] process_scheduled_works+0xa2c/0x1830 [ 1568.118269][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1568.124391][ C0] ? assign_work+0x364/0x3d0 [ 1568.129046][ C0] worker_thread+0x86d/0xd40 [ 1568.133813][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1568.139815][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1568.144900][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1568.150135][ C0] kthread+0x2f0/0x390 [ 1568.154266][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1568.159468][ C0] ? __pfx_kthread+0x10/0x10 [ 1568.164122][ C0] ret_from_fork+0x4b/0x80 [ 1568.168635][ C0] ? __pfx_kthread+0x10/0x10 [ 1568.173347][ C0] ret_from_fork_asm+0x1a/0x30 [ 1568.178184][ C0] [ 1568.181308][ C0] [ 1568.181308][ C0] Showing all locks held in the system: [ 1568.189058][ C0] 3 locks held by kworker/u8:0/11: [ 1568.194290][ C0] #0: ffff888029a74948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1568.206042][ C0] #1: ffffc90000107d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1568.219008][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1568.228621][ C0] 2 locks held by getty/4853: [ 1568.233411][ C0] #0: ffff88802a29c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1568.243334][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1568.253619][ C0] 3 locks held by kworker/1:6/10133: [ 1568.258942][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1568.270099][ C0] #1: ffffc900041afd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1568.281246][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1568.290372][ C0] 5 locks held by kworker/u8:1/18683: [ 1568.295786][ C0] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1568.306831][ C0] #1: ffffc900100e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1568.317533][ C0] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1568.327111][ C0] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1568.337315][ C0] #4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1568.348469][ C0] 2 locks held by kworker/0:7/22287: [ 1568.353838][ C0] 1 lock held by syz.3.5363/22709: [ 1568.358983][ C0] #0: ffff88801b2a8578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: remove_inode_hugepages+0x38e/0x1520 [ 1568.370734][ C0] 5 locks held by kworker/u8:13/23064: [ 1568.376240][ C0] 7 locks held by syz-executor/23618: [ 1568.381772][ C0] #0: ffff88802a1fa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1568.390796][ C0] #1: ffff888068e7d088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1568.400737][ C0] #2: ffff8880222545a8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1568.410923][ C0] #3: ffffffff8ef05248 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1568.421390][ C0] #4: ffff88804fbc10e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1568.432101][ C0] #5: ffff888056617250 (&devlink->lock_key#83){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1568.442357][ C0] #6: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 1568.453235][ C0] 1 lock held by syz-executor/23759: [ 1568.458608][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1568.468275][ C0] 1 lock held by syz.0.5717/23922: [ 1568.473464][ C0] #0: ffff88806a1f3a98 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x17c/0x3d0 [ 1568.483060][ C0] 7 locks held by syz.0.5717/23924: [ 1568.488294][ C0] #0: ffff88806a1f3a98 (&mm->mmap_lock){++++}-{3:3}, at: __mm_populate+0x1b0/0x460 [ 1568.497900][ C0] #1: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: handle_pte_fault+0x21d9/0x6eb0 [ 1568.507840][ C0] #2: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: filemap_map_pages+0x24f/0x1e70 [ 1568.517767][ C0] #3: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x82/0x380 [ 1568.527421][ C0] #4: ffff888028bce438 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x1ba/0x300 [ 1568.538242][ C0] #5: ffffc90000007c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1568.548508][ C0] #6: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1568.558503][ C0] 1 lock held by syz.4.5718/23926: [ 1568.563695][ C0] #0: ffff8880b953ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1568.573796][ C0] 2 locks held by syz.4.5718/23927: [ 1568.579031][ C0] [ 1568.581448][ C0] ============================================= [ 1568.581448][ C0] [ 1569.669385][ C0] DEBUG: waiting rtnl_mutex for 766 jiffies. [ 1569.675460][ C0] task:kworker/u8:0 state:D stack:18712 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 1569.685758][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 1569.691845][ C0] Call Trace: [ 1569.695159][ C0] [ 1569.698125][ C0] __schedule+0x1800/0x4a60 [ 1569.702740][ C0] ? __pfx___schedule+0x10/0x10 [ 1569.707638][ C0] ? __pfx_lock_release+0x10/0x10 [ 1569.712754][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1569.718267][ C0] ? kthread_data+0x52/0xd0 [ 1569.722848][ C0] ? schedule+0x90/0x320 [ 1569.727131][ C0] ? wq_worker_sleeping+0x66/0x240 [ 1569.732334][ C0] ? schedule+0x90/0x320 [ 1569.737227][ C0] schedule+0x14b/0x320 [ 1569.741502][ C0] schedule_preempt_disabled+0x13/0x30 [ 1569.747011][ C0] __mutex_lock+0x6a4/0xd70 [ 1569.751613][ C0] ? mark_lock+0x9a/0x360 [ 1569.756018][ C0] ? __mutex_lock+0x527/0xd70 [ 1569.760800][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 1569.765993][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1569.771148][ C0] ? get_rtnl_holder+0x144/0x190 [ 1569.776134][ C0] addrconf_dad_work+0xd0/0x16f0 [ 1569.781161][ C0] ? preempt_schedule+0xe1/0xf0 [ 1569.786056][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1569.791557][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1569.797093][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 1569.802588][ C0] ? process_scheduled_works+0x945/0x1830 [ 1569.808357][ C0] process_scheduled_works+0xa2c/0x1830 [ 1569.814022][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1569.820538][ C0] ? assign_work+0x364/0x3d0 [ 1569.825182][ C0] worker_thread+0x86d/0xd40 [ 1569.829883][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1569.834959][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1569.840146][ C0] kthread+0x2f0/0x390 [ 1569.844299][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1569.849499][ C0] ? __pfx_kthread+0x10/0x10 [ 1569.854139][ C0] ret_from_fork+0x4b/0x80 [ 1569.858608][ C0] ? __pfx_kthread+0x10/0x10 [ 1569.863307][ C0] ret_from_fork_asm+0x1a/0x30 [ 1569.868143][ C0] [ 1569.871242][ C0] DEBUG: waiting rtnl_mutex for 636 jiffies. [ 1569.877245][ C0] task:kworker/1:6 state:D stack:20976 pid:10133 tgid:10133 ppid:2 flags:0x00004000 [ 1569.887599][ C0] Workqueue: events linkwatch_event [ 1569.892887][ C0] Call Trace: [ 1569.896279][ C0] [ 1569.899243][ C0] __schedule+0x1800/0x4a60 [ 1569.903873][ C0] ? __pfx___schedule+0x10/0x10 [ 1569.908804][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1569.914929][ C0] ? __pfx_lock_release+0x10/0x10 [ 1569.920064][ C0] ? kick_pool+0x45c/0x620 [ 1569.924555][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1569.929848][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1569.935095][ C0] ? schedule+0x90/0x320 [ 1569.939407][ C0] schedule+0x14b/0x320 [ 1569.943610][ C0] schedule_preempt_disabled+0x13/0x30 [ 1569.949108][ C0] __mutex_lock+0x6a4/0xd70 [ 1569.953683][ C0] ? __mutex_lock+0x527/0xd70 [ 1569.958410][ C0] ? linkwatch_event+0xe/0x60 [ 1569.963149][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1569.968289][ C0] ? get_rtnl_holder+0x144/0x190 [ 1569.973271][ C0] ? process_scheduled_works+0x945/0x1830 [ 1569.979005][ C0] linkwatch_event+0xe/0x60 [ 1569.983546][ C0] process_scheduled_works+0xa2c/0x1830 [ 1569.989136][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1569.995172][ C0] ? assign_work+0x364/0x3d0 [ 1569.999816][ C0] worker_thread+0x86d/0xd40 [ 1570.004429][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1570.010363][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1570.015405][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1570.020554][ C0] kthread+0x2f0/0x390 [ 1570.024641][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1570.029792][ C0] ? __pfx_kthread+0x10/0x10 [ 1570.034411][ C0] ret_from_fork+0x4b/0x80 [ 1570.038847][ C0] ? __pfx_kthread+0x10/0x10 [ 1570.043473][ C0] ret_from_fork_asm+0x1a/0x30 [ 1570.048263][ C0] [ 1570.051316][ C0] DEBUG: waiting rtnl_mutex for 862 jiffies. [ 1570.057295][ C0] task:syz-executor state:D stack:21024 pid:23618 tgid:23618 ppid:23593 flags:0x00004002 [ 1570.067509][ C0] Call Trace: [ 1570.070839][ C0] [ 1570.073962][ C0] __schedule+0x1800/0x4a60 [ 1570.078495][ C0] ? __pfx___schedule+0x10/0x10 [ 1570.083385][ C0] ? __pfx_lock_release+0x10/0x10 [ 1570.088421][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1570.093928][ C0] ? schedule+0x90/0x320 [ 1570.098172][ C0] schedule+0x14b/0x320 [ 1570.102367][ C0] schedule_preempt_disabled+0x13/0x30 [ 1570.107830][ C0] __mutex_lock+0x6a4/0xd70 [ 1570.112370][ C0] ? __mutex_lock+0x527/0xd70 [ 1570.117060][ C0] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 1570.123503][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1570.128544][ C0] ? get_rtnl_holder+0x144/0x190 [ 1570.133511][ C0] unregister_netdevice_notifier_net+0x89/0x3a0 [ 1570.139801][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1570.144666][ C0] ? mntput_no_expire+0x2da/0x850 [ 1570.149743][ C0] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 1570.156605][ C0] ? __pfx_mntput_no_expire+0x10/0x10 [ 1570.162058][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1570.166962][ C0] ? simple_release_fs+0x9c/0xd0 [ 1570.172085][ C0] nsim_dev_hwstats_exit+0x81/0x290 [ 1570.177302][ C0] ? kfree+0x149/0x360 [ 1570.181428][ C0] nsim_dev_reload_destroy+0x2ad/0x490 [ 1570.186925][ C0] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1570.192260][ C0] nsim_drv_remove+0x58/0x160 [ 1570.196947][ C0] device_release_driver_internal+0x4a9/0x7c0 [ 1570.203134][ C0] bus_remove_device+0x34f/0x420 [ 1570.208110][ C0] device_del+0x57a/0x9b0 [ 1570.212492][ C0] ? __pfx_device_del+0x10/0x10 [ 1570.217359][ C0] device_unregister+0x20/0xc0 [ 1570.222158][ C0] del_device_store+0x363/0x480 [ 1570.227037][ C0] ? __pfx_del_device_store+0x10/0x10 [ 1570.232446][ C0] ? sysfs_kf_write+0x182/0x2a0 [ 1570.237305][ C0] ? bus_attr_store+0x4f/0xa0 [ 1570.242013][ C0] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1570.247233][ C0] kernfs_fop_write_iter+0x3a1/0x500 [ 1570.252563][ C0] vfs_write+0xa72/0xc90 [ 1570.256813][ C0] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1570.262652][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1570.267449][ C0] ksys_write+0x1a0/0x2c0 [ 1570.271860][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1570.276728][ C0] ? do_syscall_64+0x100/0x230 [ 1570.281604][ C0] ? do_syscall_64+0xb6/0x230 [ 1570.286292][ C0] do_syscall_64+0xf3/0x230 [ 1570.290846][ C0] ? clear_bhb_loop+0x35/0x90 [ 1570.295544][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.301475][ C0] RIP: 0033:0x7f83e617475f [ 1570.305895][ C0] RSP: 002b:00007ffe01e8a360 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1570.314341][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f83e617475f [ 1570.322358][ C0] RDX: 0000000000000001 RSI: 00007ffe01e8a3b0 RDI: 0000000000000005 [ 1570.330415][ C0] RBP: 00007f83e61e45a0 R08: 0000000000000000 R09: 00007ffe01e8a1b7 [ 1570.338429][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1570.346455][ C0] R13: 00007ffe01e8a3b0 R14: 00007f83e6e34620 R15: 0000000000000003 [ 1570.354477][ C0] [ 1570.357511][ C0] DEBUG: waiting rtnl_mutex for 788 jiffies. [ 1570.363516][ C0] task:syz-executor state:D stack:20368 pid:23759 tgid:23759 ppid:23758 flags:0x00004000 [ 1570.373746][ C0] Call Trace: [ 1570.377056][ C0] [ 1570.380034][ C0] __schedule+0x1800/0x4a60 [ 1570.384591][ C0] ? __pfx___schedule+0x10/0x10 [ 1570.389551][ C0] ? __pfx_lock_release+0x10/0x10 [ 1570.394643][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1570.400180][ C0] ? schedule+0x90/0x320 [ 1570.404466][ C0] schedule+0x14b/0x320 [ 1570.408656][ C0] schedule_preempt_disabled+0x13/0x30 [ 1570.414167][ C0] __mutex_lock+0x6a4/0xd70 [ 1570.418718][ C0] ? __mutex_lock+0x527/0xd70 [ 1570.423472][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1570.428867][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1570.434043][ C0] ? get_rtnl_holder+0x144/0x190 [ 1570.438999][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1570.444080][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1570.449338][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1570.454909][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 1570.460246][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1570.465467][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1570.470720][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1570.477078][ C0] ? preempt_schedule_notrace+0x100/0x140 [ 1570.482948][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 1570.489028][ C0] ? mark_lock+0x9a/0x360 [ 1570.493410][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1570.498623][ C0] ? __lock_acquire+0x1359/0x2000 [ 1570.503705][ C0] ? mark_lock+0x9a/0x360 [ 1570.508071][ C0] ? __lock_acquire+0x1359/0x2000 [ 1570.513179][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1570.517965][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1570.523557][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1570.528872][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1570.534117][ C0] netlink_unicast+0x7f0/0x990 [ 1570.538909][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1570.544296][ C0] ? __virt_addr_valid+0x183/0x530 [ 1570.549535][ C0] ? __check_object_size+0x49c/0x900 [ 1570.554856][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1570.560026][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1570.564900][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1570.570233][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1570.575275][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1570.580627][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1570.586126][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1570.591994][ C0] __sock_sendmsg+0x221/0x270 [ 1570.596707][ C0] __sys_sendto+0x3a4/0x4f0 [ 1570.601263][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1570.606326][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1570.611646][ C0] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 1570.617754][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1570.623775][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1570.630152][ C0] __x64_sys_sendto+0xde/0x100 [ 1570.634947][ C0] do_syscall_64+0xf3/0x230 [ 1570.639657][ C0] ? clear_bhb_loop+0x35/0x90 [ 1570.644358][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.650290][ C0] RIP: 0033:0x7f601b97796c [ 1570.654713][ C0] RSP: 002b:00007ffe14f47d70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1570.663158][ C0] RAX: ffffffffffffffda RBX: 00007f601c634620 RCX: 00007f601b97796c [ 1570.671165][ C0] RDX: 0000000000000064 RSI: 00007f601c634670 RDI: 0000000000000003 [ 1570.679381][ C0] RBP: 0000000000000000 R08: 00007ffe14f47dc4 R09: 000000000000000c [ 1570.687389][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1570.695406][ C0] R13: 0000000000000000 R14: 00007f601c634670 R15: 0000000000000000 [ 1570.703513][ C0] [ 1570.706536][ C0] DEBUG: holding rtnl_mutex for 818 jiffies. [ 1570.712579][ C0] task:kworker/u8:1 state:R running task stack:19728 pid:18683 tgid:18683 ppid:2 flags:0x00004000 [ 1570.724387][ C0] Workqueue: netns cleanup_net [ 1570.729187][ C0] Call Trace: [ 1570.732579][ C0] [ 1570.735516][ C0] __schedule+0x1800/0x4a60 [ 1570.740072][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1570.746065][ C0] ? finish_task_switch+0x1e5/0x870 [ 1570.751309][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1570.757657][ C0] ? __pfx___schedule+0x10/0x10 [ 1570.762545][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1570.767767][ C0] ? mark_lock+0x9a/0x360 [ 1570.772135][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 1570.777259][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1570.783067][ C0] irqentry_exit+0x5e/0x90 [ 1570.787502][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1570.793007][ C0] RIP: 0010:lockdep_unregister_key+0x56d/0x610 [ 1570.799173][ C0] Code: ff 92 48 c7 c6 10 bc 6f 81 e8 8f 04 0a 00 e8 fa 18 0a 00 e9 e5 fb ff ff e8 c0 62 21 0a 41 f7 c7 00 02 00 00 74 d0 fb 45 84 f6 <75> cf eb e0 90 0f 0b 90 45 31 f6 e9 62 ff ff ff 90 0f 0b 90 e9 a1 [ 1570.818825][ C0] RSP: 0018:ffffc900100e75c0 EFLAGS: 00000246 [ 1570.824944][ C0] RAX: dffffc0000000000 RBX: 1ffff9200201cec0 RCX: ffffffff947f4803 [ 1570.832945][ C0] RDX: 0000000000000001 RSI: ffffffff8bcad5e0 RDI: ffffffff8c207f20 [ 1570.841041][ C0] RBP: ffffc900100e7698 R08: ffffffff930006af R09: 1ffffffff26000d5 [ 1570.849118][ C0] R10: dffffc0000000000 R11: fffffbfff26000d6 R12: ffffc900100e7600 [ 1570.857129][ C0] R13: 1ffff9200201cebc R14: 0000000000000000 R15: 0000000000000a06 [ 1570.865211][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1570.871171][ C0] ? rcu_is_watching+0x15/0xb0 [ 1570.875958][ C0] ? qdisc_reset+0x3bf/0x5b0 [ 1570.880617][ C0] __qdisc_destroy+0x165/0x410 [ 1570.885431][ C0] dev_shutdown+0x357/0x440 [ 1570.889993][ C0] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 1570.896362][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1570.903184][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 1570.909092][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 1570.915289][ C0] default_device_exit_batch+0xa0f/0xa90 [ 1570.920984][ C0] ? __pfx___might_resched+0x10/0x10 [ 1570.926311][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1570.932526][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1570.937817][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1570.944028][ C0] cleanup_net+0x89d/0xcc0 [ 1570.948470][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1570.953538][ C0] ? process_scheduled_works+0x945/0x1830 [ 1570.959351][ C0] process_scheduled_works+0xa2c/0x1830 [ 1570.964971][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1570.971011][ C0] ? assign_work+0x364/0x3d0 [ 1570.975634][ C0] worker_thread+0x86d/0xd40 [ 1570.980288][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1570.986213][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1570.991322][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1570.996445][ C0] kthread+0x2f0/0x390 [ 1571.000563][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1571.005711][ C0] ? __pfx_kthread+0x10/0x10 [ 1571.010355][ C0] ret_from_fork+0x4b/0x80 [ 1571.014829][ C0] ? __pfx_kthread+0x10/0x10 [ 1571.019465][ C0] ret_from_fork_asm+0x1a/0x30 [ 1571.024257][ C0] [ 1571.027277][ C0] [ 1571.027277][ C0] Showing all locks held in the system: [ 1571.035117][ C0] 3 locks held by kworker/u8:0/11: [ 1571.040272][ C0] #0: ffff888029a74948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1571.051906][ C0] #1: ffffc90000107d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1571.064749][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1571.074234][ C0] 2 locks held by getty/4853: [ 1571.078908][ C0] #0: ffff88802a29c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1571.088737][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1571.098948][ C0] 3 locks held by kworker/u8:12/6004: [ 1571.104391][ C0] 3 locks held by kworker/1:6/10133: [ 1571.109703][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1571.120743][ C0] #1: ffffc900041afd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1571.131779][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1571.140803][ C0] 4 locks held by kworker/u8:1/18683: [ 1571.146178][ C0] 2 locks held by kworker/0:7/22287: [ 1571.151491][ C0] 1 lock held by syz.3.5363/22709: [ 1571.156603][ C0] #0: ffff88801b2a8578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: remove_inode_hugepages+0x38e/0x1520 [ 1571.168222][ C0] 5 locks held by kworker/u8:13/23064: [ 1571.173721][ C0] 7 locks held by syz-executor/23618: [ 1571.179088][ C0] #0: ffff88802a1fa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1571.188029][ C0] #1: ffff888068e7d088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1571.197847][ C0] #2: ffff8880222545a8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1571.207934][ C0] #3: ffffffff8ef05248 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1571.218267][ C0] #4: ffff88804fbc10e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1571.228848][ C0] #5: ffff888056617250 (&devlink->lock_key#83){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1571.238996][ C0] #6: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 1571.250014][ C0] 1 lock held by syz-executor/23759: [ 1571.255302][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1571.264870][ C0] 3 locks held by syz.0.5717/23924: [ 1571.270095][ C0] #0: ffff8880664c0e68 (&u->lock){+.+.}-{2:2}, at: unix_dgram_sendmsg+0xb3b/0x1f80 [ 1571.279567][ C0] #1: ffffc90000007c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1571.290166][ C0] #2: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1571.300092][ C0] 2 locks held by syz.0.5717/23930: [ 1571.305305][ C0] 1 lock held by syz.4.5718/23925: [ 1571.310448][ C0] #0: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1571.321413][ C0] 2 locks held by syz.4.5718/23927: [ 1571.326613][ C0] [ 1571.328939][ C0] ============================================= [ 1571.328939][ C0] [ 1572.014250][ T25] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1572.261268][ T25] usb 1-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 1572.270677][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.278778][ T25] usb 1-1: Product: syz [ 1572.311483][ C1] vkms_vblank_simulate: vblank timer overrun [ 1572.321064][ T25] usb 1-1: Manufacturer: syz [ 1572.325791][ T25] usb 1-1: SerialNumber: syz [ 1572.333716][ T25] usb 1-1: config 0 descriptor?? [ 1572.389473][ C0] DEBUG: waiting rtnl_mutex for 1038 jiffies. [ 1572.395654][ C0] task:kworker/u8:0 state:D stack:18712 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 1572.405991][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 1572.412107][ C0] Call Trace: [ 1572.413531][ C1] vkms_vblank_simulate: vblank timer overrun [ 1572.415423][ C0] [ 1572.424458][ C0] __schedule+0x1800/0x4a60 [ 1572.429080][ C0] ? __pfx___schedule+0x10/0x10 [ 1572.434052][ C0] ? __pfx_lock_release+0x10/0x10 [ 1572.439144][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1572.444851][ C0] ? kthread_data+0x52/0xd0 [ 1572.449446][ C0] ? schedule+0x90/0x320 [ 1572.453750][ C0] ? wq_worker_sleeping+0x66/0x240 [ 1572.458924][ C0] ? schedule+0x90/0x320 [ 1572.463275][ C0] schedule+0x14b/0x320 [ 1572.467489][ C0] schedule_preempt_disabled+0x13/0x30 [ 1572.473088][ C0] __mutex_lock+0x6a4/0xd70 [ 1572.477667][ C0] ? mark_lock+0x9a/0x360 [ 1572.482139][ C0] ? __mutex_lock+0x527/0xd70 [ 1572.486883][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 1572.492104][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1572.497290][ C0] ? get_rtnl_holder+0x144/0x190 [ 1572.502363][ C0] addrconf_dad_work+0xd0/0x16f0 [ 1572.507381][ C0] ? preempt_schedule+0xe1/0xf0 [ 1572.512363][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1572.517804][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1572.523400][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 1572.528834][ C0] ? process_scheduled_works+0x945/0x1830 [ 1572.534675][ C0] process_scheduled_works+0xa2c/0x1830 [ 1572.540468][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1572.546538][ C0] ? assign_work+0x364/0x3d0 [ 1572.551293][ C0] worker_thread+0x86d/0xd40 [ 1572.555971][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1572.561127][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1572.566374][ C0] kthread+0x2f0/0x390 [ 1572.570703][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1572.575886][ C0] ? __pfx_kthread+0x10/0x10 [ 1572.580602][ C0] ret_from_fork+0x4b/0x80 [ 1572.585139][ C0] ? __pfx_kthread+0x10/0x10 [ 1572.589942][ C0] ret_from_fork_asm+0x1a/0x30 [ 1572.594806][ C0] [ 1572.597891][ C0] DEBUG: waiting rtnl_mutex for 908 jiffies. [ 1572.604069][ C0] task:kworker/1:6 state:D stack:20976 pid:10133 tgid:10133 ppid:2 flags:0x00004000 [ 1572.614810][ C0] Workqueue: events linkwatch_event [ 1572.620355][ C0] Call Trace: [ 1572.623780][ C0] [ 1572.626793][ C0] __schedule+0x1800/0x4a60 [ 1572.631458][ C0] ? __pfx___schedule+0x10/0x10 [ 1572.636383][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1572.642476][ C0] ? __pfx_lock_release+0x10/0x10 [ 1572.647569][ C0] ? kick_pool+0x45c/0x620 [ 1572.649781][ T25] usb 1-1: USB disconnect, device number 36 [ 1572.652085][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1572.663360][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1572.668722][ C0] ? schedule+0x90/0x320 [ 1572.673094][ C0] schedule+0x14b/0x320 [ 1572.677439][ C0] schedule_preempt_disabled+0x13/0x30 [ 1572.683028][ C0] __mutex_lock+0x6a4/0xd70 [ 1572.687602][ C0] ? __mutex_lock+0x527/0xd70 [ 1572.692372][ C0] ? linkwatch_event+0xe/0x60 [ 1572.697103][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1572.702297][ C0] ? get_rtnl_holder+0x144/0x190 [ 1572.707302][ C0] ? process_scheduled_works+0x945/0x1830 [ 1572.713140][ C0] linkwatch_event+0xe/0x60 [ 1572.717713][ C0] process_scheduled_works+0xa2c/0x1830 [ 1572.723425][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1572.729728][ C0] ? assign_work+0x364/0x3d0 [ 1572.734414][ C0] worker_thread+0x86d/0xd40 [ 1572.739109][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1572.745119][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1572.750262][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1572.755526][ C0] kthread+0x2f0/0x390 [ 1572.759723][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1572.764895][ C0] ? __pfx_kthread+0x10/0x10 [ 1572.769607][ C0] ret_from_fork+0x4b/0x80 [ 1572.774128][ C0] ? __pfx_kthread+0x10/0x10 [ 1572.778908][ C0] ret_from_fork_asm+0x1a/0x30 [ 1572.783751][ C0] [ 1572.786783][ C0] DEBUG: waiting rtnl_mutex for 1135 jiffies. [ 