last executing test programs: 1m41.692441694s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x9e7, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000003800), 0x4) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m41.526035909s ago: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r2, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x7c, &(0x7f0000000040)={r8}, &(0x7f0000000080)=0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 1m41.206742078s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="fe8f97d2", 0x4}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m41.049164492s ago: executing program 1: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x5124, &(0x7f000000a2c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RLINK(r3, &(0x7f0000000080)={0x7, 0x47, 0xd00}, 0x7) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca6b2a9ecf3471d2", 0x28}], 0x1}}], 0x1, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="20092fd772ac8caee200010700000000000000000000000000000c0006400000"], 0x20}}, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000000)=0x27) r7 = syz_open_dev$vim2m(0x0, 0x7737573d, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f00000002c0)={0x0, 0x0, 0x0, @stepwise={0x2, 0x0, 0x0, 0x0, 0xffff0001}}) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300), &(0x7f0000000000)=@md5={0x1, "1bc1120b4367acaaba77705abf88d3f9"}, 0x11, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1m39.249669815s ago: executing program 1: syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000004c0008804800028024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200009801c000080060001000a00000008000200e0000001050103000000000014000200776730000000000000000000000000009459cb62bf3a58a646f4d14a421f033dd014cdd91febfd1f"], 0x74}, 0x1, 0x600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xb, 0x2, 0x4) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) read$FUSE(r0, &(0x7f0000005540)={0x2020}, 0x2020) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000280)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000003500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000640)={0x78, 0x0, 0x0, {0x3, 0x800, 0x0, {0x0, 0x80000000, 0x0, 0x0, 0x13d, 0x40, 0x7, 0x81, 0x4, 0x8000, 0x4, r5, r6, 0x8}}}, 0x78) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x15}, 0x8000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioperm(0x0, 0x2, 0x7fffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r7 = io_uring_setup(0x79bf, &(0x7f0000000180)) close_range(r7, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000001480)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}, {}], 0x3) 1m37.703225244s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x8, 0x0, &(0x7f0000000080)) 1m31.423999153s ago: executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x4000000010041) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) preadv(r2, &(0x7f0000000200)=[{&(0x7f00000021c0)=""/102375, 0x18fe7}], 0x10000000000000d2, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x20000000, 0x381400) socket$packet(0x11, 0x3, 0x300) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1000}, &(0x7f0000000240), &(0x7f0000000040)) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000200)={[{@utf8}, {@session={'session', 0x3d, 0x5c}}, {@sbsector={'sbsector', 0x3d, 0xffffffeb}}, {@session={'session', 0x3d, 0x21}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@cruft}, {@block={'block', 0x3d, 0x400}}]}, 0x41, 0x537, &(0x7f0000000ac0)="$eJzs3V1v01gawPHHpV2irFStlhVCVYFD2ZWKVIKTQFDEldc5SQ84dmQ7qL1CFU1RRQorykrb3rDcMDPSzIfgdj7EfCM0H2FGtpO+0CYG+hJU/X8RnBP72Oc5qeVHbuNjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYrkN2y5b4hm/u6JGcxth0N5/O9j6yAK5c6gY06+IlfyTQkGuZYuu/WN/9dXkvwWZz97NSyEpCrL716t/e3Rlemq4/ZiAz8X2zu7LtX6/92bSgZyh65dHr2tp30SBaTstrUwUqHqtZt9bbkaqaTwdrUaxbis31E4chGrRvaPK9XpV6dJq0PVbDcfTw4UP71Zsu6YelzraCaPAv/e4FLnLxvOM30rbJKuTNg+TA/GJiVWsnbZSG5v9XjVvAEmj8pc0quQ1qtiVSrlcqZRrD+oPHtr29JEF9mfkSIvJH7SYrFM8ewMnMzXI/+KJEV+6siLq2JcrDQklkPaI9QPD/P+ve3psvwfz/zDLX9tfPSdp/r+RvbsxKv+PiOX8XtuyI7vyUtakL33pyZuJR3S+r5Zo8cVIJIEYaYuTLlGDJUrqUpOa2PJMlqUpkShpihFPtESyKpHEotMjypVQtDgSSyChKFkUV+6IkrLUpS5VUaKlJKsSSFd8aUlDnHQvG7KZfu5VUdaoGPcalUcOozg87npSGTNa8j9O7lTP38BJ/DHM/wAAAAAA4MKy0t++J9f/M3I9rTWNp+1JhwUAAAAAAE5R+pf/+aSYSWrXxeL6HwAAAACAi8ZK77GzRKQoN7Pahljp7VL8EgAAAAAAgAsi/fv/jaRI50C5KdbedClc/wMAAAAAcEH8mDvHftS5bP32u4ThjPW+s/JPayudm9fZupRtd+nzPcbNOWt2sJO0qGXF9LSr561C1mhvEsxPg2IjLw5rPwBnL4D/f00AV6blZ7mVtbm1npXrwzVZL8Wm8XTJDbxHZXGc2alYr8T/fbX5P0mH/5PfnrUKstnvlZ6/7q+nsbxP9vJ+azCB4pF5FMfE8jadbyG95+LYEc+kN2IM+i1asrHZ79kHxz+VbT51uMd3s2P6/CALWauFwYy3xcPjLyR9lkujRj+IonzCkX+Q21mb24u3s+KYKCp5UVQORnH8Z3HyKKp5UVRPGAUATMpGThay5Eje/Yaz3Ldld/nK7P5BFrM2i3PpiXV67pgzup13RrdPmN1+PfIMpFE5Nun3l8+y6sdkg48j+428ipV8hJfebv1Hrm7v7N7d3Fp70XvRe1WpVGv2fdt+UJGZdBiDgtwDADhG/jN2cltY93Ouqv++95WCkjyX19KXdVlK7zZIv3Fw7F6LB76GsJRz1VpM02T2hJelMVd1f0nvchjutzK27eEYqmf/gwAA4Bwt5OThL8n/SznX3Ydz+fir4+KBp7UBAICzocNPVjH+wQpD03lWrtfLTrysVRi4T1RoGi2tjB/r0F12/JZWnTCIAzfwkspT09CRirqdThDGqhmEqhNEZiWdPlANHv0e6bbjx8aNOp52Iq3cwI8dN1YNE7mq0/23Z6JlHaYbRx3tmqZxndgEvoqCbujqklKR1gcamob2Y9M0SdVXndC0nbCgngZet61VQ0duaDpxkO1w2Jfxm0HYTndbmvSHDQDAd2J7Z/flWr/fe3OGlUmPEQAAHEaWBgAAAAAAAAAAAAAAAAAAAADg+3ce9/9RueCV4VTQ30s8VE6hknvqeHfmJycAZ+rPAAAA//8ow08k") sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x123042, 0x0) write$binfmt_script(r5, &(0x7f0000000a80)={'#! ', './file0'}, 0xb) 1m27.756185814s ago: executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="58010000", @ANYRES16=r2, @ANYBLOB="0100000000000000000002"], 0x158}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001140)={&(0x7f00000011c0)={0x80, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x40}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x95}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c000}, 0x1) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000002c0)={0x128, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x4}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x74, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x128}}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000d00)={0xc}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0x46}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000d00)={0xc}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r6, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x0, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 1m26.097444424s ago: executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x402b, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000580)=0x0) syz_io_uring_setup(0x4384, &(0x7f00000003c0), &(0x7f0000000180)=0x0, &(0x7f00000004c0)) open(&(0x7f0000000400)='./file0\x00', 0x240, 0x0) syz_io_uring_submit(r1, r0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x8058}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0xc842, &(0x7f00000023c0)=ANY=[], 0x7, 0x6ed, &(0x7f0000000900)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000240), &(0x7f0000000280)=@v2={0x2000000, [{0x9, 0x9}, {0xff, 0x3}]}, 0x14, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000002c0)='THAWED\x00', 0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000c000800030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800000000000000000002"]) 1m23.578797818s ago: executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x2a, 0x0, 0x8001) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) r4 = accept(r0, 0x0, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x48, 0x0, 0xfff, 0xfffffff9, {{0x20, 0x4, 0x0, 0x1, 0x80, 0x65, 0x0, 0x5, 0x29, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x13, 0x10, [@broadcast, @multicast1, @multicast1, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x33, 0x3, 0xe, [{@rand_addr=0x64010100, 0x4}, {@rand_addr=0x64010102, 0x7}, {@multicast1, 0x5}]}, @noop, @ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0x3, 0x51}, @end, @lsrr={0x83, 0xb, 0x7c, [@multicast1, @empty]}, @ssrr={0x89, 0x1b, 0xcf, [@remote, @empty, @broadcast, @multicast2, @local, @loopback]}, @lsrr={0x83, 0xb, 0xbf, [@dev={0xac, 0x14, 0x14, 0x2d}, @local]}]}}}}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa1000000b702000008000000b7030000fdffffff850000002d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'ip6tnl0\x00', 0x0, 0x29, 0x80, 0x40, 0x80000001, 0x10, @dev={0xfe, 0x80, '\x00', 0x13}, @remote, 0x20, 0x10, 0xff, 0x10001}}) sendmsg$nl_route(r1, &(0x7f0000000cc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)=@can_delroute={0x16c, 0x19, 0x4, 0x70bd26, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_CS_CRC8={0x11e, 0x6, {0x58, 0x26, 0x1b, 0x1f, 0x6, "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", 0x0, "810c36755157a9b4ec17b497c442d0e901a00ba4"}}, @CGW_DST_IF={0x8, 0xa, r7}, @CGW_CS_XOR={0x8, 0x5, {0x7, 0xfffffffffffffffb, 0x6, 0x3f}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "81c381e63e46cfe6"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x4}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4004894}, 0x80) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1513, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, &(0x7f00000005c0)={0x36d12f2c052e8a2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "0004"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, 0x0) sendmsg$key(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x2, 0x13, 0x0, 0x9, 0x12, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@multicast2, 0x27, 0x10}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @multicast2}}, @sadb_sa={0x567bd183ed822a75, 0x1, 0x4d4, 0x40, 0x8, 0xde}, @sadb_lifetime={0x4, 0x2, 0x1ff, 0x8, 0x1000, 0x10001}]}, 0x90}}, 0x4001) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0', [{0x20, '\x00'}], 0xa, "90ce61a3fe2bca3eda6855f8ad671e215bae3fc87ae376d878a6cd80a7d91a9fdc79250fc6d393fdebfe6020cb588df0778d988232cb456dbce588edae68313c6e9a6132db5bff4e0f0fd199c8c94dee5fb74700b7cb112062404775e7e51762d85158afd9e2f9e791eb2dfe02c7995ba99cdd15a201627692d98e62a4583ffd739c5933693f024d7c07518927d790ce7485c57fa47a0e0ea521f23b5df6f697686d673e4c0a8860d78fddf9f70ac53571b6bda7dc9288548417999069b0737d6680b11687f3"}, 0xd3) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090a00000000000000000000000000060000000e000200000002000000000000000000020000000000000000000000000200000000030005000000000002000000e000000100000000000000007b467e2120cfc6aa9dd2588f08dea6be52fbc5fc8437524e74e274d98bd2e3061e154a7ace01ae7dd6f390c8e89519768b"], 0x50}}, 0x0) 1m19.188240528s ago: executing program 0: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xfffffb06}, 0x8) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x33}}) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup2(r4, r4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000000c0)={0x2, 0x28, 0xfa33, {0x0, {0xa, 0x0, 0x0, @local, 0x3c}}}, 0x30) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000180)={0x6, 'netpci0\x00', {0x2}, 0x9}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000340)={0x0, 'veth1_vlan\x00', {0x2}, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r9 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@gettfilter={0x6c, 0x2e, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xa, 0x4}, {0x5, 0x8}, {0x0, 0xf}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xc06}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x3b1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x448d0}, 0x20000000) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380), 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={0x0, 0xae43}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 49.149091335s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65, 0x0, 0x6}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x7, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r6, 0x0, 0x2, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.214414626s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x0, 0x300) creat(0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r2, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x19}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xabf0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x400) socket$inet_udplite(0x2, 0x2, 0x88) accept(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfea7) socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x50, r3, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01080000c582b61bdd04878800080103"], 0x2c}}, 0x0) 8.021127259s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x3}]}}}]}, 0x3c}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = syz_open_procfs(0x0, 0x0) read$char_usb(r2, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) read$char_usb(r2, &(0x7f0000000280)=""/78, 0x4e) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@noinit_itable}, {@orlov}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$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") r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xffff5b53, 0x0, 0x9}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x48}]}}}]}, 0x58}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r5, 0x40047459, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x2000041}, 0x10) bind$tipc(r6, 0x0, 0x0) 7.806512414s ago: executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000002c0)) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(0x0) inotify_init1(0x0) setpgid(0x0, 0x0) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000080)=@hat={'permhat ', 0x1, 0x5e, ['\x00', '^\x00', '%*-,]-!+\x00']}, 0x27) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/424]}, 0x220) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'SET\x00'}]}, 0x2c}}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r7, 0x8004f50e, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 6.941345794s ago: executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x4, 0x240) ioctl$SNDRV_PCM_IOCTL_DELAY(r1, 0x80084121, &(0x7f0000000300)) r2 = socket$kcm(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r2, 0x5, 0x8, 0x97c0}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$eJzs0L9rE2Ecx/H397knPypUiYpDBRuweF6oJndVB6fgFCEHDi6CQUMam2KippfBlha6SEGq/Rd0qqMKOokoOBcHwUHPpZs0Q3EQB4nk8kTwb/B5Dfe57wfunodvK+pGGeD3/mqDMgmHg3xE0MC0jDqlRvnazN9Nbo2CS2beNPnM5FS0vHK73m43l/IX8+T+KYAfSfe3il5wTNEXysjn/dVGXW6GDMp01HxIrkrhEU6NrveYKT3J0Rs4DNxNLiu64lbhULHXuVeMllfOLHbqC82F5p0gmLtQOlcqnQ+KtxbbzdIrxHsoiies4YVkQia8NVI1HuzoA8wK4rVU7EihT7rG1o5z+uRsH+XtMUB45/bJfNWtvLrKKbLXh5evcER4ihMyU2VCoUkOqiBX1Evx9Sf9M6XIrjvO2cbd9vzGNSW/0ttl2cuKv0vK9QkKPnPD1XCY92zEzMRUYrZjdr8xLW+Gp4z3qteHz+dmOs4JSHO/3ust+Wn4IDokcEOCHEwmv1PJvXLw1nxjgi/jF8uyLMuyLMuyLOs/8CcAAP//o/hj9Q==") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 6.888147648s ago: executing program 4: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xfffffb06}, 0x8) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x33}}) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup2(r4, r4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000000c0)={0x2, 0x28, 0xfa33, {0x0, {0xa, 0x0, 0x0, @local, 0x3c}}}, 0x30) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000180)={0x6, 'netpci0\x00', {0x2}, 0x9}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000340)={0x0, 'veth1_vlan\x00', {0x2}, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r9 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r10, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r10}}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@gettfilter={0x6c, 0x2e, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xa, 0x4}, {0x5, 0x8}, {0x0, 0xf}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xc06}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x3b1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x448d0}, 0x20000000) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380), 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={0x0, 0xae43}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 6.571384437s ago: executing program 3: syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000004c0008804800028024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200009801c000080060001000a00000008000200e0000001050103000000000014000200776730000000000000000000000000009459cb62bf3a58a646f4d14a421f033dd014cdd91febfd1f"], 0x74}, 0x1, 0x600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xb, 0x2, 0x4) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) read$FUSE(r0, &(0x7f0000005540)={0x2020}, 0x2020) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000280)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000640)={0x78, 0x0, 0x0, {0x3, 0x800, 0x0, {0x0, 0x80000000, 0x0, 0x0, 0x13d, 0x40, 0x7, 0x81, 0x4, 0x8000, 0x4, r5, 0x0, 0x8}}}, 0x78) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r6 = io_uring_setup(0x79bf, &(0x7f0000000180)) close_range(r6, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000001480)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}, {}], 0x3) 5.450508582s ago: executing program 3: socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x2a, 0x0, 0x8001) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) r4 = accept(r0, 0x0, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x48, 0x0, 0xfff, 0xfffffff9, {{0x20, 0x4, 0x0, 0x1, 0x80, 0x65, 0x0, 0x5, 0x29, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x13, 0x10, [@broadcast, @multicast1, @multicast1, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x33, 0x3, 0xe, [{@rand_addr=0x64010100, 0x4}, {@rand_addr=0x64010102, 0x7}, {@multicast1, 0x5}]}, @noop, @ra={0x94, 0x4, 0x1}, @noop, @end, @lsrr={0x83, 0xf, 0x7c, [@multicast1, @local, @empty]}, @ssrr={0x89, 0x1b, 0xcf, [@remote, @empty, @broadcast, @multicast2, @local, @loopback]}, @lsrr={0x83, 0xb, 0xbf, [@dev={0xac, 0x14, 0x14, 0x2d}, @local]}]}}}}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa1000000b702000008000000b7030000fdffffff850000002d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'ip6tnl0\x00', 0x0, 0x29, 0x80, 0x40, 0x80000001, 0x10, @dev={0xfe, 0x80, '\x00', 0x13}, @remote, 0x20, 0x10, 0xff, 0x10001}}) sendmsg$nl_route(r1, &(0x7f0000000cc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)=@can_delroute={0x16c, 0x19, 0x4, 0x70bd26, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_CS_CRC8={0x11e, 0x6, {0x58, 0x26, 0x1b, 0x1f, 0x6, "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", 