1572.792926][ C0] task:syz-executor state:D stack:21024 pid:23618 tgid:23618 ppid:23593 flags:0x00004002 [ 1572.803212][ C0] Call Trace: [ 1572.806523][ C0] [ 1572.809541][ C0] __schedule+0x1800/0x4a60 [ 1572.814138][ C0] ? __pfx___schedule+0x10/0x10 [ 1572.819040][ C0] ? __pfx_lock_release+0x10/0x10 [ 1572.824175][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1572.829768][ C0] ? schedule+0x90/0x320 [ 1572.834334][ C0] schedule+0x14b/0x320 [ 1572.838549][ C0] schedule_preempt_disabled+0x13/0x30 [ 1572.844107][ C0] __mutex_lock+0x6a4/0xd70 [ 1572.848645][ C0] ? __mutex_lock+0x527/0xd70 [ 1572.853530][ C0] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 1572.860067][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1572.865219][ C0] ? get_rtnl_holder+0x144/0x190 [ 1572.870260][ C0] unregister_netdevice_notifier_net+0x89/0x3a0 [ 1572.876545][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1572.881582][ C0] ? mntput_no_expire+0x2da/0x850 [ 1572.886640][ C0] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 1572.893583][ C0] ? __pfx_mntput_no_expire+0x10/0x10 [ 1572.899030][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1572.903993][ C0] ? simple_release_fs+0x9c/0xd0 [ 1572.908986][ C0] nsim_dev_hwstats_exit+0x81/0x290 [ 1572.914516][ C0] ? kfree+0x149/0x360 [ 1572.918698][ C0] nsim_dev_reload_destroy+0x2ad/0x490 [ 1572.924241][ C0] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1572.929633][ C0] nsim_drv_remove+0x58/0x160 [ 1572.934725][ C0] device_release_driver_internal+0x4a9/0x7c0 [ 1572.940916][ C0] bus_remove_device+0x34f/0x420 [ 1572.945918][ C0] device_del+0x57a/0x9b0 [ 1572.950368][ C0] ? __pfx_device_del+0x10/0x10 [ 1572.955284][ C0] device_unregister+0x20/0xc0 [ 1572.960242][ C0] del_device_store+0x363/0x480 [ 1572.965171][ C0] ? __pfx_del_device_store+0x10/0x10 [ 1572.970678][ C0] ? sysfs_kf_write+0x182/0x2a0 [ 1572.975592][ C0] ? bus_attr_store+0x4f/0xa0 [ 1572.980390][ C0] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1572.985737][ C0] kernfs_fop_write_iter+0x3a1/0x500 [ 1572.991142][ C0] vfs_write+0xa72/0xc90 [ 1572.995430][ C0] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1573.001347][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1573.006189][ C0] ksys_write+0x1a0/0x2c0 [ 1573.010629][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1573.015525][ C0] ? do_syscall_64+0x100/0x230 [ 1573.020373][ C0] ? do_syscall_64+0xb6/0x230 [ 1573.025198][ C0] do_syscall_64+0xf3/0x230 [ 1573.029837][ C0] ? clear_bhb_loop+0x35/0x90 [ 1573.034578][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.040583][ C0] RIP: 0033:0x7f83e617475f [ 1573.045034][ C0] RSP: 002b:00007ffe01e8a360 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1573.053723][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f83e617475f [ 1573.061783][ C0] RDX: 0000000000000001 RSI: 00007ffe01e8a3b0 RDI: 0000000000000005 [ 1573.069858][ C0] RBP: 00007f83e61e45a0 R08: 0000000000000000 R09: 00007ffe01e8a1b7 [ 1573.077881][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1573.085972][ C0] R13: 00007ffe01e8a3b0 R14: 00007f83e6e34620 R15: 0000000000000003 [ 1573.094113][ C0] [ 1573.097166][ C0] DEBUG: waiting rtnl_mutex for 1062 jiffies. [ 1573.103319][ C0] task:syz-executor state:D stack:20368 pid:23759 tgid:23759 ppid:23758 flags:0x00004000 [ 1573.113581][ C0] Call Trace: [ 1573.116881][ C0] [ 1573.119904][ C0] __schedule+0x1800/0x4a60 [ 1573.124578][ C0] ? __pfx___schedule+0x10/0x10 [ 1573.129540][ C0] ? __pfx_lock_release+0x10/0x10 [ 1573.134639][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1573.140234][ C0] ? schedule+0x90/0x320 [ 1573.144539][ C0] schedule+0x14b/0x320 [ 1573.148763][ C0] schedule_preempt_disabled+0x13/0x30 [ 1573.154335][ C0] __mutex_lock+0x6a4/0xd70 [ 1573.158933][ C0] ? __mutex_lock+0x527/0xd70 [ 1573.163718][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1573.169009][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1573.174207][ C0] ? get_rtnl_holder+0x144/0x190 [ 1573.179202][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1573.184408][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1573.189804][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1573.195427][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 1573.200847][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1573.206118][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1573.211452][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1573.217836][ C0] ? preempt_schedule_notrace+0x100/0x140 [ 1573.223656][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 1573.229849][ C0] ? mark_lock+0x9a/0x360 [ 1573.234247][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1573.239569][ C0] ? __lock_acquire+0x1359/0x2000 [ 1573.244691][ C0] ? mark_lock+0x9a/0x360 [ 1573.249088][ C0] ? __lock_acquire+0x1359/0x2000 [ 1573.254230][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1573.259084][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1573.264631][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1573.270040][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1573.275295][ C0] netlink_unicast+0x7f0/0x990 [ 1573.280200][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1573.285637][ C0] ? __virt_addr_valid+0x183/0x530 [ 1573.290870][ C0] ? __check_object_size+0x49c/0x900 [ 1573.296178][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1573.301374][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1573.306206][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1573.311612][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1573.316624][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1573.322025][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1573.327670][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1573.333074][ C0] __sock_sendmsg+0x221/0x270 [ 1573.337842][ C0] __sys_sendto+0x3a4/0x4f0 [ 1573.342465][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1573.347582][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1573.352904][ C0] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 1573.359064][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1573.365208][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1573.371767][ C0] __x64_sys_sendto+0xde/0x100 [ 1573.376623][ C0] do_syscall_64+0xf3/0x230 [ 1573.381243][ C0] ? clear_bhb_loop+0x35/0x90 [ 1573.385975][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.392012][ C0] RIP: 0033:0x7f601b97796c [ 1573.396482][ C0] RSP: 002b:00007ffe14f47d70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1573.405110][ C0] RAX: ffffffffffffffda RBX: 00007f601c634620 RCX: 00007f601b97796c [ 1573.413192][ C0] RDX: 0000000000000064 RSI: 00007f601c634670 RDI: 0000000000000003 [ 1573.421287][ C0] RBP: 0000000000000000 R08: 00007ffe14f47dc4 R09: 000000000000000c [ 1573.429375][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1573.437417][ C0] R13: 0000000000000000 R14: 00007f601c634670 R15: 0000000000000000 [ 1573.445668][ C0] [ 1573.448721][ C0] DEBUG: holding rtnl_mutex for 1092 jiffies. [ 1573.454851][ C0] task:kworker/u8:1 state:D stack:19728 pid:18683 tgid:18683 ppid:2 flags:0x00004000 [ 1573.465121][ C0] Workqueue: netns cleanup_net [ 1573.470007][ C0] Call Trace: [ 1573.473330][ C0] [ 1573.476305][ C0] __schedule+0x1800/0x4a60 [ 1573.481032][ C0] ? __pfx___schedule+0x10/0x10 [ 1573.485938][ C0] ? __pfx_lock_release+0x10/0x10 [ 1573.491069][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1573.497035][ C0] ? kthread_data+0x52/0xd0 [ 1573.501678][ C0] ? wq_worker_sleeping+0x66/0x240 [ 1573.506855][ C0] ? schedule+0x90/0x320 [ 1573.511216][ C0] schedule+0x14b/0x320 [ 1573.515422][ C0] synchronize_rcu_expedited+0x684/0x830 [ 1573.521228][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1573.527467][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1573.533058][ C0] ? __pfx___might_resched+0x10/0x10 [ 1573.538392][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1573.544545][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1573.550739][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1573.557136][ C0] synchronize_rcu+0x11b/0x360 [ 1573.562015][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 1573.567410][ C0] lockdep_unregister_key+0x556/0x610 [ 1573.572873][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1573.578804][ C0] ? rcu_is_watching+0x15/0xb0 [ 1573.583663][ C0] ? qdisc_reset+0x3bf/0x5b0 [ 1573.588303][ C0] __qdisc_destroy+0x165/0x410 [ 1573.593286][ C0] dev_shutdown+0x9b/0x440 [ 1573.597845][ C0] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 1573.604279][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1573.611276][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 1573.617415][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 1573.623765][ C0] default_device_exit_batch+0xa0f/0xa90 [ 1573.629556][ C0] ? __pfx___might_resched+0x10/0x10 [ 1573.635181][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1573.641479][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1573.646848][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1573.653150][ C0] cleanup_net+0x89d/0xcc0 [ 1573.657753][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1573.662848][ C0] ? process_scheduled_works+0x945/0x1830 [ 1573.668634][ C0] process_scheduled_works+0xa2c/0x1830 [ 1573.674319][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1573.680432][ C0] ? assign_work+0x364/0x3d0 [ 1573.685089][ C0] worker_thread+0x86d/0xd40 [ 1573.689803][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1573.695797][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1573.700921][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1573.706080][ C0] kthread+0x2f0/0x390 [ 1573.710238][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1573.715388][ C0] ? __pfx_kthread+0x10/0x10 [ 1573.720118][ C0] ret_from_fork+0x4b/0x80 [ 1573.724639][ C0] ? __pfx_kthread+0x10/0x10 [ 1573.729364][ C0] ret_from_fork_asm+0x1a/0x30 [ 1573.734304][ C0] [ 1573.737355][ C0] [ 1573.737355][ C0] Showing all locks held in the system: [ 1573.745195][ C0] 3 locks held by kworker/u8:0/11: [ 1573.750389][ C0] #0: ffff888029a74948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1573.762211][ C0] #1: ffffc90000107d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1573.775174][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1573.784750][ C0] 3 locks held by kworker/u8:4/63: [ 1573.789982][ C0] 2 locks held by getty/4853: [ 1573.794692][ C0] #0: ffff88802a29c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1573.804527][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1573.814739][ C0] 3 locks held by kworker/1:6/10133: [ 1573.820096][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1573.831229][ C0] #1: ffffc900041afd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1573.842368][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1573.851448][ C0] 5 locks held by kworker/u8:1/18683: [ 1573.856867][ C0] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1573.867932][ C0] #1: ffffc900100e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1573.878639][ C0] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1573.888241][ C0] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1573.898400][ C0] #4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1573.909392][ C0] 1 lock held by syz.3.5363/22709: [ 1573.914518][ C0] #0: ffff88801b2a8578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: remove_inode_hugepages+0x38e/0x1520 [ 1573.926308][ C0] 7 locks held by syz-executor/23618: [ 1573.931757][ C0] #0: ffff88802a1fa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1573.940789][ C0] #1: ffff888068e7d088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1573.950684][ C0] #2: ffff8880222545a8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1573.960857][ C0] #3: ffffffff8ef05248 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1573.971286][ C0] #4: ffff88804fbc10e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1573.981977][ C0] #5: ffff888056617250 (&devlink->lock_key#83){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1573.992247][ C0] #6: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 1574.003123][ C0] 1 lock held by syz-executor/23759: [ 1574.008591][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1574.018185][ C0] 3 locks held by syz.3.5721/23936: [ 1574.023431][ C0] #0: ffff88806a1f7398 (&mm->mmap_lock){++++}-{3:3}, at: __might_fault+0xaa/0x120 [ 1574.032857][ C0] #1: ffffc90000007c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1574.043083][ C0] #2: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1574.053029][ C0] 1 lock held by syz.3.5721/23937: [ 1574.058194][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1574.067850][ C0] 1 lock held by syz.3.5721/23939: [ 1574.073114][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1574.082720][ C0] [ 1574.085081][ C0] ============================================= [ 1574.085081][ C0] [ 1574.408636][ C1] vkms_vblank_simulate: vblank timer overrun [ 1575.109373][ C0] DEBUG: waiting rtnl_mutex for 1310 jiffies. [ 1575.115534][ C0] task:kworker/u8:0 state:D stack:18712 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 1575.125841][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 1575.131921][ C0] Call Trace: [ 1575.135238][ C0] [ 1575.138209][ C0] __schedule+0x1800/0x4a60 [ 1575.142831][ C0] ? __pfx___schedule+0x10/0x10 [ 1575.147735][ C0] ? __pfx_lock_release+0x10/0x10 [ 1575.152853][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1575.158373][ C0] ? kthread_data+0x52/0xd0 [ 1575.163050][ C0] ? schedule+0x90/0x320 [ 1575.167344][ C0] ? wq_worker_sleeping+0x66/0x240 [ 1575.172555][ C0] ? schedule+0x90/0x320 [ 1575.176847][ C0] schedule+0x14b/0x320 [ 1575.181098][ C0] schedule_preempt_disabled+0x13/0x30 [ 1575.186609][ C0] __mutex_lock+0x6a4/0xd70 [ 1575.191208][ C0] ? mark_lock+0x9a/0x360 [ 1575.195624][ C0] ? __mutex_lock+0x527/0xd70 [ 1575.200429][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 1575.205604][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1575.210738][ C0] ? get_rtnl_holder+0x144/0x190 [ 1575.215722][ C0] addrconf_dad_work+0xd0/0x16f0 [ 1575.220756][ C0] ? preempt_schedule+0xe1/0xf0 [ 1575.225655][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1575.231115][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1575.236644][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 1575.242103][ C0] ? process_scheduled_works+0x945/0x1830 [ 1575.247870][ C0] process_scheduled_works+0xa2c/0x1830 [ 1575.253539][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1575.259628][ C0] ? assign_work+0x364/0x3d0 [ 1575.264284][ C0] worker_thread+0x86d/0xd40 [ 1575.268943][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1575.274112][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1575.279372][ C0] kthread+0x2f0/0x390 [ 1575.283518][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1575.288694][ C0] ? __pfx_kthread+0x10/0x10 [ 1575.293390][ C0] ret_from_fork+0x4b/0x80 [ 1575.297859][ C0] ? __pfx_kthread+0x10/0x10 [ 1575.302546][ C0] ret_from_fork_asm+0x1a/0x30 [ 1575.307384][ C0] [ 1575.310497][ C0] DEBUG: waiting rtnl_mutex for 1180 jiffies. [ 1575.316698][ C0] task:kworker/1:6 state:D stack:20976 pid:10133 tgid:10133 ppid:2 flags:0x00004000 [ 1575.326959][ C0] Workqueue: events linkwatch_event [ 1575.332244][ C0] Call Trace: [ 1575.335555][ C0] [ 1575.338526][ C0] __schedule+0x1800/0x4a60 [ 1575.343151][ C0] ? __pfx___schedule+0x10/0x10 [ 1575.348057][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1575.354134][ C0] ? __pfx_lock_release+0x10/0x10 [ 1575.359365][ C0] ? kick_pool+0x45c/0x620 [ 1575.363855][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1575.369118][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1575.374432][ C0] ? schedule+0x90/0x320 [ 1575.378721][ C0] schedule+0x14b/0x320 [ 1575.382975][ C0] schedule_preempt_disabled+0x13/0x30 [ 1575.388496][ C0] __mutex_lock+0x6a4/0xd70 [ 1575.393130][ C0] ? __mutex_lock+0x527/0xd70 [ 1575.397869][ C0] ? linkwatch_event+0xe/0x60 [ 1575.402635][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1575.407820][ C0] ? get_rtnl_holder+0x144/0x190 [ 1575.412942][ C0] ? process_scheduled_works+0x945/0x1830 [ 1575.418705][ C0] linkwatch_event+0xe/0x60 [ 1575.423291][ C0] process_scheduled_works+0xa2c/0x1830 [ 1575.429021][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1575.435153][ C0] ? assign_work+0x364/0x3d0 [ 1575.439858][ C0] worker_thread+0x86d/0xd40 [ 1575.444530][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1575.450552][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1575.455663][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1575.460939][ C0] kthread+0x2f0/0x390 [ 1575.465075][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1575.470282][ C0] ? __pfx_kthread+0x10/0x10 [ 1575.475017][ C0] ret_from_fork+0x4b/0x80 [ 1575.479523][ C0] ? __pfx_kthread+0x10/0x10 [ 1575.484193][ C0] ret_from_fork_asm+0x1a/0x30 [ 1575.489043][ C0] [ 1575.492159][ C0] DEBUG: waiting rtnl_mutex for 1406 jiffies. [ 1575.498351][ C0] task:syz-executor state:D stack:21024 pid:23618 tgid:23618 ppid:23593 flags:0x00004002 [ 1575.508647][ C0] Call Trace: [ 1575.509587][T23951] loop4: detected capacity change from 0 to 2048 [ 1575.511987][ C0] [ 1575.521332][ C0] __schedule+0x1800/0x4a60 [ 1575.525934][ C0] ? __pfx___schedule+0x10/0x10 [ 1575.530903][ C0] ? __pfx_lock_release+0x10/0x10 [ 1575.535993][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1575.541606][ C0] ? schedule+0x90/0x320 [ 1575.545929][ C0] schedule+0x14b/0x320 [ 1575.550232][ C0] schedule_preempt_disabled+0x13/0x30 [ 1575.555772][ C0] __mutex_lock+0x6a4/0xd70 [ 1575.560411][ C0] ? __mutex_lock+0x527/0xd70 [ 1575.565172][ C0] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 1575.571712][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1575.576841][ C0] ? get_rtnl_holder+0x144/0x190 [ 1575.581916][ C0] unregister_netdevice_notifier_net+0x89/0x3a0 [ 1575.588255][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1575.593248][ C0] ? mntput_no_expire+0x2da/0x850 [ 1575.598353][ C0] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 1575.605329][ C0] ? __pfx_mntput_no_expire+0x10/0x10 [ 1575.610821][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1575.615742][ C0] ? simple_release_fs+0x9c/0xd0 [ 1575.620833][ C0] nsim_dev_hwstats_exit+0x81/0x290 [ 1575.626108][ C0] ? kfree+0x149/0x360 [ 1575.630303][ C0] nsim_dev_reload_destroy+0x2ad/0x490 [ 1575.635839][ C0] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1575.641255][ C0] nsim_drv_remove+0x58/0x160 [ 1575.646010][ C0] device_release_driver_internal+0x4a9/0x7c0 [ 1575.652225][ C0] bus_remove_device+0x34f/0x420 [ 1575.657257][ C0] device_del+0x57a/0x9b0 [ 1575.661722][ C0] ? __pfx_device_del+0x10/0x10 [ 1575.666745][ C0] device_unregister+0x20/0xc0 [ 1575.671699][ C0] del_device_store+0x363/0x480 [ 1575.676646][ C0] ? __pfx_del_device_store+0x10/0x10 [ 1575.682155][ C0] ? sysfs_kf_write+0x182/0x2a0 [ 1575.687092][ C0] ? bus_attr_store+0x4f/0xa0 [ 1575.691890][ C0] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1575.697162][ C0] kernfs_fop_write_iter+0x3a1/0x500 [ 1575.702586][ C0] vfs_write+0xa72/0xc90 [ 1575.706897][ C0] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1575.712835][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1575.717695][ C0] ksys_write+0x1a0/0x2c0 [ 1575.722138][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1575.727042][ C0] ? do_syscall_64+0x100/0x230 [ 1575.731928][ C0] ? do_syscall_64+0xb6/0x230 [ 1575.736667][ C0] do_syscall_64+0xf3/0x230 [ 1575.741263][ C0] ? clear_bhb_loop+0x35/0x90 [ 1575.745993][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.751990][ C0] RIP: 0033:0x7f83e617475f [ 1575.756451][ C0] RSP: 002b:00007ffe01e8a360 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1575.764974][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f83e617475f [ 1575.773125][ C0] RDX: 0000000000000001 RSI: 00007ffe01e8a3b0 RDI: 0000000000000005 [ 1575.781201][ C0] RBP: 00007f83e61e45a0 R08: 0000000000000000 R09: 00007ffe01e8a1b7 [ 1575.789227][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1575.797303][ C0] R13: 00007ffe01e8a3b0 R14: 00007f83e6e34620 R15: 0000000000000003 [ 1575.805411][ C0] [ 1575.808475][ C0] DEBUG: waiting rtnl_mutex for 1333 jiffies. [ 1575.814633][ C0] task:syz-executor state:D stack:20368 pid:23759 tgid:23759 ppid:23758 flags:0x00004000 [ 1575.824910][ C0] Call Trace: [ 1575.828226][ C0] [ 1575.831241][ C0] __schedule+0x1800/0x4a60 [ 1575.835819][ C0] ? __pfx___schedule+0x10/0x10 [ 1575.840764][ C0] ? __pfx_lock_release+0x10/0x10 [ 1575.845847][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1575.851428][ C0] ? schedule+0x90/0x320 [ 1575.855719][ C0] schedule+0x14b/0x320 [ 1575.859992][ C0] schedule_preempt_disabled+0x13/0x30 [ 1575.865594][ C0] __mutex_lock+0x6a4/0xd70 [ 1575.870206][ C0] ? __mutex_lock+0x527/0xd70 [ 1575.874945][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1575.880247][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1575.885350][ C0] ? get_rtnl_holder+0x144/0x190 [ 1575.890384][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1575.895473][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1575.900782][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1575.906302][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 1575.911711][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1575.916994][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1575.922342][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1575.928759][ C0] ? preempt_schedule_notrace+0x100/0x140 [ 1575.934601][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 1575.940767][ C0] ? mark_lock+0x9a/0x360 [ 1575.945152][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1575.950464][ C0] ? __lock_acquire+0x1359/0x2000 [ 1575.955563][ C0] ? mark_lock+0x9a/0x360 [ 1575.959994][ C0] ? __lock_acquire+0x1359/0x2000 [ 1575.965091][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1575.969952][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1575.975470][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1575.980911][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1575.986261][ C0] netlink_unicast+0x7f0/0x990 [ 1575.991168][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1575.996533][ C0] ? __virt_addr_valid+0x183/0x530 [ 1576.001784][ C0] ? __check_object_size+0x49c/0x900 [ 1576.007151][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1576.012384][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1576.017225][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1576.022633][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1576.027643][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1576.033312][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1576.038838][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1576.044218][ C0] __sock_sendmsg+0x221/0x270 [ 1576.048973][ C0] __sys_sendto+0x3a4/0x4f0 [ 1576.053594][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1576.058706][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1576.064135][ C0] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 1576.070529][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1576.076687][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1576.083148][ C0] __x64_sys_sendto+0xde/0x100 [ 1576.087986][ C0] do_syscall_64+0xf3/0x230 [ 1576.092609][ C0] ? clear_bhb_loop+0x35/0x90 [ 1576.097356][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.103370][ C0] RIP: 0033:0x7f601b97796c [ 1576.107866][ C0] RSP: 002b:00007ffe14f47d70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1576.116413][ C0] RAX: ffffffffffffffda RBX: 00007f601c634620 RCX: 00007f601b97796c [ 1576.124490][ C0] RDX: 0000000000000064 RSI: 00007f601c634670 RDI: 0000000000000003 [ 1576.132577][ C0] RBP: 0000000000000000 R08: 00007ffe14f47dc4 R09: 000000000000000c [ 1576.140663][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1576.148692][ C0] R13: 0000000000000000 R14: 00007f601c634670 R15: 0000000000000000 [ 1576.156791][ C0] [ 1576.159912][ C0] DEBUG: holding rtnl_mutex for 1364 jiffies. [ 1576.166063][ C0] task:kworker/u8:1 state:D stack:19728 pid:18683 tgid:18683 ppid:2 flags:0x00004000 [ 1576.176336][ C0] Workqueue: netns cleanup_net [ 1576.181645][ C0] Call Trace: [ 1576.184964][ C0] [ 1576.187943][ C0] __schedule+0x1800/0x4a60 [ 1576.192577][ C0] ? __pfx___schedule+0x10/0x10 [ 1576.197484][ C0] ? __pfx_lock_release+0x10/0x10 [ 1576.202630][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1576.208604][ C0] ? kthread_data+0x52/0xd0 [ 1576.213223][ C0] ? wq_worker_sleeping+0x66/0x240 [ 1576.218401][ C0] ? schedule+0x90/0x320 [ 1576.222751][ C0] schedule+0x14b/0x320 [ 1576.226967][ C0] synchronize_rcu_expedited+0x684/0x830 [ 1576.232738][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1576.238987][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1576.244387][ C0] ? __pfx___might_resched+0x10/0x10 [ 1576.249774][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1576.255917][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1576.262109][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1576.268518][ C0] synchronize_rcu+0x11b/0x360 [ 1576.273411][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 1576.278885][ C0] lockdep_unregister_key+0x556/0x610 [ 1576.284378][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1576.290388][ C0] ? rcu_is_watching+0x15/0xb0 [ 1576.295306][ C0] ? qdisc_reset+0x3bf/0x5b0 [ 1576.300019][ C0] __qdisc_destroy+0x165/0x410 [ 1576.304922][ C0] dev_shutdown+0x9b/0x440 [ 1576.309447][ C0] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 1576.315873][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1576.322892][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 1576.328877][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 1576.335220][ C0] default_device_exit_batch+0xa0f/0xa90 [ 1576.341062][ C0] ? __pfx___might_resched+0x10/0x10 [ 