0x0, "810c36755157a9b4ec17b497c442d0e901a00ba4"}}, @CGW_DST_IF={0x8, 0xa, r7}, @CGW_CS_XOR={0x8, 0x5, {0x7, 0xfffffffffffffffb, 0x6, 0x3f}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "81c381e63e46cfe6"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x4}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4004894}, 0x80) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1513, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, &(0x7f00000005c0)={0x36d12f2c052e8a2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "0004"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, 0x0) sendmsg$key(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x2, 0x13, 0x0, 0x9, 0x12, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@multicast2, 0x27, 0x10}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @multicast2}}, @sadb_sa={0x567bd183ed822a75, 0x1, 0x4d4, 0x40, 0x8, 0xde}, @sadb_lifetime={0x4, 0x2, 0x1ff, 0x8, 0x1000, 0x10001}]}, 0x90}}, 0x4001) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0', [{0x20, '\x00'}], 0xa, "90ce61a3fe2bca3eda6855f8ad671e215bae3fc87ae376d878a6cd80a7d91a9fdc79250fc6d393fdebfe6020cb588df0778d988232cb456dbce588edae68313c6e9a6132db5bff4e0f0fd199c8c94dee5fb74700b7cb112062404775e7e51762d85158afd9e2f9e791eb2dfe02c7995ba99cdd15a201627692d98e62a4583ffd739c5933693f024d7c07518927d790ce7485c57fa47a0e0ea521f23b5df6f697686d673e4c0a8860d78fddf9f70ac53571b6bda7dc9288548417999069b0737d6680b11687f3"}, 0xd3) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090a00000000000000000000000000060000000e000200000002000000000000000000020000000000000000000000000200000000030005000000000002000000e000000100000000000000007b467e2120cfc6aa9dd2588f08dea6be52fbc5fc8437524e74e274d98bd2e3061e154a7ace01ae7dd6f390c8e89519768b"], 0x50}}, 0x0) 5.330245049s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x11, 0x800000003, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x60000, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000140), &(0x7f0000000240)='./file1\x00', 0x8, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) 4.15701528s ago: executing program 2: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xfffffb06}, 0x8) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x33}}) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup2(r4, r4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000000c0)={0x2, 0x28, 0xfa33, {0x0, {0xa, 0x0, 0x0, @local, 0x3c}}}, 0x30) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000180)={0x6, 'netpci0\x00', {0x2}, 0x9}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000340)={0x0, 'veth1_vlan\x00', {0x2}, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r9 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@gettfilter={0x6c, 0x2e, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xa, 0x4}, {0x5, 0x8}, {0x0, 0xf}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xc06}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x3b1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x448d0}, 0x20000000) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380), 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={0x0, 0xae43}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 2.100479608s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x0, 0x300) creat(0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r2, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x19}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xabf0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x400) socket$inet_udplite(0x2, 0x2, 0x88) accept(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfea7) socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x50, r3, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01080000c582b61bdd04878800080103"], 0x2c}}, 0x0) 1.932534607s ago: executing program 4: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r1 = syz_io_uring_setup(0x516e, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) inotify_rm_watch(r4, 0x0) 1.754549209s ago: executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) syslog(0x0, 0xfffffffffffffffd, 0x32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) 1.741418134s ago: executing program 4: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904340102d469e70009058a", @ANYRES8], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r6, &(0x7f00000003c0)="240000001e005f0214ffffff01fffff907000000b800000000000801080408001d0000008035c841ee9d33ecdba539cced7feafb04bf22eb1e79062ee29597f62f0aa45ba350d8cd0ff70e575c683039340f39bddf13405727c55f7448261be73800b0a40ce582fd96320c7ae76d5489f33a3d2fc3a7a5d24c9cf2144399566c38b829890e8520314d13b075b116a1caa886e40ae1dee064e3eaf5bf2d058b23e413e33855803ec528d539de2748104c208814efc93200ce79bd606f9cd4f09608d6", 0xc2) 1.436606517s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000880)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.293262045s ago: executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000002c0)) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(0x0) inotify_init1(0x0) setpgid(0x0, 0x0) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000080)=@hat={'permhat ', 0x1, 0x5e, ['\x00', '^\x00', '%*-,]-!+\x00']}, 0x27) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/424]}, 0x220) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'SET\x00'}]}, 0x2c}}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r7, 0x8004f50e, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 1.282933043s ago: executing program 2: syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000004c0008804800028024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200009801c000080060001000a00000008000200e0000001050103000000000014000200776730000000000000000000000000009459cb62bf3a58a646f4d14a421f033dd014cdd91febfd1f"], 0x74}, 0x1, 0x600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xb, 0x2, 0x4) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) read$FUSE(r0, &(0x7f0000005540)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000003500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000640)={0x78, 0x0, 0x0, {0x3, 0x800, 0x0, {0x0, 0x80000000, 0x0, 0x0, 0x13d, 0x40, 0x7, 0x81, 0x4, 0x8000, 0x4, 0x0, r5, 0x8}}}, 0x78) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r6 = io_uring_setup(0x79bf, &(0x7f0000000180)) close_range(r6, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000001480)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}, {}], 0x3) 977.834219ms ago: executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x4, 0x240) ioctl$SNDRV_PCM_IOCTL_DELAY(r1, 0x80084121, &(0x7f0000000300)) r2 = socket$kcm(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r2, 0x5, 0x8, 0x97c0}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x22010406, &(0x7f00000002c0)={[{@data_err_abort}, {@noacl}, {@dioread_lock}, {@noinit_itable}, {@user_xattr}, {@grpjquota, 0x2e}, {@errors_continue}, {@errors_remount}, {@nodiscard}, {@nolazytime}], [], 0x2c}, 0x84, 0x4c7, &(0x7f0000000f00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069112800000000008510000002000000850000000500000095000000000004009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, &(0x7f0000000080)="bde7df240d4c99a0fb3469d03ad8ce2f"}, 0x50) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0xfc, 0x15f, &(0x7f0000000c40)="$eJzs0E1rE1EUxvH/nbl5ARNUVAguTHZGg5AXdCchIwYDxgFFEFeBOMHAhIgBdWlw6yLQbRZ92ZZ+haTtorQkm36KbrIrdDnlziQM7Wc4v92cM/c55963r5dFRezNcPDjpzcaed8KH91289PFbNYw9SSQvtGP/p834DuauYbVGEz5OAu9vu9Z3aFvvlcNSAHOnXWdwd3NvAQw1lAhsDe1oxT0tG+tR0a1R/AF36uFJ+CxBscs3ve9MrDYgacEOPejGRXgErBBKbN8kIqCWqX8AwV/pqWD/bMPi9PWi+d173+1OXmWydklYBdHpU+s+EmWi/Z7t+0ua9Xqq3S5YiVfnptA/k7Q7zK/4KsCbfIswrwkuSf6M/xTsBXOWh2qrLnE9pU7iPaom4DfdgFUftrt5BJ7nYf3LOyiNt2AW8xNw078IkIIIYQQQgghhBBCCCGEEEIIIUTsOgAA//9mjEyN") syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f00000000c0)={[{@gid}, {@discard}, {@umask={'umask', 0x3d, 0x4ee5}}, {@discard}, {@namecase}, {@fmask={'fmask', 0x3d, 0x2}}, {}, {@allow_utime={'allow_utime', 0x3d, 0x12}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x3, 0x1507, &(0x7f0000000440)="$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") memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 6047eb9c [ 406.107043][ C0] RDX: 000000000000006c RSI: 00007faa610e4670 RDI: 0000000000000003 [ 406.115066][ C0] RBP: 0000000000000000 R08: 00007fff785bf8b4 R09: 000000000000000c [ 406.123069][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 406.131063][ C0] R13: 0000000000000000 R14: 00007faa610e4670 R15: 0000000000000000 [ 406.139074][ C0] [ 406.142117][ C0] DEBUG: waiting rtnl_mutex for 2208 jiffies. [ 406.148179][ C0] task:kworker/0:0 state:D stack:23320 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 406.158391][ C0] Workqueue: events linkwatch_event [ 406.163620][ C0] Call Trace: [ 406.166895][ C0] [ 406.169826][ C0] __schedule+0x17e8/0x4a20 [ 406.174380][ C0] ? __pfx___schedule+0x10/0x10 [ 406.179235][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 406.185286][ C0] ? __pfx_lock_release+0x10/0x10 [ 406.190337][ C0] ? kick_pool+0x45c/0x620 [ 406.194781][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 406.200156][ C0] ? schedule+0x90/0x320 [ 406.204437][ C0] schedule+0x14b/0x320 [ 406.208621][ C0] schedule_preempt_disabled+0x13/0x30 [ 406.214117][ C0] __mutex_lock+0x6a4/0xd70 [ 406.218661][ C0] ? __mutex_lock+0x527/0xd70 [ 406.223401][ C0] ? linkwatch_event+0xe/0x60 [ 406.228101][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 406.233165][ C0] ? process_scheduled_works+0x945/0x1830 [ 406.238885][ C0] ? rtnl_lock+0xe7/0x130 [ 406.243408][ C0] ? process_scheduled_works+0x945/0x1830 [ 406.249967][ C0] linkwatch_event+0xe/0x60 [ 406.255349][ C0] process_scheduled_works+0xa2c/0x1830 [ 406.263226][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 406.270998][ C0] ? assign_work+0x364/0x3d0 [ 406.275705][ C0] worker_thread+0x86d/0xd50 [ 406.280330][ C0] ? __kthread_parkme+0x169/0x1d0 [ 406.285426][ C0] ? __pfx_worker_thread+0x10/0x10 [ 406.290548][ C0] kthread+0x2f0/0x390 [ 406.295922][ C0] ? __pfx_worker_thread+0x10/0x10 [ 406.301556][ C0] ? __pfx_kthread+0x10/0x10 [ 406.306663][ C0] ret_from_fork+0x4b/0x80 [ 406.311117][ C0] ? __pfx_kthread+0x10/0x10 [ 406.315810][ C0] ret_from_fork_asm+0x1a/0x30 [ 406.320631][ C0] [ 406.323707][ C0] DEBUG: waiting rtnl_mutex for 2192 jiffies. [ 406.329776][ C0] task:syz-executor.0 state:D stack:26960 pid:8764 tgid:8762 ppid:8219 flags:0x00004006 [ 406.340634][ C0] Call Trace: [ 406.344968][ C0] [ 406.348488][ C0] __schedule+0x17e8/0x4a20 [ 406.353529][ C0] ? __pfx___schedule+0x10/0x10 [ 406.359440][ C0] ? __pfx_lock_release+0x10/0x10 [ 406.364556][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 406.370370][ C0] ? schedule+0x90/0x320 [ 406.374707][ C0] schedule+0x14b/0x320 [ 406.380334][ C0] schedule_preempt_disabled+0x13/0x30 [ 406.386223][ C0] __mutex_lock+0x6a4/0xd70 [ 406.390841][ C0] ? __mutex_lock+0x527/0xd70 [ 406.395695][ C0] ? dev_ethtool+0x21e/0x1bc0 [ 406.400396][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 406.405506][ C0] ? rtnl_lock+0xe7/0x130 [ 406.409883][ C0] dev_ethtool+0x21e/0x1bc0 [ 406.414432][ C0] ? dev_load+0x21/0x1f0 [ 406.418691][ C0] ? __pfx_dev_ethtool+0x10/0x10 [ 406.423692][ C0] ? dev_load+0x21/0x1f0 [ 406.427944][ C0] dev_ioctl+0x785/0x1340 [ 406.432397][ C0] sock_do_ioctl+0x240/0x460 [ 406.437026][ C0] ? __pfx_sock_do_ioctl+0x10/0x10 [ 406.442189][ C0] sock_ioctl+0x629/0x8e0 [ 406.446532][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 406.451456][ C0] ? __fget_files+0x29/0x470 [ 406.456070][ C0] ? __fget_files+0x3f6/0x470 [ 406.460745][ C0] ? __fget_files+0x29/0x470 [ 406.465392][ C0] ? bpf_lsm_file_ioctl+0x9/0x10 [ 406.470347][ C0] ? security_file_ioctl+0x87/0xb0 [ 406.475502][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 406.480363][ C0] __se_sys_ioctl+0xfc/0x170 [ 406.484993][ C0] do_syscall_64+0xf3/0x230 [ 406.489516][ C0] ? clear_bhb_loop+0x35/0x90 [ 406.494224][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.500132][ C0] RIP: 0033:0x7f5d4867cea9 [ 406.504570][ C0] RSP: 002b:00007f5d4949e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.513007][ C0] RAX: ffffffffffffffda RBX: 00007f5d487b4050 RCX: 00007f5d4867cea9 [ 406.520981][ C0] RDX: 0000000020000100 RSI: 0000000000008946 RDI: 0000000000000006 [ 406.528985][ C0] RBP: 00007f5d486ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 406.537011][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.545019][ C0] R13: 000000000000006e R14: 00007f5d487b4050 R15: 00007fffa8362378 [ 406.553032][ C0] [ 406.556052][ C0] DEBUG: waiting rtnl_mutex for 2206 jiffies. [ 406.562156][ C0] task:syz-executor.0 state:D stack:24944 pid:8765 tgid:8762 ppid:8219 flags:0x00004006 [ 406.572368][ C0] Call Trace: [ 406.575648][ C0] [ 406.578583][ C0] __schedule+0x17e8/0x4a20 [ 406.583139][ C0] ? __pfx___schedule+0x10/0x10 [ 406.588048][ C0] ? __pfx_lock_release+0x10/0x10 [ 406.593106][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 406.598794][ C0] ? schedule+0x90/0x320 [ 406.603072][ C0] schedule+0x14b/0x320 [ 406.607240][ C0] schedule_preempt_disabled+0x13/0x30 [ 406.612734][ C0] __mutex_lock+0x6a4/0xd70 [ 406.617257][ C0] ? __mutex_lock+0x527/0xd70 [ 406.622003][ C0] ? vlan_ioctl_handler+0x112/0x9d0 [ 406.627206][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 406.632270][ C0] ? rtnl_lock+0xe7/0x130 [ 406.636607][ C0] vlan_ioctl_handler+0x112/0x9d0 [ 406.641679][ C0] ? sock_ioctl+0x664/0x8e0 [ 406.646212][ C0] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 406.651792][ C0] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 406.657361][ C0] sock_ioctl+0x683/0x8e0 [ 406.661726][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 406.666585][ C0] ? __fget_files+0x29/0x470 [ 406.671182][ C0] ? __fget_files+0x3f6/0x470 [ 406.675884][ C0] ? __fget_files+0x29/0x470 [ 406.680499][ C0] ? bpf_lsm_file_ioctl+0x9/0x10 [ 406.685470][ C0] ? security_file_ioctl+0x87/0xb0 [ 406.690613][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 406.695535][ C0] __se_sys_ioctl+0xfc/0x170 [ 406.700188][ C0] do_syscall_64+0xf3/0x230 [ 406.704734][ C0] ? clear_bhb_loop+0x35/0x90 [ 406.709427][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.715364][ C0] RIP: 0033:0x7f5d4867cea9 [ 406.719784][ C0] RSP: 002b:00007f5d4947d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.728322][ C0] RAX: ffffffffffffffda RBX: 00007f5d487b4120 RCX: 00007f5d4867cea9 [ 406.736333][ C0] RDX: 0000000020000180 RSI: 0000000000008982 RDI: 0000000000000006 [ 406.744342][ C0] RBP: 00007f5d486ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 406.752344][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.760319][ C0] R13: 000000000000006e R14: 00007f5d487b4120 R15: 00007fffa8362378 [ 406.768336][ C0] [ 406.771358][ C0] DEBUG: waiting rtnl_mutex for 2172 jiffies. [ 406.777443][ C0] task:syz-executor.0 state:D stack:26800 pid:8770 tgid:8762 ppid:8219 flags:0x00000006 [ 406.787690][ C0] Call Trace: [ 406.791065][ C0] [ 406.794057][ C0] __schedule+0x17e8/0x4a20 [ 406.798589][ C0] ? __pfx___schedule+0x10/0x10 [ 406.803481][ C0] ? __pfx_lock_release+0x10/0x10 [ 406.808516][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 406.814022][ C0] ? schedule+0x90/0x320 [ 406.818275][ C0] schedule+0x14b/0x320 [ 406.822483][ C0] schedule_preempt_disabled+0x13/0x30 [ 406.827951][ C0] __mutex_lock+0x6a4/0xd70 [ 406.832518][ C0] ? __mutex_lock+0x527/0xd70 [ 406.837208][ C0] ? rtnetlink_rcv_msg+0x839/0x1170 [ 406.842444][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 406.847486][ C0] ? rtnl_lock+0xe7/0x130 [ 406.851840][ C0] rtnetlink_rcv_msg+0x839/0x1170 [ 406.856874][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 406.862109][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.867579][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 406.873590][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 406.879943][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 406.885348][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 406.890555][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 406.895953][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 406.901265][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 406.907025][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 406.913117][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 406.918259][ C0] ? __dev_queue_xmit+0x16c9/0x3d30 [ 406.923525][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 406.928682][ C0] ? ref_tracker_free+0x643/0x7e0 [ 406.933802][ C0] netlink_rcv_skb+0x1e3/0x430 [ 406.938580][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.944079][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.949403][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 406.954693][ C0] netlink_unicast+0x7ea/0x980 [ 406.959514][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 406.964833][ C0] ? __virt_addr_valid+0x183/0x520 [ 406.969955][ C0] ? __check_object_size+0x49c/0x900 [ 406.975295][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 406.980426][ C0] netlink_sendmsg+0x8db/0xcb0 [ 406.985321][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.990628][ C0] ? __import_iovec+0x536/0x820 [ 406.995514][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 407.000468][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 407.005783][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 407.011260][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.016597][ C0] __sock_sendmsg+0x221/0x270 [ 407.021289][ C0] ____sys_sendmsg+0x525/0x7d0 [ 407.026101][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.031475][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 407.036116][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 407.041366][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 407.047748][ C0] ? do_syscall_64+0x100/0x230 [ 407.052551][ C0] ? do_syscall_64+0xb6/0x230 [ 407.057229][ C0] do_syscall_64+0xf3/0x230 [ 407.061805][ C0] ? clear_bhb_loop+0x35/0x90 [ 407.066509][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.072430][ C0] RIP: 0033:0x7f5d4867cea9 [ 407.076846][ C0] RSP: 002b:00007f5d4943b0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.085293][ C0] RAX: ffffffffffffffda RBX: 00007f5d487b42c0 RCX: 00007f5d4867cea9 [ 407.093303][ C0] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000008 [ 407.101274][ C0] RBP: 00007f5d486ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 407.109273][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.117269][ C0] R13: 000000000000006e R14: 00007f5d487b42c0 R15: 00007fffa8362378 [ 407.125301][ C0] [ 407.128321][ C0] DEBUG: waiting rtnl_mutex for 550 jiffies. [ 407.134419][ C0] task:kworker/u8:7 state:D stack:20880 pid:2826 tgid:2826 ppid:2 flags:0x00004000 [ 407.144618][ C0] Workqueue: ipv6_addrconf addrconf_verify_work [ 407.150868][ C0] Call Trace: [ 407.154172][ C0] [ 407.157124][ C0] __schedule+0x17e8/0x4a20 [ 407.161685][ C0] ? __pfx___schedule+0x10/0x10 [ 407.166544][ C0] ? __pfx_lock_release+0x10/0x10 [ 407.171599][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 407.177067][ C0] ? kthread_data+0x52/0xd0 [ 407.181597][ C0] ? schedule+0x90/0x320 [ 407.185846][ C0] ? wq_worker_sleeping+0x66/0x240 [ 407.190964][ C0] ? schedule+0x90/0x320 [ 407.195240][ C0] schedule+0x14b/0x320 [ 407.199405][ C0] schedule_preempt_disabled+0x13/0x30 [ 407.204896][ C0] __mutex_lock+0x6a4/0xd70 [ 407.209429][ C0] ? __mutex_lock+0x527/0xd70 [ 407.214139][ C0] ? addrconf_verify_work+0x19/0x30 [ 407.219340][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 407.224405][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 407.230416][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 407.236778][ C0] ? process_scheduled_works+0x945/0x1830 [ 407.242577][ C0] ? rtnl_lock+0xe7/0x130 [ 407.246913][ C0] ? process_scheduled_works+0x945/0x1830 [ 407.252656][ C0] addrconf_verify_work+0x19/0x30 [ 407.257682][ C0] process_scheduled_works+0xa2c/0x1830 [ 407.263279][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 407.269269][ C0] ? assign_work+0x364/0x3d0 [ 407.273897][ C0] worker_thread+0x86d/0xd50 [ 407.278506][ C0] ? __kthread_parkme+0x169/0x1d0 [ 407.283574][ C0] ? __pfx_worker_thread+0x10/0x10 [ 407.288690][ C0] kthread+0x2f0/0x390 [ 407.292793][ C0] ? __pfx_worker_thread+0x10/0x10 [ 407.297910][ C0] ? __pfx_kthread+0x10/0x10 [ 407.302546][ C0] ret_from_fork+0x4b/0x80 [ 407.306972][ C0] ? __pfx_kthread+0x10/0x10 [ 407.311790][ C0] ret_from_fork_asm+0x1a/0x30 [ 407.316596][ C0] [ 407.319617][ C0] [ 407.319617][ C0] Showing all locks held in the system: [ 407.327358][ C0] 3 locks held by kworker/0:0/8: [ 407.332319][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 407.343338][ C0] #1: ffffc900000d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 407.354369][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 407.363377][ C0] 2 locks held by kworker/1:2/59: [ 407.368414][ C0] 3 locks held by kworker/u8:7/2826: [ 407.373732][ C0] #0: ffff88802a0bf148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 407.385353][ C0] #1: ffffc90009c57d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 407.399158][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 407.408689][ C0] 4 locks held by kworker/u8:9/2919: [ 407.413991][ C0] 3 locks held by kworker/u8:10/2930: [ 407.419360][ C0] 2 locks held by getty/4849: [ 407.424055][ C0] #0: ffff88802aeb10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 407.433858][ C0] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 407.444356][ C0] 3 locks held by kworker/u9:4/5122: [ 407.449659][ C0] #0: ffff8880244e4148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 407.460544][ C0] #1: ffffc9000384fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 407.473132][ C0] #2: ffff88802bf74d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 407.483011][ C0] 6 locks held by kworker/0:4/5170: [ 407.488655][ C0] #0: ffff888018692548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 407.500327][ C0] #1: ffffc900041bfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 407.513812][ C0] #2: ffff888023c2e190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 407.522755][ C0] #3: ffff888023d38518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b6/0x5150 [ 407.532732][ C0] #4: ffff888022f04368 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f4/0x5150 [ 407.542827][ C0] #5: ffffffff8ef26410 (ehci_cf_port_reset_rwsem){.+.+}-{3:3}, at: hub_port_reset+0x1f8/0x1b30 [ 407.554021][ C0] 5 locks held by syz-executor.0/7896: [ 407.560220][ C0] #0: ffff88805410e420 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 407.570280][ C0] #1: ffff88807ab486c0 (&type->i_mutex_dir_key#21){+.+.}-{3:3}, at: path_openat+0x7d3/0x3280 [ 407.580656][ C0] #2: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 407.590901][ C0] #3: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 407.600707][ C0] #4: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 407.610595][ C0] 2 locks held by syz-executor.0/7914: [ 407.616183][ C0] #0: ffff88805410e420 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 407.625599][ C0] #1: ffff88807ab486c0 (&type->i_mutex_dir_key#20/1){+.+.}-{3:3}, at: do_renameat2+0x62c/0x13f0 [ 407.637454][ C0] 1 lock held by syz-executor.1/8626: [ 407.643261][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 407.653688][ C0] 1 lock held by syz-executor.0/8764: [ 407.659356][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x21e/0x1bc0 [ 407.668407][ C0] 2 locks held by syz-executor.0/8765: [ 407.673890][ C0] #0: ffffffff8f5d46a8 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x664/0x8e0 [ 407.683708][ C0] #1: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 407.693358][ C0] 1 lock held by syz-executor.0/8766: [ 407.698744][ C0] #0: ffffffff8f5d46a8 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x664/0x8e0 [ 407.708105][ C0] 1 lock held by syz-executor.0/8770: [ 407.713493][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 407.723023][ C0] 3 locks held by syz-executor.3/8860: [ 407.728564][ C0] #0: ffffffff8f655cd0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 407.736803][ C0] #1: ffffffff8f655b88 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 407.745827][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_apply_custom_regulatory+0x2c6/0x3d0 [ 407.756417][ C0] 1 lock held by syz-executor.4/8867: [ 407.761850][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x86e/0x1340 [ 407.770660][ C0] 1 lock held by syz-executor.4/8873: [ 407.776052][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 407.785602][ C0] 1 lock held by syz-executor.2/8868: [ 407.790991][ C0] #0: ffff888068739498 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x17c/0x3d0 [ 407.800459][ C0] 1 lock held by syz-executor.2/8869: [ 407.805957][ C0] [ 407.808304][ C0] ============================================= [ 407.808304][ C0] [ 407.821253][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 408.851979][ C0] DEBUG: holding rtnl_mutex for 2595 jiffies. [ 408.858600][ C0] task:kworker/u8:9 state:R running task stack:19856 pid:2919 tgid:2919 ppid:2 flags:0x00004000 [ 408.874525][ C0] Workqueue: netns cleanup_net [ 408.879799][ C0] Call Trace: [ 408.883193][ C0] [ 408.886195][ C0] __schedule+0x17e8/0x4a20 [ 408.890770][ C0] ? stack_depot_save_flags+0x29/0x830 [ 408.896376][ C0] ? __pfx___schedule+0x10/0x10 [ 408.901319][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 408.907442][ C0] ? unregister_netdevice_many_notify+0x977/0x16b0 [ 408.914068][ C0] ? default_device_exit_batch+0xa0f/0xa90 [ 408.919948][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 408.925357][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 408.930538][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 408.936397][ C0] irqentry_exit+0x5e/0x90 [ 408.940896][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 408.946992][ C0] RIP: 0010:synchronize_rcu+0x0/0x360 [ 408.952485][ C0] Code: e1 07 80 c1 03 38 c1 0f 8c 97 fe ff ff 4c 89 f7 e8 05 b8 7f 00 e9 8a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 408.972210][ C0] RSP: 0018:ffffc9000a337678 EFLAGS: 00000206 [ 408.978336][ C0] RAX: dffffc0000000000 RBX: 1ffff92001466ed8 RCX: ffffffff947c3803 [ 408.986424][ C0] RDX: 0000000000000001 RSI: ffffffff8bcace80 RDI: ffffffff8c200760 [ 408.994497][ C0] RBP: ffffc9000a337758 R08: ffffffff947b0f37 R09: 1ffffffff28f61e6 [ 409.002575][ C0] R10: dffffc0000000000 R11: fffffbfff28f61e7 R12: ffffffff947aedf8 [ 409.010602][ C0] R13: 1ffff92001466ed4 R14: 0000000000000a06 R15: ffffc9000a3376c0 [ 409.018689][ C0] lockdep_unregister_key+0x4b7/0x540 [ 409.024177][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 409.030135][ C0] ? rcu_is_watching+0x15/0xb0 [ 409.034997][ C0] ? qdisc_reset+0x3bb/0x5a0 [ 409.039637][ C0] __qdisc_destroy+0x165/0x410 [ 409.044548][ C0] dev_shutdown+0x9b/0x440 [ 409.049035][ C0] unregister_netdevice_many_notify+0x977/0x16b0 [ 409.055501][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 409.062376][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 409.068321][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 409.074672][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 409.080887][ C0] default_device_exit_batch+0xa0f/0xa90 [ 409.086636][ C0] ? __pfx___might_resched+0x10/0x10 [ 409.092004][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 409.098477][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 409.103865][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 409.110078][ C0] cleanup_net+0x89d/0xcc0 [ 409.114596][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 409.119592][ C0] ? process_scheduled_works+0x945/0x1830 [ 409.125406][ C0] process_scheduled_works+0xa2c/0x1830 [ 409.131031][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 409.137094][ C0] ? assign_work+0x364/0x3d0 [ 409.141793][ C0] worker_thread+0x86d/0xd50 [ 409.146461][ C0] ? __kthread_parkme+0x169/0x1d0 [ 409.151585][ C0] ? __pfx_worker_thread+0x10/0x10 [ 409.156737][ C0] kthread+0x2f0/0x390 [ 409.160854][ C0] ? __pfx_worker_thread+0x10/0x10 [ 409.166155][ C0] ? __pfx_kthread+0x10/0x10 [ 409.170796][ C0] ret_from_fork+0x4b/0x80 [ 409.175327][ C0] ? __pfx_kthread+0x10/0x10 [ 409.179977][ C0] ret_from_fork_asm+0x1a/0x30 [ 409.184862][ C0] [ 409.187912][ C0] DEBUG: waiting rtnl_mutex for 2627 jiffies. [ 409.194051][ C0] task:syz-executor.1 state:D stack:21024 pid:8626 tgid:8626 ppid:8596 flags:0x00000002 [ 409.204327][ C0] Call Trace: [ 409.207656][ C0] [ 409.210640][ C0] __schedule+0x17e8/0x4a20 [ 409.215283][ C0] ? __pfx___schedule+0x10/0x10 [ 409.220209][ C0] ? __pfx_lock_release+0x10/0x10 [ 409.225405][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 409.230933][ C0] ? schedule+0x90/0x320 [ 409.235289][ C0] schedule+0x14b/0x320 [ 409.239507][ C0] schedule_preempt_disabled+0x13/0x30 [ 409.245166][ C0] __mutex_lock+0x6a4/0xd70 [ 409.249726][ C0] ? __mutex_lock+0x527/0xd70 [ 409.254502][ C0] ? rtnetlink_rcv_msg+0x839/0x1170 [ 409.259755][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 409.264896][ C0] ? rtnl_lock+0xe7/0x130 [ 409.269272][ C0] rtnetlink_rcv_msg+0x839/0x1170 [ 409.274418][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 409.279666][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.285230][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 409.290614][ C0] ? __pfx_validate_chain+0x10/0x10 [ 409.295908][ C0] ? __pfx_validate_chain+0x10/0x10 [ 409.301156][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 409.306186][ C0] ? mark_lock+0x9a/0x360 [ 409.310577][ C0] ? __pfx_validate_chain+0x10/0x10 [ 409.315881][ C0] ? __lock_acquire+0x1359/0x2000 [ 409.320971][ C0] ? mark_lock+0x9a/0x360 [ 409.325404][ C0] ? __lock_acquire+0x1359/0x2000 [ 409.330500][ C0] netlink_rcv_skb+0x1e3/0x430 [ 409.335389][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.340909][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.346329][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.351632][ C0] netlink_unicast+0x7ea/0x980 [ 409.356466][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 409.361840][ C0] ? __virt_addr_valid+0x183/0x520 [ 409.366997][ C0] ? __check_object_size+0x49c/0x900 [ 409.372375][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 409.377537][ C0] netlink_sendmsg+0x8db/0xcb0 [ 409.382412][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.387762][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 409.392795][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 409.398122][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 409.403680][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.409020][ C0] __sock_sendmsg+0x221/0x270 [ 409.413803][ C0] __sys_sendto+0x3a4/0x4f0 [ 409.418367][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 409.423527][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 409.429563][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 409.436083][ C0] __x64_sys_sendto+0xde/0x100 [ 409.440905][ C0] do_syscall_64+0xf3/0x230 [ 409.445505][ C0] ? clear_bhb_loop+0x35/0x90 [ 409.450229][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.456203][ C0] RIP: 0033:0x7faa6047eb9c [ 409.460738][ C0] RSP: 002b:00007fff785bf860 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 409.469245][ C0] RAX: ffffffffffffffda RBX: 00007faa610e4620 RCX: 00007faa6047eb9c [ 409.477303][ C0] RDX: 000000000000006c RSI: 00007faa610e4670 RDI: 0000000000000003 [ 409.485375][ C0] RBP: 0000000000000000 R08: 00007fff785bf8b4 R09: 000000000000000c [ 409.493443][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 409.501496][ C0] R13: 0000000000000000 R14: 00007faa610e4670 R15: 0000000000000000 [ 409.509528][ C0] [ 409.512628][ C0] DEBUG: waiting rtnl_mutex for 2545 jiffies. [ 409.518732][ C0] task:kworker/0:0 state:D stack:23320 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 409.529028][ C0] Workqueue: events linkwatch_event [ 409.534318][ C0] Call Trace: [ 409.537634][ C0] [ 409.540601][ C0] __schedule+0x17e8/0x4a20 [ 409.545230][ C0] ? __pfx___schedule+0x10/0x10 [ 409.550137][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 409.556224][ C0] ? __pfx_lock_release+0x10/0x10 [ 409.561306][ C0] ? kick_pool+0x45c/0x620 [ 409.565836][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 409.571257][ C0] ? schedule+0x90/0x320 [ 409.575595][ C0] schedule+0x14b/0x320 [ 409.579804][ C0] schedule_preempt_disabled+0x13/0x30 [ 409.585369][ C0] __mutex_lock+0x6a4/0xd70 [ 409.589927][ C0] ? __mutex_lock+0x527/0xd70 [ 409.594707][ C0] ? linkwatch_event+0xe/0x60 [ 409.599427][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 409.604556][ C0] ? process_scheduled_works+0x945/0x1830 [ 409.610325][ C0] ? rtnl_lock+0xe7/0x130 [ 409.614750][ C0] ? process_scheduled_works+0x945/0x1830 [ 409.620515][ C0] linkwatch_event+0xe/0x60 [ 409.625113][ C0] process_scheduled_works+0xa2c/0x1830 [ 409.630741][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 409.636829][ C0] ? assign_work+0x364/0x3d0 [ 409.641617][ C0] worker_thread+0x86d/0xd50 [ 409.646275][ C0] ? __kthread_parkme+0x169/0x1d0 [ 409.651369][ C0] ? __pfx_worker_thread+0x10/0x10 [ 409.656689][ C0] kthread+0x2f0/0x390 [ 409.660805][ C0] ? __pfx_worker_thread+0x10/0x10 [ 409.666012][ C0] ? __pfx_kthread+0x10/0x10 [ 409.670668][ C0] ret_from_fork+0x4b/0x80 [ 409.675172][ C0] ? __pfx_kthread+0x10/0x10 [ 409.679822][ C0] ret_from_fork_asm+0x1a/0x30 [ 409.684692][ C0] [ 409.687738][ C0] DEBUG: waiting rtnl_mutex for 2528 jiffies. [ 409.693867][ C0] task:syz-executor.0 state:D stack:26960 pid:8764 tgid:8762 ppid:8219 flags:0x00004006 [ 409.704114][ C0] Call Trace: [ 409.707422][ C0] [ 409.710400][ C0] __schedule+0x17e8/0x4a20 [ 409.715021][ C0] ? __pfx___schedule+0x10/0x10 [ 409.719910][ C0] ? __pfx_lock_release+0x10/0x10 [ 409.725023][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 409.730660][ C0] ? schedule+0x90/0x320 [ 409.734992][ C0] schedule+0x14b/0x320 [ 409.739195][ C0] schedule_preempt_disabled+0x13/0x30 [ 409.744732][ C0] __mutex_lock+0x6a4/0xd70 [ 409.749280][ C0] ? __mutex_lock+0x527/0xd70 [ 409.754052][ C0] ? dev_ethtool+0x21e/0x1bc0 [ 409.758765][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 409.763891][ C0] ? rtnl_lock+0xe7/0x130 [ 409.768264][ C0] dev_ethtool+0x21e/0x1bc0 [ 409.772902][ C0] ? dev_load+0x21/0x1f0 [ 409.777187][ C0] ? __pfx_dev_ethtool+0x10/0x10 [ 409.782236][ C0] ? dev_load+0x21/0x1f0 [ 409.786541][ C0] dev_ioctl+0x785/0x1340 [ 409.790934][ C0] sock_do_ioctl+0x240/0x460 [ 409.795645][ C0] ? __pfx_sock_do_ioctl+0x10/0x10 [ 409.800838][ C0] sock_ioctl+0x629/0x8e0 [ 409.805286][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 409.810202][ C0] ? __fget_files+0x29/0x470 [ 409.814904][ C0] ? __fget_files+0x3f6/0x470 [ 409.819631][ C0] ? __fget_files+0x29/0x470 [ 409.824331][ C0] ? bpf_lsm_file_ioctl+0x9/0x10 [ 409.829315][ C0] ? security_file_ioctl+0x87/0xb0 [ 409.834521][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 409.839419][ C0] __se_sys_ioctl+0xfc/0x170 [ 409.844117][ C0] do_syscall_64+0xf3/0x230 [ 409.848664][ C0] ? clear_bhb_loop+0x35/0x90 [ 409.853442][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.859385][ C0] RIP: 0033:0x7f5d4867cea9 [ 409.863887][ C0] RSP: 002b:00007f5d4949e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.872408][ C0] RAX: ffffffffffffffda RBX: 00007f5d487b4050 RCX: 00007f5d4867cea9 [ 409.880425][ C0] RDX: 0000000020000100 RSI: 0000000000008946 RDI: 0000000000000006 [ 409.888567][ C0] RBP: 00007f5d486ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 409.896619][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.904684][ C0] R13: 000000000000006e R14: 00007f5d487b4050 R15: 00007fffa8362378 [ 409.912771][ C0] [ 409.915826][ C0] DEBUG: waiting rtnl_mutex for 2542 jiffies. [ 409.921976][ C0] task:syz-executor.0 state:D stack:24944 pid:8765 tgid:8762 ppid:8219 flags:0x00004006 [ 409.932248][ C0] Call Trace: [ 409.935554][ C0] [ 409.938521][ C0] __schedule+0x17e8/0x4a20 [ 409.943148][ C0] ? __pfx___schedule+0x10/0x10 [ 409.948045][ C0] ? __pfx_lock_release+0x10/0x10 [ 409.953257][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 409.958868][ C0] ? schedule+0x90/0x320 [ 409.963208][ C0] schedule+0x14b/0x320 [ 409.967409][ C0] schedule_preempt_disabled+0x13/0x30 [ 409.972964][ C0] __mutex_lock+0x6a4/0xd70 [ 409.977534][ C0] ? __mutex_lock+0x527/0xd70 [ 409.982310][ C0] ? vlan_ioctl_handler+0x112/0x9d0 [ 409.987560][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 409.992701][ C0] ? rtnl_lock+0xe7/0x130 [ 409.997088][ C0] vlan_ioctl_handler+0x112/0x9d0 [ 410.002203][ C0] ? sock_ioctl+0x664/0x8e0 [ 410.006760][ C0] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 410.012431][ C0] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 