1576.346581][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1576.352889][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1576.358248][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1576.364534][ C0] cleanup_net+0x89d/0xcc0 [ 1576.369016][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1576.374077][ C0] ? process_scheduled_works+0x945/0x1830 [ 1576.379920][ C0] process_scheduled_works+0xa2c/0x1830 [ 1576.385647][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1576.392149][ C0] ? assign_work+0x364/0x3d0 [ 1576.396816][ C0] worker_thread+0x86d/0xd40 [ 1576.401533][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1576.407505][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1576.412676][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1576.417860][ C0] kthread+0x2f0/0x390 [ 1576.422060][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1576.427234][ C0] ? __pfx_kthread+0x10/0x10 [ 1576.431950][ C0] ret_from_fork+0x4b/0x80 [ 1576.436425][ C0] ? __pfx_kthread+0x10/0x10 [ 1576.441128][ C0] ret_from_fork_asm+0x1a/0x30 [ 1576.445969][ C0] [ 1576.449038][ C0] [ 1576.449038][ C0] Showing all locks held in the system: [ 1576.456824][ C0] 3 locks held by kworker/u8:0/11: [ 1576.462057][ C0] #0: ffff888029a74948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1576.473800][ C0] #1: ffffc90000107d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1576.486887][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1576.496491][ C0] 2 locks held by kworker/u8:4/63: [ 1576.501717][ C0] 2 locks held by getty/4853: [ 1576.506433][ C0] #0: ffff88802a29c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1576.516346][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1576.526615][ C0] 3 locks held by kworker/1:6/10133: [ 1576.531985][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1576.543198][ C0] #1: ffffc900041afd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1576.554321][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1576.563543][ C0] 5 locks held by kworker/u8:1/18683: [ 1576.568963][ C0] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1576.580103][ C0] #1: ffffc900100e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1576.590858][ C0] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1576.600615][ C0] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1576.610838][ C0] #4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1576.621889][ C0] 1 lock held by syz.3.5363/22709: [ 1576.627109][ C0] #0: ffff88801b2a8578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: remove_inode_hugepages+0x38e/0x1520 [ 1576.638849][ C0] 5 locks held by kworker/u8:13/23064: [ 1576.644484][ C0] 7 locks held by syz-executor/23618: [ 1576.649937][ C0] #0: ffff88802a1fa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1576.658935][ C0] #1: ffff888068e7d088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1576.668941][ C0] #2: ffff8880222545a8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1576.679143][ C0] #3: ffffffff8ef05248 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1576.689709][ C0] #4: ffff88804fbc10e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1576.700411][ C0] #5: ffff888056617250 (&devlink->lock_key#83){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1576.710772][ C0] #6: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 1576.721724][ C0] 1 lock held by syz-executor/23759: [ 1576.727238][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1576.736902][ C0] 1 lock held by syz.3.5721/23937: [ 1576.742104][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1576.751853][ C0] 1 lock held by syz.3.5721/23939: [ 1576.757040][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1576.766817][ C0] 2 locks held by syz.4.5723/23945: [ 1576.772203][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1576.782467][ C0] #1: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1576.792475][ C0] 1 lock held by syz.4.5723/23951: [ 1576.797634][ C0] #0: ffff88801fc37360 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_status+0x2a/0x900 [ 1576.807201][ C0] 1 lock held by syz.0.5725/23953: [ 1576.812403][ C0] [ 1576.814763][ C0] ============================================= [ 1576.814763][ C0] [ 1577.830502][ C0] DEBUG: waiting rtnl_mutex for 1582 jiffies. [ 1577.836776][ C0] task:kworker/u8:0 state:D stack:18712 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 1577.847085][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 1577.853199][ C0] Call Trace: [ 1577.856532][ C0] [ 1577.859567][ C0] __schedule+0x1800/0x4a60 [ 1577.864265][ C0] ? __pfx___schedule+0x10/0x10 [ 1577.869197][ C0] ? __pfx_lock_release+0x10/0x10 [ 1577.874435][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1577.880014][ C0] ? kthread_data+0x52/0xd0 [ 1577.884594][ C0] ? schedule+0x90/0x320 [ 1577.888910][ C0] ? wq_worker_sleeping+0x66/0x240 [ 1577.894147][ C0] ? schedule+0x90/0x320 [ 1577.898446][ C0] schedule+0x14b/0x320 [ 1577.902710][ C0] schedule_preempt_disabled+0x13/0x30 [ 1577.908243][ C0] __mutex_lock+0x6a4/0xd70 [ 1577.912845][ C0] ? mark_lock+0x9a/0x360 [ 1577.917241][ C0] ? __mutex_lock+0x527/0xd70 [ 1577.922032][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 1577.927221][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1577.932386][ C0] ? get_rtnl_holder+0x144/0x190 [ 1577.937400][ C0] addrconf_dad_work+0xd0/0x16f0 [ 1577.942471][ C0] ? preempt_schedule+0xe1/0xf0 [ 1577.947406][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1577.952906][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1577.958453][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 1577.963950][ C0] ? process_scheduled_works+0x945/0x1830 [ 1577.969864][ C0] process_scheduled_works+0xa2c/0x1830 [ 1577.975515][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1577.981640][ C0] ? assign_work+0x364/0x3d0 [ 1577.986310][ C0] worker_thread+0x86d/0xd40 [ 1577.991037][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1577.996227][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1578.001456][ C0] kthread+0x2f0/0x390 [ 1578.005609][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1578.010838][ C0] ? __pfx_kthread+0x10/0x10 [ 1578.015504][ C0] ret_from_fork+0x4b/0x80 [ 1578.020035][ C0] ? __pfx_kthread+0x10/0x10 [ 1578.024866][ C0] ret_from_fork_asm+0x1a/0x30 [ 1578.029765][ C0] [ 1578.032838][ C0] DEBUG: waiting rtnl_mutex for 1452 jiffies. [ 1578.038951][ C0] task:kworker/1:6 state:D stack:20976 pid:10133 tgid:10133 ppid:2 flags:0x00004000 [ 1578.049350][ C0] Workqueue: events linkwatch_event [ 1578.054621][ C0] Call Trace: [ 1578.057946][ C0] [ 1578.060973][ C0] __schedule+0x1800/0x4a60 [ 1578.065611][ C0] ? __pfx___schedule+0x10/0x10 [ 1578.070644][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1578.076690][ C0] ? __pfx_lock_release+0x10/0x10 [ 1578.081821][ C0] ? kick_pool+0x45c/0x620 [ 1578.086304][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1578.091613][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1578.096872][ C0] ? schedule+0x90/0x320 [ 1578.101225][ C0] schedule+0x14b/0x320 [ 1578.105449][ C0] schedule_preempt_disabled+0x13/0x30 [ 1578.111040][ C0] __mutex_lock+0x6a4/0xd70 [ 1578.115611][ C0] ? __mutex_lock+0x527/0xd70 [ 1578.120397][ C0] ? linkwatch_event+0xe/0x60 [ 1578.125122][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1578.130276][ C0] ? get_rtnl_holder+0x144/0x190 [ 1578.135279][ C0] ? process_scheduled_works+0x945/0x1830 [ 1578.141107][ C0] linkwatch_event+0xe/0x60 [ 1578.145666][ C0] process_scheduled_works+0xa2c/0x1830 [ 1578.151383][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1578.157529][ C0] ? assign_work+0x364/0x3d0 [ 1578.162260][ C0] worker_thread+0x86d/0xd40 [ 1578.166939][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1578.173076][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1578.178180][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1578.183421][ C0] kthread+0x2f0/0x390 [ 1578.187569][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1578.192811][ C0] ? __pfx_kthread+0x10/0x10 [ 1578.197495][ C0] ret_from_fork+0x4b/0x80 [ 1578.202042][ C0] ? __pfx_kthread+0x10/0x10 [ 1578.206699][ C0] ret_from_fork_asm+0x1a/0x30 [ 1578.211631][ C0] [ 1578.214703][ C0] DEBUG: waiting rtnl_mutex for 635 jiffies. [ 1578.220790][ C0] task:syz.3.5721 state:D stack:26304 pid:23937 tgid:23936 ppid:23155 flags:0x00004004 [ 1578.231093][ C0] Call Trace: [ 1578.234423][ C0] [ 1578.237401][ C0] __schedule+0x1800/0x4a60 [ 1578.242035][ C0] ? __pfx___schedule+0x10/0x10 [ 1578.246941][ C0] ? __pfx_lock_release+0x10/0x10 [ 1578.252082][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1578.257627][ C0] ? schedule+0x90/0x320 [ 1578.262003][ C0] schedule+0x14b/0x320 [ 1578.266263][ C0] schedule_preempt_disabled+0x13/0x30 [ 1578.272097][ C0] __mutex_lock+0x6a4/0xd70 [ 1578.276677][ C0] ? __mutex_lock+0x527/0xd70 [ 1578.281479][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1578.286759][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1578.291932][ C0] ? get_rtnl_holder+0x144/0x190 [ 1578.296934][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1578.302097][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1578.307385][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1578.312973][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1578.318403][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1578.323746][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1578.329203][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 1578.334619][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1578.339848][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1578.345655][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1578.350970][ C0] ? __dev_queue_xmit+0x1763/0x3e90 [ 1578.356243][ C0] ? kasan_save_track+0x51/0x80 [ 1578.361229][ C0] ? vfs_writev+0x37c/0xbb0 [ 1578.365813][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.371990][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1578.377166][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1578.382684][ C0] ? ref_tracker_free+0x643/0x7e0 [ 1578.387782][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1578.392680][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1578.398224][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1578.403667][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1578.408937][ C0] netlink_unicast+0x7f0/0x990 [ 1578.413928][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1578.419327][ C0] ? __virt_addr_valid+0x183/0x530 [ 1578.424514][ C0] ? __check_object_size+0x49c/0x900 [ 1578.426525][T23959] loop4: detected capacity change from 0 to 32768 [ 1578.429885][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1578.429928][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1578.429970][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1578.447055][T23959] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5728 (23959) [ 1578.451673][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1578.451715][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1578.451751][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1578.451789][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1578.451812][ C0] __sock_sendmsg+0x221/0x270 [ 1578.451855][ C0] sock_write_iter+0x2dd/0x400 [ 1578.451895][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 1578.451941][ C0] ? futex_wait_queue+0x14e/0x1d0 [ 1578.451977][ C0] ? futex_unqueue+0xcb/0xf0 [ 1578.452016][ C0] do_iter_readv_writev+0x60a/0x890 [ 1578.452051][ C0] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1578.521771][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 1578.527232][ C0] ? security_file_permission+0x7f/0xa0 [ 1578.532905][ C0] ? rw_verify_area+0x1d2/0x6b0 [ 1578.537828][ C0] vfs_writev+0x37c/0xbb0 [ 1578.542310][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1578.547392][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 1578.552378][ C0] ? __fget_files+0x29/0x470 [ 1578.557028][ C0] do_writev+0x1b1/0x350 [ 1578.561394][ C0] ? __pfx_do_writev+0x10/0x10 [ 1578.566292][ C0] ? do_syscall_64+0x100/0x230 [ 1578.571171][ C0] ? do_syscall_64+0xb6/0x230 [ 1578.575977][ C0] do_syscall_64+0xf3/0x230 [ 1578.580563][ C0] ? clear_bhb_loop+0x35/0x90 [ 1578.585323][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.591341][ C0] RIP: 0033:0x7f72ccf75bd9 [ 1578.595809][ C0] RSP: 002b:00007f72cdc68048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1578.604396][ C0] RAX: ffffffffffffffda RBX: 00007f72cd103f60 RCX: 00007f72ccf75bd9 [ 1578.612640][ C0] RDX: 0000000000000001 RSI: 00000000200003c0 RDI: 0000000000000008 [ 1578.620723][ C0] RBP: 00007f72ccfe4e60 R08: 0000000000000000 R09: 0000000000000000 [ 1578.628752][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1578.636895][ C0] R13: 000000000000000b R14: 00007f72cd103f60 R15: 00007ffce9fd6c48 [ 1578.645010][ C0] [ 1578.648078][ C0] DEBUG: waiting rtnl_mutex for 671 jiffies. [ 1578.654143][ C0] task:syz.3.5721 state:D stack:27216 pid:23939 tgid:23936 ppid:23155 flags:0x00000004 [ 1578.664417][ C0] Call Trace: [ 1578.667866][ C0] [ 1578.670895][ C0] __schedule+0x1800/0x4a60 [ 1578.675484][ C0] ? __pfx___schedule+0x10/0x10 [ 1578.680437][ C0] ? __pfx_lock_release+0x10/0x10 [ 1578.685526][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1578.691068][ C0] ? schedule+0x90/0x320 [ 1578.695352][ C0] schedule+0x14b/0x320 [ 1578.699598][ C0] schedule_preempt_disabled+0x13/0x30 [ 1578.705119][ C0] __mutex_lock+0x6a4/0xd70 [ 1578.709743][ C0] ? __mutex_lock+0x527/0xd70 [ 1578.714463][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1578.719726][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1578.724778][ C0] ? get_rtnl_holder+0x144/0x190 [ 1578.729802][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1578.734895][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1578.740217][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1578.745731][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1578.751162][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1578.756428][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1578.761886][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 1578.767236][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1578.772560][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1578.778338][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1578.783528][ C0] ? __dev_queue_xmit+0x1763/0x3e90 [ 1578.788788][ C0] ? kasan_save_track+0x51/0x80 [ 1578.793755][ C0] ? do_syscall_64+0xf3/0x230 [ 1578.798686][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1578.803887][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1578.809464][ C0] ? ref_tracker_free+0x643/0x7e0 [ 1578.814552][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1578.819432][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1578.824944][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1578.830356][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1578.835602][ C0] netlink_unicast+0x7f0/0x990 [ 1578.840467][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1578.845811][ C0] ? __virt_addr_valid+0x183/0x530 [ 1578.851127][ C0] ? __check_object_size+0x49c/0x900 [ 1578.856498][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1578.861702][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1578.866532][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1578.872309][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1578.877328][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1578.882730][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1578.888254][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1578.893625][ C0] __sock_sendmsg+0x221/0x270 [ 1578.898336][ C0] __sys_sendto+0x3a4/0x4f0 [ 1578.902929][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1578.908109][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1578.914185][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1578.920629][ C0] ? exc_page_fault+0x590/0x8c0 [ 1578.925559][ C0] __x64_sys_sendto+0xde/0x100 [ 1578.930419][ C0] do_syscall_64+0xf3/0x230 [ 1578.934968][ C0] ? clear_bhb_loop+0x35/0x90 [ 1578.939750][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.945690][ C0] RIP: 0033:0x7f72ccf7796c [ 1578.950173][ C0] RSP: 002b:00007f72cc9fded0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1578.958633][ C0] RAX: ffffffffffffffda RBX: 00007f72cc9fdfd0 RCX: 00007f72ccf7796c [ 1578.966701][ C0] RDX: 0000000000000024 RSI: 00007f72cc9fe020 RDI: 0000000000000008 [ 1578.974790][ C0] RBP: 0000000000000000 R08: 00007f72cc9fdf24 R09: 000000000000000c [ 1578.982868][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 1578.990946][ C0] R13: 00007f72cc9fdf78 R14: 00007f72cc9fe020 R15: 0000000000000000 [ 1578.998971][ C0] [ 1579.002115][ C0] DEBUG: waiting rtnl_mutex for 1757 jiffies. [ 1579.008216][ C0] task:syz-executor state:D stack:21024 pid:23618 tgid:23618 ppid:23593 flags:0x00004002 [ 1579.018443][ C0] Call Trace: [ 1579.021805][ C0] [ 1579.024768][ C0] __schedule+0x1800/0x4a60 [ 1579.029381][ C0] ? __pfx___schedule+0x10/0x10 [ 1579.034301][ C0] ? __pfx_lock_release+0x10/0x10 [ 1579.039425][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1579.044959][ C0] ? schedule+0x90/0x320 [ 1579.049253][ C0] schedule+0x14b/0x320 [ 1579.053596][ C0] schedule_preempt_disabled+0x13/0x30 [ 1579.059123][ C0] __mutex_lock+0x6a4/0xd70 [ 1579.063724][ C0] ? __mutex_lock+0x527/0xd70 [ 1579.068427][ C0] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 1579.075027][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1579.080178][ C0] ? get_rtnl_holder+0x144/0x190 [ 1579.085174][ C0] unregister_netdevice_notifier_net+0x89/0x3a0 [ 1579.091521][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1579.096415][ C0] ? mntput_no_expire+0x2da/0x850 [ 1579.101620][ C0] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 1579.108535][ C0] ? __pfx_mntput_no_expire+0x10/0x10 [ 1579.114004][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1579.118895][ C0] ? simple_release_fs+0x9c/0xd0 [ 1579.123913][ C0] nsim_dev_hwstats_exit+0x81/0x290 [ 1579.129136][ C0] ? kfree+0x149/0x360 [ 1579.133293][ C0] nsim_dev_reload_destroy+0x2ad/0x490 [ 1579.138796][ C0] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1579.144162][ C0] nsim_drv_remove+0x58/0x160 [ 1579.148891][ C0] device_release_driver_internal+0x4a9/0x7c0 [ 1579.155040][ C0] bus_remove_device+0x34f/0x420 [ 1579.160063][ C0] device_del+0x57a/0x9b0 [ 1579.164460][ C0] ? __pfx_device_del+0x10/0x10 [ 1579.169425][ C0] device_unregister+0x20/0xc0 [ 1579.174247][ C0] del_device_store+0x363/0x480 [ 1579.179179][ C0] ? __pfx_del_device_store+0x10/0x10 [ 1579.184663][ C0] ? sysfs_kf_write+0x182/0x2a0 [ 1579.189615][ C0] ? bus_attr_store+0x4f/0xa0 [ 1579.194434][ C0] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1579.199884][ C0] kernfs_fop_write_iter+0x3a1/0x500 [ 1579.205191][ C0] vfs_write+0xa72/0xc90 [ 1579.209519][ C0] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1579.215387][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1579.220267][ C0] ksys_write+0x1a0/0x2c0 [ 1579.224636][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1579.229572][ C0] ? do_syscall_64+0x100/0x230 [ 1579.234396][ C0] ? do_syscall_64+0xb6/0x230 [ 1579.239111][ C0] do_syscall_64+0xf3/0x230 [ 1579.243786][ C0] ? clear_bhb_loop+0x35/0x90 [ 1579.248515][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.254521][ C0] RIP: 0033:0x7f83e617475f [ 1579.258958][ C0] RSP: 002b:00007ffe01e8a360 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1579.267445][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f83e617475f [ 1579.275498][ C0] RDX: 0000000000000001 RSI: 00007ffe01e8a3b0 RDI: 0000000000000005 [ 1579.283659][ C0] RBP: 00007f83e61e45a0 R08: 0000000000000000 R09: 00007ffe01e8a1b7 [ 1579.291734][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1579.299812][ C0] R13: 00007ffe01e8a3b0 R14: 00007f83e6e34620 R15: 0000000000000003 [ 1579.307851][ C0] [ 1579.310958][ C0] DEBUG: waiting rtnl_mutex for 1684 jiffies. [ 1579.317058][ C0] task:syz-executor state:D stack:20368 pid:23759 tgid:23759 ppid:23758 flags:0x00004000 [ 1579.327386][ C0] Call Trace: [ 1579.330736][ C0] [ 1579.333714][ C0] __schedule+0x1800/0x4a60 [ 1579.338305][ C0] ? __pfx___schedule+0x10/0x10 [ 1579.343244][ C0] ? __pfx_lock_release+0x10/0x10 [ 1579.348325][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1579.353878][ C0] ? schedule+0x90/0x320 [ 1579.358184][ C0] schedule+0x14b/0x320 [ 1579.362424][ C0] schedule_preempt_disabled+0x13/0x30 [ 1579.367925][ C0] __mutex_lock+0x6a4/0xd70 [ 1579.372517][ C0] ? __mutex_lock+0x527/0xd70 [ 1579.377259][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1579.382664][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1579.387768][ C0] ? get_rtnl_holder+0x144/0x190 [ 1579.392797][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1579.397879][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1579.403196][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1579.408712][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 1579.414164][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1579.419444][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1579.424705][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1579.431151][ C0] ? preempt_schedule_notrace+0x100/0x140 [ 1579.436917][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 1579.443038][ C0] ? mark_lock+0x9a/0x360 [ 1579.447389][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1579.452677][ C0] ? __lock_acquire+0x1359/0x2000 [ 1579.457776][ C0] ? mark_lock+0x9a/0x360 [ 1579.462218][ C0] ? __lock_acquire+0x1359/0x2000 [ 1579.467338][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1579.472166][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1579.477653][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1579.483210][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1579.488504][ C0] netlink_unicast+0x7f0/0x990 [ 1579.493396][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1579.498727][ C0] ? __virt_addr_valid+0x183/0x530 [ 1579.503900][ C0] ? __check_object_size+0x49c/0x900 [ 1579.509206][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1579.514413][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1579.519230][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1579.524600][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1579.529623][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1579.534953][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1579.540507][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1579.545877][ C0] __sock_sendmsg+0x221/0x270 [ 1579.551012][ C0] __sys_sendto+0x3a4/0x4f0 [ 1579.555797][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1579.561029][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1579.566318][ C0] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 1579.572686][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1579.578851][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1579.585309][ C0] __x64_sys_sendto+0xde/0x100 [ 1579.590178][ C0] do_syscall_64+0xf3/0x230 [ 1579.594736][ C0] ? clear_bhb_loop+0x35/0x90 [ 1579.599573][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.605583][ C0] RIP: 0033:0x7f601b97796c [ 1579.610120][ C0] RSP: 002b:00007ffe14f47d70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1579.618587][ C0] RAX: ffffffffffffffda RBX: 00007f601c634620 RCX: 00007f601b97796c [ 1579.626678][ C0] RDX: 0000000000000064 RSI: 00007f601c634670 RDI: 0000000000000003 [ 1579.634715][ C0] RBP: 0000000000000000 R08: 00007ffe14f47dc4 R09: 000000000000000c [ 1579.642806][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1579.650877][ C0] R13: 0000000000000000 R14: 00007f601c634670 R15: 0000000000000000 [ 1579.658924][ C0] [ 1579.662043][ C0] DEBUG: holding rtnl_mutex for 1714 jiffies. [ 1579.668128][ C0] task:kworker/u8:1 state:D stack:19728 pid:18683 tgid:18683 ppid:2 flags:0x00004000 [ 1579.678396][ C0] Workqueue: netns cleanup_net [ 1579.683273][ C0] Call Trace: [ 1579.686605][ C0] [ 1579.689638][ C0] __schedule+0x1800/0x4a60 [ 1579.694232][ C0] ? __pfx___schedule+0x10/0x10 [ 1579.699129][ C0] ? __pfx_lock_release+0x10/0x10 [ 1579.704221][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1579.710247][ C0] ? kthread_data+0x52/0xd0 [ 1579.714797][ C0] ? wq_worker_sleeping+0x66/0x240 [ 1579.719990][ C0] ? schedule+0x90/0x320 [ 1579.724381][ C0] schedule+0x14b/0x320 [ 1579.728596][ C0] synchronize_rcu_expedited+0x684/0x830 [ 1579.734414][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1579.740697][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1579.746042][ C0] ? __pfx___might_resched+0x10/0x10 [ 1579.751426][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1579.757557][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1579.762862][ C0] synchronize_rcu+0x11b/0x360 [ 1579.767657][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 1579.773049][ C0] lockdep_unregister_key+0x556/0x610 [ 1579.778503][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1579.784597][ C0] ? rcu_is_watching+0x15/0xb0 [ 1579.789484][ C0] ? qdisc_reset+0x3bf/0x5b0 [ 1579.794167][ C0] __qdisc_destroy+0x165/0x410 [ 1579.798998][ C0] dev_shutdown+0x9b/0x440 [ 1579.803531][ C0] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 1579.810007][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1579.816851][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 1579.822830][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 1579.829021][ C0] default_device_exit_batch+0xa0f/0xa90 [ 1579.834883][ C0] ? __pfx___might_resched+0x10/0x10 [ 1579.840385][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1579.846621][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1579.852017][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1579.858235][ C0] cleanup_net+0x89d/0xcc0 [ 1579.862754][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1579.867744][ C0] ? process_scheduled_works+0x945/0x1830 [ 1579.873529][ C0] process_scheduled_works+0xa2c/0x1830 [ 1579.879159][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1579.885238][ C0] ? assign_work+0x364/0x3d0 [ 1579.889924][ C0] worker_thread+0x86d/0xd40 [ 1579.894652][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1579.900673][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1579.905755][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1579.910951][ C0] kthread+0x2f0/0x390 [ 1579.915068][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1579.920286][ C0] ? __pfx_kthread+0x10/0x10 [ 1579.924935][ C0] ret_from_fork+0x4b/0x80 [ 1579.929432][ C0] ? __pfx_kthread+0x10/0x10 [ 1579.934087][ C0] ret_from_fork_asm+0x1a/0x30 [ 1579.938924][ C0] [ 1579.942023][ C0] [ 1579.942023][ C0] Showing all locks held in the system: [ 1579.949825][ C0] 3 locks held by kworker/u8:0/11: [ 1579.955056][ C0] #0: ffff888029a74948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1579.966711][ C0] #1: ffffc90000107d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1579.979588][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1579.989064][ C0] 2 locks held by kworker/u8:2/35: [ 1579.994321][ C0] 2 locks held by getty/4853: [ 1579.999050][ C0] #0: ffff88802a29c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1580.008967][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1580.019229][ C0] 2 locks held by kworker/u8:12/6004: [ 1580.024705][ C0] 3 locks held by kworker/1:6/10133: [ 1580.030071][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1580.041176][ C0] #1: ffffc900041afd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1580.052243][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1580.061365][ C0] 5 locks held by kworker/u8:1/18683: [ 1580.066772][ C0] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1580.077793][ C0] #1: ffffc900100e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1580.088404][ C0] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1580.097921][ C0] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1580.108098][ C0] #4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1580.119129][ C0] 3 locks held by kworker/0:7/22287: [ 1580.124523][ C0] 1 lock held by syz.3.5363/22709: [ 1580.129718][ C0] #0: ffff88801b2a8578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: remove_inode_hugepages+0x38e/0x1520 [ 1580.141455][ C0] 7 locks held by syz-executor/23618: [ 1580.146909][ C0] #0: ffff88802a1fa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1580.155878][ C0] #1: ffff888068e7d088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1580.165743][ C0] #2: ffff8880222545a8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1580.175918][ C0] #3: ffffffff8ef05248 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1580.186311][ C0] #4: ffff88804fbc10e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1580.197065][ C0] #5: ffff888056617250 (&devlink->lock_key#83){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1580.207469][ C0] #6: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 1580.218302][ C0] 1 lock held by syz-executor/23759: [ 1580.223661][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1580.233311][ C0] 1 lock held by syz.3.5721/23937: [ 1580.238460][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1580.248162][ C0] 1 lock held by syz.3.5721/23939: [ 1580.253441][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1580.263104][ C0] 2 locks held by syz.4.5728/23959: [ 1580.268374][ C0] #0: ffffffff8e8ac128 (uuid_mutex){+.