410.018024][ C0] sock_ioctl+0x683/0x8e0 [ 410.022467][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 410.027385][ C0] ? __fget_files+0x29/0x470 [ 410.032079][ C0] ? __fget_files+0x3f6/0x470 [ 410.036798][ C0] ? __fget_files+0x29/0x470 [ 410.041502][ C0] ? bpf_lsm_file_ioctl+0x9/0x10 [ 410.046493][ C0] ? security_file_ioctl+0x87/0xb0 [ 410.051710][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 410.056619][ C0] __se_sys_ioctl+0xfc/0x170 [ 410.061263][ C0] do_syscall_64+0xf3/0x230 [ 410.065870][ C0] ? clear_bhb_loop+0x35/0x90 [ 410.070597][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.076611][ C0] RIP: 0033:0x7f5d4867cea9 [ 410.081069][ C0] RSP: 002b:00007f5d4947d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.089586][ C0] RAX: ffffffffffffffda RBX: 00007f5d487b4120 RCX: 00007f5d4867cea9 [ 410.097688][ C0] RDX: 0000000020000180 RSI: 0000000000008982 RDI: 0000000000000006 [ 410.105758][ C0] RBP: 00007f5d486ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 410.113811][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.121849][ C0] R13: 000000000000006e R14: 00007f5d487b4120 R15: 00007fffa8362378 [ 410.129868][ C0] [ 410.132953][ C0] DEBUG: waiting rtnl_mutex for 2509 jiffies. [ 410.139045][ C0] task:syz-executor.0 state:D stack:26800 pid:8770 tgid:8762 ppid:8219 flags:0x00000006 [ 410.149322][ C0] Call Trace: [ 410.152661][ C0] [ 410.155625][ C0] __schedule+0x17e8/0x4a20 [ 410.160197][ C0] ? __pfx___schedule+0x10/0x10 [ 410.165165][ C0] ? __pfx_lock_release+0x10/0x10 [ 410.170263][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 410.175831][ C0] ? schedule+0x90/0x320 [ 410.180115][ C0] schedule+0x14b/0x320 [ 410.184351][ C0] schedule_preempt_disabled+0x13/0x30 [ 410.189849][ C0] __mutex_lock+0x6a4/0xd70 [ 410.194449][ C0] ? __mutex_lock+0x527/0xd70 [ 410.199180][ C0] ? rtnetlink_rcv_msg+0x839/0x1170 [ 410.204480][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 410.209581][ C0] ? rtnl_lock+0xe7/0x130 [ 410.214011][ C0] rtnetlink_rcv_msg+0x839/0x1170 [ 410.219096][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 410.224436][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 410.229970][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 410.236164][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 410.242721][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 410.248159][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 410.253468][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 410.258887][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 410.264270][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 410.269449][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 410.275265][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 410.280430][ C0] ? __dev_queue_xmit+0x16c9/0x3d30 [ 410.285746][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 410.290919][ C0] ? ref_tracker_free+0x643/0x7e0 [ 410.296032][ C0] netlink_rcv_skb+0x1e3/0x430 [ 410.300842][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 410.306405][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.311835][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.317090][ C0] netlink_unicast+0x7ea/0x980 [ 410.321943][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 410.327261][ C0] ? __virt_addr_valid+0x183/0x520 [ 410.332468][ C0] ? __check_object_size+0x49c/0x900 [ 410.337800][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 410.343012][ C0] netlink_sendmsg+0x8db/0xcb0 [ 410.347847][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.353413][ C0] ? __import_iovec+0x536/0x820 [ 410.358503][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 410.364153][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 410.370116][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 410.375729][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.381081][ C0] __sock_sendmsg+0x221/0x270 [ 410.385878][ C0] ____sys_sendmsg+0x525/0x7d0 [ 410.390703][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.396206][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 410.400855][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 410.406143][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 410.412574][ C0] ? do_syscall_64+0x100/0x230 [ 410.417380][ C0] ? do_syscall_64+0xb6/0x230 [ 410.422150][ C0] do_syscall_64+0xf3/0x230 [ 410.426700][ C0] ? clear_bhb_loop+0x35/0x90 [ 410.431467][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.437423][ C0] RIP: 0033:0x7f5d4867cea9 [ 410.442096][ C0] RSP: 002b:00007f5d4943b0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.450554][ C0] RAX: ffffffffffffffda RBX: 00007f5d487b42c0 RCX: 00007f5d4867cea9 [ 410.459093][ C0] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000008 [ 410.469504][ C0] RBP: 00007f5d486ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 410.479476][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.489157][ C0] R13: 000000000000006e R14: 00007f5d487b42c0 R15: 00007fffa8362378 [ 410.497944][ C0] [ 410.501587][ C0] DEBUG: waiting rtnl_mutex for 888 jiffies. [ 410.508578][ C0] task:kworker/u8:7 state:D stack:20880 pid:2826 tgid:2826 ppid:2 flags:0x00004000 [ 410.519500][ C0] Workqueue: ipv6_addrconf addrconf_verify_work [ 410.527375][ C0] Call Trace: [ 410.530871][ C0] [ 410.534249][ C0] __schedule+0x17e8/0x4a20 [ 410.539556][ C0] ? __pfx___schedule+0x10/0x10 [ 410.544549][ C0] ? __pfx_lock_release+0x10/0x10 [ 410.549640][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 410.555223][ C0] ? kthread_data+0x52/0xd0 [ 410.559782][ C0] ? schedule+0x90/0x320 [ 410.564146][ C0] ? wq_worker_sleeping+0x66/0x240 [ 410.569353][ C0] ? schedule+0x90/0x320 [ 410.573696][ C0] schedule+0x14b/0x320 [ 410.577903][ C0] schedule_preempt_disabled+0x13/0x30 [ 410.583456][ C0] __mutex_lock+0x6a4/0xd70 [ 410.588016][ C0] ? __mutex_lock+0x527/0xd70 [ 410.592885][ C0] ? addrconf_verify_work+0x19/0x30 [ 410.598126][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 410.603262][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 410.609469][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 410.615912][ C0] ? process_scheduled_works+0x945/0x1830 [ 410.621845][ C0] ? rtnl_lock+0xe7/0x130 [ 410.626215][ C0] ? process_scheduled_works+0x945/0x1830 [ 410.632034][ C0] addrconf_verify_work+0x19/0x30 [ 410.637120][ C0] process_scheduled_works+0xa2c/0x1830 [ 410.642836][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 410.648880][ C0] ? assign_work+0x364/0x3d0 [ 410.653662][ C0] worker_thread+0x86d/0xd50 [ 410.658327][ C0] ? __kthread_parkme+0x169/0x1d0 [ 410.663445][ C0] ? __pfx_worker_thread+0x10/0x10 [ 410.668599][ C0] kthread+0x2f0/0x390 [ 410.672761][ C0] ? __pfx_worker_thread+0x10/0x10 [ 410.677920][ C0] ? __pfx_kthread+0x10/0x10 [ 410.682606][ C0] ret_from_fork+0x4b/0x80 [ 410.687075][ C0] ? __pfx_kthread+0x10/0x10 [ 410.691751][ C0] ret_from_fork_asm+0x1a/0x30 [ 410.696575][ C0] [ 410.699627][ C0] DEBUG: waiting rtnl_mutex for 816 jiffies. [ 410.705688][ C0] task:syz-executor.3 state:D stack:24696 pid:8860 tgid:8854 ppid:7197 flags:0x00000006 [ 410.715954][ C0] Call Trace: [ 410.719272][ C0] [ 410.722285][ C0] __schedule+0x17e8/0x4a20 [ 410.726859][ C0] ? __pfx___schedule+0x10/0x10 [ 410.731815][ C0] ? __pfx_lock_release+0x10/0x10 [ 410.736891][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 410.742497][ C0] ? schedule+0x90/0x320 [ 410.746788][ C0] schedule+0x14b/0x320 [ 410.751095][ C0] schedule_preempt_disabled+0x13/0x30 [ 410.756690][ C0] __mutex_lock+0x6a4/0xd70 [ 410.761255][ C0] ? __mutex_lock+0x527/0xd70 [ 410.766692][ C0] ? wiphy_apply_custom_regulatory+0x2c6/0x3d0 [ 410.773314][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 410.779473][ C0] ? wiphy_apply_custom_regulatory+0x23c/0x3d0 [ 410.787215][ C0] ? rcu_is_watching+0x15/0xb0 [ 410.792447][ C0] ? rtnl_lock+0xe7/0x130 [ 410.798616][ C0] wiphy_apply_custom_regulatory+0x2c6/0x3d0 [ 410.805614][ C0] mac80211_hwsim_new_radio+0x2420/0x44c0 [ 410.811490][ C0] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 410.817611][ C0] ? rcu_is_watching+0x15/0xb0 [ 410.822533][ C0] ? do_trace_netlink_extack+0x8b/0x1f0 [ 410.829471][ C0] hwsim_new_radio_nl+0xe4c/0x21d0 [ 410.835483][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 410.841272][ C0] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 410.846971][ C0] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 410.853422][ C0] genl_rcv_msg+0xb14/0xec0 [ 410.857986][ C0] ? mark_lock+0x9a/0x360 [ 410.862429][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.867531][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 410.872654][ C0] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 410.878251][ C0] ? __pfx___might_resched+0x10/0x10 [ 410.884262][ C0] netlink_rcv_skb+0x1e3/0x430 [ 410.889086][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.894249][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.899616][ C0] ? __netlink_deliver_tap+0x77e/0x7c0 [ 410.905201][ C0] genl_rcv+0x28/0x40 [ 410.909222][ C0] netlink_unicast+0x7ea/0x980 [ 410.914087][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 410.919409][ C0] ? __virt_addr_valid+0x183/0x520 [ 410.924618][ C0] ? __check_object_size+0x49c/0x900 [ 410.929949][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 410.935175][ C0] netlink_sendmsg+0x8db/0xcb0 [ 410.940072][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.945470][ C0] ? __import_iovec+0x536/0x820 [ 410.950373][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 410.955417][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 410.960755][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 410.966322][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.971710][ C0] __sock_sendmsg+0x221/0x270 [ 410.976528][ C0] ____sys_sendmsg+0x525/0x7d0 [ 410.981347][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.986748][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 410.991395][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 410.996655][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 411.003729][ C0] ? do_syscall_64+0x100/0x230 [ 411.011274][ C0] ? do_syscall_64+0xb6/0x230 [ 411.017239][ C0] do_syscall_64+0xf3/0x230 [ 411.022514][ C0] ? clear_bhb_loop+0x35/0x90 [ 411.027347][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.033375][ C0] RIP: 0033:0x7f60ef47cea9 [ 411.037848][ C0] RSP: 002b:00007f60f01940c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.046388][ C0] RAX: ffffffffffffffda RBX: 00007f60ef5b4120 RCX: 00007f60ef47cea9 [ 411.054477][ C0] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 411.062556][ C0] RBP: 00007f60ef4ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 411.070663][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.078814][ C0] R13: 000000000000006e R14: 00007f60ef5b4120 R15: 00007ffe8875b298 [ 411.087000][ C0] [ 411.090335][ C0] DEBUG: waiting rtnl_mutex for 587 jiffies. [ 411.098872][ C0] task:syz-executor.4 state:D stack:27344 pid:8867 tgid:8866 ppid:6628 flags:0x00000006 [ 411.109705][ C0] Call Trace: [ 411.113076][ C0] [ 411.116058][ C0] __schedule+0x17e8/0x4a20 [ 411.120641][ C0] ? __pfx___schedule+0x10/0x10 [ 411.125606][ C0] ? __pfx_lock_release+0x10/0x10 [ 411.130692][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 411.136287][ C0] ? schedule+0x90/0x320 [ 411.140580][ C0] schedule+0x14b/0x320 [ 411.144839][ C0] schedule_preempt_disabled+0x13/0x30 [ 411.150344][ C0] __mutex_lock+0x6a4/0xd70 [ 411.154936][ C0] ? __mutex_lock+0x527/0xd70 [ 411.159665][ C0] ? dev_ioctl+0x86e/0x1340 [ 411.164282][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 411.170005][ C0] ? rtnl_lock+0xe7/0x130 [ 411.175080][ C0] dev_ioctl+0x86e/0x1340 [ 411.180443][ C0] sock_ioctl+0x7f2/0x8e0 [ 411.185515][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 411.190613][ C0] ? __fget_files+0x3f6/0x470 [ 411.195401][ C0] ? __fget_files+0x29/0x470 [ 411.200050][ C0] ? bpf_lsm_file_ioctl+0x9/0x10 [ 411.205106][ C0] ? security_file_ioctl+0x87/0xb0 [ 411.210274][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 411.215230][ C0] __se_sys_ioctl+0xfc/0x170 [ 411.219891][ C0] do_syscall_64+0xf3/0x230 [ 411.224498][ C0] ? clear_bhb_loop+0x35/0x90 [ 411.229258][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.235266][ C0] RIP: 0033:0x7f6e39c7cea9 [ 411.239734][ C0] RSP: 002b:00007f6e3aa240c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.248236][ C0] RAX: ffffffffffffffda RBX: 00007f6e39db3f80 RCX: 00007f6e39c7cea9 [ 411.256394][ C0] RDX: 0000000020002fc0 RSI: 00000000000089f3 RDI: 0000000000000003 [ 411.264454][ C0] RBP: 00007f6e39cebff4 R08: 0000000000000000 R09: 0000000000000000 [ 411.272538][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.280556][ C0] R13: 000000000000000b R14: 00007f6e39db3f80 R15: 00007ffe5fa9dbc8 [ 411.288673][ C0] [ 411.294300][ C0] DEBUG: waiting rtnl_mutex for 562 jiffies. [ 411.302419][ C0] task:syz-executor.4 state:D stack:25464 pid:8873 tgid:8866 ppid:6628 flags:0x00000006 [ 411.314887][ C0] Call Trace: [ 411.318195][ C0] [ 411.321166][ C0] __schedule+0x17e8/0x4a20 [ 411.325816][ C0] ? __pfx___schedule+0x10/0x10 [ 411.330725][ C0] ? __pfx_lock_release+0x10/0x10 [ 411.335876][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 411.341455][ C0] ? schedule+0x90/0x320 [ 411.345745][ C0] schedule+0x14b/0x320 [ 411.349951][ C0] schedule_preempt_disabled+0x13/0x30 [ 411.355504][ C0] __mutex_lock+0x6a4/0xd70 [ 411.360118][ C0] ? __mutex_lock+0x527/0xd70 [ 411.366675][ C0] ? rtnetlink_rcv_msg+0x839/0x1170 [ 411.372748][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 411.377941][ C0] ? rtnl_lock+0xe7/0x130 [ 411.382385][ C0] rtnetlink_rcv_msg+0x839/0x1170 [ 411.387466][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 411.392761][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 411.398287][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 411.404365][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 411.410790][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 411.416262][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 411.421547][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 411.426973][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 411.432353][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 411.437513][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 411.443342][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 411.448507][ C0] ? __dev_queue_xmit+0x16c9/0x3d30 [ 411.453819][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 411.459003][ C0] ? ref_tracker_free+0x643/0x7e0 [ 411.464132][ C0] netlink_rcv_skb+0x1e3/0x430 [ 411.468949][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 411.474518][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.479880][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.485270][ C0] netlink_unicast+0x7ea/0x980 [ 411.490095][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 411.495507][ C0] ? __virt_addr_valid+0x183/0x520 [ 411.500722][ C0] ? __check_object_size+0x49c/0x900 [ 411.506108][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 411.511283][ C0] netlink_sendmsg+0x8db/0xcb0 [ 411.516255][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.522302][ C0] ? __import_iovec+0x536/0x820 [ 411.527835][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 411.532880][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 411.538219][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 411.543795][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.549249][ C0] __sock_sendmsg+0x221/0x270 [ 411.554048][ C0] ____sys_sendmsg+0x525/0x7d0 [ 411.558924][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.564324][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 411.569049][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 411.574331][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 411.580718][ C0] ? do_syscall_64+0x100/0x230 [ 411.585575][ C0] ? do_syscall_64+0xb6/0x230 [ 411.590554][ C0] do_syscall_64+0xf3/0x230 [ 411.595143][ C0] ? clear_bhb_loop+0x35/0x90 [ 411.599874][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.605854][ C0] RIP: 0033:0x7f6e39c7cea9 [ 411.610310][ C0] RSP: 002b:00007f6e3a9a00c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.619099][ C0] RAX: ffffffffffffffda RBX: 00007f6e39db42c0 RCX: 00007f6e39c7cea9 [ 411.629388][ C0] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000007 [ 411.638190][ C0] RBP: 00007f6e39cebff4 R08: 0000000000000000 R09: 0000000000000000 [ 411.647524][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.656886][ C0] R13: 000000000000006e R14: 00007f6e39db42c0 R15: 00007ffe5fa9dbc8 [ 411.665532][ C0] [ 411.668597][ C0] [ 411.668597][ C0] Showing all locks held in the system: [ 411.676401][ C0] 3 locks held by kworker/0:0/8: [ 411.681375][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 411.692543][ C0] #1: ffffc900000d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 411.703660][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 411.713062][ C0] 3 locks held by kworker/u8:1/12: [ 411.718389][ C0] 3 locks held by kworker/u8:7/2826: [ 411.723956][ C0] #0: ffff88802a0bf148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 411.735703][ C0] #1: ffffc90009c57d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 411.749894][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 411.759534][ C0] 5 locks held by kworker/u8:9/2919: [ 411.764887][ C0] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 411.775900][ C0] #1: ffffc9000a337d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 411.786567][ C0] #2: ffffffff8f5e2c90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 411.796101][ C0] #3: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 411.806264][ C0] #4: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 411.817294][ C0] 2 locks held by getty/4849: [ 411.822049][ C0] #0: ffff88802aeb10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 411.831958][ C0] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 411.842216][ C0] 2 locks held by syz-executor.0/7896: [ 411.847714][ C0] 2 locks held by syz-executor.0/7914: [ 411.853260][ C0] #0: ffff88805410e420 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 411.862633][ C0] #1: ffff88807ab486c0 (&type->i_mutex_dir_key#20/1){+.+.