+.}-{3:3}, at: btrfs_get_tree+0x2dc/0x1920 [ 1580.278033][ C0] #1: ffffffff8e3f02a8 (lock#3){+.+.}-{3:3}, at: __lru_add_drain_all+0x66/0x560 [ 1580.287311][ C0] 1 lock held by syz.0.5729/23960: [ 1580.292628][ C0] #0: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1580.303670][ C0] 3 locks held by syz.0.5729/23962: [ 1580.309087][ C0] #0: ffff88804e7ced80 (&u->iolock){+.+.}-{3:3}, at: __unix_dgram_recvmsg+0x246/0x12f0 [ 1580.318974][ C0] #1: ffffc90000007c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1580.329144][ C0] #2: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1580.339062][ C0] [ 1580.341460][ C0] ============================================= [ 1580.341460][ C0] [ 1580.442014][T18683] team0 (unregistering): Port device team_slave_1 removed [ 1580.523788][ C1] vkms_vblank_simulate: vblank timer overrun [ 1580.595028][ C1] vkms_vblank_simulate: vblank timer overrun [ 1580.792897][ C1] vkms_vblank_simulate: vblank timer overrun [ 1580.885030][T18683] team0 (unregistering): Port device team_slave_0 removed [ 1581.429508][ C0] DEBUG: waiting rtnl_mutex for 1942 jiffies. [ 1581.435771][ C0] task:kworker/u8:0 state:D stack:18712 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 1581.446040][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 1581.452110][ C0] Call Trace: [ 1581.455428][ C0] [ 1581.458398][ C0] __schedule+0x1800/0x4a60 [ 1581.463017][ C0] ? __pfx___schedule+0x10/0x10 [ 1581.467919][ C0] ? __pfx_lock_release+0x10/0x10 [ 1581.473029][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1581.478543][ C0] ? kthread_data+0x52/0xd0 [ 1581.483127][ C0] ? schedule+0x90/0x320 [ 1581.487412][ C0] ? wq_worker_sleeping+0x66/0x240 [ 1581.492609][ C0] ? schedule+0x90/0x320 [ 1581.496892][ C0] schedule+0x14b/0x320 [ 1581.501218][ C0] schedule_preempt_disabled+0x13/0x30 [ 1581.506725][ C0] __mutex_lock+0x6a4/0xd70 [ 1581.511316][ C0] ? mark_lock+0x9a/0x360 [ 1581.515704][ C0] ? __mutex_lock+0x527/0xd70 [ 1581.520466][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 1581.525635][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1581.530782][ C0] ? get_rtnl_holder+0x144/0x190 [ 1581.535898][ C0] addrconf_dad_work+0xd0/0x16f0 [ 1581.541418][ C0] ? preempt_schedule+0xe1/0xf0 [ 1581.546445][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1581.551927][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1581.557452][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 1581.562946][ C0] ? process_scheduled_works+0x945/0x1830 [ 1581.568744][ C0] process_scheduled_works+0xa2c/0x1830 [ 1581.574438][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1581.580510][ C0] ? assign_work+0x364/0x3d0 [ 1581.585156][ C0] worker_thread+0x86d/0xd40 [ 1581.589926][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1581.595033][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1581.600337][ C0] kthread+0x2f0/0x390 [ 1581.604484][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1581.609699][ C0] ? __pfx_kthread+0x10/0x10 [ 1581.614350][ C0] ret_from_fork+0x4b/0x80 [ 1581.618820][ C0] ? __pfx_kthread+0x10/0x10 [ 1581.623601][ C0] ret_from_fork_asm+0x1a/0x30 [ 1581.628441][ C0] [ 1581.631535][ C0] DEBUG: waiting rtnl_mutex for 1812 jiffies. [ 1581.637640][ C0] task:kworker/1:6 state:D stack:20976 pid:10133 tgid:10133 ppid:2 flags:0x00004000 [ 1581.647911][ C0] Workqueue: events linkwatch_event [ 1581.653201][ C0] Call Trace: [ 1581.656571][ C0] [ 1581.659587][ C0] __schedule+0x1800/0x4a60 [ 1581.664169][ C0] ? __pfx___schedule+0x10/0x10 [ 1581.669063][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1581.675131][ C0] ? __pfx_lock_release+0x10/0x10 [ 1581.680250][ C0] ? kick_pool+0x45c/0x620 [ 1581.684725][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1581.690025][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1581.695279][ C0] ? schedule+0x90/0x320 [ 1581.699609][ C0] schedule+0x14b/0x320 [ 1581.703812][ C0] schedule_preempt_disabled+0x13/0x30 [ 1581.709361][ C0] __mutex_lock+0x6a4/0xd70 [ 1581.714012][ C0] ? __mutex_lock+0x527/0xd70 [ 1581.718768][ C0] ? linkwatch_event+0xe/0x60 [ 1581.723625][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1581.728847][ C0] ? get_rtnl_holder+0x144/0x190 [ 1581.733920][ C0] ? process_scheduled_works+0x945/0x1830 [ 1581.739756][ C0] linkwatch_event+0xe/0x60 [ 1581.744426][ C0] process_scheduled_works+0xa2c/0x1830 [ 1581.750169][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1581.756308][ C0] ? assign_work+0x364/0x3d0 [ 1581.761132][ C0] worker_thread+0x86d/0xd40 [ 1581.765820][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1581.771860][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1581.776973][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1581.782236][ C0] kthread+0x2f0/0x390 [ 1581.786383][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1581.791633][ C0] ? __pfx_kthread+0x10/0x10 [ 1581.796295][ C0] ret_from_fork+0x4b/0x80 [ 1581.800818][ C0] ? __pfx_kthread+0x10/0x10 [ 1581.805489][ C0] ret_from_fork_asm+0x1a/0x30 [ 1581.810416][ C0] [ 1581.813578][ C0] DEBUG: waiting rtnl_mutex for 995 jiffies. [ 1581.819664][ C0] task:syz.3.5721 state:D stack:26304 pid:23937 tgid:23936 ppid:23155 flags:0x00004004 [ 1581.830198][ C0] Call Trace: [ 1581.833529][ C0] [ 1581.836519][ C0] __schedule+0x1800/0x4a60 [ 1581.841166][ C0] ? __pfx___schedule+0x10/0x10 [ 1581.846096][ C0] ? __pfx_lock_release+0x10/0x10 [ 1581.851239][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1581.856786][ C0] ? schedule+0x90/0x320 [ 1581.861140][ C0] schedule+0x14b/0x320 [ 1581.865453][ C0] schedule_preempt_disabled+0x13/0x30 [ 1581.871000][ C0] __mutex_lock+0x6a4/0xd70 [ 1581.875575][ C0] ? __mutex_lock+0x527/0xd70 [ 1581.880381][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1581.885653][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1581.890802][ C0] ? get_rtnl_holder+0x144/0x190 [ 1581.895801][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1581.901048][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1581.906330][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1581.911913][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1581.917436][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1581.922612][ C1] vkms_vblank_simulate: vblank timer overrun [ 1581.922725][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1581.934116][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 1581.939515][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1581.944695][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1581.950635][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1581.955808][ C0] ? __dev_queue_xmit+0x1763/0x3e90 [ 1581.961197][ C0] ? kasan_save_track+0x51/0x80 [ 1581.966116][ C0] ? vfs_writev+0x37c/0xbb0 [ 1581.970723][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.977035][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1581.982263][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1581.987730][ C0] ? ref_tracker_free+0x643/0x7e0 [ 1581.992882][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1581.997722][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1582.003331][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1582.008738][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1582.014092][ C0] netlink_unicast+0x7f0/0x990 [ 1582.018957][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1582.024464][ C0] ? __virt_addr_valid+0x183/0x530 [ 1582.029723][ C0] ? __check_object_size+0x49c/0x900 [ 1582.035085][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1582.040382][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1582.045247][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1582.050654][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1582.055735][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1582.061138][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1582.066683][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1582.072083][ C0] __sock_sendmsg+0x221/0x270 [ 1582.076824][ C0] sock_write_iter+0x2dd/0x400 [ 1582.081696][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 1582.087045][ C0] ? futex_wait_queue+0x14e/0x1d0 [ 1582.092174][ C0] ? futex_unqueue+0xcb/0xf0 [ 1582.096838][ C0] do_iter_readv_writev+0x60a/0x890 [ 1582.102166][ C0] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1582.107954][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 1582.113454][ C0] ? security_file_permission+0x7f/0xa0 [ 1582.119090][ C0] ? rw_verify_area+0x1d2/0x6b0 [ 1582.124069][ C0] vfs_writev+0x37c/0xbb0 [ 1582.128482][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1582.133624][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 1582.138576][ C0] ? __fget_files+0x29/0x470 [ 1582.143303][ C0] do_writev+0x1b1/0x350 [ 1582.147631][ C0] ? __pfx_do_writev+0x10/0x10 [ 1582.152513][ C0] ? do_syscall_64+0x100/0x230 [ 1582.157416][ C0] ? do_syscall_64+0xb6/0x230 [ 1582.162222][ C0] do_syscall_64+0xf3/0x230 [ 1582.166810][ C0] ? clear_bhb_loop+0x35/0x90 [ 1582.171607][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.177560][ C0] RIP: 0033:0x7f72ccf75bd9 [ 1582.182065][ C0] RSP: 002b:00007f72cdc68048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1582.190601][ C0] RAX: ffffffffffffffda RBX: 00007f72cd103f60 RCX: 00007f72ccf75bd9 [ 1582.198635][ C0] RDX: 0000000000000001 RSI: 00000000200003c0 RDI: 0000000000000008 [ 1582.206736][ C0] RBP: 00007f72ccfe4e60 R08: 0000000000000000 R09: 0000000000000000 [ 1582.214823][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1582.223084][ C0] R13: 000000000000000b R14: 00007f72cd103f60 R15: 00007ffce9fd6c48 [ 1582.231299][ C0] [ 1582.234357][ C0] DEBUG: waiting rtnl_mutex for 1030 jiffies. [ 1582.240516][ C0] task:syz.3.5721 state:D stack:27216 pid:23939 tgid:23936 ppid:23155 flags:0x00000004 [ 1582.250788][ C0] Call Trace: [ 1582.254110][ C0] [ 1582.257086][ C0] __schedule+0x1800/0x4a60 [ 1582.261722][ C0] ? __pfx___schedule+0x10/0x10 [ 1582.266663][ C0] ? __pfx_lock_release+0x10/0x10 [ 1582.271802][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1582.277486][ C0] ? schedule+0x90/0x320 [ 1582.281917][ C0] schedule+0x14b/0x320 [ 1582.286128][ C0] schedule_preempt_disabled+0x13/0x30 [ 1582.291704][ C0] __mutex_lock+0x6a4/0xd70 [ 1582.296298][ C0] ? __mutex_lock+0x527/0xd70 [ 1582.301081][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1582.306339][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1582.311463][ C0] ? get_rtnl_holder+0x144/0x190 [ 1582.316457][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1582.321597][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1582.326866][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1582.332433][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1582.337860][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1582.343160][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1582.348588][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 1582.353990][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1582.359158][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1582.364994][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1582.370307][ C0] ? __dev_queue_xmit+0x1763/0x3e90 [ 1582.375560][ C0] ? kasan_save_track+0x51/0x80 [ 1582.380510][ C0] ? do_syscall_64+0xf3/0x230 [ 1582.385248][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1582.390464][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1582.395933][ C0] ? ref_tracker_free+0x643/0x7e0 [ 1582.401061][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1582.405902][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1582.411476][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1582.416852][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1582.422148][ C0] netlink_unicast+0x7f0/0x990 [ 1582.427000][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1582.432407][ C0] ? __virt_addr_valid+0x183/0x530 [ 1582.437589][ C0] ? __check_object_size+0x49c/0x900 [ 1582.442976][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1582.448146][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1582.453033][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1582.458375][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1582.463414][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1582.468760][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1582.474327][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1582.479699][ C0] __sock_sendmsg+0x221/0x270 [ 1582.484441][ C0] __sys_sendto+0x3a4/0x4f0 [ 1582.489013][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1582.494173][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1582.500254][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1582.506644][ C0] ? exc_page_fault+0x590/0x8c0 [ 1582.511600][ C0] __x64_sys_sendto+0xde/0x100 [ 1582.516530][ C0] do_syscall_64+0xf3/0x230 [ 1582.522922][ C0] ? clear_bhb_loop+0x35/0x90 [ 1582.527763][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.533761][ C0] RIP: 0033:0x7f72ccf7796c [ 1582.538229][ C0] RSP: 002b:00007f72cc9fded0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1582.546746][ C0] RAX: ffffffffffffffda RBX: 00007f72cc9fdfd0 RCX: 00007f72ccf7796c [ 1582.551015][T21805] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1582.554790][ C0] RDX: 0000000000000024 RSI: 00007f72cc9fe020 RDI: 0000000000000008 [ 1582.554816][ C0] RBP: 0000000000000000 R08: 00007f72cc9fdf24 R09: 000000000000000c [ 1582.554834][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 1582.554851][ C0] R13: 00007f72cc9fdf78 R14: 00007f72cc9fe020 R15: 0000000000000000 [ 1582.554891][ C0] [ 1582.554904][ C0] DEBUG: waiting rtnl_mutex for 2112 jiffies. [ 1582.554920][ C0] task:syz-executor state:D stack:21024 pid:23618 tgid:23618 ppid:23593 flags:0x00004002 [ 1582.554964][ C0] Call Trace: [ 1582.554975][ C0] [ 1582.554992][ C0] __schedule+0x1800/0x4a60 [ 1582.555051][ C0] ? __pfx___schedule+0x10/0x10 [ 1582.555085][ C0] ? __pfx_lock_release+0x10/0x10 [ 1582.555122][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1582.555173][ C0] ? schedule+0x90/0x320 [ 1582.555201][ C0] schedule+0x14b/0x320 [ 1582.555235][ C0] schedule_preempt_disabled+0x13/0x30 [ 1582.555265][ C0] __mutex_lock+0x6a4/0xd70 [ 1582.555304][ C0] ? __mutex_lock+0x527/0xd70 [ 1582.555340][ C0] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 1582.555370][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1582.555417][ C0] ? get_rtnl_holder+0x144/0x190 [ 1582.555447][ C0] unregister_netdevice_notifier_net+0x89/0x3a0 [ 1582.555485][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1582.555515][ C0] ? mntput_no_expire+0x2da/0x850 [ 1582.555550][ C0] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 1582.555579][ C0] ? __pfx_mntput_no_expire+0x10/0x10 [ 1582.579618][T21805] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1582.587585][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1582.587629][ C0] ? simple_release_fs+0x9c/0xd0 [ 1582.587671][ C0] nsim_dev_hwstats_exit+0x81/0x290 [ 1582.615514][T21805] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1582.618399][ C0] ? kfree+0x149/0x360 [ 1582.623475][T21805] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1582.625914][ C0] nsim_dev_reload_destroy+0x2ad/0x490 [ 1582.625960][ C0] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1582.635123][T21805] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1582.635974][ C0] nsim_drv_remove+0x58/0x160 [ 1582.643134][T21805] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1582.645734][ C0] device_release_driver_internal+0x4a9/0x7c0 [ 1582.645789][ C0] bus_remove_device+0x34f/0x420 [ 1582.790714][ C0] device_del+0x57a/0x9b0 [ 1582.795126][ C0] ? __pfx_device_del+0x10/0x10 [ 1582.800037][ C0] device_unregister+0x20/0xc0 [ 1582.804817][ C0] del_device_store+0x363/0x480 [ 1582.809742][ C0] ? __pfx_del_device_store+0x10/0x10 [ 1582.815168][ C0] ? sysfs_kf_write+0x182/0x2a0 [ 1582.820105][ C0] ? bus_attr_store+0x4f/0xa0 [ 1582.824815][ C0] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1582.830070][ C0] kernfs_fop_write_iter+0x3a1/0x500 [ 1582.835382][ C0] vfs_write+0xa72/0xc90 [ 1582.839699][ C0] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1582.845561][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1582.850455][ C0] ksys_write+0x1a0/0x2c0 [ 1582.854910][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1582.859817][ C0] ? do_syscall_64+0x100/0x230 [ 1582.864634][ C0] ? do_syscall_64+0xb6/0x230 [ 1582.869407][ C0] do_syscall_64+0xf3/0x230 [ 1582.873961][ C0] ? clear_bhb_loop+0x35/0x90 [ 1582.878684][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.884679][ C0] RIP: 0033:0x7f83e617475f [ 1582.889144][ C0] RSP: 002b:00007ffe01e8a360 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1582.897674][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f83e617475f [ 1582.905697][ C0] RDX: 0000000000000001 RSI: 00007ffe01e8a3b0 RDI: 0000000000000005 [ 1582.913761][ C0] RBP: 00007f83e61e45a0 R08: 0000000000000000 R09: 00007ffe01e8a1b7 [ 1582.921823][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1582.929890][ C0] R13: 00007ffe01e8a3b0 R14: 00007f83e6e34620 R15: 0000000000000003 [ 1582.937917][ C0] [ 1582.941000][ C0] DEBUG: waiting rtnl_mutex for 2047 jiffies. [ 1582.947089][ C0] task:syz-executor state:D stack:20368 pid:23759 tgid:23759 ppid:23758 flags:0x00004000 [ 1582.957333][ C0] Call Trace: [ 1582.960665][ C0] [ 1582.963635][ C0] __schedule+0x1800/0x4a60 [ 1582.968214][ C0] ? __pfx___schedule+0x10/0x10 [ 1582.973170][ C0] ? __pfx_lock_release+0x10/0x10 [ 1582.978255][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1582.983846][ C0] ? schedule+0x90/0x320 [ 1582.988137][ C0] schedule+0x14b/0x320 [ 1582.992403][ C0] schedule_preempt_disabled+0x13/0x30 [ 1582.997920][ C0] __mutex_lock+0x6a4/0xd70 [ 1583.002515][ C0] ? __mutex_lock+0x527/0xd70 [ 1583.007244][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1583.012540][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1583.017612][ C0] ? get_rtnl_holder+0x144/0x190 [ 1583.022592][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1583.027670][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1583.032950][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1583.038459][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 1583.043823][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1583.049046][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1583.054336][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1583.060745][ C0] ? preempt_schedule_notrace+0x100/0x140 [ 1583.066612][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 1583.072794][ C0] ? mark_lock+0x9a/0x360 [ 1583.077168][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1583.082445][ C0] ? __lock_acquire+0x1359/0x2000 [ 1583.087550][ C0] ? mark_lock+0x9a/0x360 [ 1583.091973][ C0] ? __lock_acquire+0x1359/0x2000 [ 1583.097076][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1583.101941][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1583.107448][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1583.112819][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1583.118032][ C0] netlink_unicast+0x7f0/0x990 [ 1583.122894][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1583.128287][ C0] ? __virt_addr_valid+0x183/0x530 [ 1583.133531][ C0] ? __check_object_size+0x49c/0x900 [ 1583.138862][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1583.144026][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1583.148839][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1583.154211][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1583.159201][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1583.164560][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1583.170109][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1583.175456][ C0] __sock_sendmsg+0x221/0x270 [ 1583.180248][ C0] __sys_sendto+0x3a4/0x4f0 [ 1583.184828][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1583.189931][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1583.195147][ C0] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 1583.201317][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1583.207345][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1583.213797][ C0] __x64_sys_sendto+0xde/0x100 [ 1583.218618][ C0] do_syscall_64+0xf3/0x230 [ 1583.223191][ C0] ? clear_bhb_loop+0x35/0x90 [ 1583.227896][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.233868][ C0] RIP: 0033:0x7f601b97796c [ 1583.238318][ C0] RSP: 002b:00007ffe14f47d70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1583.246782][ C0] RAX: ffffffffffffffda RBX: 00007f601c634620 RCX: 00007f601b97796c [ 1583.254809][ C0] RDX: 0000000000000064 RSI: 00007f601c634670 RDI: 0000000000000003 [ 1583.262839][ C0] RBP: 0000000000000000 R08: 00007ffe14f47dc4 R09: 000000000000000c [ 1583.270914][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1583.278945][ C0] R13: 0000000000000000 R14: 00007f601c634670 R15: 0000000000000000 [ 1583.287011][ C0] [ 1583.290094][ C0] DEBUG: holding rtnl_mutex for 2077 jiffies. [ 1583.296189][ C0] task:kworker/u8:1 state:D stack:19728 pid:18683 tgid:18683 ppid:2 flags:0x00004000 [ 1583.306456][ C0] Workqueue: netns cleanup_net [ 1583.311312][ C0] Call Trace: [ 1583.314620][ C0] [ 1583.317567][ C0] __schedule+0x1800/0x4a60 [ 1583.322183][ C0] ? __pfx___schedule+0x10/0x10 [ 1583.327088][ C0] ? __pfx_lock_release+0x10/0x10 [ 1583.332248][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1583.338230][ C0] ? kthread_data+0x52/0xd0 [ 1583.342785][ C0] ? wq_worker_sleeping+0x66/0x240 [ 1583.347944][ C0] ? schedule+0x90/0x320 [ 1583.352266][ C0] schedule+0x14b/0x320 [ 1583.356471][ C0] synchronize_rcu_expedited+0x684/0x830 [ 1583.362272][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1583.368492][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1583.373871][ C0] ? __pfx___might_resched+0x10/0x10 [ 1583.379201][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1583.385454][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1583.391616][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1583.398025][ C0] synchronize_rcu+0x11b/0x360 [ 1583.402883][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 1583.408231][ C0] lockdep_unregister_key+0x556/0x610 [ 1583.413705][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1583.419709][ C0] ? rcu_is_watching+0x15/0xb0 [ 1583.424524][ C0] ? qdisc_reset+0x3bf/0x5b0 [ 1583.429164][ C0] __qdisc_destroy+0x165/0x410 [ 1583.434003][ C0] dev_shutdown+0x357/0x440 [ 1583.438541][ C0] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 1583.444946][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1583.451829][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 1583.457783][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 1583.464043][ C0] default_device_exit_batch+0xa0f/0xa90 [ 1583.469791][ C0] ? __pfx___might_resched+0x10/0x10 [ 1583.475170][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1583.481447][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1583.486791][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1583.493053][ C0] cleanup_net+0x89d/0xcc0 [ 1583.497514][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1583.502507][ C0] ? process_scheduled_works+0x945/0x1830 [ 1583.508274][ C0] process_scheduled_works+0xa2c/0x1830 [ 1583.513940][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1583.520024][ C0] ? assign_work+0x364/0x3d0 [ 1583.524671][ C0] worker_thread+0x86d/0xd40 [ 1583.529374][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1583.535337][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1583.540481][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1583.545610][ C0] kthread+0x2f0/0x390 [ 1583.549761][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1583.554917][ C0] ? __pfx_kthread+0x10/0x10 [ 1583.559577][ C0] ret_from_fork+0x4b/0x80 [ 1583.564044][ C0] ? __pfx_kthread+0x10/0x10 [ 1583.568686][ C0] ret_from_fork_asm+0x1a/0x30 [ 1583.574060][ C0] [ 1583.577114][ C0] [ 1583.577114][ C0] Showing all locks held in the system: [ 1583.584903][ C0] 3 locks held by kworker/u8:0/11: [ 1583.590071][ C0] #0: ffff888029a74948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1583.601802][ C0] #1: ffffc90000107d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1583.614714][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1583.624288][ C0] 2 locks held by kworker/u8:6/1097: [ 1583.629671][ C0] 2 locks held by getty/4853: [ 1583.634391][ C0] #0: ffff88802a29c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1583.644286][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1583.654916][ C0] 3 locks held by kworker/1:6/10133: [ 1583.660259][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1583.671390][ C0] #1: ffffc900041afd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1583.682484][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1583.691558][ C0] 5 locks held by kworker/u8:1/18683: [ 1583.696964][ C0] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1583.707973][ C0] #1: ffffc900100e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1583.718596][ C0] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1583.728228][ C0] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1583.738426][ C0] #4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1583.749432][ C0] 5 locks held by kworker/u8:11/22268: [ 1583.754933][ C0] 1 lock held by syz.3.5363/22709: [ 1583.760133][ C0] #0: ffff88801b2a8578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: remove_inode_hugepages+0x38e/0x1520 [ 1583.771863][ C0] 1 lock held by syz-executor/23069: [ 1583.777174][ C0] #0: ffff8880b943ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 1583.787222][ C0] 7 locks held by syz-executor/23618: [ 1583.792686][ C0] #0: ffff88802a1fa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1583.801725][ C0] #1: ffff888068e7d088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1583.811622][ C0] #2: ffff8880222545a8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1583.821784][ C0] #3: ffffffff8ef05248 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1583.832217][ C0] #4: ffff88804fbc10e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1583.842903][ C0] #5: ffff888056617250 (&devlink->lock_key#83){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1583.853227][ C0] #6: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 1583.864110][ C0] 1 lock held by syz-executor/23759: [ 1583.869472][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1583.879065][ C0] 1 lock held by syz.3.5721/23937: [ 1583.884265][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1583.893903][ C0] 1 lock held by syz.3.5721/23939: [ 1583.899051][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1583.908656][ C0] 1 lock held by syz.4.5731/23970: [ 1583.913852][ C0] 1 lock held by syz-executor/23972: [ 1583.919172][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1583.928826][ C0] [ 1583.931226][ C0] ============================================= [ 1583.931226][ C0] [ 1584.005658][ C1] vkms_vblank_simulate: vblank timer overrun [ 1584.563194][T23975] block device autoloading is deprecated and will be removed. [ 1584.607874][ C1] vkms_vblank_simulate: vblank timer overrun [ 1584.643629][ C1] vkms_vblank_simulate: vblank timer overrun [ 1584.710188][T21805] Bluetooth: hci7: command tx timeout [ 1584.841746][ C1] vkms_vblank_simulate: vblank timer overrun [ 1584.923957][ C1] vkms_vblank_simulate: vblank timer overrun [ 1584.949368][ C0] DEBUG: waiting rtnl_mutex for 2294 jiffies. [ 1584.955518][ C0] task:kworker/u8:0 state:D stack:18712 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 1584.965798][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 1584.971894][ C0] Call Trace: [ 1584.975215][ C0] [ 1584.978189][ C0] __schedule+0x1800/0x4a60 [ 1584.982832][ C0] ? __pfx___schedule+0x10/0x10 [ 1584.987738][ C0] ? __pfx_lock_release+0x10/0x10 [ 1584.992874][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1584.998395][ C0] ? kthread_data+0x52/0xd0 [ 1585.003007][ C0] ? schedule+0x90/0x320 [ 1585.007297][ C0] ? wq_worker_sleeping+0x66/0x240 [ 1585.012523][ C0] ? schedule+0x90/0x320 [ 1585.016824][ C0] schedule+0x14b/0x320 [ 1585.021089][ C0] schedule_preempt_disabled+0x13/0x30 [ 1585.026611][ C0] __mutex_lock+0x6a4/0xd70 [ 1585.031219][ C0] ? mark_lock+0x9a/0x360 [ 1585.035600][ C0] ? __mutex_lock+0x527/0xd70 [ 1585.040367][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 1585.045529][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1585.050669][ C0] ? get_rtnl_holder+0x144/0x190 [ 1585.055653][ C0] addrconf_dad_work+0xd0/0x16f0 [ 1585.060692][ C0] ? preempt_schedule+0xe1/0xf0 [ 1585.065588][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1585.071066][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1585.076591][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 1585.082092][ C0] ? process_scheduled_works+0x945/0x1830 [ 1585.087877][ C0] process_scheduled_works+0xa2c/0x1830 [ 1585.093574][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1585.099685][ C0] ? assign_work+0x364/0x3d0 [ 1585.104348][ C0] worker_thread+0x86d/0xd40 [ 1585.109026][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1585.114170][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1585.119395][ C0] kthread+0x2f0/0x390 [ 1585.123521][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1585.128678][ C0] ? __pfx_kthread+0x10/0x10 [ 1585.133383][ C0] ret_from_fork+0x4b/0x80 [ 1585.137858][ C0] ? __pfx_kthread+0x10/0x10 [ 1585.142554][ C0] ret_from_fork_asm+0x1a/0x30 [ 1585.147395][ C0] [ 1585.150503][ C0] DEBUG: waiting rtnl_mutex for 2164 jiffies. [ 1585.156612][ C0] task:kworker/1:6 state:D stack:20976 pid:10133 tgid:10133 ppid:2 flags:0x00004000 [ 1585.166897][ C0] Workqueue: events linkwatch_event [ 1585.172233][ C0] Call Trace: [ 1585.175551][ C0] [ 1585.178535][ C0] __schedule+0x1800/0x4a60 [ 1585.183219][ C0] ? __pfx___schedule+0x10/0x10 [ 1585.188145][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1585.194272][ C0] ? __pfx_lock_release+0x10/0x10 [ 1585.199436][ C0] ? kick_pool+0x45c/0x620 [ 1585.203937][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1585.209196][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1585.214505][ C0] ? schedule+0x90/0x320 [ 1585.218806][ C0] schedule+0x14b/0x320 [ 1585.223074][ C0] schedule_preempt_disabled+0x13/0x30 [ 1585.228609][ C0] __mutex_lock+0x6a4/0xd70 [ 1585.233256][ C0] ? __mutex_lock+0x527/0xd70 [ 1585.238007][ C0] ? linkwatch_event+0xe/0x60 [ 1585.242795][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1585.247939][ C0] ? get_rtnl_holder+0x144/0x190 [ 1585.253004][ C0] ? process_scheduled_works+0x945/0x1830 [ 1585.258789][ C0] linkwatch_event+0xe/0x60 [ 1585.263414][ C0] process_scheduled_works+0xa2c/0x1830 [ 1585.269100][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1585.275284][ C0] ? assign_work+0x364/0x3d0 [ 1585.279997][ C0] worker_thread+0x86d/0xd40 [ 1585.284741][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1585.290772][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1585.295861][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1585.301070][ C0] kthread+0x2f0/0x390 [ 1585.305191][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1585.310399][ C0] ? __pfx_kthread+0x10/0x10 [ 1585.315050][ C0] ret_from_fork+0x4b/0x80 [ 1585.319572][ C0] ? __pfx_kthread+0x10/0x10 [ 1585.324225][ C0] ret_from_fork_asm+0x1a/0x30 [ 1585.329075][ C0] [ 1585.332191][ C0] DEBUG: waiting rtnl_mutex for 1347 jiffies. [ 1585.338292][ C0] task:syz.3.5721 state:D stack:26304 pid:23937 tgid:23936 ppid:23155 flags:0x00004004 [ 1585.348575][ C0] Call Trace: [ 1585.351988][ C0] [ 1585.354978][ C0] __schedule+0x1800/0x4a60 [ 1585.359607][ C0] ? __pfx___schedule+0x10/0x10 [ 1585.364509][ C0] ? __pfx_lock_release+0x10/0x10 [ 1585.369630][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1585.375161][ C0] ? schedule+0x90/0x320 [ 1585.379486][ C0] schedule+0x14b/0x320 [ 1585.383692][ C0] schedule_preempt_disabled+0x13/0x30 [ 1585.389201][ C0] __mutex_lock+0x6a4/0xd70 [ 1585.393832][ C0] ? __mutex_lock+0x527/0xd70 [ 1585.398569][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1585.403894][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1585.409015][ C0] ? get_rtnl_holder+0x144/0x190 [ 1585.414079][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1585.419169][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1585.424492][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1585.430237][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1585.435809][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1585.441139][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1585.446590][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 1585.451999][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1585.457168][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1585.463032][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1585.468226][ C0] ? __dev_queue_xmit+0x1763/0x3e90 [ 1585.473532][ C0] ? kasan_save_track+0x51/0x80 [ 1585.478456][ C0] ? vfs_writev+0x37c/0xbb0 [ 1585.483247][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.489412][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1585.494587][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1585.500090][ C0] ? ref_tracker_free+0x643/0x7e0 [ 1585.505193][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1585.510110][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1585.515638][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1585.521106][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1585.526387][ C0] netlink_unicast+0x7f0/0x990 [ 1585.529557][ T30] INFO: task syz.3.5363:22709 blocked for more than 143 seconds. [ 1585.531268][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1585.544305][ C0] ? __virt_addr_valid+0x183/0x530 [ 1585.547762][ T30] Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 1585.549503][ C0] ? __check_object_size+0x49c/0x900 [ 1585.549540][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1585.549578][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1585.549620][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1585.549649][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1585.549683][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1585.549716][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1585.549755][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1585.549779][ C0] __sock_sendmsg+0x221/0x270 [ 1585.549822][ C0] sock_write_iter+0x2dd/0x400 [ 1585.549861][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 1585.549909][ C0] ? futex_wait_queue+0x14e/0x1d0 [ 1585.568442][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1585.572296][ C0] ? futex_unqueue+0xcb/0xf0 [ 1585.572345][ C0] do_iter_readv_writev+0x60a/0x890 [ 1585.572382][ C0] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1585.572414][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 1585.572439][ C0] ? security_file_permission+0x7f/0xa0 [ 1585.572468][ C0] ? rw_verify_area+0x1d2/0x6b0 [ 1585.572510][ C0] vfs_writev+0x37c/0xbb0 [ 1585.572555][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1585.599416][ T30] task:syz.3.5363 state:D [ 1585.603677][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 1585.625245][ T30] stack:24672 pid:22709 tgid:22709 ppid:22491 flags:0x00000004 [ 1585.627566][ C0] ? __fget_files+0x29/0x470 [ 1585.649482][ T30] Call Trace: [ 1585.654313][ C0] do_writev+0x1b1/0x350 [ 1585.679441][ T30] [ 1585.686021][ C0] ? __pfx_do_writev+0x10/0x10 [ 1585.706048][ C0] ? do_syscall_64+0x100/0x230 [ 1585.710940][ C0] ? do_syscall_64+0xb6/0x230 [ 1585.715662][ C0] do_syscall_64+0xf3/0x230 [ 1585.720216][ T30] __schedule+0x1800/0x4a60 [ 1585.720287][ T30] ? __pfx___schedule+0x10/0x10 [ 1585.724746][ C0] ? clear_bhb_loop+0x35/0x90 [ 1585.724807][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.740365][ C0] RIP: 0033:0x7f72ccf75bd9 [ 1585.744828][ C0] RSP: 002b:00007f72cdc68048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1585.751580][ T30] ? __pfx_lock_release+0x10/0x10 [ 1585.753321][ C0] RAX: ffffffffffffffda RBX: 00007f72cd103f60 RCX: 00007f72ccf75bd9 [ 1585.766374][ C0] RDX: 0000000000000001 RSI: 00000000200003c0 RDI: 0000000000000008 [ 1585.769552][ T30] ? irqentry_exit+0x63/0x90 [ 1585.774414][ C0] RBP: 00007f72ccfe4e60 R08: 0000000000000000 R09: 0000000000000000 [ 1585.787075][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1585.795142][ C0] R13: 000000000000000b R14: 00007f72cd103f60 R15: 00007ffce9fd6c48 [ 1585.799469][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1585.803205][ C0] [ 1585.808348][ T30] ? schedule+0x90/0x320 [ 1585.811404][ C0] DEBUG: waiting rtnl_mutex for 1388 jiffies. [ 1585.811422][ C0] task:syz.3.5721 state:D stack:27216 pid:23939 tgid:23936 ppid:23155 flags:0x00000004 [ 1585.811467][ C0] Call Trace: [ 1585.811478][ C0] [ 1585.811496][ C0] __schedule+0x1800/0x4a60 [ 1585.811553][ C0] ? __pfx___schedule+0x10/0x10 [ 1585.811588][ C0] ? __pfx_lock_release+0x10/0x10 [ 1585.811623][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1585.811674][ C0] ? schedule+0x90/0x320 [ 1585.811703][ C0] schedule+0x14b/0x320 [ 1585.811734][ C0] schedule_preempt_disabled+0x13/0x30 [ 1585.858940][ T30] schedule+0x14b/0x320 [ 1585.862909][ C0] __mutex_lock+0x6a4/0xd70 [ 1585.862953][ C0] ? __mutex_lock+0x527/0xd70 [ 1585.862988][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1585.863028][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1585.863074][ C0] ? get_rtnl_holder+0x144/0x190 [ 1585.863105][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1585.890582][ T30] io_schedule+0x8d/0x110 [ 1585.891439][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1585.896412][ T30] folio_wait_bit_common+0x882/0x12b0 [ 1585.901374][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1585.901420][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1585.901451][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1585.901488][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1585.901516][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 1585.901546][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1585.901577][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1585.901615][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1585.901649][ C0] ? __dev_queue_xmit+0x1763/0x3e90 [ 1585.901679][ C0] ? kasan_save_track+0x51/0x80 [ 1585.901714][ C0] ? do_syscall_64+0xf3/0x230 [ 1585.901743][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1585.927351][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1585.932662][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1585.932720][ C0] ? ref_tracker_free+0x643/0x7e0 [ 1585.932753][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1585.932791][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1585.932832][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1585.932895][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1585.932922][ C0] netlink_unicast+0x7f0/0x990 [ 1585.932967][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1585.932998][ C0] ? __virt_addr_valid+0x183/0x530 [ 1585.933037][ C0] ? __check_object_size+0x49c/0x900 [ 1585.933068][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1585.933105][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1585.933153][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1585.933183][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1585.933215][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1585.933249][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1585.933287][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1585.933311][ C0] __sock_sendmsg+0x221/0x270 [ 1585.933353][ C0] __sys_sendto+0x3a4/0x4f0 [ 1585.933389][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1585.933449][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1585.933487][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1585.933521][ C0] ? exc_page_fault+0x590/0x8c0 [ 1585.965718][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1585.970819][ C0] __x64_sys_sendto+0xde/0x100 [ 1585.970856][ C0] do_syscall_64+0xf3/0x230 [ 1585.970888][ C0] ? clear_bhb_loop+0x35/0x90 [ 1585.970924][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.970954][ C0] RIP: 0033:0x7f72ccf7796c [ 1585.970976][ C0] RSP: 002b:00007f72cc9fded0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1585.971006][ C0] RAX: ffffffffffffffda RBX: 00007f72cc9fdfd0 RCX: 00007f72ccf7796c [ 1585.971027][ C0] RDX: 0000000000000024 RSI: 00007f72cc9fe020 RDI: 0000000000000008 [ 1585.971044][ C0] RBP: 0000000000000000 R08: 00007f72cc9fdf24 R09: 000000000000000c [ 1585.971062][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 1585.996366][ T30] remove_inode_hugepages+0x508/0x1520 [ 1585.996979][ C0] R13: 00007f72cc9fdf78 R14: 00007f72cc9fe020 R15: 0000000000000000 [ 1586.029600][ T30] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 1586.032972][ C0] [ 1586.059356][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1586.063611][ C0] DEBUG: waiting rtnl_mutex for 2463 jiffies. [ 1586.079135][ T30] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1586.079724][ C0] task:syz-executor state:D stack:21024 pid:23618 tgid:23618 ppid:23593 flags:0x00004002 [ 1586.079773][ C0] Call Trace: [ 1586.079785][ C0] [ 1586.079803][ C0] __schedule+0x1800/0x4a60 [ 1586.079866][ C0] ? __pfx___schedule+0x10/0x10 [ 1586.079901][ C0] ? __pfx_lock_release+0x10/0x10 [ 1586.079936][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1586.084618][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 1586.089128][ C0] ? schedule+0x90/0x320 [ 1586.116794][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1586.116996][ C0] schedule+0x14b/0x320 [ 1586.133722][ T30] ? __pfx_hugetlbfs_evict_inode+0x10/0x10 [ 1586.136936][ C0] schedule_preempt_disabled+0x13/0x30 [ 1586.136973][ C0] __mutex_lock+0x6a4/0xd70 [ 1586.137010][ C0] ? __mutex_lock+0x527/0xd70 [ 1586.137046][ C0] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 1586.137074][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1586.137125][ C0] ? get_rtnl_holder+0x144/0x190 [ 1586.137157][ C0] unregister_netdevice_notifier_net+0x89/0x3a0 [ 1586.137189][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1586.137217][ C0] ? mntput_no_expire+0x2da/0x850 [ 1586.137254][ C0] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 1586.137286][ C0] ? __pfx_mntput_no_expire+0x10/0x10 [ 1586.137329][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1586.137357][ C0] ? simple_release_fs+0x9c/0xd0 [ 1586.137397][ C0] nsim_dev_hwstats_exit+0x81/0x290 [ 1586.137436][ C0] ? kfree+0x149/0x360 [ 1586.137476][ C0] nsim_dev_reload_destroy+0x2ad/0x490 [ 1586.137511][ C0] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1586.137542][ C0] nsim_drv_remove+0x58/0x160 [ 1586.137570][ C0] device_release_driver_internal+0x4a9/0x7c0 [ 1586.137615][ C0] bus_remove_device+0x34f/0x420 [ 1586.137660][ C0] device_del+0x57a/0x9b0 [ 1586.137697][ C0] ? __pfx_device_del+0x10/0x10 [ 1586.137739][ C0] device_unregister+0x20/0xc0 [ 1586.137770][ C0] del_device_store+0x363/0x480 [ 1586.137810][ C0] ? __pfx_del_device_store+0x10/0x10 [ 1586.137851][ C0] ? sysfs_kf_write+0x182/0x2a0 [ 1586.137884][ C0] ? bus_attr_store+0x4f/0xa0 [ 1586.137913][ C0] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1586.137944][ C0] kernfs_fop_write_iter+0x3a1/0x500 [ 1586.137984][ C0] vfs_write+0xa72/0xc90 [ 1586.138015][ C0] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1586.138048][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1586.138099][ C0] ksys_write+0x1a0/0x2c0 [ 1586.204097][ T30] hugetlbfs_evict_inode+0x23/0x70 [ 1586.207075][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1586.219331][ T30] ? __pfx_hugetlbfs_evict_inode+0x10/0x10 [ 1586.224309][ C0] ? do_syscall_64+0x100/0x230 [ 1586.277043][ T30] evict+0x2a8/0x630 [ 1586.280060][ C0] ? do_syscall_64+0xb6/0x230 [ 1586.280102][ C0] do_syscall_64+0xf3/0x230 [ 1586.280127][ C0] ? clear_bhb_loop+0x35/0x90 [ 1586.280162][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.280193][ C0] RIP: 0033:0x7f83e617475f [ 1586.280215][ C0] RSP: 002b:00007ffe01e8a360 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1586.280243][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f83e617475f [ 1586.280264][ C0] RDX: 0000000000000001 RSI: 00007ffe01e8a3b0 RDI: 0000000000000005 [ 1586.289382][ T30] __dentry_kill+0x20d/0x630 [ 1586.291568][ C0] RBP: 00007f83e61e45a0 R08: 0000000000000000 R09: 00007ffe01e8a1b7 [ 1586.296027][ T30] ? dput+0x37/0x2b0 [ 1586.300720][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1586.300742][ C0] R13: 00007ffe01e8a3b0 R14: 00007f83e6e34620 R15: 0000000000000003 [ 1586.300780][ C0] [ 1586.300793][ C0] DEBUG: waiting rtnl_mutex for 2383 jiffies. [ 1586.300808][ C0] task:syz-executor state:D stack:20368 pid:23759 tgid:23759 ppid:23758 flags:0x00004000 [ 1586.300853][ C0] Call Trace: [ 1586.300864][ C0] [ 1586.300881][ C0] __schedule+0x1800/0x4a60 [ 1586.300938][ C0] ? __pfx___schedule+0x10/0x10 [ 1586.300971][ C0] ? __pfx_lock_release+0x10/0x10 [ 1586.301006][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1586.301057][ C0] ? schedule+0x90/0x320 [ 1586.328068][ T30] dput+0x19f/0x2b0 [ 1586.328670][ C0] schedule+0x14b/0x320 [ 1586.347057][ T30] __fput+0x5f8/0x8a0 [ 1586.350966][ C0] schedule_preempt_disabled+0x13/0x30 [ 1586.351004][ C0] __mutex_lock+0x6a4/0xd70 [ 1586.351043][ C0] ? __mutex_lock+0x527/0xd70 [ 1586.351078][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1586.351124][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1586.351171][ C0] ? get_rtnl_holder+0x144/0x190 [ 1586.351201][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1586.351243][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1586.351282][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1586.351315][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 1586.379415][ T30] task_work_run+0x24f/0x310 [ 1586.381119][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1586.409442][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1586.411107][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1586.416423][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1586.421299][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1586.421342][ C0] ? preempt_schedule_notrace+0x100/0x140 [ 1586.421391][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 1586.421426][ C0] ? mark_lock+0x9a/0x360 [ 1586.421458][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1586.421498][ C0] ? __lock_acquire+0x1359/0x2000 [ 1586.421548][ C0] ? mark_lock+0x9a/0x360 [ 1586.421587][ C0] ? __lock_acquire+0x1359/0x2000 [ 1586.421643][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1586.455987][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 1586.456258][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1586.473529][ T30] do_syscall_64+0x100/0x230 [ 1586.477098][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1586.494959][ T30] ? clear_bhb_loop+0x35/0x90 [ 1586.495174][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1586.522126][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.530110][ C0] netlink_unicast+0x7f0/0x990 [ 1586.530162][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1586.530195][ C0] ? __virt_addr_valid+0x183/0x530 [ 1586.530236][ C0] ? __check_object_size+0x49c/0x900 [ 1586.530268][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1586.530303][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1586.530344][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1586.583639][ T30] RIP: 0033:0x7f41c9375bd9 [ 1586.585786][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1586.588743][ T30] RSP: 002b:00007fffa7e67cb8 EFLAGS: 00000246 [ 1586.593294][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1586.593336][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1586.593374][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1586.593399][ C0] __sock_sendmsg+0x221/0x270 [ 1586.593442][ C0] __sys_sendto+0x3a4/0x4f0 [ 1586.593480][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1586.617051][ T30] ORIG_RAX: 00000000000001b4 [ 1586.621182][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1586.621217][ C0] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 1586.621266][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1586.621303][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1586.621342][ C0] __x64_sys_sendto+0xde/0x100 [ 1586.621377][ C0] do_syscall_64+0xf3/0x230 [ 1586.621403][ C0] ? clear_bhb_loop+0x35/0x90 [ 1586.621438][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.621468][ C0] RIP: 0033:0x7f601b97796c [ 1586.621491][ C0] RSP: 002b:00007ffe14f47d70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1586.621521][ C0] RAX: ffffffffffffffda RBX: 00007f601c634620 RCX: 00007f601b97796c [ 1586.621541][ C0] RDX: 0000000000000064 RSI: 00007f601c634670 RDI: 0000000000000003 [ 1586.621557][ C0] RBP: 0000000000000000 R08: 00007ffe14f47dc4 R09: 000000000000000c [ 1586.621573][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1586.621588][ C0] R13: 0000000000000000 R14: 00007f601c634670 R15: 0000000000000000 [ 1586.621621][ C0] [ 1586.621634][ C0] DEBUG: holding rtnl_mutex for 2410 jiffies. [ 1586.621649][ C0] task:kworker/u8:1 state:D stack:19728 pid:18683 tgid:18683 ppid:2 flags:0x00004000 [ 1586.621691][ C0] Workqueue: netns cleanup_net [ 1586.621720][ C0] Call Trace: [ 1586.621729][ C0] [ 1586.621745][ C0] __schedule+0x1800/0x4a60 [ 1586.636185][ T30] RAX: 0000000000000000 RBX: 000000000015bdb0 RCX: 00007f41c9375bd9 [ 1586.640576][ C0] ? __pfx___schedule+0x10/0x10 [ 1586.640622][ C0] ? __pfx_lock_release+0x10/0x10 [ 1586.640653][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1586.640690][ C0] ? kthread_data+0x52/0xd0 [ 1586.654287][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1586.656001][ C0] ? wq_worker_sleeping+0x66/0x240 [ 1586.678083][ T30] RBP: ffffffffffffffff R08: 0000000000000001 R09: 00000004377d8218 [ 1586.681829][ C0] ? schedule+0x90/0x320 [ 1586.681866][ C0] schedule+0x14b/0x320 [ 1586.681900][ C0] synchronize_rcu_expedited+0x684/0x830 [ 1586.681944][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1586.682002][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1586.682040][ C0] ? __pfx___might_resched+0x10/0x10 [ 1586.682070][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1586.692423][ T30] R10: 00007f41c9200000 R11: 0000000000000246 R12: 00007f41c9503f6c [ 1586.697788][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1586.697835][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1586.731351][ T30] R13: 0000000000000032 R14: 00007f41c9505a60 R15: 00007f41c9503f60 [ 1586.736387][ C0] synchronize_rcu+0x11b/0x360 [ 1586.771791][ T30] [ 1586.776453][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 1586.776517][ C0] lockdep_unregister_key+0x556/0x610 [ 1586.802981][ T30] [ 1586.802981][ T30] Showing all locks held in the system: [ 1586.808172][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1586.839583][ T30] 3 locks held by kworker/u8:0/11: [ 1586.844283][ C0] ? rcu_is_watching+0x15/0xb0 [ 1586.873823][ T30] #0: [ 1586.874173][ C0] ? qdisc_reset+0x3bf/0x5b0 [ 1586.889361][ T30] ffff888029a74948 [ 1586.891509][ C0] __qdisc_destroy+0x165/0x410 [ 1586.927097][ T30] ( [ 1586.930745][ C0] dev_shutdown+0x357/0x440 [ 1586.930797][ C0] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 1586.930857][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1586.930910][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 1586.930951][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 1586.930990][ C0] default_device_exit_batch+0xa0f/0xa90 [ 1586.931040][ C0] ? __pfx___might_resched+0x10/0x10 [ 1586.931073][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1586.931123][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1586.974327][ T30] (wq_completion)ipv6_addrconf [ 1586.980407][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1586.980459][ C0] cleanup_net+0x89d/0xcc0 [ 1586.980496][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1586.980535][ C0] ? process_scheduled_works+0x945/0x1830 [ 1587.011862][ T30] ){+.+.}-{0:0} [ 1587.014415][ C0] process_scheduled_works+0xa2c/0x1830 [ 1587.025493][ T30] , at: process_scheduled_works+0x90a/0x1830 [ 1587.030395][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1587.030444][ C0] ? assign_work+0x364/0x3d0 [ 1587.030482][ C0] worker_thread+0x86d/0xd40 [ 1587.030525][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1587.030562][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1587.030600][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1587.030632][ C0] kthread+0x2f0/0x390 [ 1587.030666][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1587.030696][ C0] ? __pfx_kthread+0x10/0x10 [ 1587.030732][ C0] ret_from_fork+0x4b/0x80 [ 1587.030765][ C0] ? __pfx_kthread+0x10/0x10 [ 1587.030807][ C0] ret_from_fork_asm+0x1a/0x30 [ 1587.030862][ C0] [ 1587.030877][ C0] [ 1587.030877][ C0] Showing all locks held in the system: [ 1587.030891][ C0] 3 locks held by kworker/u8:0/11: [ 1587.030909][ C0] #0: ffff888029a74948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1587.030988][ C0] #1: [ 1587.039341][ T30] #1: [ 1587.043590][ C0] ffffc90000107d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1587.382632][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1587.392208][ C0] 1 lock held by khungtaskd/30: [ 1587.397139][ C0] 2 locks held by getty/4853: [ 1587.401905][ C0] #0: ffff88802a29c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1587.411825][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1587.422089][ C0] 3 locks held by kworker/1:6/10133: [ 1587.427417][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1587.438527][ C0] #1: ffffc900041afd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1587.449643][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1587.458722][ C0] 5 locks held by kworker/u8:1/18683: [ 1587.464180][ C0] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1587.475214][ C0] #1: ffffc900100e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1587.485895][ C0] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1587.495442][ C0] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1587.505600][ C0] #4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1587.516654][ C0] 4 locks held by kworker/u8:11/22268: [ 1587.522198][ C0] 1 lock held by syz.3.5363/22709: [ 1587.527350][ C0] #0: ffff88801b2a8578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: remove_inode_hugepages+0x38e/0x1520 [ 1587.539082][ C0] 7 locks held by syz-executor/23618: [ 1587.544558][ C0] #0: ffff88802a1fa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1587.553645][ C0] #1: ffff888068e7d088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1587.563590][ C0] #2: ffff8880222545a8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1587.573838][ C0] #3: ffffffff8ef05248 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1587.584291][ C0] #4: ffff88804fbc10e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1587.594987][ C0] #5: ffff888056617250 (&devlink->lock_key#83){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1587.605272][ C0] #6: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 1587.616144][ C0] 1 lock held by syz-executor/23759: [ 1587.621554][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1587.631201][ C0] 1 lock held by syz.3.5721/23937: [ 1587.636347][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1587.646016][ C0] 1 lock held by syz.3.5721/23939: [ 1587.651210][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1587.660854][ C0] 1 lock held by syz-executor/23972: [ 1587.666187][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1587.675851][ C0] 1 lock held by syz.4.5737/23983: [ 1587.681056][ C0] #0: ffff888058449498 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x17c/0x3d0 [ 1587.690616][ C0] 8 locks held by syz.4.5737/23984: [ 1587.695847][ C0] #0: ffff888058449498 (&mm->mmap_lock){++++}-{3:3}, at: __mm_populate+0x1b0/0x460 [ 1587.705394][ C0] #1: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: handle_pte_fault+0x21d9/0x6eb0 [ 1587.715274][ C0] #2: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: filemap_map_pages+0x24f/0x1e70 [ 1587.725159][ C0] #3: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x82/0x380 [ 1587.734835][ C0] #4: ffff8880498dbeb8 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x1ba/0x300 [ 1587.745759][ C0] #5: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: folio_try_get+0x1e/0x350 [ 1587.755144][ C0] #6: ffffc90000007c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1587.765400][ C0] #7: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1587.775400][ C0] 3 locks held by syz.0.5739/23988: [ 1587.780689][ C0] #0: ffff8880b953ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1587.790762][ C0] #1: ffff8880b9528948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 1587.802306][ C0] #2: ffff8880b952d4c8 (lock#6){-.-.}-{2:2}, at: kcov_remote_stop+0x70/0x6e0 [ 1587.811363][ C0] 1 lock held by syz.0.5739/23989: [ 1587.816526][ C0] [ 1587.818891][ C0] ============================================= [ 1587.818891][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 1588.049687][T21805] Bluetooth: hci7: command tx timeout [ 1588.652416][T23993] loop4: detected capacity change from 0 to 2048 [ 1588.869428][ C0] DEBUG: waiting rtnl_mutex for 2686 jiffies. [ 1588.875591][ C0] task:kworker/u8:0 state:D stack:18712 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 1588.885877][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 1588.891992][ C0] Call Trace: [ 1588.895395][ C0] [ 1588.898367][ C0] __schedule+0x1800/0x4a60 [ 1588.903010][ C0] ? __pfx___schedule+0x10/0x10 [ 1588.907926][ C0] ? __pfx_lock_release+0x10/0x10 [ 1588.913055][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1588.918580][ C0] ? kthread_data+0x52/0xd0 [ 1588.923176][ C0] ? schedule+0x90/0x320 [ 1588.927458][ C0] ? wq_worker_sleeping+0x66/0x240 [ 1588.932672][ C0] ? schedule+0x90/0x320 [ 1588.936958][ C0] schedule+0x14b/0x320 [ 1588.941290][ C0] schedule_preempt_disabled+0x13/0x30 [ 1588.946792][ C0] __mutex_lock+0x6a4/0xd70 [ 1588.951377][ C0] ? mark_lock+0x9a/0x360 [ 1588.955842][ C0] ? __mutex_lock+0x527/0xd70 [ 1588.960619][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 1588.965783][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1588.970910][ C0] ? get_rtnl_holder+0x144/0x190 [ 1588.975892][ C0] addrconf_dad_work+0xd0/0x16f0 [ 1588.980917][ C0] ? preempt_schedule+0xe1/0xf0 [ 1588.985814][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1588.991291][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1588.996814][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 1589.002290][ C0] ? process_scheduled_works+0x945/0x1830 [ 1589.008068][ C0] process_scheduled_works+0xa2c/0x1830 [ 1589.013758][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1589.019839][ C0] ? assign_work+0x364/0x3d0 [ 1589.024508][ C0] worker_thread+0x86d/0xd40 [ 1589.029163][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1589.034279][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1589.039504][ C0] kthread+0x2f0/0x390 [ 1589.043630][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1589.048788][ C0] ? __pfx_kthread+0x10/0x10 [ 1589.053553][ C0] ret_from_fork+0x4b/0x80 [ 1589.058110][ C0] ? __pfx_kthread+0x10/0x10 [ 1589.062787][ C0] ret_from_fork_asm+0x1a/0x30 [ 1589.067623][ C0] [ 1589.070711][ C0] DEBUG: waiting rtnl_mutex for 2556 jiffies. [ 1589.076805][ C0] task:kworker/1:6 state:D stack:20976 pid:10133 tgid:10133 ppid:2 flags:0x00004000 [ 1589.087069][ C0] Workqueue: events linkwatch_event [ 1589.092388][ C0] Call Trace: [ 1589.095715][ C0] [ 1589.098692][ C0] __schedule+0x1800/0x4a60 [ 1589.103320][ C0] ? __pfx___schedule+0x10/0x10 [ 1589.108221][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1589.114303][ C0] ? __pfx_lock_release+0x10/0x10 [ 1589.119410][ C0] ? kick_pool+0x45c/0x620 [ 1589.123877][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1589.129116][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1589.134403][ C0] ? schedule+0x90/0x320 [ 1589.138691][ C0] schedule+0x14b/0x320 [ 1589.142937][ C0] schedule_preempt_disabled+0x13/0x30 [ 1589.148460][ C0] __mutex_lock+0x6a4/0xd70 [ 1589.153145][ C0] ? __mutex_lock+0x527/0xd70 [ 1589.157903][ C0] ? linkwatch_event+0xe/0x60 [ 1589.162729][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1589.167861][ C0] ? get_rtnl_holder+0x144/0x190 [ 1589.172931][ C0] ? process_scheduled_works+0x945/0x1830 [ 1589.178721][ C0] linkwatch_event+0xe/0x60 [ 1589.183329][ C0] process_scheduled_works+0xa2c/0x1830 [ 1589.188974][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1589.195113][ C0] ? assign_work+0x364/0x3d0 [ 1589.199835][ C0] worker_thread+0x86d/0xd40 [ 1589.204589][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1589.210711][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1589.215913][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1589.221262][ C0] kthread+0x2f0/0x390 [ 1589.225470][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1589.230799][ C0] ? __pfx_kthread+0x10/0x10 [ 1589.235471][ C0] ret_from_fork+0x4b/0x80 [ 1589.240036][ C0] ? __pfx_kthread+0x10/0x10 [ 1589.244705][ C0] ret_from_fork_asm+0x1a/0x30 [ 1589.249625][ C0] [ 1589.252744][ C0] DEBUG: waiting rtnl_mutex for 1739 jiffies. [ 1589.258921][ C0] task:syz.3.5721 state:D stack:26304 pid:23937 tgid:23936 ppid:23155 flags:0x00004004 [ 1589.269321][ C0] Call Trace: [ 1589.272706][ C0] [ 1589.275745][ C0] __schedule+0x1800/0x4a60 [ 1589.280446][ C0] ? __pfx___schedule+0x10/0x10 [ 1589.285424][ C0] ? __pfx_lock_release+0x10/0x10 [ 1589.291081][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1589.296730][ C0] ? schedule+0x90/0x320 [ 1589.301148][ C0] schedule+0x14b/0x320 [ 1589.305445][ C0] schedule_preempt_disabled+0x13/0x30 [ 1589.311027][ C0] __mutex_lock+0x6a4/0xd70 [ 1589.315613][ C0] ? __mutex_lock+0x527/0xd70 [ 1589.320416][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1589.325749][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1589.330911][ C0] ? get_rtnl_holder+0x144/0x190 [ 1589.335901][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1589.341045][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1589.343657][ T30] ffffc90000107d00 [ 1589.346285][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1589.346338][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1589.361072][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1589.366352][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1589.371856][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 1589.377223][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1589.382438][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1589.388213][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1589.389508][ T30] ( [ 1589.393400][ C0] ? __dev_queue_xmit+0x1763/0x3e90 [ 1589.399387][ T30] (work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1589.401184][ C0] ? kasan_save_track+0x51/0x80 [ 1589.416909][ C0] ? vfs_writev+0x37c/0xbb0 [ 1589.421525][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.427666][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1589.432891][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1589.438339][ C0] ? ref_tracker_free+0x643/0x7e0 [ 1589.442745][ T30] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3} [ 1589.443447][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1589.443463][ T30] , at: addrconf_dad_work+0xd0/0x16f0 [ 1589.443503][ T30] 1 lock held by khungtaskd/30: [ 1589.449854][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1589.449897][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1589.449961][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1589.449989][ C0] netlink_unicast+0x7f0/0x990 [ 1589.450035][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1589.450068][ C0] ? __virt_addr_valid+0x183/0x530 [ 1589.450108][ C0] ? __check_object_size+0x49c/0x900 [ 1589.480645][ T30] #0: [ 1589.481255][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1589.504661][ T30] ffffffff8e335860 [ 1589.509798][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1589.509854][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1589.509883][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1589.509915][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1589.534028][ T30] (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1589.534145][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1589.547664][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1589.553294][ C0] __sock_sendmsg+0x221/0x270 [ 1589.558061][ C0] sock_write_iter+0x2dd/0x400 [ 1589.562963][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 1589.568378][ C0] ? futex_wait_queue+0x14e/0x1d0 [ 1589.573554][ C0] ? futex_unqueue+0xcb/0xf0 [ 1589.578212][ C0] do_iter_readv_writev+0x60a/0x890 [ 1589.583542][ C0] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1589.589381][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 1589.593436][ T30] 5 locks held by kworker/u8:3/52: [ 1589.594779][ C0] ? security_file_permission+0x7f/0xa0 [ 1589.605536][ C0] ? rw_verify_area+0x1d2/0x6b0 [ 1589.610534][ C0] vfs_writev+0x37c/0xbb0 [ 1589.614952][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1589.620094][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 1589.625036][ C0] ? __fget_files+0x29/0x470 [ 1589.629752][ C0] do_writev+0x1b1/0x350 [ 1589.634080][ C0] ? __pfx_do_writev+0x10/0x10 [ 1589.638917][ C0] ? do_syscall_64+0x100/0x230 [ 1589.642337][ T30] #0: ffff8880b953ea18 (&rq->__lock){-.-.}-{2:2} [ 1589.643764][ C0] ? do_syscall_64+0xb6/0x230 [ 1589.654988][ C0] do_syscall_64+0xf3/0x230 [ 1589.659596][ C0] ? clear_bhb_loop+0x35/0x90 [ 1589.664337][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.670362][ C0] RIP: 0033:0x7f72ccf75bd9 [ 1589.674844][ C0] RSP: 002b:00007f72cdc68048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1589.683398][ C0] RAX: ffffffffffffffda RBX: 00007f72cd103f60 RCX: 00007f72ccf75bd9 [ 1589.685055][ T30] , at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1589.691495][ C0] RDX: 0000000000000001 RSI: 00000000200003c0 RDI: 0000000000000008 [ 1589.691519][ C0] RBP: 00007f72ccfe4e60 R08: 0000000000000000 R09: 0000000000000000 [ 1589.691537][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1589.691554][ C0] R13: 000000000000000b R14: 00007f72cd103f60 R15: 00007ffce9fd6c48 [ 1589.691592][ C0] [ 1589.691605][ C0] DEBUG: waiting rtnl_mutex for 1776 jiffies. [ 1589.691620][ C0] task:syz.3.5721 state:D stack:27216 pid:23939 tgid:23936 ppid:23155 flags:0x00000004 [ 1589.691668][ C0] Call Trace: [ 1589.691679][ C0] [ 1589.691695][ C0] __schedule+0x1800/0x4a60 [ 1589.707735][ T30] #1: [ 1589.713648][ C0] ? __pfx___schedule+0x10/0x10 [ 1589.713694][ C0] ? __pfx_lock_release+0x10/0x10 [ 1589.713727][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1589.713776][ C0] ? schedule+0x90/0x320 [ 1589.713805][ C0] schedule+0x14b/0x320 [ 1589.713838][ C0] schedule_preempt_disabled+0x13/0x30 [ 1589.713878][ C0] __mutex_lock+0x6a4/0xd70 [ 1589.713916][ C0] ? __mutex_lock+0x527/0xd70 [ 1589.713952][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1589.713992][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1589.714039][ C0] ? get_rtnl_holder+0x144/0x190 [ 1589.739345][ T30] ffffc90000bc7d00 [ 1589.749451][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1589.749507][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1589.749549][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1589.749593][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1589.749625][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1589.749666][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1589.749696][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 1589.749727][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1589.749758][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1589.763424][ T30] ( [ 1589.768311][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1589.783296][ T30] (work_completion)(&(&kfence_timer)->work) [ 1589.787279][ C0] ? __dev_queue_xmit+0x1763/0x3e90 [ 1589.803572][ T30] ){+.+.}-{0:0} [ 1589.807242][ C0] ? kasan_save_track+0x51/0x80 [ 1589.819359][ T30] , at: process_scheduled_works+0x945/0x1830 [ 1589.821180][ C0] ? do_syscall_64+0xf3/0x230 [ 1589.849370][ T30] #2: [ 1589.852987][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1589.858425][ T30] ffff8880b952a718 [ 1589.863487][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1589.863540][ C0] ? ref_tracker_free+0x643/0x7e0 [ 1589.863582][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1589.863621][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1589.863662][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1589.863729][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1589.863756][ C0] netlink_unicast+0x7f0/0x990 [ 1589.863801][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1589.863833][ C0] ? __virt_addr_valid+0x183/0x530 [ 1589.879330][ T30] ( [ 1589.883314][ C0] ? __check_object_size+0x49c/0x900 [ 1589.890913][ T30] &base->lock [ 1589.891993][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1589.896782][ T30] ){-.-.}-{2:2} [ 1589.902782][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1589.902829][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1589.902858][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1589.902889][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1589.902923][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1589.902961][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1589.902985][ C0] __sock_sendmsg+0x221/0x270 [ 1589.903026][ C0] __sys_sendto+0x3a4/0x4f0 [ 1589.903062][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1589.903120][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1589.903157][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1589.903190][ C0] ? exc_page_fault+0x590/0x8c0 [ 1589.918222][ T30] , at: lock_timer_base+0x112/0x240 [ 1589.919556][ C0] __x64_sys_sendto+0xde/0x100 [ 1589.919594][ C0] do_syscall_64+0xf3/0x230 [ 1589.919620][ C0] ? clear_bhb_loop+0x35/0x90 [ 1589.919653][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.919683][ C0] RIP: 0033:0x7f72ccf7796c [ 1589.919705][ C0] RSP: 002b:00007f72cc9fded0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1589.919733][ C0] RAX: ffffffffffffffda RBX: 00007f72cc9fdfd0 RCX: 00007f72ccf7796c [ 1589.919752][ C0] RDX: 0000000000000024 RSI: 00007f72cc9fe020 RDI: 0000000000000008 [ 1589.919769][ C0] RBP: 0000000000000000 R08: 00007f72cc9fdf24 R09: 000000000000000c [ 1589.919787][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 1589.919804][ C0] R13: 00007f72cc9fdf78 R14: 00007f72cc9fe020 R15: 0000000000000000 [ 1589.919841][ C0] [ 1589.919854][ C0] DEBUG: waiting rtnl_mutex for 721 jiffies. [ 1589.919870][ C0] task:syz-executor state:D stack:24992 pid:23972 tgid:23972 ppid:1 flags:0x00000004 [ 1589.927364][ T30] #3: [ 1589.930338][ C0] Call Trace: [ 1589.930356][ C0] [ 1589.930373][ C0] __schedule+0x1800/0x4a60 [ 1589.930434][ C0] ? __pfx___schedule+0x10/0x10 [ 1589.930469][ C0] ? __pfx_lock_release+0x10/0x10 [ 1589.930504][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1589.930560][ C0] ? schedule+0x90/0x320 [ 1589.930588][ C0] schedule+0x14b/0x320 [ 1589.930620][ C0] schedule_preempt_disabled+0x13/0x30 [ 1589.930650][ C0] __mutex_lock+0x6a4/0xd70 [ 1589.930689][ C0] ? __mutex_lock+0x527/0xd70 [ 1589.930724][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1589.930763][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1589.930811][ C0] ? get_rtnl_holder+0x144/0x190 [ 1589.930842][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1589.930883][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1589.930924][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1589.930959][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 1589.936536][ T30] ffffffff8e335860 [ 1589.941251][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1589.941298][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1589.941336][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 1589.941373][ C0] ? mark_lock+0x9a/0x360 [ 1589.941405][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1589.941445][ C0] ? __lock_acquire+0x1359/0x2000 [ 1589.941494][ C0] ? mark_lock+0x9a/0x360 [ 1589.967054][ T30] ( [ 1589.967340][ C0] ? __lock_acquire+0x1359/0x2000 [ 1589.973726][ T30] rcu_read_lock [ 1589.975622][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1589.997016][ T30] ){....}-{1:2} [ 1589.997665][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1590.009336][ T30] , at: ieee80211_sta_active_ibss+0xc7/0x330 [ 1590.013416][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1590.028666][ T30] #4: [ 1590.033061][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1590.033102][ C0] netlink_unicast+0x7f0/0x990 [ 1590.033150][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1590.033182][ C0] ? __virt_addr_valid+0x183/0x530 [ 1590.033223][ C0] ? __check_object_size+0x49c/0x900 [ 1590.033254][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1590.033289][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1590.033328][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1590.033356][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1590.033387][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1590.033421][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1590.033460][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1590.033484][ C0] __sock_sendmsg+0x221/0x270 [ 1590.033526][ C0] __sys_sendto+0x3a4/0x4f0 [ 1590.033570][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1590.033630][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1590.033668][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1590.049460][ T30] ffffffff94a02828 [ 1590.050926][ C0] ? exc_page_fault+0x590/0x8c0 [ 1590.060541][ T30] ( [ 1590.060886][ C0] __x64_sys_sendto+0xde/0x100 [ 1590.065328][ T30] &obj_hash[i].lock){-.-.}-{2:2} [ 1590.070041][ C0] do_syscall_64+0xf3/0x230 [ 1590.070071][ C0] ? clear_bhb_loop+0x35/0x90 [ 1590.070106][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.070136][ C0] RIP: 0033:0x7ffb23b7796c [ 1590.070159][ C0] RSP: 002b:00007fff44be7d20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1590.070188][ C0] RAX: ffffffffffffffda RBX: 00007ffb24834620 RCX: 00007ffb23b7796c [ 1590.070208][ C0] RDX: 0000000000000028 RSI: 00007ffb24834670 RDI: 0000000000000003 [ 1590.070226][ C0] RBP: 0000000000000000 R08: 00007fff44be7d74 R09: 000000000000000c [ 1590.070243][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1590.070260][ C0] R13: 0000000000000000 R14: 00007ffb24834670 R15: 0000000000000000 [ 1590.070297][ C0] [ 1590.070309][ C0] DEBUG: waiting rtnl_mutex for 2864 jiffies. [ 1590.070323][ C0] task:syz-executor state:D stack:21024 pid:23618 tgid:23618 ppid:1 flags:0x00004006 [ 1590.070366][ C0] Call Trace: [ 1590.070377][ C0] [ 1590.070394][ C0] __schedule+0x1800/0x4a60 [ 1590.070450][ C0] ? __pfx___schedule+0x10/0x10 [ 1590.086731][ T30] , at: debug_check_no_obj_freed+0x234/0x580 [ 1590.089212][ C0] ? __pfx_lock_release+0x10/0x10 [ 1590.103713][ T30] 2 locks held by getty/4853: [ 1590.105233][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1590.129438][ T30] #0: [ 1590.132257][ C0] ? schedule+0x90/0x320 [ 1590.132295][ C0] schedule+0x14b/0x320 [ 1590.132327][ C0] schedule_preempt_disabled+0x13/0x30 [ 1590.132358][ C0] __mutex_lock+0x6a4/0xd70 [ 1590.132395][ C0] ? __mutex_lock+0x527/0xd70 [ 1590.132430][ C0] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 1590.132460][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1590.132507][ C0] ? get_rtnl_holder+0x144/0x190 [ 1590.132545][ C0] unregister_netdevice_notifier_net+0x89/0x3a0 [ 1590.132577][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1590.132605][ C0] ? mntput_no_expire+0x2da/0x850 [ 1590.132642][ C0] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 1590.132675][ C0] ? __pfx_mntput_no_expire+0x10/0x10 [ 1590.132717][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1590.132745][ C0] ? simple_release_fs+0x9c/0xd0 [ 1590.132785][ C0] nsim_dev_hwstats_exit+0x81/0x290 [ 1590.132824][ C0] ? kfree+0x149/0x360 [ 1590.132864][ C0] nsim_dev_reload_destroy+0x2ad/0x490 [ 1590.132898][ C0] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1590.159509][ T30] ffff88802a29c0a0 [ 1590.162646][ C0] nsim_drv_remove+0x58/0x160 [ 1590.170520][ T30] ( [ 1590.172557][ C0] device_release_driver_internal+0x4a9/0x7c0 [ 1590.189549][ T30] &tty->ldisc_sem [ 1590.191901][ C0] bus_remove_device+0x34f/0x420 [ 1590.196516][ T30] ){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1590.201237][ C0] device_del+0x57a/0x9b0 [ 1590.201280][ C0] ? __pfx_device_del+0x10/0x10 [ 1590.201322][ C0] device_unregister+0x20/0xc0 [ 1590.201354][ C0] del_device_store+0x363/0x480 [ 1590.201393][ C0] ? __pfx_del_device_store+0x10/0x10 [ 1590.201434][ C0] ? sysfs_kf_write+0x182/0x2a0 [ 1590.201467][ C0] ? bus_attr_store+0x4f/0xa0 [ 1590.201496][ C0] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1590.201533][ C0] kernfs_fop_write_iter+0x3a1/0x500 [ 1590.209317][ T30] #1: [ 1590.211788][ C0] vfs_write+0xa72/0xc90 [ 1590.216747][ T30] ffffc900031332f0 [ 1590.221798][ C0] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1590.221837][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1590.221887][ C0] ksys_write+0x1a0/0x2c0 [ 1590.221919][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1590.221944][ C0] ? do_syscall_64+0x100/0x230 [ 1590.221974][ C0] ? do_syscall_64+0xb6/0x230 [ 1590.243338][ T30] ( [ 1590.246972][ C0] do_syscall_64+0xf3/0x230 [ 1590.264289][ T30] &ldata->atomic_read_lock [ 1590.266824][ C0] ? clear_bhb_loop+0x35/0x90 [ 1590.291697][ T30] ){+.+.}-{3:3} [ 1590.292002][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.298820][ T30] , at: n_tty_read+0x6b5/0x1e10 [ 1590.300899][ C0] RIP: 0033:0x7f83e617475f [ 1590.300925][ C0] RSP: 002b:00007ffe01e8a360 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1590.300954][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f83e617475f [ 1590.300972][ C0] RDX: 0000000000000001 RSI: 00007ffe01e8a3b0 RDI: 0000000000000005 [ 1590.300991][ C0] RBP: 00007f83e61e45a0 R08: 0000000000000000 R09: 00007ffe01e8a1b7 [ 1590.301009][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1590.301027][ C0] R13: 00007ffe01e8a3b0 R14: 00007f83e6e34620 R15: 0000000000000003 [ 1590.301065][ C0] [ 1590.301078][ C0] DEBUG: waiting rtnl_mutex for 2783 jiffies. [ 1590.301092][ C0] task:syz-executor state:D stack:20368 pid:23759 tgid:23759 ppid:1 flags:0x00004004 [ 1590.301133][ C0] Call Trace: [ 1590.301144][ C0] [ 1590.301160][ C0] __schedule+0x1800/0x4a60 [ 1590.301217][ C0] ? __pfx___schedule+0x10/0x10 [ 1590.301250][ C0] ? __pfx_lock_release+0x10/0x10 [ 1590.310760][ T30] 3 locks held by kworker/1:6/10133: [ 1590.312585][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1590.316478][ T30] #0: [ 1590.320564][ C0] ? schedule+0x90/0x320 [ 1590.320599][ C0] schedule+0x14b/0x320 [ 1590.320632][ C0] schedule_preempt_disabled+0x13/0x30 [ 1590.320662][ C0] __mutex_lock+0x6a4/0xd70 [ 1590.320701][ C0] ? __mutex_lock+0x527/0xd70 [ 1590.320735][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1590.320773][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1590.351419][ T30] ffff888015080948 [ 1590.356585][ C0] ? get_rtnl_holder+0x144/0x190 [ 1590.379449][ T30] ( [ 1590.382466][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1590.387015][ T30] (wq_completion)events [ 1590.392010][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1590.392053][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1590.392088][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 1590.392133][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1590.392171][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1590.392207][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1590.392246][ C0] ? preempt_schedule_notrace+0x100/0x140 [ 1590.392280][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 1590.392313][ C0] ? mark_lock+0x9a/0x360 [ 1590.392345][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1590.392385][ C0] ? __lock_acquire+0x1359/0x2000 [ 1590.392436][ C0] ? mark_lock+0x9a/0x360 [ 1590.392474][ C0] ? __lock_acquire+0x1359/0x2000 [ 1590.392535][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1590.392576][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1590.392616][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1590.392682][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1590.392709][ C0] netlink_unicast+0x7f0/0x990 [ 1590.392755][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1590.410701][ T30] ){+.+.}-{0:0} [ 1590.413746][ C0] ? __virt_addr_valid+0x183/0x530 [ 1590.416309][ T30] , at: process_scheduled_works+0x90a/0x1830 [ 1590.421072][ C0] ? __check_object_size+0x49c/0x900 [ 1590.421114][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1590.421152][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1590.421195][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1590.421224][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1590.421256][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1590.421290][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1590.421329][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1590.421350][ C0] __sock_sendmsg+0x221/0x270 [ 1590.421390][ C0] __sys_sendto+0x3a4/0x4f0 [ 1590.429960][ T30] #1: [ 1590.430961][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1590.444695][ T30] ffffc900041afd00 [ 1590.446054][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1590.464900][ T30] ( [ 1590.470572][ C0] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 1590.470629][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1590.470667][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1590.470707][ C0] __x64_sys_sendto+0xde/0x100 [ 1590.470743][ C0] do_syscall_64+0xf3/0x230 [ 1590.470769][ C0] ? clear_bhb_loop+0x35/0x90 [ 1590.470805][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.470835][ C0] RIP: 0033:0x7f601b97796c [ 1590.470858][ C0] RSP: 002b:00007ffe14f47d70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1590.470888][ C0] RAX: ffffffffffffffda RBX: 00007f601c634620 RCX: 00007f601b97796c [ 1590.470909][ C0] RDX: 0000000000000064 RSI: 00007f601c634670 RDI: 0000000000000003 [ 1590.470927][ C0] RBP: 0000000000000000 R08: 00007ffe14f47dc4 R09: 000000000000000c [ 1590.470945][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1590.470962][ C0] R13: 0000000000000000 R14: 00007f601c634670 R15: 0000000000000000 [ 1590.471000][ C0] [ 1590.471013][ C0] DEBUG: holding rtnl_mutex for 2795 jiffies. [ 1590.471029][ C0] task:kworker/u8:1 state:D stack:19728 pid:18683 tgid:18683 ppid:2 flags:0x00004000 [ 1590.471075][ C0] Workqueue: netns cleanup_net [ 1590.471103][ C0] Call Trace: [ 1590.471114][ C0] [ 1590.471131][ C0] __schedule+0x1800/0x4a60 [ 1590.471189][ C0] ? __pfx___schedule+0x10/0x10 [ 1590.471224][ C0] ? __pfx_lock_release+0x10/0x10 [ 1590.471258][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1590.471299][ C0] ? kthread_data+0x52/0xd0 [ 1590.471330][ C0] ? schedule+0x90/0x320 [ 1590.471359][ C0] ? wq_worker_sleeping+0x66/0x240 [ 1590.471391][ C0] ? schedule+0x90/0x320 [ 1590.526772][ T30] (linkwatch_work).work [ 1590.530588][ C0] schedule+0x14b/0x320 [ 1590.530632][ C0] schedule_preempt_disabled+0x13/0x30 [ 1590.541770][ T30] ){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1590.546474][ C0] __mutex_lock+0x6a4/0xd70 [ 1590.546529][ C0] ? __mutex_lock+0x527/0xd70 [ 1590.546566][ C0] ? synchronize_rcu_expedited+0x451/0x830 [ 1590.546612][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1590.546654][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1590.546694][ C0] synchronize_rcu_expedited+0x451/0x830 [ 1590.546739][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1590.546803][ C0] ? __pfx___might_resched+0x10/0x10 [ 1590.546833][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1590.546871][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1590.546920][ C0] synchronize_rcu+0x11b/0x360 [ 1590.546959][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 1590.569460][ T30] #2: ffffffff8f5ff788 [ 1590.573989][ C0] lockdep_unregister_key+0x556/0x610 [ 1590.581003][ T30] ( [ 1590.585249][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1590.601649][ T30] rtnl_mutex [ 1590.606409][ C0] ? rcu_is_watching+0x15/0xb0 [ 1590.621796][ T30] ){+.+.}-{3:3} [ 1590.623750][ C0] ? qdisc_reset+0x3bf/0x5b0 [ 1590.630848][ T30] , at: linkwatch_event+0xe/0x60 [ 1590.633728][ C0] __qdisc_destroy+0x165/0x410 [ 1590.663398][ T30] 3 locks held by kworker/u9:2/17401: [ 1590.665303][ C0] dev_shutdown+0x9b/0x440 [ 1590.680500][ T30] #0: [ 1590.686562][ C0] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 1590.702718][ T30] ffff888057380948 [ 1590.705483][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1590.722698][ T30] ( [ 1590.725684][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 1590.731395][ T30] (wq_completion)hci9 [ 1590.733761][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 1590.737978][ T30] ){+.+.}-{0:0} [ 1590.741733][ C0] default_device_exit_batch+0xa0f/0xa90 [ 1590.741789][ C0] ? __pfx___might_resched+0x10/0x10 [ 1590.741822][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1590.741870][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1590.763834][ T30] , at: process_scheduled_works+0x90a/0x1830 [ 1590.766559][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1590.779332][ T30] #1: [ 1590.782746][ C0] cleanup_net+0x89d/0xcc0 [ 1590.787362][ T30] ffffc90003c57d00 [ 1590.790854][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1590.790900][ C0] ? process_scheduled_works+0x945/0x1830 [ 1590.790929][ C0] process_scheduled_works+0xa2c/0x1830 [ 1590.790992][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1590.791035][ C0] ? assign_work+0x364/0x3d0 [ 1590.791074][ C0] worker_thread+0x86d/0xd40 [ 1590.791116][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1590.791152][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1590.827598][ T30] ( [ 1590.830977][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1590.831022][ C0] kthread+0x2f0/0x390 [ 1590.831056][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1590.831085][ C0] ? __pfx_kthread+0x10/0x10 [ 1590.831121][ C0] ret_from_fork+0x4b/0x80 [ 1590.831155][ C0] ? __pfx_kthread+0x10/0x10 [ 1590.831191][ C0] ret_from_fork_asm+0x1a/0x30 [ 1590.831244][ C0] [ 1590.864467][ T30] (work_completion)(&hdev->cmd_sync_work) [ 1590.874641][ C0] [ 1590.874641][ C0] Showing all locks held in the system: [ 1590.874663][ C0] 3 locks held by kworker/u8:0/11: [ 1590.874681][ C0] #0: ffff888029a74948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1590.874759][ C0] #1: ffffc90000107d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1590.890508][ T30] ){+.+.}-{0:0} [ 1590.895494][ C0] #2: [ 1590.913079][ T30] , at: process_scheduled_works+0x945/0x1830 [ 1590.913405][ C0] ffffffff8f5ff788 [ 1590.917510][ T30] #2: ffff88806be84d80 [ 1590.922995][ C0] (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1590.923061][ C0] 4 locks held by khungtaskd/30: [ 1590.923114][ C0] 2 locks held by getty/4853: [ 1590.923130][ C0] #0: ffff88802a29c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1590.923209][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1590.923285][ C0] 3 locks held by kworker/1:6/10133: [ 1590.923301][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1590.927897][ T30] ( [ 1590.932553][ C0] #1: ffffc900041afd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1590.950940][ T30] &hdev->req_lock [ 1590.951559][ C0] #2: [ 1590.955422][ T30] ){+.+.}-{3:3} [ 1590.959031][ C0] ffffffff8f5ff788 [ 1590.975648][ T30] , at: hci_cmd_sync_work+0x1ec/0x400 [ 1590.979207][ C0] ( [ 1590.984959][ T30] 5 locks held by kworker/u8:1/18683: [ 1590.989665][ C0] rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1590.989728][ C0] 3 locks held by kworker/u9:2/17401: [ 1591.022532][ T30] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0} [ 1591.026887][ C0] #0: [ 1591.042186][ T30] , at: process_scheduled_works+0x90a/0x1830 [ 1591.042231][ T30] #1: [ 1591.047492][ C0] ffff888057380948 [ 1591.069634][ T30] ffffc900100e7d00 [ 1591.071474][ C0] ( [ 1591.077405][ T30] (net_cleanup_work [ 1591.082717][ C0] (wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1591.082774][ C0] #1: ffffc90003c57d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1591.082848][ C0] #2: ffff88806be84d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1591.082931][ C0] 5 locks held by kworker/u8:1/18683: [ 1591.082948][ C0] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1591.083020][ C0] #1: ffffc900100e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1591.083091][ C0] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1591.099417][ T30] ){+.+.}-{0:0} [ 1591.103303][ C0] #3: [ 1591.108547][ T30] , at: process_scheduled_works+0x945/0x1830 [ 1591.114033][ C0] ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1591.114110][ C0] #4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1591.114191][ C0] 3 locks held by kworker/u9:3/21805: [ 1591.114207][ C0] #0: ffff88807b365148 ((wq_completion)hci11){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1591.114276][ C0] #1: ffffc90008937d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1591.114345][ C0] #2: ffff888050bc0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1591.114426][ C0] 1 lock held by syz.3.5363/22709: [ 1591.114442][ C0] #0: ffff88801b2a8578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: remove_inode_hugepages+0x38e/0x1520 [ 1591.114519][ C0] 2 locks held by kworker/u8:13/23064: [ 1591.114542][ C0] 7 locks held by syz-executor/23618: [ 1591.114557][ C0] #0: ffff88802a1fa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1591.114636][ C0] #1: ffff888068e7d088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1591.133693][ T30] #2: [ 1591.137015][ C0] #2: [ 1591.151585][ T30] ffffffff8f5f2c10 [ 1591.154567][ C0] ffff8880222545a8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1591.154656][ C0] #3: ffffffff8ef05248 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1591.154734][ C0] #4: ffff88804fbc10e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1591.154808][ C0] #5: ffff888056617250 (&devlink->lock_key#83){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1591.154885][ C0] #6: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 1591.154957][ C0] 1 lock held by syz-executor/23759: [ 1591.154974][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1591.155056][ C0] 1 lock held by syz.3.5721/23937: [ 1591.155072][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1591.155150][ C0] 1 lock held by syz.3.5721/23939: [ 1591.155167][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1591.179396][ T30] ( [ 1591.181593][ C0] 1 lock held by syz-executor/23972: [ 1591.187435][ T30] pernet_ops_rwsem){++++}-{3:3} [ 1591.191874][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1591.191960][ C0] 1 lock held by syz.4.5737/23993: [ 1591.191976][ C0] #0: ffff88801fc37360 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_status+0x2a/0x900 [ 1591.192047][ C0] 1 lock held by syz.0.5739/23987: [ 1591.192063][ C0] #0: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1591.192146][ C0] 3 locks held by syz.0.5739/23989: [ 1591.192161][ C0] #0: ffff888015072798 (&mm->mmap_lock [ 1591.249479][ T30] , at: cleanup_net+0x16a/0xcc0 [ 1591.249998][ C0] ){++++}-{3:3} [ 1591.276776][ T30] #3: [ 1591.280696][ C0] , at: lock_mm_and_find_vma+0x32/0x2f0 [ 1591.280739][ C0] #1: ffffc90000007c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1591.280811][ C0] #2: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1591.280889][ C0] [ 1591.280898][ C0] ============================================= [ 1591.280898][ C0] [ 1591.429756][T23073] Bluetooth: hci7: command tx timeout [ 1591.454009][ T30] ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1592.265975][ T30] #4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1592.277030][ T30] 5 locks held by kworker/u9:3/21805: [ 1592.283710][ T30] #0: ffff88807b365148 ((wq_completion)hci11){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1592.295610][ T30] #1: ffffc90008937d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1592.308340][ T30] #2: ffff888050bc0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1592.309410][ C0] DEBUG: waiting rtnl_mutex for 3030 jiffies. [ 1592.318472][ T30] #3: [ 1592.324319][ C0] task:kworker/u8:0 state:D stack:18712 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 1592.327107][ T30] ffff888050bc0078 [ 1592.337330][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 1592.337379][ C0] Call Trace: [ 1592.337392][ C0] [ 1592.337411][ C0] __schedule+0x1800/0x4a60 [ 1592.341148][ T30] (&hdev->lock [ 1592.347152][ C0] ? __pfx___schedule+0x10/0x10 [ 1592.350442][ T30] ){+.+.}-{3:3} [ 1592.353362][ C0] ? __pfx_lock_release+0x10/0x10 [ 1592.357843][ T30] , at: hci_abort_conn_sync+0x1ea/0xde0 [ 1592.361347][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1592.361387][ C0] ? kthread_data+0x52/0xd0 [ 1592.361416][ C0] ? schedule+0x90/0x320 [ 1592.361445][ C0] ? wq_worker_sleeping+0x66/0x240 [ 1592.361480][ C0] ? schedule+0x90/0x320 [ 1592.361508][ C0] schedule+0x14b/0x320 [ 1592.367596][ T30] #4: [ 1592.369859][ C0] schedule_preempt_disabled+0x13/0x30 [ 1592.374863][ T30] ffffffff8f76ede8 [ 1592.380440][ C0] __mutex_lock+0x6a4/0xd70 [ 1592.380476][ C0] ? mark_lock+0x9a/0x360 [ 1592.380514][ C0] ? __mutex_lock+0x527/0xd70 [ 1592.387280][ T30] ( [ 1592.390535][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 1592.390581][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1592.390629][ C0] ? get_rtnl_holder+0x144/0x190 [ 1592.390661][ C0] addrconf_dad_work+0xd0/0x16f0 [ 1592.390699][ C0] ? preempt_schedule+0xe1/0xf0 [ 1592.390729][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1592.390761][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1592.390800][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 1592.390835][ C0] ? process_scheduled_works+0x945/0x1830 [ 1592.390865][ C0] process_scheduled_works+0xa2c/0x1830 [ 1592.390931][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1592.390973][ C0] ? assign_work+0x364/0x3d0 [ 1592.391011][ C0] worker_thread+0x86d/0xd40 [ 1592.391061][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1592.391098][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1592.391129][ C0] kthread+0x2f0/0x390 [ 1592.391164][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1592.391195][ C0] ? __pfx_kthread+0x10/0x10 [ 1592.391238][ C0] ret_from_fork+0x4b/0x80 [ 1592.395468][ T30] hci_cb_list_lock [ 1592.400608][ C0] ? __pfx_kthread+0x10/0x10 [ 1592.400648][ C0] ret_from_fork_asm+0x1a/0x30 [ 1592.400701][ C0] [ 1592.400714][ C0] DEBUG: waiting rtnl_mutex for 2889 jiffies. [ 1592.400728][ C0] task:kworker/1:6 state:D stack:20976 pid:10133 tgid:10133 ppid:2 flags:0x00004000 [ 1592.400772][ C0] Workqueue: events linkwatch_event [ 1592.400802][ C0] Call Trace: [ 1592.400812][ C0] [ 1592.400829][ C0] __schedule+0x1800/0x4a60 [ 1592.400886][ C0] ? __pfx___schedule+0x10/0x10 [ 1592.400917][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1592.400951][ C0] ? __pfx_lock_release+0x10/0x10 [ 1592.400983][ C0] ? kick_pool+0x45c/0x620 [ 1592.401020][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1592.401049][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1592.401084][ C0] ? schedule+0x90/0x320 [ 1592.401110][ C0] schedule+0x14b/0x320 [ 1592.401141][ C0] schedule_preempt_disabled+0x13/0x30 [ 1592.405588][ T30] ){+.+.}-{3:3} [ 1592.409762][ C0] __mutex_lock+0x6a4/0xd70 [ 1592.412971][ T30] , at: hci_conn_failed+0x185/0x340 [ 1592.418070][ C0] ? __mutex_lock+0x527/0xd70 [ 1592.421923][ T30] 1 lock held by syz.3.5363/22709: [ 1592.426341][ C0] ? linkwatch_event+0xe/0x60 [ 1592.430708][ T30] #0: [ 1592.435358][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1592.437850][ T30] ffff88801b2a8578 [ 1592.442995][ C0] ? get_rtnl_holder+0x144/0x190 [ 1592.443029][ C0] ? process_scheduled_works+0x945/0x1830 [ 1592.448038][ T30] (&hugetlb_fault_mutex_table[i] [ 1592.453000][ C0] linkwatch_event+0xe/0x60 [ 1592.457927][ T30] ){+.+.}-{3:3} [ 1592.462797][ C0] process_scheduled_works+0xa2c/0x1830 [ 1592.468175][ T30] , at: remove_inode_hugepages+0x38e/0x1520 [ 1592.473693][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1592.473738][ C0] ? assign_work+0x364/0x3d0 [ 1592.473775][ C0] worker_thread+0x86d/0xd40 [ 1592.473834][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1592.473870][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1592.473907][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1592.473939][ C0] kthread+0x2f0/0x390 [ 1592.473973][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1592.474001][ C0] ? __pfx_kthread+0x10/0x10 [ 1592.493295][ T30] 7 locks held by syz-executor/23618: [ 1592.496775][ C0] ret_from_fork+0x4b/0x80 [ 1592.501519][ T30] #0: [ 1592.506016][ C0] ? __pfx_kthread+0x10/0x10 [ 1592.511098][ T30] ffff88802a1fa420 [ 1592.516175][ C0] ret_from_fork_asm+0x1a/0x30 [ 1592.520260][ T30] (sb_writers [ 1592.525385][ C0] [ 1592.530026][ T30] #8 [ 1592.534389][ C0] DEBUG: waiting rtnl_mutex for 2067 jiffies. [ 1592.538095][ T30] ){.+.+}-{0:0} [ 1592.542700][ C0] task:syz.3.5721 state:D [ 1592.547449][ T30] , at: vfs_write+0x227/0xc90 [ 1592.550516][ C0] stack:26304 pid:23937 tgid:23936 ppid:23155 flags:0x00004004 [ 1592.556554][ T30] #1: ffff888068e7d088 [ 1592.567428][ C0] Call Trace: [ 1592.567442][ C0] [ 1592.567458][ C0] __schedule+0x1800/0x4a60 [ 1592.567523][ C0] ? __pfx___schedule+0x10/0x10 [ 1592.567556][ C0] ? __pfx_lock_release+0x10/0x10 [ 1592.567590][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1592.567634][ C0] ? schedule+0x90/0x320 [ 1592.567660][ C0] schedule+0x14b/0x320 [ 1592.567691][ C0] schedule_preempt_disabled+0x13/0x30 [ 1592.567720][ C0] __mutex_lock+0x6a4/0xd70 [ 1592.567757][ C0] ? __mutex_lock+0x527/0xd70 [ 1592.567791][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1592.567828][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1592.567875][ C0] ? get_rtnl_holder+0x144/0x190 [ 1592.567906][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1592.567948][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1592.567988][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1592.568031][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1592.568058][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1592.568094][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1592.568123][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 1592.568152][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1592.568183][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1592.579902][ T30] ( [ 1592.584194][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1592.590444][ T30] &of->mutex [ 1592.595079][ C0] ? __dev_queue_xmit+0x1763/0x3e90 [ 1592.595128][ C0] ? kasan_save_track+0x51/0x80 [ 1592.595166][ C0] ? vfs_writev+0x37c/0xbb0 [ 1592.595199][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.595239][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1592.595277][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1592.595327][ C0] ? ref_tracker_free+0x643/0x7e0 [ 1592.595361][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1592.595402][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1592.595443][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1592.595512][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1592.603512][ T30] ){+.+.}-{3:3} [ 1592.605027][ C0] netlink_unicast+0x7f0/0x990 [ 1592.610301][ T30] , at: kernfs_fop_write_iter+0x1eb/0x500 [ 1592.615470][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1592.619776][ T30] #2: [ 1592.623875][ C0] ? __virt_addr_valid+0x183/0x530 [ 1592.629379][ T30] ffff8880222545a8 [ 1592.632822][ C0] ? __check_object_size+0x49c/0x900 [ 1592.637312][ T30] (kn->active [ 1592.642579][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1592.647291][ T30] #49 [ 1592.652431][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1592.652486][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.657140][ T30] ){.+.+}-{0:0} [ 1592.659933][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1592.659971][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1592.664989][ T30] , at: kernfs_fop_write_iter+0x20f/0x500 [ 1592.668720][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1592.673752][ T30] #3: [ 1592.679458][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.679487][ C0] __sock_sendmsg+0x221/0x270 [ 1592.684602][ T30] ffffffff8ef05248 [ 1592.689018][ C0] sock_write_iter+0x2dd/0x400 [ 1592.694617][ T30] ( [ 1592.698063][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 1592.698123][ C0] ? futex_wait_queue+0x14e/0x1d0 [ 1592.698160][ C0] ? futex_unqueue+0xcb/0xf0 [ 1592.698199][ C0] do_iter_readv_writev+0x60a/0x890 [ 1592.698236][ C0] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1592.698268][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 1592.698293][ C0] ? security_file_permission+0x7f/0xa0 [ 1592.698323][ C0] ? rw_verify_area+0x1d2/0x6b0 [ 1592.698365][ C0] vfs_writev+0x37c/0xbb0 [ 1592.698412][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1592.698452][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 1592.698502][ C0] ? __fget_files+0x29/0x470 [ 1592.698551][ C0] do_writev+0x1b1/0x350 [ 1592.698590][ C0] ? __pfx_do_writev+0x10/0x10 [ 1592.698623][ C0] ? do_syscall_64+0x100/0x230 [ 1592.698650][ C0] ? do_syscall_64+0xb6/0x230 [ 1592.698678][ C0] do_syscall_64+0xf3/0x230 [ 1592.698703][ C0] ? clear_bhb_loop+0x35/0x90 [ 1592.698738][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.698769][ C0] RIP: 0033:0x7f72ccf75bd9 [ 1592.698791][ C0] RSP: 002b:00007f72cdc68048 EFLAGS: 00000246 [ 1592.705140][ T30] nsim_bus_dev_list_lock [ 1592.710726][ C0] ORIG_RAX: 0000000000000014 [ 1592.710744][ C0] RAX: ffffffffffffffda RBX: 00007f72cd103f60 RCX: 00007f72ccf75bd9 [ 1592.715324][ T30] ){+.+.}-{3:3} [ 1592.719936][ C0] RDX: 0000000000000001 RSI: 00000000200003c0 RDI: 0000000000000008 [ 1592.719956][ C0] RBP: 00007f72ccfe4e60 R08: 0000000000000000 R09: 0000000000000000 [ 1592.719973][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1592.719988][ C0] R13: 000000000000000b R14: 00007f72cd103f60 R15: 00007ffce9fd6c48 [ 1592.720028][ C0] [ 1592.720042][ C0] DEBUG: waiting rtnl_mutex for 2079 jiffies. [ 1592.720058][ C0] task:syz.3.5721 state:D stack:27216 pid:23939 tgid:23936 ppid:23155 flags:0x00000004 [ 1592.720101][ C0] Call Trace: [ 1592.720113][ C0] [ 1592.727252][ T30] , at: del_device_store+0xfc/0x480 [ 1592.731084][ C0] __schedule+0x1800/0x4a60 [ 1592.731160][ C0] ? __pfx___schedule+0x10/0x10 [ 1592.736217][ T30] #4: ffff88804fbc10e8 [ 1592.740315][ C0] ? __pfx_lock_release+0x10/0x10 [ 1592.740356][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1592.745465][ T30] (&dev->mutex [ 1592.750184][ C0] ? schedule+0x90/0x320 [ 1592.750221][ C0] schedule+0x14b/0x320 [ 1592.755571][ T30] ){....}-{3:3} [ 1592.760016][ C0] schedule_preempt_disabled+0x13/0x30 [ 1592.760053][ C0] __mutex_lock+0x6a4/0xd70 [ 1592.762803][ T30] , at: device_release_driver_internal+0xce/0x7c0 [ 1592.767394][ C0] ? __mutex_lock+0x527/0xd70 [ 1592.771145][ T30] #5: [ 1592.775885][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1592.779241][ T30] ffff888056617250 [ 1592.782294][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1592.784783][ T30] (&devlink->lock_key [ 1592.790880][ C0] ? get_rtnl_holder+0x144/0x190 [ 1592.790916][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1592.790962][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1592.796553][ T30] #83 [ 1592.799171][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1592.799224][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1592.799254][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1592.799334][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1592.799365][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 1592.799395][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1592.799433][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1592.799475][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1592.799510][ C0] ? __dev_queue_xmit+0x1763/0x3e90 [ 1592.799540][ C0] ? kasan_save_track+0x51/0x80 [ 1592.799576][ C0] ? do_syscall_64+0xf3/0x230 [ 1592.799605][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1592.799642][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1592.799692][ C0] ? ref_tracker_free+0x643/0x7e0 [ 1592.805074][ T30] ){+.+.}-{3:3} [ 1592.812125][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1592.812175][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1592.816344][ T30] , at: nsim_drv_remove+0x50/0x160 [ 1592.819670][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1592.819743][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1592.822649][ T30] #6: ffffffff8f5ff788 [ 1592.827153][ C0] netlink_unicast+0x7f0/0x990 [ 1592.833429][ T30] ( [ 1592.837162][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1592.842724][ T30] rtnl_mutex){+.+.}-{3:3} [ 1592.847048][ C0] ? __virt_addr_valid+0x183/0x530 [ 1592.851228][ T30] , at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 1592.856772][ C0] ? __check_object_size+0x49c/0x900 [ 1592.861360][ T30] 1 lock held by syz-executor/23759: [ 1592.866005][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1592.871273][ T30] #0: [ 1592.876248][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1592.881204][ T30] ffffffff8f5ff788 [ 1592.886237][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.891560][ T30] ( [ 1592.896897][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1592.896934][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1592.896966][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1592.897003][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.897027][ C0] __sock_sendmsg+0x221/0x270 [ 1592.897068][ C0] __sys_sendto+0x3a4/0x4f0 [ 1592.897103][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1592.897161][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1592.897197][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1592.897231][ C0] ? exc_page_fault+0x590/0x8c0 [ 1592.897269][ C0] __x64_sys_sendto+0xde/0x100 [ 1592.897303][ C0] do_syscall_64+0xf3/0x230 [ 1592.897328][ C0] ? clear_bhb_loop+0x35/0x90 [ 1592.897363][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.897392][ C0] RIP: 0033:0x7f72ccf7796c [ 1592.897421][ C0] RSP: 002b:00007f72cc9fded0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1592.897450][ C0] RAX: ffffffffffffffda RBX: 00007f72cc9fdfd0 RCX: 00007f72ccf7796c [ 1592.897470][ C0] RDX: 0000000000000024 RSI: 00007f72cc9fe020 RDI: 0000000000000008 [ 1592.897488][ C0] RBP: 0000000000000000 R08: 00007f72cc9fdf24 R09: 000000000000000c [ 1592.897506][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 1592.897522][ C0] R13: 00007f72cc9fdf78 R14: 00007f72cc9fe020 R15: 0000000000000000 [ 1592.897561][ C0] [ 1592.897573][ C0] DEBUG: waiting rtnl_mutex for 1018 jiffies. [ 1592.897587][ C0] task:syz-executor state:D stack:24992 pid:23972 tgid:23972 ppid:1 flags:0x00000004 [ 1592.897629][ C0] Call Trace: [ 1592.897640][ C0] [ 1592.897655][ C0] __schedule+0x1800/0x4a60 [ 1592.897710][ C0] ? __pfx___schedule+0x10/0x10 [ 1592.897741][ C0] ? __pfx_lock_release+0x10/0x10 [ 1592.897774][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1592.897825][ C0] ? schedule+0x90/0x320 [ 1592.897853][ C0] schedule+0x14b/0x320 [ 1592.897886][ C0] schedule_preempt_disabled+0x13/0x30 [ 1592.897916][ C0] __mutex_lock+0x6a4/0xd70 [ 1592.897953][ C0] ? __mutex_lock+0x527/0xd70 [ 1592.897988][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1592.898027][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1592.898074][ C0] ? get_rtnl_holder+0x144/0x190 [ 1592.898104][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1592.898146][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1592.898186][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1592.905452][ T30] rtnl_mutex [ 1592.908796][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 1592.914238][ T30] ){+.+.}-{3:3} [ 1592.919535][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1592.919579][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1592.924777][ T30] , at: rtnetlink_rcv_msg+0x847/0x1180 [ 1592.930521][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 1592.930563][ C0] ? mark_lock+0x9a/0x360 [ 1592.933045][ T30] 1 lock held by syz.3.5721/23937: [ 1592.938137][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1592.942779][ T30] #0: [ 1592.946658][ C0] ? __lock_acquire+0x1359/0x2000 [ 1592.951569][ T30] ffffffff8f5ff788 [ 1592.956057][ C0] ? mark_lock+0x9a/0x360 [ 1592.962187][ T30] ( [ 1592.967237][ C0] ? __lock_acquire+0x1359/0x2000 [ 1592.972618][ T30] rtnl_mutex){+.+.}-{3:3} [ 1592.977661][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1592.982455][ T30] , at: rtnetlink_rcv_msg+0x847/0x1180 [ 1592.987893][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1592.993277][ T30] 1 lock held by syz.3.5721/23939: [ 1592.998384][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1592.998456][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1592.998483][ C0] netlink_unicast+0x7f0/0x990 [ 1592.998527][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1592.998560][ C0] ? __virt_addr_valid+0x183/0x530 [ 1592.998599][ C0] ? __check_object_size+0x49c/0x900 [ 1592.998631][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1592.998668][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1592.998710][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.998738][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1592.998767][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1592.998799][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1592.998838][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.998861][ C0] __sock_sendmsg+0x221/0x270 [ 1592.998904][ C0] __sys_sendto+0x3a4/0x4f0 [ 1592.998940][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1592.999000][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1592.999036][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1592.999067][ C0] ? exc_page_fault+0x590/0x8c0 [ 1592.999104][ C0] __x64_sys_sendto+0xde/0x100 [ 1592.999136][ C0] do_syscall_64+0xf3/0x230 [ 1592.999159][ C0] ? clear_bhb_loop+0x35/0x90 [ 1592.999191][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.999218][ C0] RIP: 0033:0x7ffb23b7796c [ 1592.999240][ C0] RSP: 002b:00007fff44be7d20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1592.999307][ C0] RAX: ffffffffffffffda RBX: 00007ffb24834620 RCX: 00007ffb23b7796c [ 1592.999328][ C0] RDX: 0000000000000028 RSI: 00007ffb24834670 RDI: 0000000000000003 [ 1592.999364][ C0] RBP: 0000000000000000 R08: 00007fff44be7d74 R09: 000000000000000c [ 1592.999381][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1592.999398][ C0] R13: 0000000000000000 R14: 00007ffb24834670 R15: 0000000000000000 [ 1592.999444][ C0] [ 1592.999457][ C0] DEBUG: waiting rtnl_mutex for 3157 jiffies. [ 1592.999473][ C0] task:syz-executor state:D stack:21024 pid:23618 tgid:23618 ppid:1 flags:0x00004006 [ 1592.999516][ C0] Call Trace: [ 1592.999528][ C0] [ 1592.999545][ C0] __schedule+0x1800/0x4a60 [ 1592.999603][ C0] ? __pfx___schedule+0x10/0x10 [ 1592.999637][ C0] ? __pfx_lock_release+0x10/0x10 [ 1593.004970][ T30] #0: [ 1593.007872][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1593.013705][ T30] ffffffff8f5ff788 [ 1593.018915][ C0] ? schedule+0x90/0x320 [ 1593.021729][ T30] (rtnl_mutex [ 1593.026832][ C0] schedule+0x14b/0x320 [ 1593.030701][ T30] ){+.+.}-{3:3} [ 1593.035949][ C0] schedule_preempt_disabled+0x13/0x30 [ 1593.039414][ T30] , at: rtnetlink_rcv_msg+0x847/0x1180 [ 1593.044440][ C0] __mutex_lock+0x6a4/0xd70 [ 1593.047021][ T30] 1 lock held by syz-executor/23972: [ 1593.051815][ C0] ? __mutex_lock+0x527/0xd70 [ 1593.051852][ C0] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 1593.051879][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1593.051926][ C0] ? get_rtnl_holder+0x144/0x190 [ 1593.051957][ C0] unregister_netdevice_notifier_net+0x89/0x3a0 [ 1593.058553][ T30] #0: [ 1593.060779][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1593.060821][ C0] ? mntput_no_expire+0x2da/0x850 [ 1593.065763][ T30] ffffffff8f5ff788 [ 1593.071174][ C0] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 1593.076893][ T30] (rtnl_mutex [ 1593.082377][ C0] ? __pfx_mntput_no_expire+0x10/0x10 [ 1593.082426][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1593.085172][ T30] ){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1593.090490][ C0] ? simple_release_fs+0x9c/0xd0 [ 1593.095164][ T30] 1 lock held by syz.4.5737/23993: [ 1593.098875][ C0] nsim_dev_hwstats_exit+0x81/0x290 [ 1593.106951][ T30] #0: [ 1593.111511][ C0] ? kfree+0x149/0x360 [ 1593.111560][ C0] nsim_dev_reload_destroy+0x2ad/0x490 [ 1593.111597][ C0] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1593.116614][ T30] ffff88801fc37360 [ 1593.121234][ C0] nsim_drv_remove+0x58/0x160 [ 1593.126419][ T30] (&lo->lo_mutex [ 1593.132170][ C0] device_release_driver_internal+0x4a9/0x7c0 [ 1593.137541][ T30] ){+.+.}-{3:3} [ 1593.143117][ C0] bus_remove_device+0x34f/0x420 [ 1593.143176][ C0] device_del+0x57a/0x9b0 [ 1593.148004][ T30] , at: loop_set_status+0x2a/0x900 [ 1593.152377][ C0] ? __pfx_device_del+0x10/0x10 [ 1593.152424][ C0] device_unregister+0x20/0xc0 [ 1593.157438][ T30] 1 lock held by syz.0.5739/23987: [ 1593.162365][ C0] del_device_store+0x363/0x480 [ 1593.162426][ C0] ? __pfx_del_device_store+0x10/0x10 [ 1593.162464][ C0] ? sysfs_kf_write+0x182/0x2a0 [ 1593.162498][ C0] ? bus_attr_store+0x4f/0xa0 [ 1593.162528][ C0] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1593.162560][ C0] kernfs_fop_write_iter+0x3a1/0x500 [ 1593.168371][ T30] #0: [ 1593.171437][ C0] vfs_write+0xa72/0xc90 [ 1593.176181][ T30] ffffffff8e33ac38 [ 1593.180975][ C0] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1593.185655][ T30] (rcu_state.exp_mutex [ 1593.190190][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1593.190242][ C0] ksys_write+0x1a0/0x2c0 [ 1593.190274][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1593.190299][ C0] ? do_syscall_64+0x100/0x230 [ 1593.190326][ C0] ? do_syscall_64+0xb6/0x230 [ 1593.190350][ C0] do_syscall_64+0xf3/0x230 [ 1593.190375][ C0] ? clear_bhb_loop+0x35/0x90 [ 1593.190416][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.190444][ C0] RIP: 0033:0x7f83e617475f [ 1593.190466][ C0] RSP: 002b:00007ffe01e8a360 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1593.190494][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f83e617475f [ 1593.190512][ C0] RDX: 0000000000000001 RSI: 00007ffe01e8a3b0 RDI: 0000000000000005 [ 1593.190528][ C0] RBP: 00007f83e61e45a0 R08: 0000000000000000 R09: 00007ffe01e8a1b7 [ 1593.190546][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1593.190564][ C0] R13: 00007ffe01e8a3b0 R14: 00007f83e6e34620 R15: 0000000000000003 [ 1593.190602][ C0] [ 1593.195279][ T30] ){+.+.}-{3:3} [ 1593.201246][ C0] DEBUG: waiting rtnl_mutex for 3073 jiffies. [ 1593.201275][ C0] task:syz-executor state:D stack:20368 pid:23759 tgid:23759 ppid:1 flags:0x00004004 [ 1593.208820][ T30] , at: synchronize_rcu_expedited+0x451/0x830 [ 1593.211803][ C0] Call Trace: [ 1593.227888][ T30] [ 1593.228752][ C0] [ 1593.232378][ T30] ============================================= [ 1593.232378][ T30] [ 1593.240297][ C0] __schedule+0x1800/0x4a60 [ 1593.240370][ C0] ? __pfx___schedule+0x10/0x10 [ 1593.296535][ T30] NMI backtrace for cpu 1 [ 1593.299917][ C0] ? __pfx_lock_release+0x10/0x10 [ 1593.304713][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 1593.308861][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1593.313865][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1593.313884][ T30] Call Trace: [ 1593.313896][ T30] [ 1593.313908][ T30] dump_stack_lvl+0x241/0x360 [ 1593.319401][ C0] ? schedule+0x90/0x320 [ 1593.322810][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1593.327042][ C0] schedule+0x14b/0x320 [ 1593.331272][ T30] ? __pfx__printk+0x10/0x10 [ 1593.331314][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1593.334769][ C0] schedule_preempt_disabled+0x13/0x30 [ 1593.340217][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1593.340257][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1593.344736][ C0] __mutex_lock+0x6a4/0xd70 [ 1593.351137][ T30] ? _printk+0xd5/0x120 [ 1593.351173][ T30] ? __pfx__printk+0x10/0x10 [ 1593.355853][ C0] ? __mutex_lock+0x527/0xd70 [ 1593.358600][ T30] ? __wake_up_klogd+0x109/0x140 [ 1593.363823][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1593.367492][ T30] ? __pfx__printk+0x10/0x10 [ 1593.372542][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1593.376561][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1593.381533][ C0] ? get_rtnl_holder+0x144/0x190 [ 1593.386500][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1593.391730][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1593.394267][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1593.399763][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1593.405085][ T30] watchdog+0xfee/0x1030 [ 1593.410317][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1593.415640][ T30] ? watchdog+0x1ea/0x1030 [ 1593.420946][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 1593.426017][ T30] ? __pfx_watchdog+0x10/0x10 [ 1593.431806][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1593.436847][ T30] kthread+0x2f0/0x390 [ 1593.442083][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1593.446903][ T30] ? __pfx_watchdog+0x10/0x10 [ 1593.451607][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1593.456667][ T30] ? __pfx_kthread+0x10/0x10 [ 1593.462120][ C0] ? preempt_schedule_notrace+0x100/0x140 [ 1593.467082][ T30] ret_from_fork+0x4b/0x80 [ 1593.470585][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 1593.475292][ T30] ? __pfx_kthread+0x10/0x10 [ 1593.480784][ C0] ? mark_lock+0x9a/0x360 [ 1593.485849][ T30] ret_from_fork_asm+0x1a/0x30 [ 1593.491166][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1593.496341][ T30] [ 1593.500595][ C0] ? __lock_acquire+0x1359/0x2000 [ 1593.505360][ C1] vkms_vblank_simulate: vblank timer overrun [ 1593.507821][ C0] ? mark_lock+0x9a/0x360 [ 1593.514739][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1593.517439][ C0] ? __lock_acquire+0x1359/0x2000 [ 1593.523571][ C0] NMI backtrace for cpu 0 [ 1593.523585][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 1593.523607][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1593.523619][ C0] RIP: 0010:io_serial_in+0x76/0xb0 [ 1593.523644][ C0] Code: 10 ce 53 fc 89 e9 41 d3 e6 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 01 99 ba fc 44 03 33 44 89 f2 ec <0f> b6 c0 5b 41 5e 41 5f 5d c3 cc cc cc cc 89 e9 80 e1 07 38 c1 7c [ 1593.523660][ C0] RSP: 0018:ffffc90000007278 EFLAGS: 00000002 [ 1593.523677][ C0] RAX: 1ffffffff2964100 RBX: ffffffff94b20900 RCX: 0000000000000000 [ 1593.523692][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1593.523704][ C0] RBP: 0000000000000000 R08: ffffffff853fb5c6 R09: 1ffff11003eda046 [ 1593.523718][ C0] R10: dffffc0000000000 R11: ffffffff853fb580 R12: dffffc0000000000 [ 1593.523732][ C0] R13: ffffffff94834bb0 R14: 00000000000003fd R15: dffffc0000000000 [ 1593.523747][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1593.523763][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1593.523776][ C0] CR2: 0000000020404030 CR3: 000000000e132000 CR4: 00000000003506f0 [ 1593.523793][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1593.523804][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1593.523816][ C0] Call Trace: [ 1593.523825][ C0] [ 1593.523833][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1593.523856][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1593.523883][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1593.523904][ C0] ? nmi_handle+0x2a/0x5a0 [ 1593.523932][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1593.523956][ C0] ? nmi_handle+0x14f/0x5a0 [ 1593.523992][ C0] ? nmi_handle+0x2a/0x5a0 [ 1593.524011][ C0] ? io_serial_in+0x76/0xb0 [ 1593.524029][ C0] ? default_do_nmi+0x63/0x160 [ 1593.524052][ C0] ? exc_nmi+0x123/0x1f0 [ 1593.524074][ C0] ? end_repeat_nmi+0xf/0x53 [ 1593.524099][ C0] ? __pfx_io_serial_in+0x10/0x10 [ 1593.524124][ C0] ? io_serial_in+0x46/0xb0 [ 1593.524145][ C0] ? io_serial_in+0x76/0xb0 [ 1593.524164][ C0] ? io_serial_in+0x76/0xb0 [ 1593.524185][ C0] ? io_serial_in+0x76/0xb0 [ 1593.524204][ C0] [ 1593.524210][ C0] [ 1593.524219][ C0] serial8250_console_write+0x1373/0x1ed0 [ 1593.524252][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1593.524271][ C0] ? __pfx_lock_release+0x10/0x10 [ 1593.524294][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 1593.524320][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1593.524343][ C0] ? __pfx_univ8250_console_write+0x10/0x10 [ 1593.524371][ C0] console_flush_all+0x880/0xf50 [ 1593.524394][ C0] ? mark_lock+0x9a/0x360 [ 1593.524419][ C0] ? console_flush_all+0x147/0xf50 [ 1593.524444][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1593.524477][ C0] console_unlock+0x13b/0x4d0 [ 1593.524499][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1593.524515][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1593.524539][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1593.524568][ C0] ? vprintk_emit+0x420/0x900 [ 1593.524589][ C0] ? vprintk_emit+0x761/0x900 [ 1593.524610][ C0] vprintk_emit+0x7a1/0x900 [ 1593.524632][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1593.524661][ C0] _printk+0xd5/0x120 [ 1593.524689][ C0] ? __lock_acquire+0x1359/0x2000 [ 1593.524713][ C0] ? wq_watchdog_touch+0xe5/0x180 [ 1593.524734][ C0] ? __pfx__printk+0x10/0x10 [ 1593.524760][ C0] ? 0xffffffffa000095c [ 1593.524777][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 1593.524804][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 1593.524834][ C0] ? wq_watchdog_touch+0xef/0x180 [ 1593.524854][ C0] ? __lock_acquire+0x1359/0x2000 [ 1593.524879][ C0] show_trace_log_lvl+0x43a/0x520 [ 1593.524916][ C0] ? netlink_rcv_skb+0x1e3/0x430 [ 1593.524949][ C0] sched_show_task+0x506/0x6d0 [ 1593.524970][ C0] ? report_rtnl_holders+0x29e/0x3f0 [ 1593.524998][ C0] ? __pfx__printk+0x10/0x10 [ 1593.525024][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 1593.525044][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1593.525067][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1593.525095][ C0] report_rtnl_holders+0x320/0x3f0 [ 1593.525131][ C0] call_timer_fn+0x18e/0x650 [ 1593.525149][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1593.525175][ C0] ? call_timer_fn+0xc0/0x650 [ 1593.525192][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1593.525218][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1593.525237][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1593.525264][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1593.525290][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1593.525315][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1593.525336][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1593.525362][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1593.525389][ C0] __run_timer_base+0x66a/0x8e0 [ 1593.525425][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1593.525456][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1593.525486][ C0] run_timer_softirq+0xb7/0x170 [ 1593.525514][ C0] handle_softirqs+0x2c4/0x970 [ 1593.525540][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 1593.525566][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1593.525591][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 1593.525619][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 1593.525641][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1593.525669][ C0] irq_exit_rcu+0x9/0x30 [ 1593.525690][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1593.525716][ C0] [ 1593.525722][ C0] [ 1593.525730][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1593.525753][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 1593.525775][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 40 d7 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 85 c7 98 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 1593.525791][ C0] RSP: 0018:ffffffff8e007ca8 EFLAGS: 00000246 [ 1593.525808][ C0] RAX: ffffffff8e094680 RBX: ffff88801baa9864 RCX: 000000000055ac79 [ 1593.525822][ C0] RDX: 0000000000000001 RSI: ffff88801baa9800 RDI: ffff88801baa9864 [ 1593.525836][ C0] RBP: 000000000003a6b8 R08: ffff8880b9437c9b R09: 1ffff11017286f93 [ 1593.525849][ C0] R10: dffffc0000000000 R11: ffffffff8b915050 R12: ffff88801cb58800 [ 1593.525864][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8ead8980 [ 1593.525880][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 1593.525907][ C0] acpi_idle_enter+0xe4/0x140 [ 1593.525929][ C0] cpuidle_enter_state+0x112/0x480 [ 1593.525948][ C0] ? __pfx_menu_select+0x10/0x10 [ 1593.525973][ C0] cpuidle_enter+0x5d/0xa0 [ 1593.526003][ C0] do_idle+0x375/0x5d0 [ 1593.526028][ C0] ? __pfx_do_idle+0x10/0x10 [ 1593.526048][ C0] ? rest_init+0x20/0x300 [ 1593.526075][ C0] ? rest_init+0x31/0x300 [ 1593.526094][ C0] cpu_startup_entry+0x42/0x60 [ 1593.526114][ C0] rest_init+0x2dc/0x300 [ 1593.526140][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1593.526163][ C0] start_kernel+0x47a/0x500 [ 1593.526193][ C0] x86_64_start_reservations+0x2a/0x30 [ 1593.526213][ C0] x86_64_start_kernel+0x9f/0xa0 [ 1593.526231][ C0] common_startup_64+0x13e/0x147 [ 1593.526262][ C0] [ 1593.537566][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1593.537590][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 1593.537620][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1593.537636][ T30] Call Trace: [ 1593.537648][ T30] [ 1593.537661][ T30] dump_stack_lvl+0x241/0x360 [ 1593.537708][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1593.537746][ T30] ? __pfx__printk+0x10/0x10 [ 1593.537779][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1593.537821][ T30] ? vscnprintf+0x5d/0x90 [ 1593.537852][ T30] panic+0x349/0x870 [ 1593.537889][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1593.537920][ T30] ? __pfx_panic+0x10/0x10 [ 1593.537951][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1593.537982][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1593.538019][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1593.538047][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320