}-{3:3}, at: do_renameat2+0x62c/0x13f0 [ 411.873335][ C0] 1 lock held by syz-executor.1/8626: [ 411.878739][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 411.888377][ C0] 1 lock held by syz-executor.0/8764: [ 411.893818][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x21e/0x1bc0 [ 411.902932][ C0] 2 locks held by syz-executor.0/8765: [ 411.908430][ C0] #0: ffffffff8f5d46a8 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x664/0x8e0 [ 411.918204][ C0] #1: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 411.928795][ C0] 1 lock held by syz-executor.0/8766: [ 411.934379][ C0] #0: ffffffff8f5d46a8 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x664/0x8e0 [ 411.946694][ C0] 1 lock held by syz-executor.0/8770: [ 411.953294][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 411.962935][ C0] 3 locks held by syz-executor.3/8860: [ 411.968438][ C0] #0: ffffffff8f655cd0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 411.976760][ C0] #1: ffffffff8f655b88 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 411.985866][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_apply_custom_regulatory+0x2c6/0x3d0 [ 411.996636][ C0] 1 lock held by syz-executor.4/8867: [ 412.002079][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x86e/0x1340 [ 412.011047][ C0] 1 lock held by syz-executor.4/8873: [ 412.016586][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 412.026220][ C0] 4 locks held by syz-executor.2/8875: [ 412.032029][ C0] #0: ffff88802e11f580 (&u->iolock){+.+.}-{3:3}, at: __unix_dgram_recvmsg+0x246/0x12f0 [ 412.041988][ C0] #1: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 412.052221][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 412.062126][ C0] #3: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 412.072109][ C0] 2 locks held by syz-executor.2/8876: [ 412.077593][ C0] #0: ffffffff8f655cd0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 412.085988][ C0] #1: ffffffff8f655b88 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 412.095081][ C0] [ 412.097435][ C0] ============================================= [ 412.097435][ C0] [ 412.427637][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.451832][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.519699][ T8626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.710917][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.720144][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.761546][ T8626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.013336][ T29] audit: type=1326 audit(1718509645.954:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e39c7cea9 code=0x0 [ 413.269085][ T29] audit: type=1326 audit(1718509646.214:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60ef47cea9 code=0x0 [ 413.431950][ T8626] hsr_slave_0: entered promiscuous mode [ 413.485742][ T8626] hsr_slave_1: entered promiscuous mode [ 413.529685][ T8626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.564083][ T8626] Cannot create hsr debugfs directory [ 414.105613][ T8890] No control pipe specified [ 414.112445][ T8890] ebt_limit: overflow, try lower: 570423552/2483027968 [ 414.350181][ T29] audit: type=1400 audit(1718509647.064:230): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8887 comm="syz-executor.2" [ 414.738937][ T8894] loop3: detected capacity change from 0 to 32768 [ 414.762200][ T8894] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (8894) [ 414.793864][ T8894] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 414.804155][ T8894] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 414.814906][ T8894] BTRFS info (device loop3): using free-space-tree [ 414.940967][ T8895] loop4: detected capacity change from 0 to 2048 [ 415.005199][ T8895] EXT4-fs: Ignoring removed bh option [ 415.033743][ T8895] EXT4-fs: quotafile must be on filesystem root [ 416.084639][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 416.096354][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 416.206384][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 416.222076][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 416.235495][ T5118] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 416.250042][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 416.280175][ T7197] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 416.911604][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 416.927666][ T8927] loop3: detected capacity change from 0 to 512 [ 416.963011][ T8927] ext2: Unknown parameter 'noacl' [ 417.012529][ T2919] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.131711][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 417.156672][ T8928] loop3: detected capacity change from 0 to 16 [ 417.199254][ T8] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 417.213512][ T8928] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 417.233445][ T2919] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.239302][ T8921] loop4: detected capacity change from 0 to 32768 [ 417.250473][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.279166][ T8] usb 3-1: config 0 descriptor?? [ 417.308167][ T8921] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (8921) [ 417.371727][ T8921] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 417.456143][ T8921] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 417.513578][ T8921] BTRFS info (device loop4): using free-space-tree [ 417.559474][ T2919] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.582654][ T8921] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 417.610840][ T8921] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 417.655469][ T8921] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 417.723955][ T8921] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 417.804260][ T8921] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 417.823384][ T2919] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.882517][ T8921] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 417.921982][ T8921] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 417.961022][ T8921] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 417.972049][ T8] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 418.021686][ T8] asix 3-1:0.0: probe with driver asix failed with error -32 [ 418.055386][ T8921] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 418.056271][ T8921] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 418.086030][ T8] usb 3-1: USB disconnect, device number 19 [ 418.089026][ T8921] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 418.126707][ T8921] BTRFS error (device loop4): open_ctree failed [ 418.299403][ T5122] Bluetooth: hci5: command tx timeout [ 418.643202][ T2919] bridge_slave_1: left allmulticast mode [ 418.648977][ T2919] bridge_slave_1: left promiscuous mode [ 418.667848][ T2919] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.703987][ T2919] bridge_slave_0: left allmulticast mode [ 418.731135][ T2919] bridge_slave_0: left promiscuous mode [ 418.753764][ T2919] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.706393][ T8954] sctp: [Deprecated]: syz-executor.2 (pid 8954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.706393][ T8954] Use struct sctp_sack_info instead [ 420.128313][ T8950] loop4: detected capacity change from 0 to 32768 [ 420.172691][ T8950] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 420.278530][ T8950] XFS (loop4): Ending clean mount [ 420.376925][ T5122] Bluetooth: hci5: command tx timeout [ 420.555040][ T6628] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 420.767984][ T2919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.846106][ T2919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.895378][ T2919] bond0 (unregistering): Released all slaves [ 421.263018][ T8919] chnl_net:caif_netlink_parms(): no params data found [ 421.420393][ T29] audit: type=1326 audit(1718509654.354:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e39c7cea9 code=0x0 [ 421.537681][ T8626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 421.664910][ T8626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 421.705304][ T8626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 421.716922][ T8972] loop2: detected capacity change from 0 to 8 [ 422.040068][ T8974] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 422.048451][ T8974] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 422.452001][ T5122] Bluetooth: hci5: command tx timeout [ 422.684120][ T8626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 422.782144][ T8977] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 422.812501][ T8977] batman_adv: batadv0: Adding interface: team0 [ 422.818713][ T8977] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.845309][ T8977] batman_adv: batadv0: Interface activated: team0 [ 423.161950][ T2919] hsr_slave_0: left promiscuous mode [ 423.184191][ T2919] hsr_slave_1: left promiscuous mode [ 423.238592][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.281718][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.332528][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.340017][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.455744][ T2919] veth1_macvtap: left promiscuous mode [ 423.491625][ T2919] veth0_macvtap: left promiscuous mode [ 423.497471][ T2919] veth1_vlan: left promiscuous mode [ 423.541079][ T2919] veth0_vlan: left promiscuous mode [ 423.985771][ T8992] loop3: detected capacity change from 0 to 32768 [ 424.007271][ T8992] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (8992) [ 424.048513][ T8992] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 424.058883][ T8992] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 424.067654][ T8992] BTRFS info (device loop3): using free-space-tree [ 424.532047][ T5122] Bluetooth: hci5: command tx timeout [ 425.612791][ T7197] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 426.639427][ T9015] loop3: detected capacity change from 0 to 128 [ 426.943424][ T9017] loop4: detected capacity change from 0 to 4096 [ 426.960131][ T9017] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 426.960598][ T2919] team0 (unregistering): Port device team_slave_1 removed [ 427.093872][ T2919] team0 (unregistering): Port device team_slave_0 removed [ 427.145232][ T29] audit: type=1800 audit(1718509660.074:232): pid=9017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 427.281617][ T29] audit: type=1804 audit(1718509660.204:233): pid=9017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3209051707/syzkaller.BewzbE/99/file0/bus" dev="loop4" ino=33 res=1 errno=0 [ 427.469698][ T9020] loop3: detected capacity change from 0 to 512 [ 427.502898][ T9020] ext2: Unknown parameter 'noacl' [ 427.804668][ T9024] loop3: detected capacity change from 0 to 16 [ 428.611018][ T9024] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 428.771501][ C0] DEBUG: holding rtnl_mutex for 562 jiffies. [ 428.777577][ C0] task:kworker/u8:9 state:R running task stack:19856 pid:2919 tgid:2919 ppid:2 flags:0x00004000 [ 428.789497][ C0] Workqueue: netns cleanup_net [ 428.794345][ C0] Call Trace: [ 428.797669][ C0] [ 428.800650][ C0] __schedule+0x17e8/0x4a20 [ 428.805374][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 428.811873][ C0] ? __pfx___schedule+0x10/0x10 [ 428.816838][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 428.823129][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 428.828472][ C0] ? __pfx___might_resched+0x10/0x10 [ 428.833871][ C0] lockdep_hardirqs_on_prepare+0x43d/0x780 [ 428.839762][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 428.845949][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 428.852392][ C0] synchronize_rcu+0x11b/0x360 [ 428.857169][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 428.862578][ C0] lockdep_unregister_key+0x4b7/0x540 [ 428.867966][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 428.874050][ C0] ? rcu_is_watching+0x15/0xb0 [ 428.879024][ C0] ? qdisc_reset+0x3bb/0x5a0 [ 428.883686][ C0] __qdisc_destroy+0x165/0x410 [ 428.888463][ C0] dev_shutdown+0x357/0x440 [ 428.893045][ C0] unregister_netdevice_many_notify+0x977/0x16b0 [ 428.899390][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 428.906194][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 428.912121][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 428.918369][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 428.924807][ C0] default_device_exit_batch+0xa0f/0xa90 [ 428.930495][ C0] ? __pfx___might_resched+0x10/0x10 [ 428.935822][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 428.942028][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 428.947328][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 428.953546][ C0] cleanup_net+0x89d/0xcc0 [ 428.957981][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 428.962956][ C0] ? process_scheduled_works+0x945/0x1830 [ 428.968681][ C0] process_scheduled_works+0xa2c/0x1830 [ 428.974283][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 428.980273][ C0] ? assign_work+0x364/0x3d0 [ 428.984915][ C0] worker_thread+0x86d/0xd50 [ 428.989537][ C0] ? __kthread_parkme+0x169/0x1d0 [ 428.994642][ C0] ? __pfx_worker_thread+0x10/0x10 [ 428.999812][ C0] kthread+0x2f0/0x390 [ 429.003986][ C0] ? __pfx_worker_thread+0x10/0x10 [ 429.009103][ C0] ? __pfx_kthread+0x10/0x10 [ 429.013718][ C0] ret_from_fork+0x4b/0x80 [ 429.018197][ C0] ? __pfx_kthread+0x10/0x10 [ 429.022871][ C0] ret_from_fork_asm+0x1a/0x30 [ 429.027716][ C0] [ 429.030762][ C0] DEBUG: waiting rtnl_mutex for 592 jiffies. [ 429.036810][ C0] task:syz-executor.0 state:D stack:21024 pid:8919 tgid:8919 ppid:8886 flags:0x00004002 [ 429.047063][ C0] Call Trace: [ 429.050351][ C0] [ 429.053308][ C0] __schedule+0x17e8/0x4a20 [ 429.057882][ C0] ? __pfx___schedule+0x10/0x10 [ 429.062767][ C0] ? __pfx_lock_release+0x10/0x10 [ 429.067832][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 429.073389][ C0] ? schedule+0x90/0x320 [ 429.077683][ C0] schedule+0x14b/0x320 [ 429.081918][ C0] schedule_preempt_disabled+0x13/0x30 [ 429.087401][ C0] __mutex_lock+0x6a4/0xd70 [ 429.091973][ C0] ? __mutex_lock+0x527/0xd70 [ 429.096659][ C0] ? rtnetlink_rcv_msg+0x839/0x1170 [ 429.102021][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 429.107140][ C0] ? rtnl_lock+0xe7/0x130 [ 429.111509][ C0] rtnetlink_rcv_msg+0x839/0x1170 [ 429.116594][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 429.121913][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 429.127411][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 429.132827][ C0] ? __pfx_validate_chain+0x10/0x10 [ 429.138029][ C0] ? __pfx_validate_chain+0x10/0x10 [ 429.143254][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 429.148194][ C0] ? mark_lock+0x9a/0x360 [ 429.152570][ C0] ? __pfx_validate_chain+0x10/0x10 [ 429.157777][ C0] ? __lock_acquire+0x1359/0x2000 [ 429.162861][ C0] ? mark_lock+0x9a/0x360 [ 429.167196][ C0] ? __lock_acquire+0x1359/0x2000 [ 429.172270][ C0] netlink_rcv_skb+0x1e3/0x430 [ 429.177038][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 429.182528][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.187831][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 429.193053][ C0] netlink_unicast+0x7ea/0x980 [ 429.197839][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 429.203169][ C0] ? __virt_addr_valid+0x183/0x520 [ 429.208287][ C0] ? __check_object_size+0x49c/0x900 [ 429.213603][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 429.218769][ C0] netlink_sendmsg+0x8db/0xcb0 [ 429.223568][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.228872][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 429.233843][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 429.239131][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 429.244618][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.249905][ C0] __sock_sendmsg+0x221/0x270 [ 429.254627][ C0] __sys_sendto+0x3a4/0x4f0 [ 429.259138][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 429.264238][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 429.270224][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 429.276605][ C0] __x64_sys_sendto+0xde/0x100 [ 429.281378][ C0] do_syscall_64+0xf3/0x230 [ 429.285936][ C0] ? clear_bhb_loop+0x35/0x90 [ 429.290616][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.296548][ C0] RIP: 0033:0x7f821a47eb9c [ 429.300957][ C0] RSP: 002b:00007ffc1675eb40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 429.309408][ C0] RAX: ffffffffffffffda RBX: 00007f821b0e4620 RCX: 00007f821a47eb9c [ 429.317397][ C0] RDX: 000000000000006c RSI: 00007f821b0e4670 RDI: 0000000000000003 [ 429.325389][ C0] RBP: 0000000000000000 R08: 00007ffc1675eb94 R09: 000000000000000c [ 429.333403][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 429.341441][ C0] R13: 0000000000000000 R14: 00007f821b0e4670 R15: 0000000000000000 [ 429.349465][ C0] [ 429.352529][ C0] DEBUG: waiting rtnl_mutex for 621 jiffies. [ 429.358523][ C0] task:syz-executor.1 state:D stack:21024 pid:8626 tgid:8626 ppid:1 flags:0x00000006 [ 429.368790][ C0] Call Trace: [ 429.372090][ C0] [ 429.375031][ C0] __schedule+0x17e8/0x4a20 [ 429.379555][ C0] ? __pfx___schedule+0x10/0x10 [ 429.384450][ C0] ? __pfx_lock_release+0x10/0x10 [ 429.389479][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 429.394993][ C0] ? schedule+0x90/0x320 [ 429.399267][ C0] schedule+0x14b/0x320 [ 429.403557][ C0] schedule_preempt_disabled+0x13/0x30 [ 429.409019][ C0] __mutex_lock+0x6a4/0xd70 [ 429.413558][ C0] ? __mutex_lock+0x527/0xd70 [ 429.418238][ C0] ? wg_set_device+0x102/0x2160 [ 429.423232][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 429.428287][ C0] ? dev_get_by_name+0x25/0x2d0 [ 429.433191][ C0] ? dev_get_by_name+0x28c/0x2d0 [ 429.438133][ C0] ? rtnl_lock+0xe7/0x130 [ 429.442479][ C0] wg_set_device+0x102/0x2160 [ 429.447162][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 429.452944][ C0] ? __pfx_wg_set_device+0x10/0x10 [ 429.458119][ C0] ? __nla_parse+0x40/0x60 [ 429.462564][ C0] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 429.468905][ C0] genl_rcv_msg+0xb14/0xec0 [ 429.473429][ C0] ? mark_lock+0x9a/0x360 [ 429.477765][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.482846][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 429.487869][ C0] ? __pfx_wg_set_device+0x10/0x10 [ 429.493089][ C0] ? __pfx___might_resched+0x10/0x10 [ 429.498462][ C0] netlink_rcv_skb+0x1e3/0x430 [ 429.503346][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.508371][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.513703][ C0] genl_rcv+0x28/0x40 [ 429.517679][ C0] netlink_unicast+0x7ea/0x980 [ 429.522478][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 429.527781][ C0] ? __virt_addr_valid+0x183/0x520 [ 429.532926][ C0] ? __check_object_size+0x49c/0x900 [ 429.538209][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 429.543349][ C0] netlink_sendmsg+0x8db/0xcb0 [ 429.548124][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.553435][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 429.558390][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 429.563711][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 429.569176][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.574499][ C0] __sock_sendmsg+0x221/0x270 [ 429.579185][ C0] __sys_sendto+0x3a4/0x4f0 [ 429.583748][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 429.588789][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 429.594796][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 429.601140][ C0] __x64_sys_sendto+0xde/0x100 [ 429.605932][ C0] do_syscall_64+0xf3/0x230 [ 429.610441][ C0] ? clear_bhb_loop+0x35/0x90 [ 429.615150][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.621045][ C0] RIP: 0033:0x7faa6047eb9c [ 429.625659][ C0] RSP: 002b:00007fff785bf8c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 429.635363][ C0] RAX: ffffffffffffffda RBX: 00007faa610e4620 RCX: 00007faa6047eb9c [ 429.643873][ C0] RDX: 0000000000000170 RSI: 00007faa610e4670 RDI: 0000000000000005 [ 429.652176][ C0] RBP: 0000000000000000 R08: 00007fff785bf914 R09: 000000000000000c [ 429.661021][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 429.669082][ C0] R13: 0000000000000000 R14: 00007faa610e4670 R15: 0000000000000000 [ 429.677105][ C0] [ 429.680121][ C0] DEBUG: waiting rtnl_mutex for 646 jiffies. [ 429.686123][ C0] task:kworker/u8:7 state:D stack:20880 pid:2826 tgid:2826 ppid:2 flags:0x00004000 [ 429.696323][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 429.702360][ C0] Call Trace: [ 429.705645][ C0] [ 429.708576][ C0] __schedule+0x17e8/0x4a20 [ 429.713120][ C0] ? __pfx___schedule+0x10/0x10 [ 429.717971][ C0] ? __pfx_lock_release+0x10/0x10 [ 429.723024][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 429.728491][ C0] ? kthread_data+0x52/0xd0 [ 429.733022][ C0] ? schedule+0x90/0x320 [ 429.737270][ C0] ? wq_worker_sleeping+0x66/0x240 [ 429.742426][ C0] ? schedule+0x90/0x320 [ 429.746668][ C0] schedule+0x14b/0x320 [ 429.750829][ C0] schedule_preempt_disabled+0x13/0x30 [ 429.756421][ C0] __mutex_lock+0x6a4/0xd70 [ 429.761357][ C0] ? mark_lock+0x9a/0x360 [ 429.765891][ C0] ? __mutex_lock+0x527/0xd70 [ 429.770583][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 429.775742][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 429.780786][ C0] ? rtnl_lock+0xe7/0x130 [ 429.785167][ C0] addrconf_dad_work+0xd0/0x16f0 [ 429.790123][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 429.795619][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 429.801987][ C0] ? process_scheduled_works+0x945/0x1830 [ 429.807710][ C0] process_scheduled_works+0xa2c/0x1830 [ 429.813329][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 429.819328][ C0] ? assign_work+0x364/0x3d0 [ 429.823976][ C0] worker_thread+0x86d/0xd50 [ 429.828584][ C0] ? __kthread_parkme+0x169/0x1d0 [ 429.833641][ C0] ? __pfx_worker_thread+0x10/0x10 [ 429.838757][ C0] kthread+0x2f0/0x390 [ 429.842872][ C0] ? __pfx_worker_thread+0x10/0x10 [ 429.847985][ C0] ? __pfx_kthread+0x10/0x10 [ 429.852609][ C0] ret_from_fork+0x4b/0x80 [ 429.857032][ C0] ? __pfx_kthread+0x10/0x10 [ 429.861655][ C0] ret_from_fork_asm+0x1a/0x30 [ 429.866460][ C0] [ 429.869493][ C0] DEBUG: waiting rtnl_mutex for 657 jiffies. [ 429.875496][ C0] task:syz-executor.2 state:D stack:25936 pid:8982 tgid:8981 ppid:6088 flags:0x00000006 [ 429.885709][ C0] Call Trace: [ 429.888986][ C0] [ 429.891948][ C0] __schedule+0x17e8/0x4a20 [ 429.896478][ C0] ? __pfx___schedule+0x10/0x10 [ 429.901335][ C0] ? __pfx_lock_release+0x10/0x10 [ 429.906398][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 429.911903][ C0] ? schedule+0x90/0x320 [ 429.916154][ C0] schedule+0x14b/0x320 [ 429.920323][ C0] schedule_preempt_disabled+0x13/0x30 [ 429.925819][ C0] __mutex_lock+0x6a4/0xd70 [ 429.930335][ C0] ? __mutex_lock+0x527/0xd70 [ 429.935049][ C0] ? rtnetlink_rcv_msg+0x839/0x1170 [ 429.940273][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 429.945343][ C0] ? rtnl_lock+0xe7/0x130 [ 429.949699][ C0] rtnetlink_rcv_msg+0x839/0x1170 [ 429.954780][ C0] ? irqentry_exit+0x63/0x90 [ 429.959388][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 429.964648][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 429.969791][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 429.975304][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 429.981294][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 429.987657][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 429.993056][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 429.998280][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 430.003680][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 430.008965][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 430.014091][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 430.019935][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 430.025884][ C0] ? __dev_queue_xmit+0x16c9/0x3d30 [ 430.031505][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 430.038055][ C0] ? ref_tracker_free+0x643/0x7e0 [ 430.043724][ C0] netlink_rcv_skb+0x1e3/0x430 [ 430.048979][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 430.054539][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.059988][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 430.065269][ C0] netlink_unicast+0x7ea/0x980 [ 430.070153][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 430.075495][ C0] ? __virt_addr_valid+0x183/0x520 [ 430.080621][ C0] ? __check_object_size+0x49c/0x900 [ 430.085964][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 430.091086][ C0] netlink_sendmsg+0x8db/0xcb0 [ 430.095902][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.101199][ C0] ? __import_iovec+0x536/0x820 [ 430.106082][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 430.111025][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 430.116334][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 430.121837][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.127126][ C0] __sock_sendmsg+0x221/0x270 [ 430.131836][ C0] ____sys_sendmsg+0x525/0x7d0 [ 430.136608][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.141932][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 430.146537][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 430.151714][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 430.158071][ C0] ? do_syscall_64+0x100/0x230 [ 430.162878][ C0] ? do_syscall_64+0xb6/0x230 [ 430.167555][ C0] do_syscall_64+0xf3/0x230 [ 430.172227][ C0] ? clear_bhb_loop+0x35/0x90 [ 430.178519][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.185828][ C0] RIP: 0033:0x7f0511a7cea9 [ 430.190345][ C0] RSP: 002b:00007f05115ff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.198811][ C0] RAX: ffffffffffffffda RBX: 00007f0511bb3f80 RCX: 00007f0511a7cea9 [ 430.206815][ C0] RDX: 0000000000000000 RSI: 00000000200012c0 RDI: 0000000000000007 [ 430.214807][ C0] RBP: 00007f0511aebff4 R08: 0000000000000000 R09: 0000000000000000 [ 430.222797][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.230766][ C0] R13: 000000000000000b R14: 00007f0511bb3f80 R15: 00007ffdfaad02d8 [ 430.238801][ C0] [ 430.241873][ C0] DEBUG: waiting rtnl_mutex for 643 jiffies. [ 430.247843][ C0] task:kworker/0:0 state:D stack:22064 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 430.258048][ C0] Workqueue: events linkwatch_event [ 430.263894][ C0] Call Trace: [ 430.267171][ C0] [ 430.270124][ C0] __schedule+0x17e8/0x4a20 [ 430.274687][ C0] ? __pfx___schedule+0x10/0x10 [ 430.279637][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 430.285683][ C0] ? __pfx_lock_release+0x10/0x10 [ 430.290715][ C0] ? kick_pool+0x45c/0x620 [ 430.295162][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.300361][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 430.305593][ C0] ? schedule+0x90/0x320 [ 430.309840][ C0] schedule+0x14b/0x320 [ 430.314018][ C0] schedule_preempt_disabled+0x13/0x30 [ 430.319473][ C0] __mutex_lock+0x6a4/0xd70 [ 430.324029][ C0] ? __mutex_lock+0x527/0xd70 [ 430.328815][ C0] ? linkwatch_event+0xe/0x60 [ 430.333521][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 430.338584][ C0] ? process_scheduled_works+0x945/0x1830 [ 430.344349][ C0] ? rtnl_lock+0xe7/0x130 [ 430.348689][ C0] ? process_scheduled_works+0x945/0x1830 [ 430.354432][ C0] linkwatch_event+0xe/0x60 [ 430.358955][ C0] process_scheduled_works+0xa2c/0x1830 [ 430.364543][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 430.370522][ C0] ? assign_work+0x364/0x3d0 [ 430.375151][ C0] worker_thread+0x86d/0xd50 [ 430.379760][ C0] ? __kthread_parkme+0x169/0x1d0 [ 430.384818][ C0] ? __pfx_worker_thread+0x10/0x10 [ 430.389930][ C0] kthread+0x2f0/0x390 [ 430.394866][ C0] ? __pfx_worker_thread+0x10/0x10 [ 430.399996][ C0] ? __pfx_kthread+0x10/0x10 [ 430.404633][ C0] ret_from_fork+0x4b/0x80 [ 430.409069][ C0] ? __pfx_kthread+0x10/0x10 [ 430.413694][ C0] ret_from_fork_asm+0x1a/0x30 [ 430.418491][ C0] [ 430.421546][ C0] [ 430.421546][ C0] Showing all locks held in the system: [ 430.429253][ C0] 3 locks held by kworker/0:0/8: [ 430.434289][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 430.445348][ C0] #1: ffffc900000d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 430.456440][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 430.465459][ C0] 3 locks held by kworker/u8:0/11: [ 430.470565][ C0] 2 locks held by kworker/1:2/59: [ 430.475637][ C0] 3 locks held by kworker/u8:7/2826: [ 430.480930][ C0] #0: ffff88802a0bf148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 430.494027][ C0] #1: ffffc90009c57d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 430.508552][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 430.518878][ C0] 5 locks held by kworker/u8:9/2919: [ 430.524218][ C0] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 430.535195][ C0] #1: ffffc9000a337d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 430.545790][ C0] #2: ffffffff8f5e2c90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 430.555252][ C0] #3: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 430.565318][ C0] #4: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 430.576245][ C0] 2 locks held by getty/4849: [ 430.580916][ C0] #0: ffff88802aeb10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.590731][ C0] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 430.600874][ C0] 5 locks held by syz-executor.0/7896: [ 430.606361][ C0] #0: ffff88805410e420 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 430.615665][ C0] #1: ffff88807ab486c0 (&type->i_mutex_dir_key#21){+.+.}-{3:3}, at: path_openat+0x7d3/0x3280 [ 430.625992][ C0] #2: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 430.636134][ C0] #3: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 430.645930][ C0] #4: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 430.655807][ C0] 2 locks held by syz-executor.0/7914: [ 430.661258][ C0] #0: ffff88805410e420 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 430.672174][ C0] #1: ffff88807ab486c0 (&type->i_mutex_dir_key#20/1){+.+.}-{3:3}, at: do_renameat2+0x62c/0x13f0 [ 430.684354][ C0] 3 locks held by syz-executor.1/8626: [ 430.689920][ C0] #0: ffffffff8f655cd0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 430.698214][ C0] #1: ffffffff8f655b88 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 430.707353][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: wg_set_device+0x102/0x2160 [ 430.716779][ C0] 1 lock held by syz-executor.0/8919: [ 430.723439][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 430.734822][ C0] 1 lock held by syz-executor.2/8982: [ 430.742485][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 430.752729][ C0] 1 lock held by syz-executor.3/9024: [ 430.758638][ C0] 2 locks held by syz-executor.4/9028: [ 430.767054][ C0] #0: ffffffff8f655cd0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 430.775910][ C0] #1: ffffffff8f655b88 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 430.786897][ C0] 2 locks held by syz-executor.4/9029: [ 430.792496][ C0] [ 430.794843][ C0] ============================================= [ 430.794843][ C0] [ 431.826624][ C0] DEBUG: holding rtnl_mutex for 867 jiffies. [ 431.832778][ C0] task:kworker/u8:9 state:R running task stack:19856 pid:2919 tgid:2919 ppid:2 flags:0x00004008 [ 431.844755][ C0] Workqueue: netns cleanup_net [ 431.849703][ C0] Call Trace: [ 431.853145][ C0] [ 431.856106][ C0] sched_show_task+0x578/0x740 [ 431.860991][ C0] ? report_rtnl_holders+0x183/0x2d0 [ 431.866522][ C0] ? __pfx__printk+0x10/0x10 [ 431.871239][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 431.876669][ C0] report_rtnl_holders+0x1ba/0x2d0 [ 431.881927][ C0] ? report_rtnl_holders+0x20/0x2d0 [ 431.887260][ C0] call_timer_fn+0x18e/0x650 [ 431.891964][ C0] ? call_timer_fn+0xc0/0x650 [ 431.896732][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 431.902477][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 431.907698][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 431.913473][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 431.919136][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 431.924806][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 431.930007][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 431.935271][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 431.940936][ C0] __run_timer_base+0x66a/0x8e0 [ 431.945856][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 431.951249][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 431.957611][ C0] run_timer_softirq+0xb7/0x170 [ 431.962511][ C0] handle_softirqs+0x2c4/0x970 [ 431.967320][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 431.972114][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 431.977452][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 431.982708][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 431.987426][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 431.992701][ C0] irq_exit_rcu+0x9/0x30 [ 431.996982][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 431.998965][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 432.002720][ C0] [ 432.002739][ C0] [ 432.002751][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.002788][ C0] RIP: 0010:synchronize_rcu+0x0/0x360 [ 432.002827][ C0] Code: e1 07 80 c1 03 38 c1 0f 8c 97 fe ff ff 4c 89 f7 e8 05 b8 7f 00 e9 8a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 432.002850][ C0] RSP: 0018:ffffc9000a337678 EFLAGS: 00000206 [ 432.002878][ C0] RAX: dffffc0000000000 RBX: 1ffff92001466ed8 RCX: ffffffff947c3803 [ 432.002899][ C0] RDX: 0000000000000001 RSI: ffffffff8bcace80 RDI: ffffffff8c200760 [ 432.002921][ C0] RBP: ffffc9000a337758 R08: ffffffff947b0ebf R09: 1ffffffff28f61d7 [ 432.002943][ C0] R10: dffffc0000000000 R11: fffffbfff28f61d8 R12: ffffffff947aedf8 [ 432.017455][ T5118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 432.017718][ C0] R13: 1ffff92001466ed4 R14: 0000000000000206 R15: ffffc9000a3376c0 [ 432.026310][ T5118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 432.029133][ C0] lockdep_unregister_key+0x4b7/0x540 [ 432.051671][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 432.054858][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 432.063925][ T5118] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 432.070794][ C0] ? rcu_is_watching+0x15/0xb0 [ 432.079395][ T5118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 432.086787][ C0] ? qdisc_reset+0x3bb/0x5a0 [ 432.086832][ C0] __qdisc_destroy+0x165/0x410 [ 432.086869][ C0] dev_shutdown+0x357/0x440 [ 432.167566][ C0] unregister_netdevice_many_notify+0x977/0x16b0 [ 432.173960][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 432.180743][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 432.186679][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 432.192952][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 432.199148][ C0] default_device_exit_batch+0xa0f/0xa90 [ 432.204908][ C0] ? __pfx___might_resched+0x10/0x10 [ 432.210204][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 432.216430][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 432.221755][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 432.227927][ C0] cleanup_net+0x89d/0xcc0 [ 432.232372][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 432.237316][ C0] ? process_scheduled_works+0x945/0x1830 [ 432.243072][ C0] process_scheduled_works+0xa2c/0x1830 [ 432.248645][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.254652][ C0] ? assign_work+0x364/0x3d0 [ 432.259249][ C0] worker_thread+0x86d/0xd50 [ 432.263874][ C0] ? __kthread_parkme+0x169/0x1d0 [ 432.268930][ C0] ? __pfx_worker_thread+0x10/0x10 [ 432.274120][ C0] kthread+0x2f0/0x390 [ 432.278305][ C0] ? __pfx_worker_thread+0x10/0x10 [ 432.283772][ C0] ? __pfx_kthread+0x10/0x10 [ 432.288497][ C0] ret_from_fork+0x4b/0x80 [ 432.292955][ C0] ? __pfx_kthread+0x10/0x10 [ 432.297557][ C0] ret_from_fork_asm+0x1a/0x30 [ 432.302364][ C0] [ 432.305495][ C0] DEBUG: waiting rtnl_mutex for 920 jiffies. [ 432.311521][ C0] task:syz-executor.0 state:D stack:21024 pid:8919 tgid:8919 ppid:8886 flags:0x00004002 [ 432.321855][ C0] Call Trace: [ 432.325145][ C0] [ 432.328095][ C0] __schedule+0x17e8/0x4a20 [ 432.332666][ C0] ? __pfx___schedule+0x10/0x10 [ 432.337519][ C0] ? __pfx_lock_release+0x10/0x10 [ 432.342567][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 432.348071][ C0] ? schedule+0x90/0x320 [ 432.352341][ C0] schedule+0x14b/0x320 [ 432.356550][ C0] schedule_preempt_disabled+0x13/0x30 [ 432.362043][ C0] __mutex_lock+0x6a4/0xd70 [ 432.366587][ C0] ? __mutex_lock+0x527/0xd70 [ 432.371276][ C0] ? rtnetlink_rcv_msg+0x839/0x1170 [ 432.376508][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 432.381614][ C0] ? rtnl_lock+0xe7/0x130 [ 432.385977][ C0] rtnetlink_rcv_msg+0x839/0x1170 [ 432.391020][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 432.396457][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.401956][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 432.407287][ C0] ? __pfx_validate_chain+0x10/0x10 [ 432.412977][ C0] ? __pfx_validate_chain+0x10/0x10 [ 432.418212][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 432.423199][ C0] ? mark_lock+0x9a/0x360 [ 432.427543][ C0] ? __pfx_validate_chain+0x10/0x10 [ 432.432779][ C0] ? __lock_acquire+0x1359/0x2000 [ 432.437834][ C0] ? mark_lock+0x9a/0x360 [ 432.442193][ C0] ? __lock_acquire+0x1359/0x2000 [ 432.447233][ C0] netlink_rcv_skb+0x1e3/0x430 [ 432.452046][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.457517][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.462856][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.468090][ C0] netlink_unicast+0x7ea/0x980 [ 432.472885][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 432.478173][ C0] ? __virt_addr_valid+0x183/0x520 [ 432.483342][ C0] ? __check_object_size+0x49c/0x900 [ 432.488634][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 432.493792][ C0] netlink_sendmsg+0x8db/0xcb0 [ 432.498574][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.503891][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 432.508854][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 432.514164][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 432.519644][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.524976][ C0] __sock_sendmsg+0x221/0x270 [ 432.529669][ C0] __sys_sendto+0x3a4/0x4f0 [ 432.534315][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 432.539367][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 432.545386][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 432.551918][ C0] __x64_sys_sendto+0xde/0x100 [ 432.556693][ C0] do_syscall_64+0xf3/0x230 [ 432.562446][ C0] ? clear_bhb_loop+0x35/0x90 [ 432.567744][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.574663][ C0] RIP: 0033:0x7f821a47eb9c [ 432.579272][ C0] RSP: 002b:00007ffc1675eb40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 432.588324][ C0] RAX: ffffffffffffffda RBX: 00007f821b0e4620 RCX: 00007f821a47eb9c [ 432.597297][ C0] RDX: 000000000000006c RSI: 00007f821b0e4670 RDI: 0000000000000003 [ 432.605658][ C0] RBP: 0000000000000000 R08: 00007ffc1675eb94 R09: 000000000000000c [ 432.613748][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 432.621748][ C0] R13: 0000000000000000 R14: 00007f821b0e4670 R15: 0000000000000000 [ 432.629741][ C0] [ 432.632809][ C0] DEBUG: waiting rtnl_mutex for 949 jiffies. [ 432.638777][ C0] task:syz-executor.1 state:D stack:21024 pid:8626 tgid:8626 ppid:1 flags:0x00000006 [ 432.648974][ C0] Call Trace: [ 432.652277][ C0] [ 432.655304][ C0] __schedule+0x17e8/0x4a20 [ 432.659833][ C0] ? __pfx___schedule+0x10/0x10 [ 432.664721][ C0] ? __pfx_lock_release+0x10/0x10 [ 432.669754][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 432.675288][ C0] ? schedule+0x90/0x320 [ 432.679623][ C0] schedule+0x14b/0x320 [ 432.683803][ C0] schedule_preempt_disabled+0x13/0x30 [ 432.689269][ C0] __mutex_lock+0x6a4/0xd70 [ 432.693815][ C0] ? __mutex_lock+0x527/0xd70 [ 432.698585][ C0] ? wg_set_device+0x102/0x2160 [ 432.703478][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 432.708538][ C0] ? dev_get_by_name+0x25/0x2d0 [ 432.713460][ C0] ? dev_get_by_name+0x28c/0x2d0 [ 432.718417][ C0] ? rtnl_lock+0xe7/0x130 [ 432.722792][ C0] wg_set_device+0x102/0x2160 [ 432.727498][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 432.733293][ C0] ? __pfx_wg_set_device+0x10/0x10 [ 432.738456][ C0] ? __nla_parse+0x40/0x60 [ 432.742910][ C0] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 432.749252][ C0] genl_rcv_msg+0xb14/0xec0 [ 432.753775][ C0] ? mark_lock+0x9a/0x360 [ 432.758117][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.763190][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 432.768221][ C0] ? __pfx_wg_set_device+0x10/0x10 [ 432.773380][ C0] ? __pfx___might_resched+0x10/0x10 [ 432.778677][ C0] netlink_rcv_skb+0x1e3/0x430 [ 432.783476][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.788519][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.793877][ C0] genl_rcv+0x28/0x40 [ 432.797874][ C0] netlink_unicast+0x7ea/0x980 [ 432.802684][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 432.807990][ C0] ? __virt_addr_valid+0x183/0x520 [ 432.813186][ C0] ? __check_object_size+0x49c/0x900 [ 432.818486][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 432.823645][ C0] netlink_sendmsg+0x8db/0xcb0 [ 432.828437][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.833759][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 432.838711][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 432.844048][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 432.849540][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.854848][ C0] __sock_sendmsg+0x221/0x270 [ 432.859537][ C0] __sys_sendto+0x3a4/0x4f0 [ 432.864069][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 432.869124][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 432.875132][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 432.881515][ C0] __x64_sys_sendto+0xde/0x100 [ 432.886312][ C0] do_syscall_64+0xf3/0x230 [ 432.890821][ C0] ? clear_bhb_loop+0x35/0x90 [ 432.895529][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.901465][ C0] RIP: 0033:0x7faa6047eb9c [ 432.905894][ C0] RSP: 002b:00007fff785bf8c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 432.914341][ C0] RAX: ffffffffffffffda RBX: 00007faa610e4620 RCX: 00007faa6047eb9c [ 432.922791][ C0] RDX: 0000000000000170 RSI: 00007faa610e4670 RDI: 0000000000000005 [ 432.930767][ C0] RBP: 0000000000000000 R08: 00007fff785bf914 R09: 000000000000000c [ 432.938850][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 432.946872][ C0] R13: 0000000000000000 R14: 00007faa610e4670 R15: 0000000000000000 [ 432.954946][ C0] [ 432.957977][ C0] DEBUG: waiting rtnl_mutex for 974 jiffies. [ 432.964205][ C0] task:kworker/u8:7 state:D stack:20880 pid:2826 tgid:2826 ppid:2 flags:0x00004000 [ 432.980884][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 432.987432][ C0] Call Trace: [ 432.991052][ C0] [ 432.995522][ C0] __schedule+0x17e8/0x4a20 [ 433.000175][ C0] ? __pfx___schedule+0x10/0x10 [ 433.005716][ C0] ? __pfx_lock_release+0x10/0x10 [ 433.010947][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 433.016698][ C0] ? kthread_data+0x52/0xd0 [ 433.021479][ C0] ? schedule+0x90/0x320 [ 433.026023][ C0] ? wq_worker_sleeping+0x66/0x240 [ 433.032501][ C0] ? schedule+0x90/0x320 [ 433.037414][ C0] schedule+0x14b/0x320 [ 433.042261][ C0] schedule_preempt_disabled+0x13/0x30 [ 433.047830][ C0] __mutex_lock+0x6a4/0xd70 [ 433.052754][ C0] ? mark_lock+0x9a/0x360 [ 433.057120][ C0] ? __mutex_lock+0x527/0xd70 [ 433.061845][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 433.067057][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 433.072115][ C0] ? rtnl_lock+0xe7/0x130 [ 433.076537][ C0] addrconf_dad_work+0xd0/0x16f0 [ 433.081534][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 433.087026][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 433.093389][ C0] ? process_scheduled_works+0x945/0x1830 [ 433.099113][ C0] process_scheduled_works+0xa2c/0x1830 [ 433.104705][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 433.110690][ C0] ? assign_work+0x364/0x3d0 [ 433.115328][ C0] worker_thread+0x86d/0xd50 [ 433.119947][ C0] ? __kthread_parkme+0x169/0x1d0 [ 433.124987][ C0] ? __pfx_worker_thread+0x10/0x10 [ 433.130093][ C0] kthread+0x2f0/0x390 [ 433.134187][ C0] ? __pfx_worker_thread+0x10/0x10 [ 433.139300][ C0] ? __pfx_kthread+0x10/0x10 [ 433.143916][ C0] ret_from_fork+0x4b/0x80 [ 433.148335][ C0] ? __pfx_kthread+0x10/0x10 [ 433.153032][ C0] ret_from_fork_asm+0x1a/0x30 [ 433.157827][ C0] [ 433.160843][ C0] DEBUG: waiting rtnl_mutex for 986 jiffies. [ 433.166830][ C0] task:syz-executor.2 state:D stack:25936 pid:8982 tgid:8981 ppid:6088 flags:0x00000006 [ 433.177007][ C0] Call Trace: [ 433.180277][ C0] [ 433.183249][ C0] __schedule+0x17e8/0x4a20 [ 433.187775][ C0] ? __pfx___schedule+0x10/0x10 [ 433.192642][ C0] ? __pfx_lock_release+0x10/0x10 [ 433.197685][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 433.203178][ C0] ? schedule+0x90/0x320 [ 433.207422][ C0] schedule+0x14b/0x320 [ 433.211620][ C0] schedule_preempt_disabled+0x13/0x30 [ 433.217102][ C0] __mutex_lock+0x6a4/0xd70 [ 433.221638][ C0] ? __mutex_lock+0x527/0xd70 [ 433.226321][ C0] ? rtnetlink_rcv_msg+0x839/0x1170 [ 433.231544][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 433.236577][ C0] ? rtnl_lock+0xe7/0x130 [ 433.240905][ C0] rtnetlink_rcv_msg+0x839/0x1170 [ 433.245962][ C0] ? irqentry_exit+0x63/0x90 [ 433.250653][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 433.255879][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 433.261087][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 433.266580][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 433.272579][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 433.278908][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 433.284301][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 433.289512][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 433.294906][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 433.300193][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 433.305333][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 433.311058][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 433.316192][ C0] ? __dev_queue_xmit+0x16c9/0x3d30 [ 433.321447][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 433.326623][ C0] ? ref_tracker_free+0x643/0x7e0 [ 433.331679][ C0] netlink_rcv_skb+0x1e3/0x430 [ 433.336476][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 433.341961][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.347282][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.352540][ C0] netlink_unicast+0x7ea/0x980 [ 433.357313][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 433.362614][ C0] ? __virt_addr_valid+0x183/0x520 [ 433.367734][ C0] ? __check_object_size+0x49c/0x900 [ 433.373098][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 433.378347][ C0] netlink_sendmsg+0x8db/0xcb0 [ 433.383183][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.389663][ C0] ? __import_iovec+0x536/0x820 [ 433.395401][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 433.400358][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 433.405691][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 433.411171][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.416509][ C0] __sock_sendmsg+0x221/0x270 [ 433.421201][ C0] ____sys_sendmsg+0x525/0x7d0 [ 433.426008][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.431423][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 433.436053][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.441203][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 433.447554][ C0] ? do_syscall_64+0x100/0x230 [ 433.452346][ C0] ? do_syscall_64+0xb6/0x230 [ 433.457111][ C0] do_syscall_64+0xf3/0x230 [ 433.461900][ C0] ? clear_bhb_loop+0x35/0x90 [ 433.466604][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.472511][ C0] RIP: 0033:0x7f0511a7cea9 [ 433.476934][ C0] RSP: 002b:00007f05115ff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.485458][ C0] RAX: ffffffffffffffda RBX: 00007f0511bb3f80 RCX: 00007f0511a7cea9 [ 433.493472][ C0] RDX: 0000000000000000 RSI: 00000000200012c0 RDI: 0000000000000007 [ 433.501569][ C0] RBP: 00007f0511aebff4 R08: 0000000000000000 R09: 0000000000000000 [ 433.511046][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.526374][ C0] R13: 000000000000000b R14: 00007f0511bb3f80 R15: 00007ffdfaad02d8 [ 433.534530][ C0] [ 433.537572][ C0] DEBUG: waiting rtnl_mutex for 972 jiffies. [ 433.543780][ C0] task:kworker/0:0 state:D stack:22064 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 433.553994][ C0] Workqueue: events linkwatch_event [ 433.559212][ C0] Call Trace: [ 433.562519][ C0] [ 433.565483][ C0] __schedule+0x17e8/0x4a20 [ 433.570016][ C0] ? __pfx___schedule+0x10/0x10 [ 433.574894][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 433.580882][ C0] ? __pfx_lock_release+0x10/0x10 [ 433.585954][ C0] ? kick_pool+0x45c/0x620 [ 433.590382][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.595605][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 433.600813][ C0] ? schedule+0x90/0x320 [ 433.605093][ C0] schedule+0x14b/0x320 [ 433.609259][ C0] schedule_preempt_disabled+0x13/0x30 [ 433.614740][ C0] __mutex_lock+0x6a4/0xd70 [ 433.619255][ C0] ? __mutex_lock+0x527/0xd70 [ 433.623965][ C0] ? linkwatch_event+0xe/0x60 [ 433.628654][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 433.633714][ C0] ? process_scheduled_works+0x945/0x1830 [ 433.639440][ C0] ? rtnl_lock+0xe7/0x130 [ 433.643790][ C0] ? process_scheduled_works+0x945/0x1830 [ 433.649510][ C0] linkwatch_event+0xe/0x60 [ 433.654118][ C0] process_scheduled_works+0xa2c/0x1830 [ 433.659709][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 433.665735][ C0] ? assign_work+0x364/0x3d0 [ 433.670345][ C0] worker_thread+0x86d/0xd50 [ 433.674971][ C0] ? __kthread_parkme+0x169/0x1d0 [ 433.679999][ C0] ? __pfx_worker_thread+0x10/0x10 [ 433.685162][ C0] kthread+0x2f0/0x390 [ 433.689250][ C0] ? __pfx_worker_thread+0x10/0x10 [ 433.694400][ C0] ? __pfx_kthread+0x10/0x10 [ 433.699034][ C0] ret_from_fork+0x4b/0x80 [ 433.703504][ C0] ? __pfx_kthread+0x10/0x10 [ 433.708117][ C0] ret_from_fork_asm+0x1a/0x30 [ 433.712954][ C0] [ 433.716019][ C0] [ 433.716019][ C0] Showing all locks held in the system: [ 433.723777][ C0] 3 locks held by kworker/0:0/8: [ 433.728732][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 433.739832][ C0] #1: ffffc900000d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 433.750844][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 433.759865][ C0] 6 locks held by kworker/u8:5/955: [ 433.765095][ C0] 3 locks held by kworker/u8:7/2826: [ 433.770373][ C0] #0: ffff88802a0bf148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 433.781998][ C0] #1: ffffc90009c57d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 433.794854][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 433.804310][ C0] 7 locks held by kworker/u8:9/2919: [ 433.809589][ C0] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 433.820586][ C0] #1: ffffc9000a337d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 433.831209][ C0] #2: ffffffff8f5e2c90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 433.840655][ C0] #3: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 433.850714][ C0] #4: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 433.860896][ C0] #5: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 433.870705][ C0] #6: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 433.880584][ C0] 2 locks held by getty/4849: [ 433.885298][ C0] #0: ffff88802aeb10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 433.895090][ C0] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 433.905238][ C0] 2 locks held by syz-executor.0/7896: [ 433.910690][ C0] 2 locks held by syz-executor.0/7914: [ 433.916163][ C0] #0: ffff88805410e420 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 433.925446][ C0] #1: ffff88807ab486c0 (&type->i_mutex_dir_key#20/1){+.+.}-{3:3}, at: do_renameat2+0x62c/0x13f0 [ 433.936038][ C0] 3 locks held by syz-executor.1/8626: [ 433.941527][ C0] #0: ffffffff8f655cd0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 433.949755][ C0] #1: ffffffff8f655b88 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 433.960477][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: wg_set_device+0x102/0x2160 [ 433.969706][ C0] 1 lock held by syz-executor.0/8919: [ 433.975200][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 433.984770][ C0] 1 lock held by syz-executor.2/8982: [ 433.990139][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 433.999687][ C0] 2 locks held by syz-executor.4/9028: [ 434.005263][ C0] #0: ffffffff8f655cd0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 434.013505][ C0] #1: ffffffff8f655b88 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 434.022511][ C0] 1 lock held by syz-executor.1/9032: [ 434.027878][ C0] [ 434.031208][ C0] ============================================= [ 434.031208][ C0] [ 434.131850][ T5118] Bluetooth: hci6: command tx timeout [ 434.354089][ T8919] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.361351][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.383626][ T8919] bridge_slave_0: entered allmulticast mode [ 434.410771][ T8919] bridge_slave_0: entered promiscuous mode [ 434.687807][ T8919] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.734797][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.761731][ T8919] bridge_slave_1: entered allmulticast mode [ 434.793167][ T8919] bridge_slave_1: entered promiscuous mode [ 434.899353][ T9037] loop3: detected capacity change from 0 to 8 [ 434.963887][ T29] audit: type=1326 audit(1718509667.914:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9034 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0511a7cea9 code=0x0 [ 435.246097][ T9042] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 435.254710][ T9042] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.3'. [ 435.994989][ T8919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.216600][ T5118] Bluetooth: hci6: command tx timeout [ 436.404299][ T8919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.625281][ T9047] loop2: detected capacity change from 0 to 32768 [ 436.633904][ T9047] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9047) [ 436.653344][ T9047] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 436.663589][ T9047] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 436.672377][ T9047] BTRFS info (device loop2): using free-space-tree [ 436.722975][ T8919] team0: Port device team_slave_0 added [ 436.756893][ T8919] team0: Port device team_slave_1 added [ 436.898571][ T8919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.927440][ T8919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.044824][ T8919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.152151][ T8919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.203302][ T8919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.571654][ T8919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.987533][ T6088] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 438.100019][ T9073] loop3: detected capacity change from 0 to 128 [ 438.291646][ T5118] Bluetooth: hci6: command tx timeout [ 438.610581][ T8919] hsr_slave_0: entered promiscuous mode [ 438.673496][ T8919] hsr_slave_1: entered promiscuous mode [ 438.733688][ T8919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.741310][ T8919] Cannot create hsr debugfs directory [ 441.037638][ T5122] Bluetooth: hci6: command tx timeout [ 441.044520][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.051055][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.533750][ T9091] loop4: detected capacity change from 0 to 2048 [ 441.598439][ T9091] loop4: p1 < > p4 [ 441.604249][ T9091] loop4: p4 size 8388608 extends beyond EOD, truncated [ 441.682206][ T9091] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 441.702677][ T5165] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 441.880105][ T9101] loop4: detected capacity change from 0 to 8 [ 441.901786][ T5165] usb 4-1: Using ep0 maxpacket: 8 [ 441.932223][ T5165] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 441.951498][ T5165] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.971685][ T5165] usb 4-1: config 0 has no interface number 0 [ 441.977842][ T5165] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 442.041193][ T5165] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 442.086125][ T5165] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.158534][ T5165] usb 4-1: config 0 interface 52 has no altsetting 0 [ 442.175042][ T5165] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 442.251075][ T9105] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 442.260185][ T9105] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.4'. [ 442.848949][ T5165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.875165][ T2919] bridge_slave_1: left allmulticast mode [ 442.882377][ T5165] usb 4-1: config 0 descriptor?? [ 442.892415][ T2919] bridge_slave_1: left promiscuous mode [ 442.920331][ T2919] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.931368][ T2919] bridge_slave_0: left allmulticast mode [ 442.946476][ T2919] bridge_slave_0: left promiscuous mode [ 442.972437][ T2919] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.108057][ T5165] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input6 [ 443.151644][ T4532] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 443.188265][ T4532] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 443.246279][ T4532] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 443.259158][ T4532] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 443.297695][ T2919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.301344][ T9087] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 443.337742][ T2919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.360592][ T59] usb 4-1: USB disconnect, device number 15 [ 443.370758][ T2919] bond0 (unregistering): Released all slaves [ 443.435196][ T9032] chnl_net:caif_netlink_parms(): no params data found [ 443.859998][ T2919] hsr_slave_0: left promiscuous mode [ 443.880056][ T2919] hsr_slave_1: left promiscuous mode [ 443.897016][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.931550][ T59] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 443.931904][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.111635][ T59] usb 3-1: Using ep0 maxpacket: 8 [ 444.119284][ T59] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 444.138776][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.158306][ T59] usb 3-1: config 0 descriptor?? [ 444.477377][ T2919] team0 (unregistering): Port device team_slave_1 removed [ 444.581283][ T2919] team0 (unregistering): Port device team_slave_0 removed [ 444.776957][ T59] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 444.806940][ T59] asix 3-1:0.0: probe with driver asix failed with error -32 [ 444.831993][ T59] usb 3-1: USB disconnect, device number 20 [ 445.615431][ T9121] No control pipe specified [ 445.623502][ T9121] ebt_limit: overflow, try lower: 570423552/2483027968 [ 445.638276][ T29] audit: type=1400 audit(1718509678.574:235): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9120 comm="syz-executor.3" [ 445.834428][ T9032] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.852747][ T9032] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.870851][ T9032] bridge_slave_0: entered allmulticast mode [ 445.888992][ T9032] bridge_slave_0: entered promiscuous mode [ 446.039574][ T9032] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.262160][ T9032] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.311675][ T9032] bridge_slave_1: entered allmulticast mode [ 447.344249][ T9032] bridge_slave_1: entered promiscuous mode [ 447.536343][ T9139] loop4: detected capacity change from 0 to 2048 [ 447.604126][ T9139] loop4: p1 < > p4 [ 447.616150][ T9139] loop4: p4 size 8388608 extends beyond EOD, truncated [ 447.636990][ T9032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.698192][ T9032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.712546][ T9139] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 447.746706][ T9141] sctp: [Deprecated]: syz-executor.2 (pid 9141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.746706][ T9141] Use struct sctp_sack_info instead [ 447.961623][ T9032] team0: Port device team_slave_0 added [ 448.368154][ T9151] No control pipe specified [ 448.376525][ T9151] ebt_limit: overflow, try lower: 570423552/2483027968 [ 449.275660][ T9153] No control pipe specified [ 450.731732][ T29] audit: type=1400 audit(1718509681.324:236): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9146 comm="syz-executor.3" [ 450.825114][ T29] audit: type=1400 audit(1718509682.724:237): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9144 comm="syz-executor.4" [ 450.900558][ T9156] loop3: detected capacity change from 0 to 8 [ 451.034717][ T9032] team0: Port device team_slave_1 added [ 451.313856][ T9158] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 451.322258][ T9158] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.3'. [ 451.995191][ T8919] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 452.035604][ T8919] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 452.083533][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.097805][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.181096][ T9032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.223423][ T8919] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 452.304926][ T8919] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 452.344989][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.371728][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.438428][ T9032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.856129][ T9032] hsr_slave_0: entered promiscuous mode [ 452.907293][ T9032] hsr_slave_1: entered promiscuous mode [ 452.914438][ T9165] loop3: detected capacity change from 0 to 64 [ 452.967077][ T9032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.983811][ T9032] Cannot create hsr debugfs directory [ 453.371171][ T9168] overlayfs: failed to resolve './file1': -2 [ 454.666706][ T9178] loop2: detected capacity change from 0 to 2048 [ 454.707574][ T9182] (unnamed net_device) (uninitialized): option use_carrier: invalid value (3) [ 454.734422][ T9178] loop2: p1 < > p4 [ 454.743573][ T9178] loop2: p4 size 8388608 extends beyond EOD, truncated [ 454.799010][ T9183] loop4: detected capacity change from 0 to 512 [ 454.803313][ T8919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.823466][ T9183] EXT4-fs: Ignoring removed orlov option [ 454.832236][ T9178] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 454.880564][ T9183] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 454.904391][ T9183] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 2683928664 (level 1) [ 454.928186][ T9183] EXT4-fs (loop4): 1 truncate cleaned up [ 455.177773][ T9183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.247811][ T8919] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.280546][ T9191] No control pipe specified [ 455.290417][ T29] audit: type=1400 audit(1718509688.234:238): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9184 comm="syz-executor.3" [ 455.539146][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.547091][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.735191][ T6628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.794214][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.801535][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.841021][ T9196] loop2: detected capacity change from 0 to 8 [ 456.168770][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 456.370186][ T9203] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 456.378862][ T9203] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 457.322421][ T9032] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 457.355688][ T9032] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 457.389385][ T9211] overlayfs: failed to resolve './file1': -2 [ 457.420546][ T9032] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 458.264470][ T9032] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 458.430041][ T9205] sctp: [Deprecated]: syz-executor.4 (pid 9205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.430041][ T9205] Use struct sctp_sack_info instead [ 458.778537][ T8919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.011931][ T5170] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 459.107913][ T9218] sctp: [Deprecated]: syz-executor.2 (pid 9218) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.107913][ T9218] Use struct sctp_sack_info instead [ 459.201633][ T5170] usb 4-1: Using ep0 maxpacket: 8 [ 459.215333][ T5170] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 459.237426][ T5170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.264650][ T5170] usb 4-1: config 0 descriptor?? [ 459.602196][ T8919] veth0_vlan: entered promiscuous mode [ 459.681588][ T8919] veth1_vlan: entered promiscuous mode [ 459.876612][ T5170] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 459.911893][ T9032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.928876][ T5170] asix 4-1:0.0: probe with driver asix failed with error -32 [ 459.951891][ T5170] usb 4-1: USB disconnect, device number 16 [ 460.015227][ T9032] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.048239][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.056924][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.149802][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.157025][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.220639][ T8919] veth0_macvtap: entered promiscuous mode [ 460.280050][ T8919] veth1_macvtap: entered promiscuous mode [ 460.421192][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.465578][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.495271][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.526553][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.558862][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.592717][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.626369][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.663780][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.702226][ T8919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.921274][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.933929][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.944713][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.955485][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.965764][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.976640][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.986825][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.001491][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.020663][ T8919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.117792][ T8919] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.151846][ T8919] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.160940][ T8919] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.198076][ T8919] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.261570][ T928] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 461.421022][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 461.730242][ T9243] No control pipe specified [ 461.744336][ T928] usb 5-1: Using ep0 maxpacket: 8 [ 461.773116][ T928] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 461.781253][ T928] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.802211][ T928] usb 5-1: config 0 has no interface number 0 [ 461.829203][ T928] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 461.841438][ T29] audit: type=1400 audit(1718509694.684:239): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9240 comm="syz-executor.3" [ 461.896539][ T928] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 461.937309][ T9248] loop2: detected capacity change from 0 to 8 [ 461.984871][ T928] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 462.096412][ T928] usb 5-1: config 0 interface 52 has no altsetting 0 [ 462.147235][ T2826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.161241][ T928] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 462.208920][ T2826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.253322][ T928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.345734][ T928] usb 5-1: config 0 descriptor?? [ 462.428394][ T9248] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 462.437726][ T9248] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 462.494448][ T9032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.652383][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.692637][ T30] INFO: task syz-executor.0:7914 blocked for more than 144 seconds. [ 462.711637][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/06/16 03:48:15 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 462.737420][ T30] Not tainted 6.10.0-rc3-next-20240611-syzkaller #0 [ 462.796072][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.888299][ T30] task:syz-executor.0 state:D stack:27824 pid:7914 tgid:7895 ppid:5130 flags:0x00000006 [ 462.889747][ T9252] loop3: detected capacity change from 0 to 512 [ 462.921537][ T30] Call Trace: [ 462.924894][ T30] [ 462.927979][ T30] __schedule+0x17e8/0x4a20 [ 462.959363][ T30] ? __pfx___schedule+0x10/0x10 [ 462.963306][ T9252] ext2: Unknown parameter 'noacl' [ 462.964431][ T30] ? __pfx_lock_release+0x10/0x10 [ 462.991662][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 462.997750][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.021539][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 463.026753][ T30] ? schedule+0x90/0x320 [ 463.031045][ T30] schedule+0x14b/0x320 [ 463.059276][ T30] schedule_preempt_disabled+0x13/0x30 [ 463.078495][ T30] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 463.092371][ T30] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 463.098377][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 463.131484][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 463.136671][ T30] __down_write_common+0x1af/0x200 [ 463.169727][ T30] ? mnt_get_write_access+0x68/0x2b0 [ 463.178036][ T30] ? mnt_get_write_access+0x68/0x2b0 [ 463.191466][ T30] ? __pfx___down_write_common+0x10/0x10 [ 463.197186][ T30] do_renameat2+0x62c/0x13f0 [ 463.211546][ T30] ? __virt_addr_valid+0x183/0x520 [ 463.216903][ T30] ? __pfx_do_renameat2+0x10/0x10 [ 463.232574][ T30] ? __virt_addr_valid+0x183/0x520 [ 463.237749][ T30] ? __virt_addr_valid+0x44e/0x520 [ 463.251548][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 463.256661][ T30] ? __might_fault+0xc6/0x120 [ 463.271548][ T30] ? getname_flags+0x1e3/0x540 [ 463.277096][ T30] __x64_sys_rename+0x82/0x90 [ 463.301487][ T30] do_syscall_64+0xf3/0x230 [ 463.306464][ T30] ? clear_bhb_loop+0x35/0x90 [ 463.321553][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.327719][ T30] RIP: 0033:0x7ff337a7cea9 [ 463.342633][ T30] RSP: 002b:00007ff3387fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 463.361440][ T30] RAX: ffffffffffffffda RBX: 00007ff337bb4120 RCX: 00007ff337a7cea9 [ 463.369466][ T30] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000020000000 [ 463.391514][ T30] RBP: 00007ff337aebff4 R08: 0000000000000000 R09: 0000000000000000 [ 463.399542][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.431491][ T30] R13: 000000000000006e R14: 00007ff337bb4120 R15: 00007ffde3349578 [ 463.439904][ T30] [ 463.464929][ T30] [ 463.464929][ T30] Showing all locks held in the system: [ 463.501494][ T30] 1 lock held by khungtaskd/30: [ 463.506429][ T30] #0: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 463.567747][ T30] 2 locks held by kworker/u8:2/35: [ 463.591534][ T30] #0: ffff8880b943e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 463.621485][ T30] #1: ffff8880b9428948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 463.659053][ T30] 6 locks held by kworker/0:2/928: [ 463.691689][ T30] #0: ffff888018692548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 463.723036][ T30] #1: ffffc9000428fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 463.757612][ T30] #2: ffff888023d06190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 463.791696][ T30] #3: ffff88807ccfa190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 463.801235][ T30] #4: ffff888068292160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 463.848174][ T30] #5: ffff888021e72e68 (hcd->bandwidth_mutex){+.+.}-{3:3}, at: usb_set_interface+0x35e/0x13b0 [ 463.881709][ T30] 3 locks held by kworker/u8:10/2930: [ 463.887131][ T30] #0: ffff88802a0bf148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 463.961505][ T30] #1: ffffc9000a097d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 464.052329][ T30] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 464.091438][ T30] 2 locks held by getty/4849: [ 464.096235][ T30] #0: ffff88802aeb10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 464.146389][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 464.162000][ T30] 3 locks held by kworker/1:3/5124: [ 464.167305][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [