last executing test programs: 1m14.845546262s ago: executing program 1 (id=3262): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x601, &(0x7f0000000ac0)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x4, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x0, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0x1, @in=@local, 0x0, 0x8, 0x0, 0x0, 0xa}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x7fff}, {0x3}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}}, 0x0, @in6=@remote, 0x8000, 0x2, 0x0, 0x7, 0x2}}, 0xe8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) accept$alg(r6, 0x0, 0x0) r7 = dup(0xffffffffffffffff) ioctl$int_in(r7, 0x0, &(0x7f00000003c0)=0x7) setsockopt(r7, 0x1, 0x20, &(0x7f0000000580), 0x0) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffd8) getpgid(r2) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000240)={{0x0, 0x2}, {0x3}, 0x4, 0x4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000000000e4620200000000000095000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0) 1m13.018682922s ago: executing program 1 (id=3265): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000008d00)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = gettid() tkill(r2, 0x15) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000005840)='./file0\x00', 0x1000806, &(0x7f00000016c0)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYBLOB="2c666d61736b3d30303030b8463c983030303030303030303030303030362c696f6368617273652acf418b743d637e3737352c6769643d00", @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000027,errors=continue,errors=remount-ro,namecase=1,fmask=00000000000000000000003,umask=00000000000000000000003,allow_utime=00000000000000000000200,\x00'], 0x9, 0x1505, &(0x7f0000000180)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fchdir(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="003b09b765b040ae4b42889f00ae139228801d870b08000000c7000000d5000000000000", @ANYRES8], 0x1, 0x19c, &(0x7f0000000280)="$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") r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) 1m9.574329102s ago: executing program 4 (id=3273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a340000001f0a0703000000000000000002000000080003400000000a0900010073797a30000000000c0006"], 0x5c}}, 0x0) 1m9.430330115s ago: executing program 4 (id=3274): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800006005"]) 1m8.130120159s ago: executing program 1 (id=3278): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(0x0, 0x0, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) chdir(&(0x7f0000000140)='./file0\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0}, {@in6=@mcast1}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x1f, 0x10}, {0x0, 0x9, 0x2, 0x9, [0xe89, 0x2, 0x4, 0x0]}}}}, 0x1d) lremovexattr(0x0, &(0x7f0000000440)=@random={'os2.', '{-\x00'}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r6, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') setpriority(0x1, 0x2, 0x0) 1m8.064917208s ago: executing program 4 (id=3280): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$eJzs3U9sHNX9APA367+JTbwGfmDgR0ihFYGCHZJITW9BoB4Rl95BIaERhqKGHoiAmB4QlRBFQpwqDlRcKJVSpCKBKlWop7anVr31hHqhUpVKQT20SImr2G/Wuy/72PXYnrV3Px/p67dv3ux8v2M7zszs7NsAjKzG2tfjxxeKEN759O1HX36q+Pjasrtaaxxa+1rEXjOEMNHWL5LtfR4XXLn80qlubRGOrn0t++GxS63nzoQQVsKh8Flohg+Xlr/84N1HDn/02vQtb55/5pUd2v2WdD8AAGAYXfzT8t/u+8cfH5j/6uLBk2Gqtbw8Pm/G/kw87j8SD5TL4+VG6OwXbdFuMllvLEYjWW8sWW88yTOeyTeRbGcis95kj3xjbcu67ScAAADsReV5bTMUjcWOfqOxuLh+3n/N53OTxeJzZ5fPnBtQoQAAAEBl/76wdtOtEEIIIYQQQgghhjhW5wZ9BQIAAAAYNel8YddZ2d6Zulpba/aX/9LDje7Ph21Q9+//1+efHnD+LkY8//uv+osDAEB1w3o0We5XeRxdzmOQziM4ljxvs8f/jWQ745usMzev4F6ZbzBXZ/p93a1y9W/25zgoufrT+TB3q1z96Tydu1Wu/qma66gqV3+XKz+7Uq7+fTXXUVWu/v0111FVrv6ZmuuoKlf/bM11VJWr/4aa66gqV/+BmuuoKlf/XrmtNld/s+Y6qsrVP19zHVXl6r+x5jqqytV/U811VJWr/+aa6xiUO2Nbfh8OZtab6XJOt1fO8QAAAGDU/df8f0IIIUR7rN8CMfg6hBBCCCG2NS4M+gIEAAAAMHDl+wLKd72vRuX4WI/x8fbx6Y0VyvGJHs+f7DE+1WMcAAAACOG3r5+57a1iY767rc6HV84btS98fDVUmMconY9ws/m3Ou/ZVvPvlXnLAAAAGC3F9z67ev+j770w/9XFgyfbzn6vxvPdch7Q8Xht4JPYL+8LmE36RXkOfbIzTyOzXnp94Ibc9h7f4o4CAADACCvP35uhaCy2nXc3Q6OxuLhxPr4QJoozZ5dPH4n98vNZ/jA3MXVt+UM11w0AAAD0b+N8v/v5f/k5vgthslh87uzymXPr/dnW8olG+3WBuY3lRft1gWay/Ghm+bHYLz+/8wdz+9aWL5764fJT273zAAAAMCLOvXj+mSeXl0//yAMPPPCg9WDQf5kAAIDt9sUXb0/8+Njs79bf/78x/93V+OBQ7Dfj3H5/jsvL+wTK9wFc9379JzrzzOXWe75zvWay3liMqaTu6bbthLX5BjufN5/L1+zczmQm30ySbzbJl85TMJ6sX3SZSzB0mZ+wXG8uWZ7Owzie5CiS/Hd3yQUAAAClpReefX7p3IvnHzz77JNPn3769HPHjp747okTRx76zkNLa/f1L7Xf3Q8AAADsRRs3/Q66EgAAAAAAAAAAAAAAAAAAABhddXyc2KD3EQAAAEbdvy6EEFaEyET5AYODrkPs5lidGnwNwx3Bv0MhhBBCbDGc94mVEFZX00+aBwAAANhZVy6/dKq9vc5Ksa35WltrrjdXY96ynX3wr/PXolzt0sOd10v2b2s1jLq6f//l3635p7qOv//q9uafDht/+0Jff/8anRs42dHb12/ee5d+udDKH0K4fbzP/On+P95vxk6Hk/z3hv7yr76X5H+io9foN/99Sf79fea/bv+f7zdjp/tj/oXYP3xPv/k7d7H8LS33o99fgG8n+/9U6Dd/sv/NPhMmHoj5AWAUtf43X70w2EK2WXmUUB5Pz8R+ub/xcDOkdz9s9vi/kWxnfMuVd263PA66NfanW3V05i1ttv7y+zIb2xsq1pnaK3eV5Orfrp/jTsvVP1FzHVXl6p+suY6qcvV3P3vffXL1T9dcR1W5+vu+EDFgufr3ynXlXP0zNddRVa7+2ZrrqCpX/2b/Hx+UXP0Haq6jqlz9czXXUVWu/oqX1WqXq3++5jqqytV/Y811VJWr/6aa66gqV//NNdcxKHfENnc+XJ5/zsWxst9M+lNdvpd9vxgCAAAA7Kh/7sp5INquHAy8FiGEEEIIIYY//rO6btB1CCF2LlZXB3n1gUHb2XczA7Bb+fs/2vz8R5uf/2jz8+frlK/EF0m/NNZjfLzH+ESP8clkPP19neoxflOy3dXyumZ0c4/x/4t7kBs/0OP5t/YYX+gxfluP8dt7jN/RYxwAAIDRcEtsnR8CAADA8Hr5V5+88Zt7n7g8/9XFgyfD5HXzzh+J/an42vrrsZ/Oe1+aiK/5/yT2fxHb38f278n67j8BAACAnVd+TozX/wEAAGB4lZ9T6vwfAAAAhtd8bJ3/AwAAwPC6MbbO/wEAAGCIFdPdF8e2vC5wd2z7ndcPANj9/j+2d8b2YGzviu03YlseB9wT22/WVB8AsH1+/v2fnnir2Jjv/1gyfiUuL9vrrKxfKSganTP574vt/th+q8960s8D6Dd/6UCfeXYq/9wW8wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw6Ox9vX48YUihHc+ffvRn02+8Zdry+5qrXFo7WsRe80QwkTreeXoRv/XccUrl1861d5ejW0RjoYiFK3l4bFLrUwzIYSVcCh8Fprhw6XlLz9495HDH702fcub5595ZQe/BR37BwAAAMPofwEAAP//fccg7g==") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) 1m5.699801313s ago: executing program 1 (id=3284): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x2, 0x5535, &(0x7f000000af80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89901a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x297880, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000004180)=""/4096, 0x1000, 0x0) 1m5.494514923s ago: executing program 4 (id=3285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a340000001f0a0703000000000000000002000000080003400000000a0900010073797a30000000000c0006"], 0x5c}}, 0x0) 1m5.297950159s ago: executing program 4 (id=3287): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) sync_file_range(r8, 0x0, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)) 1m3.433566478s ago: executing program 1 (id=3294): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f0000000180)='./file0/file0/file0/file0/file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) setpriority(0x1, 0x0, 0x0) 1m2.267694281s ago: executing program 4 (id=3296): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r1, 0x0, 0x400000, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r1, 0x52e, 0x0, 0x0, 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r2, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1m0.165148149s ago: executing program 1 (id=3301): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 50.710997291s ago: executing program 0 (id=3325): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) mknod(&(0x7f0000000180)='./file0\x00', 0xffffc000, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000580)=0x3, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad4104c60000000f000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='netlink_extack\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1700000056002304000000000000000007000000"], 0x18}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) sendto$packet(r4, &(0x7f0000000080)="e5", 0x1, 0x0, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0xc0d4, &(0x7f0000002340)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r8, @ANYRES16=r4, @ANYRES64=r8, @ANYRES16, @ANYRES8=r3, @ANYBLOB="cd68e66f66e7e349e0a26f79fef3ed6c1a12f3da8264ca685c6d3cfc234ad710d2ea2eab7f5613e68ce99af8", @ANYBLOB="619caaaf88aad377c579a70819be5ddb2f17580f229376cbada0f021a536857a52f306d816e810ea86127cb870412898204671ac6208bb0c920cb5303c3db680715d60724cc1621b89aec35e84c707ac883e7eaa3cf2cd2a8c569205c5a38f728f4e8b3d901958d53b0c7233e945", @ANYRESDEC=0x0], 0x1, 0x273, &(0x7f00000005c0)="$eJzs3UFrE0EYxvFnNrFGW+raVgTxINWCJ2nrRbwI0m/gxZOoTYRiqKAV1IvVs/gBvPsV/BCexLPgzZPec4vMuxOzSbPZNCbuJv5/kLDJzjv7TnbS2TehRAD+W7d3vn+8/sPfnFRRRdJNKZJUk6qSzul87fn+wd5Bs1Ef1lHFIvzNKYl0R9rs7jcGhfo4iwhi/6iqpfRzmI7at6IzQBnYuz/xK/18JJ0M707bXysku8k7LDqBgrmWWnqh5aLzAAAUK6z/UVjnl8L1exRJG2HZ713/Z3wBbRWdQMFS679VWW3nz+8Z29Wt96yE8/ujTpU4zrEWlMysSk8CeVWl5RKderTXbFzbfdKsR3qrW0Gq2Zrd15Op25HO9s3RrtcH1KZDjD/2RRvDCT+G7Yz8Vyd7xHzus/vi7rlYH1T/c/1XbTt/muxMxX1nKsl/M7tHG2WctMoY5Vk7yIVwhGDoKCvqSyNtIfTZ8wFBnJenRa30RSWj28qJWh0YtZ0TtdYf1Z3N2ZHT5t67u25dP/VJO6nr/8i/2hsa5Z3p21jLMDOGjqdqLWNbT9wle+rw4sCW0dhDwvG900Pd0PKzl68eP2g2G09Lv+GTLkEaPRuvw4tZlnxG3ehMgrLkM7cbhU3a6l/PzCL+KOFf6570Ywby3cy88NddLqn/UvXKppVI/i4ecp3ezus81eNWRm2wYvensyu4Hs4+eliUy/oqYtSa6/JV6cooR0zEIc854Xb0Vff5/B8AAAAAAAAAAAAAAAAAAGDWTO5fDmrK2lX0GAEAAAAAAAAAAAAAAAAAAAAAmHWl+/3fO0oe8fu/wNT9DgAA///Yb3NK") r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r10, 0x80045503, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x0) write$FUSE_DIRENTPLUS(r11, &(0x7f0000000600)=ANY=[], 0x4000) 49.054710147s ago: executing program 0 (id=3331): socket$packet(0x11, 0x0, 0x300) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x15, 0x1, 0x2000000e) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x28}, 0x18) ioperm(0x0, 0x0, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x6}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x90, &(0x7f0000000340)=""/144, 0x0, 0x20}, 0x90) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 47.347806184s ago: executing program 0 (id=3333): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 47.269844882s ago: executing program 2 (id=3334): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_get$pid(0x0, 0xffffffffffffffff) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x2, 0x12, 0x0, 0x0, 0x2, 0x0, 0x400}, 0x10}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="dfff00000000000000030e"], 0x18}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000100)={0x2, [0x0, 0x0]}) r5 = io_uring_setup(0xc40, &(0x7f0000000100)) close(r5) clock_nanosleep(0x7, 0x0, &(0x7f00000000c0)={0x77359400}, 0xfffffffffffffffe) socket$inet6_udp(0xa, 0x2, 0x0) 46.971558809s ago: executing program 2 (id=3335): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r0], 0x1c}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x1000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x903d01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2778) 44.273193288s ago: executing program 2 (id=3336): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12f9c5}) 43.195432172s ago: executing program 2 (id=3337): bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x11501}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r0, 0x54, 0x0, 0xf, 0x0, 0x18) 43.017049365s ago: executing program 0 (id=3338): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='qnx4\x00', 0x0, 0x0) 41.769285015s ago: executing program 2 (id=3339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x4, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 41.530043414s ago: executing program 0 (id=3341): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000300)='big_key\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='d', 0x1041, 0xfffffffffffffffd) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0406619, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, r1, '\x00', @a}) 41.524769087s ago: executing program 2 (id=3342): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(r1, 0x7, &(0x7f0000000280)={0x3, 0x7}, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wg2\x00'}) ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000200)='bridge0\x00') keyctl$KEYCTL_MOVE(0x18, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) 39.080937453s ago: executing program 0 (id=3343): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="0406000000000000005872e7990000000000002463fce7e35da5f12631f4fecb508a32d951acc6bec733348c214f0bcc5a91abff6a20976dc9fd3155b678ce95368bcb796f312436f5886b478bd2d1bea98e3eae28b4f4ddf4909c79b7bbfb5967ee441318d04db956d3939f36367472ed103e09eb14e01b76e368ff7a18e50b567b67e5d85c5096a08a38"], 0x1a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100a20035000000560000022500000019000a00100000ad07fd17e5ffff080c38005100000000000a", 0x39}], 0xc) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04edd5377300ff3de8ffffff0102"], 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x8, 0x4) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) socket$nl_rdma(0x10, 0x3, 0x14) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) writev(r6, &(0x7f0000001740)=[{&(0x7f0000000100)='\nY', 0x2}], 0x1) setresuid(0x0, 0xee00, 0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xfec, &(0x7f0000001e00)=""/4076, 0x0, 0x52}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2600f7ff", @ANYRES16=r1], 0x14}}, 0x0) 10.621937786s ago: executing program 3 (id=3359): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) cachestat(r0, &(0x7f0000000040)={0x0, 0x4}, &(0x7f00000002c0), 0x0) 9.500703634s ago: executing program 3 (id=3360): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xd3, 0x75, 0x8, 0x20, 0xac8, 0x321, 0x6fbe, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xfe, 0x89}}]}}]}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x20108c0, &(0x7f0000006940)=ANY=[@ANYBLOB="2c696f636861727365743d6370313235312c71756f74612c6e6f71756f74610075737271756f74612c696e746567726974792c756d61736b3d307838383030303030303030302c6572726f72733d636f6e74696e75652c6e6f6569733f0fdf7db918939f697a652c6e6f71756f74612bde", @ANYRES8=0x0, @ANYRES8=0x0, @ANYBLOB="89564b6e1003edbe33b56d2ef1c8ac363a1f91862dd8c6bb961c9a525284e5d4d1bfdd74f562eb35d219540d1a7fb52cad6df095b9f955088fbccdfd8a8cdab49850d09a99f88d97344780", @ANYRES16=0x0], 0xfc, 0x6166, &(0x7f00000007c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fsync(r5) recvmmsg$unix(r3, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}], 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 5.474071715s ago: executing program 3 (id=3361): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xc4382, 0x0) r2 = dup(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendfile(r7, r2, 0x0, 0x8a002) 4.274030945s ago: executing program 3 (id=3362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) 2.485000464s ago: executing program 3 (id=3363): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) recvmmsg(r0, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000006, 0x0) shutdown(r0, 0x0) 0s ago: executing program 3 (id=3364): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@RTM_DELMDB={0x98, 0x55, 0xdb98ed7b5ced8fe5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x55, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@private1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast2}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, @MDBA_SET_ENTRY={0xfffffefe, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@empty}}}]}, 0x98}, 0x1, 0x8}, 0x0) kernel console output (not intermixed with test programs): f_write+0x10/0x10 [ 1726.157232][ C1] kernfs_fop_write_iter+0x3a1/0x500 [ 1726.157260][ C1] vfs_write+0xa72/0xc90 [ 1726.157294][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1726.157316][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1726.157370][ C1] ksys_write+0x1a0/0x2c0 [ 1726.157403][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1726.157431][ C1] ? do_syscall_64+0x100/0x230 [ 1726.157460][ C1] ? do_syscall_64+0xb6/0x230 [ 1726.157489][ C1] do_syscall_64+0xf3/0x230 [ 1726.157515][ C1] ? clear_bhb_loop+0x35/0x90 [ 1726.157539][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.157557][ C1] RIP: 0033:0x7fa96cd74a9f [ 1726.157572][ C1] RSP: 002b:00007ffe9b423a20 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1726.157591][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa96cd74a9f [ 1726.157604][ C1] RDX: 0000000000000001 RSI: 00007ffe9b423a70 RDI: 0000000000000005 [ 1726.157617][ C1] RBP: 00007fa96cde45b2 R08: 0000000000000000 R09: 00007ffe9b423877 [ 1726.157630][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1726.157642][ C1] R13: 00007ffe9b423a70 R14: 00007fa96da34620 R15: 0000000000000003 [ 1726.157674][ C1] [ 1726.157682][ C1] DEBUG: waiting rtnl_mutex for 5744 jiffies. [ 1726.157693][ C1] task:syz-executor state:D stack:20992 pid:18702 tgid:18702 ppid:1 flags:0x00004006 [ 1726.157721][ C1] Call Trace: [ 1726.157728][ C1] [ 1726.157741][ C1] __schedule+0x1800/0x4a60 [ 1726.157791][ C1] ? __pfx___schedule+0x10/0x10 [ 1726.157819][ C1] ? __pfx_lock_release+0x10/0x10 [ 1726.157846][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1726.157880][ C1] ? schedule+0x90/0x320 [ 1726.157902][ C1] schedule+0x14b/0x320 [ 1726.157929][ C1] schedule_preempt_disabled+0x13/0x30 [ 1726.157952][ C1] __mutex_lock+0x6a4/0xd70 [ 1726.157983][ C1] ? __mutex_lock+0x527/0xd70 [ 1726.158012][ C1] ? tun_chr_close+0x3e/0x1b0 [ 1726.158038][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1726.158078][ C1] ? get_rtnl_holder+0x144/0x190 [ 1726.158110][ C1] tun_chr_close+0x3e/0x1b0 [ 1726.158128][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1726.158148][ C1] __fput+0x24a/0x8a0 [ 1726.158186][ C1] task_work_run+0x24f/0x310 [ 1726.158213][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1726.158236][ C1] ? do_exit+0xa2a/0x27f0 [ 1726.158252][ C1] ? kmem_cache_free+0x145/0x350 [ 1726.158282][ C1] do_exit+0xa2f/0x27f0 [ 1726.158312][ C1] ? __pfx_do_exit+0x10/0x10 [ 1726.158334][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1726.158362][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1726.158392][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1726.158415][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1726.158445][ C1] do_group_exit+0x207/0x2c0 [ 1726.158462][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1726.158484][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1726.158512][ C1] get_signal+0x16a1/0x1740 [ 1726.158549][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1726.158569][ C1] ? __pfx_get_signal+0x10/0x10 [ 1726.158603][ C1] arch_do_signal_or_restart+0x96/0x830 [ 1726.158632][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1726.158655][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1726.158696][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1726.158724][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 1726.158754][ C1] do_syscall_64+0x100/0x230 [ 1726.158780][ C1] ? clear_bhb_loop+0x35/0x90 [ 1726.158804][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.158822][ C1] RIP: 0033:0x7fb144d77cac [ 1726.158836][ C1] RSP: 002b:00007ffce9d45100 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1726.158856][ C1] RAX: 0000000000000020 RBX: 00007fb145a34620 RCX: 00007fb144d77cac [ 1726.158869][ C1] RDX: 0000000000000020 RSI: 00007fb145a34670 RDI: 0000000000000003 [ 1726.158881][ C1] RBP: 0000000000000000 R08: 00007ffce9d45154 R09: 000000000000000c [ 1726.158894][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1726.158906][ C1] R13: 0000000000000000 R14: 00007fb145a34670 R15: 0000000000000000 [ 1726.158938][ C1] [ 1726.158946][ C1] [ 1726.158946][ C1] Showing all locks held in the system: [ 1726.158959][ C1] 2 locks held by kworker/u8:2/35: [ 1726.158975][ C1] 3 locks held by kworker/u8:4/63: [ 1726.158986][ C1] #0: ffff88802a07f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1726.159046][ C1] #1: ffffc900015efd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1726.159101][ C1] #2: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1726.159173][ C1] 1 lock held by dhcpcd/4893: [ 1726.159185][ C1] 2 locks held by getty/4985: [ 1726.159196][ C1] #0: ffff88802b4dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1726.159251][ C1] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1726.159305][ C1] 2 locks held by kworker/u8:14/9270: [ 1726.159318][ C1] 1 lock held by syz.3.1887/13425: [ 1726.159330][ C1] 3 locks held by kworker/0:8/14078: [ 1726.159341][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1726.159394][ C1] #1: ffffc90003ef7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1726.159447][ C1] #2: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1726.159495][ C1] 9 locks held by kworker/u8:8/16080: [ 1726.159506][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1726.159558][ C1] #1: ffffc90003a0fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1726.159611][ C1] #2: ffffffff8fc75b10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1726.159657][ C1] #3: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1726.159711][ C1] #4: ffff88806fca8d40 (team->team_lock_key#83){+.+.}-{3:3}, at: team_del_slave+0x32/0x1d0 [ 1726.159767][ C1] #5: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1726.159818][ C1] #6: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1726.159868][ C1] #7: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1726.159916][ C1] #8: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1726.159972][ C1] 1 lock held by syz.4.3296/18428: [ 1726.159985][ C1] 1 lock held by syz-executor/18702: [ 1726.159995][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1726.160048][ C1] 1 lock held by syz-executor/18705: [ 1726.160059][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1726.160108][ C1] 4 locks held by syz-executor/18734: [ 1726.160119][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1726.160178][ C1] #1: ffff88802bff9888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1726.160225][ C1] #2: ffff88802339c788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1726.160279][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 1726.160331][ C1] 7 locks held by syz-executor/18737: [ 1726.160341][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1726.160400][ C1] #1: ffff88802d0a8c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1726.160447][ C1] #2: ffff88802339c878 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1726.160499][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1726.160550][ C1] #4: ffff88805fb680e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1726.160600][ C1] #5: ffff88805fb6c250 (&devlink->lock_key#80){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1726.160659][ C1] #6: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 1726.160716][ C1] 4 locks held by syz-executor/18750: [ 1726.160727][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1726.160785][ C1] #1: ffff88802ffb8088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1726.160832][ C1] #2: ffff88802339c878 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1726.160885][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1726.160938][ C1] 2 locks held by syz-executor/18777: [ 1726.160949][ C1] #0: ffffffff8fc75b10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1726.161003][ C1] #1: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock_killable+0x26/0x150 [ 1726.161068][ C1] 1 lock held by syz-executor/18780: [ 1726.161079][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1726.161133][ C1] [ 1726.161139][ C1] ============================================= [ 1726.161139][ C1] [ 1727.184736][ C1] DEBUG: waiting rtnl_mutex for 5816 jiffies. [ 1727.184753][ C1] task:kworker/u8:4 state:D stack:18640 pid:63 tgid:63 ppid:2 flags:0x00004000 [ 1727.184784][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 1727.184810][ C1] Call Trace: [ 1727.184818][ C1] [ 1727.184831][ C1] __schedule+0x1800/0x4a60 [ 1727.184879][ C1] ? __pfx___schedule+0x10/0x10 [ 1727.184905][ C1] ? __pfx_lock_release+0x10/0x10 [ 1727.184950][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1727.184970][ C1] ? kthread_data+0x52/0xd0 [ 1727.184992][ C1] ? schedule+0x90/0x320 [ 1727.185013][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1727.185038][ C1] ? schedule+0x90/0x320 [ 1727.185059][ C1] schedule+0x14b/0x320 [ 1727.185083][ C1] schedule_preempt_disabled+0x13/0x30 [ 1727.185104][ C1] __mutex_lock+0x6a4/0xd70 [ 1727.185126][ C1] ? mark_lock+0x9a/0x360 [ 1727.185154][ C1] ? __mutex_lock+0x527/0xd70 [ 1727.185179][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 1727.185201][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1727.185237][ C1] ? get_rtnl_holder+0x144/0x190 [ 1727.185266][ C1] addrconf_dad_work+0xd0/0x16f0 [ 1727.185297][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1727.185318][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1727.185355][ C1] ? process_scheduled_works+0x945/0x1830 [ 1727.185376][ C1] process_scheduled_works+0xa2c/0x1830 [ 1727.185428][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1727.185460][ C1] ? assign_work+0x364/0x3d0 [ 1727.185488][ C1] worker_thread+0x86d/0xd40 [ 1727.185527][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1727.185554][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1727.185577][ C1] kthread+0x2f0/0x390 [ 1727.185593][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1727.185614][ C1] ? __pfx_kthread+0x10/0x10 [ 1727.185632][ C1] ret_from_fork+0x4b/0x80 [ 1727.185655][ C1] ? __pfx_kthread+0x10/0x10 [ 1727.185672][ C1] ret_from_fork_asm+0x1a/0x30 [ 1727.185711][ C1] [ 1727.185718][ C1] DEBUG: waiting rtnl_mutex for 5775 jiffies. [ 1727.185728][ C1] task:syz-executor state:D stack:20992 pid:18705 tgid:18705 ppid:1 flags:0x00004006 [ 1727.185754][ C1] Call Trace: [ 1727.185761][ C1] [ 1727.185773][ C1] __schedule+0x1800/0x4a60 [ 1727.185819][ C1] ? __pfx___schedule+0x10/0x10 [ 1727.185844][ C1] ? __pfx_lock_release+0x10/0x10 [ 1727.185869][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1727.185898][ C1] ? schedule+0x90/0x320 [ 1727.185919][ C1] schedule+0x14b/0x320 [ 1727.185948][ C1] schedule_preempt_disabled+0x13/0x30 [ 1727.185969][ C1] __mutex_lock+0x6a4/0xd70 [ 1727.185996][ C1] ? __mutex_lock+0x527/0xd70 [ 1727.186022][ C1] ? tun_chr_close+0x3e/0x1b0 [ 1727.186042][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1727.186078][ C1] ? get_rtnl_holder+0x144/0x190 [ 1727.186106][ C1] tun_chr_close+0x3e/0x1b0 [ 1727.186122][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1727.186140][ C1] __fput+0x24a/0x8a0 [ 1727.186175][ C1] task_work_run+0x24f/0x310 [ 1727.186199][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1727.186221][ C1] ? do_exit+0xa2a/0x27f0 [ 1727.186235][ C1] ? kmem_cache_free+0x145/0x350 [ 1727.186262][ C1] do_exit+0xa2f/0x27f0 [ 1727.186289][ C1] ? __pfx_do_exit+0x10/0x10 [ 1727.186305][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1727.186330][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1727.186357][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1727.186379][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1727.186405][ C1] do_group_exit+0x207/0x2c0 [ 1727.186421][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1727.186441][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1727.186467][ C1] get_signal+0x16a1/0x1740 [ 1727.186501][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1727.186519][ C1] ? __pfx_get_signal+0x10/0x10 [ 1727.186550][ C1] arch_do_signal_or_restart+0x96/0x830 [ 1727.186577][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1727.186597][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1727.186635][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1727.186661][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 1727.186688][ C1] do_syscall_64+0x100/0x230 [ 1727.186712][ C1] ? clear_bhb_loop+0x35/0x90 [ 1727.186734][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.186751][ C1] RIP: 0033:0x7f8c93f77cac [ 1727.186765][ C1] RSP: 002b:00007ffd00b7b310 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1727.186783][ C1] RAX: 0000000000000028 RBX: 00007f8c94c34620 RCX: 00007f8c93f77cac [ 1727.186796][ C1] RDX: 0000000000000028 RSI: 00007f8c94c34670 RDI: 0000000000000003 [ 1727.186808][ C1] RBP: 0000000000000000 R08: 00007ffd00b7b364 R09: 000000000000000c [ 1727.186819][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1727.186830][ C1] R13: 0000000000000000 R14: 00007f8c94c34670 R15: 0000000000000000 [ 1727.186859][ C1] [ 1727.186866][ C1] DEBUG: waiting rtnl_mutex for 5746 jiffies. [ 1727.186876][ C1] task:kworker/0:8 state:D stack:23680 pid:14078 tgid:14078 ppid:2 flags:0x00004000 [ 1727.186903][ C1] Workqueue: events linkwatch_event [ 1727.186921][ C1] Call Trace: [ 1727.186927][ C1] [ 1727.186942][ C1] __schedule+0x1800/0x4a60 [ 1727.186988][ C1] ? __pfx___schedule+0x10/0x10 [ 1727.187010][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1727.187034][ C1] ? __pfx_lock_release+0x10/0x10 [ 1727.187058][ C1] ? kick_pool+0x1bd/0x620 [ 1727.187087][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1727.187107][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1727.187129][ C1] ? schedule+0x90/0x320 [ 1727.187150][ C1] schedule+0x14b/0x320 [ 1727.187174][ C1] schedule_preempt_disabled+0x13/0x30 [ 1727.187195][ C1] __mutex_lock+0x6a4/0xd70 [ 1727.187222][ C1] ? __mutex_lock+0x527/0xd70 [ 1727.187248][ C1] ? linkwatch_event+0xe/0x60 [ 1727.187266][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1727.187300][ C1] ? get_rtnl_holder+0x144/0x190 [ 1727.187327][ C1] ? process_scheduled_works+0x945/0x1830 [ 1727.187348][ C1] linkwatch_event+0xe/0x60 [ 1727.187363][ C1] process_scheduled_works+0xa2c/0x1830 [ 1727.187416][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1727.187448][ C1] ? assign_work+0x364/0x3d0 [ 1727.187476][ C1] worker_thread+0x86d/0xd40 [ 1727.187514][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1727.187542][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1727.187564][ C1] kthread+0x2f0/0x390 [ 1727.187580][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1727.187601][ C1] ? __pfx_kthread+0x10/0x10 [ 1727.187619][ C1] ret_from_fork+0x4b/0x80 [ 1727.187640][ C1] ? __pfx_kthread+0x10/0x10 [ 1727.187657][ C1] ret_from_fork_asm+0x1a/0x30 [ 1727.187695][ C1] [ 1727.187703][ C1] DEBUG: waiting rtnl_mutex for 5736 jiffies. [ 1727.187711][ C1] task:syz-executor state:D stack:24992 pid:18780 tgid:18780 ppid:18779 flags:0x00000000 [ 1727.187737][ C1] Call Trace: [ 1727.187744][ C1] [ 1727.187756][ C1] __schedule+0x1800/0x4a60 [ 1727.187800][ C1] ? __pfx___schedule+0x10/0x10 [ 1727.187826][ C1] ? __pfx_lock_release+0x10/0x10 [ 1727.187850][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1727.187898][ C1] ? schedule+0x90/0x320 [ 1727.187919][ C1] schedule+0x14b/0x320 [ 1727.187950][ C1] schedule_preempt_disabled+0x13/0x30 [ 1727.187972][ C1] __mutex_lock+0x6a4/0xd70 [ 1727.188002][ C1] ? __mutex_lock+0x527/0xd70 [ 1727.188030][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1727.188056][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1727.188095][ C1] ? get_rtnl_holder+0x144/0x190 [ 1727.188124][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1727.188147][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1727.188173][ C1] ? __lock_acquire+0x1384/0x2050 [ 1727.188199][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1727.188243][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1727.188271][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1727.188298][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1727.188351][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1727.188380][ C1] netlink_unicast+0x7f6/0x990 [ 1727.188414][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1727.188435][ C1] ? __virt_addr_valid+0x183/0x530 [ 1727.188457][ C1] ? __check_object_size+0x49c/0x900 [ 1727.188478][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1727.188507][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1727.188547][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1727.188577][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1727.188603][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1727.188620][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1727.188641][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1727.188665][ C1] __sock_sendmsg+0x221/0x270 [ 1727.188694][ C1] __sys_sendto+0x3a4/0x4f0 [ 1727.188720][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1727.188769][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1727.188797][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1727.188824][ C1] ? exc_page_fault+0x590/0x8c0 [ 1727.188850][ C1] __x64_sys_sendto+0xde/0x100 [ 1727.188873][ C1] do_syscall_64+0xf3/0x230 [ 1727.188898][ C1] ? clear_bhb_loop+0x35/0x90 [ 1727.188920][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.188945][ C1] RIP: 0033:0x7f10b6377cac [ 1727.188959][ C1] RSP: 002b:00007ffec80227f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1727.188977][ C1] RAX: ffffffffffffffda RBX: 00007f10b7034620 RCX: 00007f10b6377cac [ 1727.188991][ C1] RDX: 0000000000000028 RSI: 00007f10b7034670 RDI: 0000000000000003 [ 1727.189003][ C1] RBP: 0000000000000000 R08: 00007ffec8022844 R09: 000000000000000c [ 1727.189015][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1727.189027][ C1] R13: 0000000000000000 R14: 00007f10b7034670 R15: 0000000000000000 [ 1727.189069][ C1] [ 1727.189077][ C1] DEBUG: waiting rtnl_mutex for 5873 jiffies. [ 1727.189087][ C1] task:syz-executor state:D stack:24992 pid:18777 tgid:18777 ppid:18776 flags:0x00004002 [ 1727.189123][ C1] Call Trace: [ 1727.189129][ C1] [ 1727.189140][ C1] __schedule+0x1800/0x4a60 [ 1727.189183][ C1] ? __pfx___schedule+0x10/0x10 [ 1727.189207][ C1] ? __pfx_lock_release+0x10/0x10 [ 1727.189230][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1727.189258][ C1] ? schedule+0x90/0x320 [ 1727.189277][ C1] schedule+0x14b/0x320 [ 1727.189300][ C1] schedule_preempt_disabled+0x13/0x30 [ 1727.189338][ C1] __mutex_lock+0x6a4/0xd70 [ 1727.189366][ C1] ? __mutex_lock+0x527/0xd70 [ 1727.189392][ C1] ? rtnl_lock_killable+0x26/0x150 [ 1727.189418][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1727.189447][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 1727.189463][ C1] ? alloc_netdev_mqs+0xb9d/0x1000 [ 1727.189488][ C1] ? get_rtnl_holder+0x144/0x190 [ 1727.189516][ C1] rtnl_lock_killable+0x26/0x150 [ 1727.189544][ C1] register_netdev+0x13/0x50 [ 1727.189562][ C1] ip6gre_init_net+0x228/0x300 [ 1727.189590][ C1] ops_init+0x359/0x610 [ 1727.189616][ C1] setup_net+0x515/0xca0 [ 1727.189639][ C1] ? __pfx_down_read_killable+0x10/0x10 [ 1727.189661][ C1] ? __pfx_setup_net+0x10/0x10 [ 1727.189697][ C1] copy_net_ns+0x4e2/0x7b0 [ 1727.189728][ C1] create_new_namespaces+0x425/0x7b0 [ 1727.189753][ C1] ? bpf_lsm_capable+0x9/0x10 [ 1727.189784][ C1] unshare_nsproxy_namespaces+0x124/0x180 [ 1727.189809][ C1] ksys_unshare+0x619/0xc10 [ 1727.189836][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 1727.189850][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1727.189881][ C1] ? do_syscall_64+0x100/0x230 [ 1727.189912][ C1] __x64_sys_unshare+0x38/0x40 [ 1727.189927][ C1] do_syscall_64+0xf3/0x230 [ 1727.189954][ C1] ? clear_bhb_loop+0x35/0x90 [ 1727.189975][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.189991][ C1] RIP: 0033:0x7f5760b77677 [ 1727.190004][ C1] RSP: 002b:00007ffc61df7f08 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1727.190021][ C1] RAX: ffffffffffffffda RBX: 00007f5760d05f20 RCX: 00007f5760b77677 [ 1727.190034][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1727.190045][ C1] RBP: 00007f5760d06a18 R08: 0000000000000000 R09: 0000000000000000 [ 1727.190056][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 1727.190067][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1727.190095][ C1] [ 1727.190103][ C1] DEBUG: holding rtnl_mutex for 5856 jiffies. [ 1727.190112][ C1] task:kworker/u8:8 state:R running task stack:22064 pid:16080 tgid:16080 ppid:2 flags:0x00004008 [ 1727.190143][ C1] Workqueue: netns cleanup_net [ 1727.190158][ C1] Call Trace: [ 1727.190166][ C1] [ 1727.190174][ C1] sched_show_task+0x506/0x6d0 [ 1727.190194][ C1] ? report_rtnl_holders+0x2a5/0x400 [ 1727.190217][ C1] ? __pfx__printk+0x10/0x10 [ 1727.190240][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 1727.190258][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1727.190280][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1727.190309][ C1] report_rtnl_holders+0x327/0x400 [ 1727.190339][ C1] call_timer_fn+0x18e/0x650 [ 1727.190358][ C1] ? call_timer_fn+0xc0/0x650 [ 1727.190374][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1727.190395][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1727.190416][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1727.190439][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1727.190460][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1727.190480][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1727.190500][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1727.190521][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1727.190543][ C1] __run_timer_base+0x66a/0x8e0 [ 1727.190582][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1727.190614][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1727.190645][ C1] run_timer_softirq+0xb7/0x170 [ 1727.190663][ C1] handle_softirqs+0x2c4/0x970 [ 1727.190690][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 1727.190716][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1727.190754][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 1727.190780][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 1727.190800][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1727.190830][ C1] irq_exit_rcu+0x9/0x30 [ 1727.190848][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1727.190868][ C1] [ 1727.190874][ C1] [ 1727.190883][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1727.190899][ C1] RIP: 0010:console_flush_all+0x9f7/0xf50 [ 1727.190917][ C1] Code: 20 00 90 0f 0b 90 e9 f3 f9 ff ff e8 83 1c 20 00 e8 8e a7 45 0a 4d 85 f6 74 c0 e8 74 1c 20 00 fb 49 bd 00 00 00 00 00 fc ff df <43> 80 3c 2f 00 48 8b 5c 24 30 74 08 48 89 df e8 e5 a0 87 00 4c 8b [ 1727.190931][ C1] RSP: 0018:ffffc90003a0eec0 EFLAGS: 00000293 [ 1727.190949][ C1] RAX: ffffffff8173aeac RBX: 0000000000000000 RCX: ffff8880689e5a00 [ 1727.190961][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1727.190971][ C1] RBP: ffffc90003a0f050 R08: ffffffff8173ae53 R09: 1ffffffff26e6b00 [ 1727.190983][ C1] R10: dffffc0000000000 R11: fffffbfff26e6b01 R12: ffffffff8f1328e0 [ 1727.190995][ C1] R13: dffffc0000000000 R14: 0000000000000200 R15: 1ffffffff1e26527 [ 1727.191031][ C1] ? console_flush_all+0x993/0xf50 [ 1727.191050][ C1] ? console_flush_all+0x9ec/0xf50 [ 1727.191084][ C1] ? console_flush_all+0x147/0xf50 [ 1727.191111][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1727.191134][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1727.191162][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1727.191192][ C1] console_unlock+0x13b/0x4d0 [ 1727.191217][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1727.191234][ C1] ? _printk+0xd5/0x120 [ 1727.191255][ C1] ? _printk+0xd5/0x120 [ 1727.191276][ C1] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 1727.191312][ C1] vprintk_emit+0x7a1/0x900 [ 1727.191337][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1727.191363][ C1] ? mark_lock+0x9a/0x360 [ 1727.191395][ C1] _printk+0xd5/0x120 [ 1727.191427][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1727.191450][ C1] ? __netdev_printk+0x19e/0x4d0 [ 1727.191469][ C1] ? __pfx__printk+0x10/0x10 [ 1727.191493][ C1] ? __netdev_printk+0x1c2/0x4d0 [ 1727.191519][ C1] netdev_info+0x122/0x170 [ 1727.191545][ C1] ? __pfx_netdev_info+0x10/0x10 [ 1727.191576][ C1] ? team_port_del+0xab3/0xcc0 [ 1727.191601][ C1] team_port_del+0xb57/0xcc0 [ 1727.191630][ C1] ? __pfx_team_port_del+0x10/0x10 [ 1727.191648][ C1] ? bond_netdev_event+0xdd/0xf20 [ 1727.191685][ C1] ? __asan_memset+0x23/0x50 [ 1727.191713][ C1] team_del_slave+0x3d/0x1d0 [ 1727.191735][ C1] team_device_event+0x200/0x5b0 [ 1727.191755][ C1] ? notifier_call_chain+0x162/0x3e0 [ 1727.191779][ C1] notifier_call_chain+0x19f/0x3e0 [ 1727.191807][ C1] unregister_netdevice_many_notify+0xd81/0x1c40 [ 1727.191842][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1727.191867][ C1] ? batadv_hash_remove+0x504/0x680 [ 1727.191899][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1727.191925][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1727.191952][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1727.191984][ C1] ? __pfx___might_resched+0x10/0x10 [ 1727.192005][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1727.192036][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1727.192056][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1727.192081][ C1] cleanup_net+0x89d/0xcc0 [ 1727.192102][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1727.192130][ C1] ? process_scheduled_works+0x945/0x1830 [ 1727.192150][ C1] process_scheduled_works+0xa2c/0x1830 [ 1727.192199][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1727.192229][ C1] ? assign_work+0x364/0x3d0 [ 1727.192256][ C1] worker_thread+0x86d/0xd40 [ 1727.192286][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1727.192310][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1727.192336][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1727.192357][ C1] kthread+0x2f0/0x390 [ 1727.192372][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1727.192392][ C1] ? __pfx_kthread+0x10/0x10 [ 1727.192409][ C1] ret_from_fork+0x4b/0x80 [ 1727.192429][ C1] ? __pfx_kthread+0x10/0x10 [ 1727.192445][ C1] ret_from_fork_asm+0x1a/0x30 [ 1727.192481][ C1] [ 1727.192488][ C1] DEBUG: waiting rtnl_mutex for 5849 jiffies. [ 1727.192496][ C1] task:syz-executor state:D stack:21728 pid:18737 tgid:18737 ppid:18736 flags:0x00004002 [ 1727.192521][ C1] Call Trace: [ 1727.192528][ C1] [ 1727.192539][ C1] __schedule+0x1800/0x4a60 [ 1727.192581][ C1] ? __pfx___schedule+0x10/0x10 [ 1727.192605][ C1] ? __pfx_lock_release+0x10/0x10 [ 1727.192628][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1727.192656][ C1] ? schedule+0x90/0x320 [ 1727.192675][ C1] schedule+0x14b/0x320 [ 1727.192697][ C1] schedule_preempt_disabled+0x13/0x30 [ 1727.192716][ C1] __mutex_lock+0x6a4/0xd70 [ 1727.192742][ C1] ? __mutex_lock+0x527/0xd70 [ 1727.192767][ C1] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 1727.192792][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1727.192825][ C1] ? get_rtnl_holder+0x144/0x190 [ 1727.192851][ C1] unregister_netdevice_notifier_net+0x89/0x3a0 [ 1727.192877][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1727.192896][ C1] ? mntput_no_expire+0x2da/0x850 [ 1727.192917][ C1] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 1727.192952][ C1] ? __pfx_mntput_no_expire+0x10/0x10 [ 1727.192978][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1727.192996][ C1] ? simple_release_fs+0x9c/0xd0 [ 1727.193020][ C1] nsim_dev_hwstats_exit+0x81/0x290 [ 1727.193041][ C1] ? kfree+0x149/0x360 [ 1727.193063][ C1] nsim_dev_reload_destroy+0x2ad/0x490 [ 1727.193091][ C1] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1727.193109][ C1] nsim_drv_remove+0x58/0x160 [ 1727.193133][ C1] device_release_driver_internal+0x4a9/0x7c0 [ 1727.193162][ C1] bus_remove_device+0x34f/0x420 [ 1727.193191][ C1] device_del+0x57a/0x9b0 [ 1727.193217][ C1] ? __pfx_device_del+0x10/0x10 [ 1727.193243][ C1] device_unregister+0x20/0xc0 [ 1727.193260][ C1] del_device_store+0x363/0x480 [ 1727.193283][ C1] ? __pfx_del_device_store+0x10/0x10 [ 1727.193307][ C1] ? sysfs_kf_write+0x182/0x2a0 [ 1727.193325][ C1] ? bus_attr_store+0x4f/0xa0 [ 1727.193349][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1727.193366][ C1] kernfs_fop_write_iter+0x3a1/0x500 [ 1727.193390][ C1] vfs_write+0xa72/0xc90 [ 1727.193417][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1727.193436][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1727.193481][ C1] ksys_write+0x1a0/0x2c0 [ 1727.193509][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1727.193533][ C1] ? do_syscall_64+0x100/0x230 [ 1727.193558][ C1] ? do_syscall_64+0xb6/0x230 [ 1727.193583][ C1] do_syscall_64+0xf3/0x230 [ 1727.193605][ C1] ? clear_bhb_loop+0x35/0x90 [ 1727.193624][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.193640][ C1] RIP: 0033:0x7fa96cd74a9f [ 1727.193652][ C1] RSP: 002b:00007ffe9b423a20 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1727.193668][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa96cd74a9f [ 1727.193680][ C1] RDX: 0000000000000001 RSI: 00007ffe9b423a70 RDI: 0000000000000005 [ 1727.193690][ C1] RBP: 00007fa96cde45b2 R08: 0000000000000000 R09: 00007ffe9b423877 [ 1727.193701][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1727.193711][ C1] R13: 00007ffe9b423a70 R14: 00007fa96da34620 R15: 0000000000000003 [ 1727.193739][ C1] [ 1727.193746][ C1] DEBUG: waiting rtnl_mutex for 5847 jiffies. [ 1727.193754][ C1] task:syz-executor state:D stack:20992 pid:18702 tgid:18702 ppid:1 flags:0x00004006 [ 1727.193778][ C1] Call Trace: [ 1727.193784][ C1] [ 1727.193795][ C1] __schedule+0x1800/0x4a60 [ 1727.193837][ C1] ? __pfx___schedule+0x10/0x10 [ 1727.193861][ C1] ? __pfx_lock_release+0x10/0x10 [ 1727.193884][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1727.193912][ C1] ? schedule+0x90/0x320 [ 1727.193931][ C1] schedule+0x14b/0x320 [ 1727.193957][ C1] schedule_preempt_disabled+0x13/0x30 [ 1727.193977][ C1] __mutex_lock+0x6a4/0xd70 [ 1727.194003][ C1] ? __mutex_lock+0x527/0xd70 [ 1727.194027][ C1] ? tun_chr_close+0x3e/0x1b0 [ 1727.194087][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1727.194140][ C1] ? get_rtnl_holder+0x144/0x190 [ 1727.194175][ C1] tun_chr_close+0x3e/0x1b0 [ 1727.194190][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1727.194207][ C1] __fput+0x24a/0x8a0 [ 1727.194239][ C1] task_work_run+0x24f/0x310 [ 1727.194262][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1727.194282][ C1] ? do_exit+0xa2a/0x27f0 [ 1727.194296][ C1] ? kmem_cache_free+0x145/0x350 [ 1727.194320][ C1] do_exit+0xa2f/0x27f0 [ 1727.194345][ C1] ? __pfx_do_exit+0x10/0x10 [ 1727.194360][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1727.194402][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1727.194428][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1727.194450][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1727.194477][ C1] do_group_exit+0x207/0x2c0 [ 1727.194492][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1727.194512][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1727.194537][ C1] get_signal+0x16a1/0x1740 [ 1727.194571][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1727.194589][ C1] ? __pfx_get_signal+0x10/0x10 [ 1727.194620][ C1] arch_do_signal_or_restart+0x96/0x830 [ 1727.194646][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1727.194666][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1727.194703][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1727.194729][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 1727.194756][ C1] do_syscall_64+0x100/0x230 [ 1727.194780][ C1] ? clear_bhb_loop+0x35/0x90 [ 1727.194800][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.194817][ C1] RIP: 0033:0x7fb144d77cac [ 1727.194830][ C1] RSP: 002b:00007ffce9d45100 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1727.194848][ C1] RAX: 0000000000000020 RBX: 00007fb145a34620 RCX: 00007fb144d77cac [ 1727.194860][ C1] RDX: 0000000000000020 RSI: 00007fb145a34670 RDI: 0000000000000003 [ 1727.194872][ C1] RBP: 0000000000000000 R08: 00007ffce9d45154 R09: 000000000000000c [ 1727.194883][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1727.194894][ C1] R13: 0000000000000000 R14: 00007fb145a34670 R15: 0000000000000000 [ 1727.194923][ C1] [ 1727.194931][ C1] [ 1727.194931][ C1] Showing all locks held in the system: [ 1727.194949][ C1] 2 locks held by kworker/u8:2/35: [ 1727.194964][ C1] 3 locks held by kworker/u8:4/63: [ 1727.194974][ C1] #0: ffff88802a07f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1727.195025][ C1] #1: ffffc900015efd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1727.195075][ C1] #2: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1727.195144][ C1] 1 lock held by dhcpcd/4893: [ 1727.195155][ C1] 2 locks held by getty/4985: [ 1727.195165][ C1] #0: ffff88802b4dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1727.195234][ C1] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1727.195284][ C1] 2 locks held by kworker/u8:14/9270: [ 1727.195297][ C1] 1 lock held by syz.3.1887/13425: [ 1727.195308][ C1] 3 locks held by kworker/0:8/14078: [ 1727.195319][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1727.195370][ C1] #1: ffffc90003ef7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1727.195422][ C1] #2: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1727.195468][ C1] 9 locks held by kworker/u8:8/16080: [ 1727.195478][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1727.195529][ C1] #1: ffffc90003a0fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1727.195590][ C1] #2: ffffffff8fc75b10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1727.195631][ C1] #3: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1727.195681][ C1] #4: ffff88806fca8d40 (team->team_lock_key#83){+.+.}-{3:3}, at: team_del_slave+0x32/0x1d0 [ 1727.195731][ C1] #5: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1727.195777][ C1] #6: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1727.195822][ C1] #7: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1727.195866][ C1] #8: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1727.195916][ C1] 1 lock held by syz.4.3296/18428: [ 1727.195927][ C1] 1 lock held by syz-executor/18702: [ 1727.195941][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1727.195984][ C1] 1 lock held by syz-executor/18705: [ 1727.195994][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1727.196056][ C1] 4 locks held by syz-executor/18734: [ 1727.196067][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1727.196124][ C1] #1: ffff88802bff9888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1727.196169][ C1] #2: ffff88802339c788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1727.196220][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 1727.196270][ C1] 7 locks held by syz-executor/18737: [ 1727.196281][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1727.196356][ C1] #1: ffff88802d0a8c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1727.196403][ C1] #2: ffff88802339c878 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1727.196456][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1727.196507][ C1] #4: ffff88805fb680e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1727.196557][ C1] #5: ffff88805fb6c250 (&devlink->lock_key#80){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1727.196617][ C1] #6: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 1727.196674][ C1] 4 locks held by syz-executor/18750: [ 1727.196685][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1727.196743][ C1] #1: ffff88802ffb8088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1727.196790][ C1] #2: ffff88802339c878 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1727.196843][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1727.196897][ C1] 2 locks held by syz-executor/18777: [ 1727.196908][ C1] #0: ffffffff8fc75b10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1727.196965][ C1] #1: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock_killable+0x26/0x150 [ 1727.197021][ C1] 1 lock held by syz-executor/18780: [ 1727.197031][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1727.197085][ C1] [ 1727.197091][ C1] ============================================= [ 1727.197091][ C1] [ 1728.226992][ C1] DEBUG: waiting rtnl_mutex for 5920 jiffies. [ 1728.227009][ C1] task:kworker/u8:4 state:D stack:18640 pid:63 tgid:63 ppid:2 flags:0x00004000 [ 1728.227041][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 1728.227069][ C1] Call Trace: [ 1728.227077][ C1] [ 1728.227091][ C1] __schedule+0x1800/0x4a60 [ 1728.227142][ C1] ? __pfx___schedule+0x10/0x10 [ 1728.227169][ C1] ? __pfx_lock_release+0x10/0x10 [ 1728.227197][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1728.227220][ C1] ? kthread_data+0x52/0xd0 [ 1728.227243][ C1] ? schedule+0x90/0x320 [ 1728.227266][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1728.227293][ C1] ? schedule+0x90/0x320 [ 1728.227315][ C1] schedule+0x14b/0x320 [ 1728.227341][ C1] schedule_preempt_disabled+0x13/0x30 [ 1728.227363][ C1] __mutex_lock+0x6a4/0xd70 [ 1728.227387][ C1] ? mark_lock+0x9a/0x360 [ 1728.227416][ C1] ? __mutex_lock+0x527/0xd70 [ 1728.227443][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 1728.227467][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1728.227505][ C1] ? get_rtnl_holder+0x144/0x190 [ 1728.227536][ C1] addrconf_dad_work+0xd0/0x16f0 [ 1728.227569][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1728.227592][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1728.227631][ C1] ? process_scheduled_works+0x945/0x1830 [ 1728.227654][ C1] process_scheduled_works+0xa2c/0x1830 [ 1728.227710][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1728.227745][ C1] ? assign_work+0x364/0x3d0 [ 1728.227775][ C1] worker_thread+0x86d/0xd40 [ 1728.227816][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1728.227847][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1728.227871][ C1] kthread+0x2f0/0x390 [ 1728.227906][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1728.227941][ C1] ? __pfx_kthread+0x10/0x10 [ 1728.227960][ C1] ret_from_fork+0x4b/0x80 [ 1728.227985][ C1] ? __pfx_kthread+0x10/0x10 [ 1728.228003][ C1] ret_from_fork_asm+0x1a/0x30 [ 1728.228059][ C1] [ 1728.228067][ C1] DEBUG: waiting rtnl_mutex for 5879 jiffies. [ 1728.228078][ C1] task:syz-executor state:D stack:20992 pid:18705 tgid:18705 ppid:1 flags:0x00004006 [ 1728.228106][ C1] Call Trace: [ 1728.228113][ C1] [ 1728.228126][ C1] __schedule+0x1800/0x4a60 [ 1728.228174][ C1] ? __pfx___schedule+0x10/0x10 [ 1728.228202][ C1] ? __pfx_lock_release+0x10/0x10 [ 1728.228228][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1728.228260][ C1] ? schedule+0x90/0x320 [ 1728.228282][ C1] schedule+0x14b/0x320 [ 1728.228308][ C1] schedule_preempt_disabled+0x13/0x30 [ 1728.228330][ C1] __mutex_lock+0x6a4/0xd70 [ 1728.228360][ C1] ? __mutex_lock+0x527/0xd70 [ 1728.228388][ C1] ? tun_chr_close+0x3e/0x1b0 [ 1728.228409][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1728.228448][ C1] ? get_rtnl_holder+0x144/0x190 [ 1728.228478][ C1] tun_chr_close+0x3e/0x1b0 [ 1728.228495][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1728.228515][ C1] __fput+0x24a/0x8a0 [ 1728.228551][ C1] task_work_run+0x24f/0x310 [ 1728.228578][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1728.228601][ C1] ? do_exit+0xa2a/0x27f0 [ 1728.228617][ C1] ? kmem_cache_free+0x145/0x350 [ 1728.228645][ C1] do_exit+0xa2f/0x27f0 [ 1728.228673][ C1] ? __pfx_do_exit+0x10/0x10 [ 1728.228691][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1728.228718][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1728.228746][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1728.228770][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1728.228798][ C1] do_group_exit+0x207/0x2c0 [ 1728.228815][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1728.228837][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1728.228865][ C1] get_signal+0x16a1/0x1740 [ 1728.228901][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1728.228921][ C1] ? __pfx_get_signal+0x10/0x10 [ 1728.228959][ C1] arch_do_signal_or_restart+0x96/0x830 [ 1728.228987][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1728.229025][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1728.229062][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1728.229099][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 1728.229125][ C1] do_syscall_64+0x100/0x230 [ 1728.229148][ C1] ? clear_bhb_loop+0x35/0x90 [ 1728.229168][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.229184][ C1] RIP: 0033:0x7f8c93f77cac [ 1728.229198][ C1] RSP: 002b:00007ffd00b7b310 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1728.229214][ C1] RAX: 0000000000000028 RBX: 00007f8c94c34620 RCX: 00007f8c93f77cac [ 1728.229226][ C1] RDX: 0000000000000028 RSI: 00007f8c94c34670 RDI: 0000000000000003 [ 1728.229237][ C1] RBP: 0000000000000000 R08: 00007ffd00b7b364 R09: 000000000000000c [ 1728.229248][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1728.229258][ C1] R13: 0000000000000000 R14: 00007f8c94c34670 R15: 0000000000000000 [ 1728.229286][ C1] [ 1728.229292][ C1] DEBUG: waiting rtnl_mutex for 5850 jiffies. [ 1728.229301][ C1] task:kworker/0:8 state:D stack:23680 pid:14078 tgid:14078 ppid:2 flags:0x00004000 [ 1728.229327][ C1] Workqueue: events linkwatch_event [ 1728.229343][ C1] Call Trace: [ 1728.229349][ C1] [ 1728.229360][ C1] __schedule+0x1800/0x4a60 [ 1728.229402][ C1] ? __pfx___schedule+0x10/0x10 [ 1728.229424][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1728.229446][ C1] ? __pfx_lock_release+0x10/0x10 [ 1728.229468][ C1] ? kick_pool+0x1bd/0x620 [ 1728.229495][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1728.229514][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1728.229536][ C1] ? schedule+0x90/0x320 [ 1728.229555][ C1] schedule+0x14b/0x320 [ 1728.229577][ C1] schedule_preempt_disabled+0x13/0x30 [ 1728.229596][ C1] __mutex_lock+0x6a4/0xd70 [ 1728.229623][ C1] ? __mutex_lock+0x527/0xd70 [ 1728.229647][ C1] ? linkwatch_event+0xe/0x60 [ 1728.229663][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1728.229695][ C1] ? get_rtnl_holder+0x144/0x190 [ 1728.229720][ C1] ? process_scheduled_works+0x945/0x1830 [ 1728.229740][ C1] linkwatch_event+0xe/0x60 [ 1728.229754][ C1] process_scheduled_works+0xa2c/0x1830 [ 1728.229803][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1728.229834][ C1] ? assign_work+0x364/0x3d0 [ 1728.229860][ C1] worker_thread+0x86d/0xd40 [ 1728.229895][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1728.229921][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1728.229945][ C1] kthread+0x2f0/0x390 [ 1728.229960][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1728.229980][ C1] ? __pfx_kthread+0x10/0x10 [ 1728.229997][ C1] ret_from_fork+0x4b/0x80 [ 1728.230017][ C1] ? __pfx_kthread+0x10/0x10 [ 1728.230032][ C1] ret_from_fork_asm+0x1a/0x30 [ 1728.230069][ C1] [ 1728.230075][ C1] DEBUG: waiting rtnl_mutex for 5840 jiffies. [ 1728.230084][ C1] task:syz-executor state:D stack:24992 pid:18780 tgid:18780 ppid:18779 flags:0x00000000 [ 1728.230109][ C1] Call Trace: [ 1728.230115][ C1] [ 1728.230126][ C1] __schedule+0x1800/0x4a60 [ 1728.230168][ C1] ? __pfx___schedule+0x10/0x10 [ 1728.230192][ C1] ? __pfx_lock_release+0x10/0x10 [ 1728.230214][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1728.230242][ C1] ? schedule+0x90/0x320 [ 1728.230262][ C1] schedule+0x14b/0x320 [ 1728.230284][ C1] schedule_preempt_disabled+0x13/0x30 [ 1728.230304][ C1] __mutex_lock+0x6a4/0xd70 [ 1728.230330][ C1] ? __mutex_lock+0x527/0xd70 [ 1728.230354][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1728.230377][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1728.230410][ C1] ? get_rtnl_holder+0x144/0x190 [ 1728.230436][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1728.230456][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1728.230479][ C1] ? __lock_acquire+0x1384/0x2050 [ 1728.230502][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1728.230541][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1728.230565][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1728.230589][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1728.230635][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1728.230660][ C1] netlink_unicast+0x7f6/0x990 [ 1728.230690][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1728.230709][ C1] ? __virt_addr_valid+0x183/0x530 [ 1728.230728][ C1] ? __check_object_size+0x49c/0x900 [ 1728.230746][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1728.230790][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1728.230828][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1728.230856][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1728.230880][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1728.230895][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1728.230915][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1728.230942][ C1] __sock_sendmsg+0x221/0x270 [ 1728.230969][ C1] __sys_sendto+0x3a4/0x4f0 [ 1728.230993][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1728.231038][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1728.231065][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1728.231089][ C1] ? exc_page_fault+0x590/0x8c0 [ 1728.231114][ C1] __x64_sys_sendto+0xde/0x100 [ 1728.231135][ C1] do_syscall_64+0xf3/0x230 [ 1728.231159][ C1] ? clear_bhb_loop+0x35/0x90 [ 1728.231179][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.231196][ C1] RIP: 0033:0x7f10b6377cac [ 1728.231209][ C1] RSP: 002b:00007ffec80227f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1728.231226][ C1] RAX: ffffffffffffffda RBX: 00007f10b7034620 RCX: 00007f10b6377cac [ 1728.231239][ C1] RDX: 0000000000000028 RSI: 00007f10b7034670 RDI: 0000000000000003 [ 1728.231250][ C1] RBP: 0000000000000000 R08: 00007ffec8022844 R09: 000000000000000c [ 1728.231262][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1728.231272][ C1] R13: 0000000000000000 R14: 00007f10b7034670 R15: 0000000000000000 [ 1728.231301][ C1] [ 1728.231309][ C1] DEBUG: waiting rtnl_mutex for 5977 jiffies. [ 1728.231319][ C1] task:syz-executor state:D stack:24992 pid:18777 tgid:18777 ppid:18776 flags:0x00004002 [ 1728.231345][ C1] Call Trace: [ 1728.231352][ C1] [ 1728.231364][ C1] __schedule+0x1800/0x4a60 [ 1728.231408][ C1] ? __pfx___schedule+0x10/0x10 [ 1728.231434][ C1] ? __pfx_lock_release+0x10/0x10 [ 1728.231458][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1728.231488][ C1] ? schedule+0x90/0x320 [ 1728.231509][ C1] schedule+0x14b/0x320 [ 1728.231533][ C1] schedule_preempt_disabled+0x13/0x30 [ 1728.231553][ C1] __mutex_lock+0x6a4/0xd70 [ 1728.231582][ C1] ? __mutex_lock+0x527/0xd70 [ 1728.231607][ C1] ? rtnl_lock_killable+0x26/0x150 [ 1728.231634][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1728.231662][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 1728.231679][ C1] ? alloc_netdev_mqs+0xb9d/0x1000 [ 1728.231703][ C1] ? get_rtnl_holder+0x144/0x190 [ 1728.231731][ C1] rtnl_lock_killable+0x26/0x150 [ 1728.231759][ C1] register_netdev+0x13/0x50 [ 1728.231778][ C1] ip6gre_init_net+0x228/0x300 [ 1728.231805][ C1] ops_init+0x359/0x610 [ 1728.231831][ C1] setup_net+0x515/0xca0 [ 1728.231854][ C1] ? __pfx_down_read_killable+0x10/0x10 [ 1728.231894][ C1] ? __pfx_setup_net+0x10/0x10 [ 1728.231950][ C1] copy_net_ns+0x4e2/0x7b0 [ 1728.231980][ C1] create_new_namespaces+0x425/0x7b0 [ 1728.232005][ C1] ? bpf_lsm_capable+0x9/0x10 [ 1728.232036][ C1] unshare_nsproxy_namespaces+0x124/0x180 [ 1728.232061][ C1] ksys_unshare+0x619/0xc10 [ 1728.232088][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 1728.232103][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1728.232150][ C1] ? do_syscall_64+0x100/0x230 [ 1728.232179][ C1] __x64_sys_unshare+0x38/0x40 [ 1728.232194][ C1] do_syscall_64+0xf3/0x230 [ 1728.232216][ C1] ? clear_bhb_loop+0x35/0x90 [ 1728.232235][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.232250][ C1] RIP: 0033:0x7f5760b77677 [ 1728.232263][ C1] RSP: 002b:00007ffc61df7f08 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1728.232278][ C1] RAX: ffffffffffffffda RBX: 00007f5760d05f20 RCX: 00007f5760b77677 [ 1728.232291][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1728.232301][ C1] RBP: 00007f5760d06a18 R08: 0000000000000000 R09: 0000000000000000 [ 1728.232311][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 1728.232322][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1728.232348][ C1] [ 1728.232355][ C1] DEBUG: holding rtnl_mutex for 5960 jiffies. [ 1728.232363][ C1] task:kworker/u8:8 state:R running task stack:22064 pid:16080 tgid:16080 ppid:2 flags:0x00004008 [ 1728.232393][ C1] Workqueue: netns cleanup_net [ 1728.232407][ C1] Call Trace: [ 1728.232414][ C1] [ 1728.232422][ C1] sched_show_task+0x506/0x6d0 [ 1728.232441][ C1] ? report_rtnl_holders+0x2a5/0x400 [ 1728.232462][ C1] ? __pfx__printk+0x10/0x10 [ 1728.232483][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 1728.232501][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1728.232521][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1728.232549][ C1] report_rtnl_holders+0x327/0x400 [ 1728.232577][ C1] call_timer_fn+0x18e/0x650 [ 1728.232594][ C1] ? call_timer_fn+0xc0/0x650 [ 1728.232609][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1728.232629][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1728.232649][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1728.232671][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1728.232691][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1728.232709][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1728.232728][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1728.232748][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1728.232769][ C1] __run_timer_base+0x66a/0x8e0 [ 1728.232805][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1728.232835][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1728.232864][ C1] run_timer_softirq+0xb7/0x170 [ 1728.232881][ C1] handle_softirqs+0x2c4/0x970 [ 1728.232905][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 1728.232934][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1728.232959][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 1728.232985][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 1728.233005][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1728.233035][ C1] irq_exit_rcu+0x9/0x30 [ 1728.233053][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1728.233073][ C1] [ 1728.233080][ C1] [ 1728.233088][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1728.233104][ C1] RIP: 0010:console_flush_all+0x9f7/0xf50 [ 1728.233122][ C1] Code: 20 00 90 0f 0b 90 e9 f3 f9 ff ff e8 83 1c 20 00 e8 8e a7 45 0a 4d 85 f6 74 c0 e8 74 1c 20 00 fb 49 bd 00 00 00 00 00 fc ff df <43> 80 3c 2f 00 48 8b 5c 24 30 74 08 48 89 df e8 e5 a0 87 00 4c 8b [ 1728.233136][ C1] RSP: 0018:ffffc90003a0eec0 EFLAGS: 00000293 [ 1728.233150][ C1] RAX: ffffffff8173aeac RBX: 0000000000000000 RCX: ffff8880689e5a00 [ 1728.233162][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1728.233172][ C1] RBP: ffffc90003a0f050 R08: ffffffff8173ae53 R09: 1ffffffff26e6b00 [ 1728.233184][ C1] R10: dffffc0000000000 R11: fffffbfff26e6b01 R12: ffffffff8f1328e0 [ 1728.233196][ C1] R13: dffffc0000000000 R14: 0000000000000200 R15: 1ffffffff1e26527 [ 1728.233214][ C1] ? console_flush_all+0x993/0xf50 [ 1728.233231][ C1] ? console_flush_all+0x9ec/0xf50 [ 1728.233263][ C1] ? console_flush_all+0x147/0xf50 [ 1728.233288][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1728.233311][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1728.233336][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1728.233365][ C1] console_unlock+0x13b/0x4d0 [ 1728.233388][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1728.233403][ C1] ? _printk+0xd5/0x120 [ 1728.233424][ C1] ? _printk+0xd5/0x120 [ 1728.233443][ C1] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 1728.233477][ C1] vprintk_emit+0x7a1/0x900 [ 1728.233500][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1728.233524][ C1] ? mark_lock+0x9a/0x360 [ 1728.233554][ C1] _printk+0xd5/0x120 [ 1728.233574][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1728.233597][ C1] ? __netdev_printk+0x19e/0x4d0 [ 1728.233616][ C1] ? __pfx__printk+0x10/0x10 [ 1728.233640][ C1] ? __netdev_printk+0x1c2/0x4d0 [ 1728.233665][ C1] netdev_info+0x122/0x170 [ 1728.233692][ C1] ? __pfx_netdev_info+0x10/0x10 [ 1728.233722][ C1] ? team_port_del+0xab3/0xcc0 [ 1728.233748][ C1] team_port_del+0xb57/0xcc0 [ 1728.233777][ C1] ? __pfx_team_port_del+0x10/0x10 [ 1728.233795][ C1] ? bond_netdev_event+0xdd/0xf20 [ 1728.233831][ C1] ? __asan_memset+0x23/0x50 [ 1728.233859][ C1] team_del_slave+0x3d/0x1d0 [ 1728.233881][ C1] team_device_event+0x200/0x5b0 [ 1728.233900][ C1] ? notifier_call_chain+0x162/0x3e0 [ 1728.233924][ C1] notifier_call_chain+0x19f/0x3e0 [ 1728.233955][ C1] unregister_netdevice_many_notify+0xd81/0x1c40 [ 1728.233991][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1728.234015][ C1] ? batadv_hash_remove+0x504/0x680 [ 1728.234086][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1728.234126][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1728.234163][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1728.234205][ C1] ? __pfx___might_resched+0x10/0x10 [ 1728.234227][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1728.234258][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1728.234278][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1728.234303][ C1] cleanup_net+0x89d/0xcc0 [ 1728.234324][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1728.234352][ C1] ? process_scheduled_works+0x945/0x1830 [ 1728.234372][ C1] process_scheduled_works+0xa2c/0x1830 [ 1728.234421][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1728.234451][ C1] ? assign_work+0x364/0x3d0 [ 1728.234477][ C1] worker_thread+0x86d/0xd40 [ 1728.234507][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1728.234532][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1728.234557][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1728.234579][ C1] kthread+0x2f0/0x390 [ 1728.234594][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1728.234614][ C1] ? __pfx_kthread+0x10/0x10 [ 1728.234630][ C1] ret_from_fork+0x4b/0x80 [ 1728.234651][ C1] ? __pfx_kthread+0x10/0x10 [ 1728.234666][ C1] ret_from_fork_asm+0x1a/0x30 [ 1728.234703][ C1] [ 1728.234710][ C1] DEBUG: waiting rtnl_mutex for 5954 jiffies. [ 1728.234719][ C1] task:syz-executor state:D stack:21728 pid:18737 tgid:18737 ppid:18736 flags:0x00004002 [ 1728.234745][ C1] Call Trace: [ 1728.234751][ C1] [ 1728.234762][ C1] __schedule+0x1800/0x4a60 [ 1728.234805][ C1] ? __pfx___schedule+0x10/0x10 [ 1728.234829][ C1] ? __pfx_lock_release+0x10/0x10 [ 1728.234852][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1728.234880][ C1] ? schedule+0x90/0x320 [ 1728.234899][ C1] schedule+0x14b/0x320 [ 1728.234922][ C1] schedule_preempt_disabled+0x13/0x30 [ 1728.234945][ C1] __mutex_lock+0x6a4/0xd70 [ 1728.234972][ C1] ? __mutex_lock+0x527/0xd70 [ 1728.234996][ C1] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 1728.235021][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1728.235054][ C1] ? get_rtnl_holder+0x144/0x190 [ 1728.235081][ C1] unregister_netdevice_notifier_net+0x89/0x3a0 [ 1728.235107][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1728.235125][ C1] ? mntput_no_expire+0x2da/0x850 [ 1728.235147][ C1] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 1728.235174][ C1] ? __pfx_mntput_no_expire+0x10/0x10 [ 1728.235201][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1728.235219][ C1] ? simple_release_fs+0x9c/0xd0 [ 1728.235242][ C1] nsim_dev_hwstats_exit+0x81/0x290 [ 1728.235264][ C1] ? kfree+0x149/0x360 [ 1728.235306][ C1] nsim_dev_reload_destroy+0x2ad/0x490 [ 1728.235335][ C1] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1728.235354][ C1] nsim_drv_remove+0x58/0x160 [ 1728.235380][ C1] device_release_driver_internal+0x4a9/0x7c0 [ 1728.235411][ C1] bus_remove_device+0x34f/0x420 [ 1728.235442][ C1] device_del+0x57a/0x9b0 [ 1728.235469][ C1] ? __pfx_device_del+0x10/0x10 [ 1728.235497][ C1] device_unregister+0x20/0xc0 [ 1728.235515][ C1] del_device_store+0x363/0x480 [ 1728.235540][ C1] ? __pfx_del_device_store+0x10/0x10 [ 1728.235565][ C1] ? sysfs_kf_write+0x182/0x2a0 [ 1728.235584][ C1] ? bus_attr_store+0x4f/0xa0 [ 1728.235610][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1728.235628][ C1] kernfs_fop_write_iter+0x3a1/0x500 [ 1728.235654][ C1] vfs_write+0xa72/0xc90 [ 1728.235683][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1728.235704][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1728.235751][ C1] ksys_write+0x1a0/0x2c0 [ 1728.235781][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1728.235806][ C1] ? do_syscall_64+0x100/0x230 [ 1728.235833][ C1] ? do_syscall_64+0xb6/0x230 [ 1728.235859][ C1] do_syscall_64+0xf3/0x230 [ 1728.235882][ C1] ? clear_bhb_loop+0x35/0x90 [ 1728.235904][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.235920][ C1] RIP: 0033:0x7fa96cd74a9f [ 1728.235937][ C1] RSP: 002b:00007ffe9b423a20 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1728.235955][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa96cd74a9f [ 1728.235967][ C1] RDX: 0000000000000001 RSI: 00007ffe9b423a70 RDI: 0000000000000005 [ 1728.235978][ C1] RBP: 00007fa96cde45b2 R08: 0000000000000000 R09: 00007ffe9b423877 [ 1728.235990][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1728.236001][ C1] R13: 00007ffe9b423a70 R14: 00007fa96da34620 R15: 0000000000000003 [ 1728.236030][ C1] [ 1728.236037][ C1] DEBUG: waiting rtnl_mutex for 5952 jiffies. [ 1728.236047][ C1] task:syz-executor state:D stack:20992 pid:18702 tgid:18702 ppid:1 flags:0x00004006 [ 1728.236072][ C1] Call Trace: [ 1728.236079][ C1] [ 1728.236091][ C1] __schedule+0x1800/0x4a60 [ 1728.236136][ C1] ? __pfx___schedule+0x10/0x10 [ 1728.236161][ C1] ? __pfx_lock_release+0x10/0x10 [ 1728.236195][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1728.236223][ C1] ? schedule+0x90/0x320 [ 1728.236242][ C1] schedule+0x14b/0x320 [ 1728.236265][ C1] schedule_preempt_disabled+0x13/0x30 [ 1728.236285][ C1] __mutex_lock+0x6a4/0xd70 [ 1728.236311][ C1] ? __mutex_lock+0x527/0xd70 [ 1728.236335][ C1] ? tun_chr_close+0x3e/0x1b0 [ 1728.236353][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1728.236387][ C1] ? get_rtnl_holder+0x144/0x190 [ 1728.236413][ C1] tun_chr_close+0x3e/0x1b0 [ 1728.236429][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1728.236446][ C1] __fput+0x24a/0x8a0 [ 1728.236477][ C1] task_work_run+0x24f/0x310 [ 1728.236500][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1728.236521][ C1] ? do_exit+0xa2a/0x27f0 [ 1728.236534][ C1] ? kmem_cache_free+0x145/0x350 [ 1728.236558][ C1] do_exit+0xa2f/0x27f0 [ 1728.236583][ C1] ? __pfx_do_exit+0x10/0x10 [ 1728.236599][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1728.236622][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1728.236647][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1728.236667][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1728.236691][ C1] do_group_exit+0x207/0x2c0 [ 1728.236706][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1728.236725][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1728.236748][ C1] get_signal+0x16a1/0x1740 [ 1728.236780][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1728.236797][ C1] ? __pfx_get_signal+0x10/0x10 [ 1728.236826][ C1] arch_do_signal_or_restart+0x96/0x830 [ 1728.236850][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1728.236869][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1728.236904][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1728.236931][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 1728.236956][ C1] do_syscall_64+0x100/0x230 [ 1728.236978][ C1] ? clear_bhb_loop+0x35/0x90 [ 1728.237001][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.237016][ C1] RIP: 0033:0x7fb144d77cac [ 1728.237028][ C1] RSP: 002b:00007ffce9d45100 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1728.237045][ C1] RAX: 0000000000000020 RBX: 00007fb145a34620 RCX: 00007fb144d77cac [ 1728.237056][ C1] RDX: 0000000000000020 RSI: 00007fb145a34670 RDI: 0000000000000003 [ 1728.237067][ C1] RBP: 0000000000000000 R08: 00007ffce9d45154 R09: 000000000000000c [ 1728.237077][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1728.237088][ C1] R13: 0000000000000000 R14: 00007fb145a34670 R15: 0000000000000000 [ 1728.237115][ C1] [ 1728.237122][ C1] [ 1728.237122][ C1] Showing all locks held in the system: [ 1728.237133][ C1] 2 locks held by kworker/u8:2/35: [ 1728.237147][ C1] 3 locks held by kworker/u8:4/63: [ 1728.237156][ C1] #0: ffff88802a07f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1728.237204][ C1] #1: ffffc900015efd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1728.237250][ C1] #2: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1728.237317][ C1] 1 lock held by dhcpcd/4893: [ 1728.237327][ C1] 2 locks held by getty/4985: [ 1728.237337][ C1] #0: ffff88802b4dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1728.237386][ C1] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1728.237431][ C1] 2 locks held by kworker/u8:14/9270: [ 1728.237442][ C1] 1 lock held by syz.3.1887/13425: [ 1728.237452][ C1] 3 locks held by kworker/0:8/14078: [ 1728.237461][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1728.237506][ C1] #1: ffffc90003ef7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1728.237551][ C1] #2: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1728.237591][ C1] 9 locks held by kworker/u8:8/16080: [ 1728.237601][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1728.237645][ C1] #1: ffffc90003a0fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1728.237689][ C1] #2: ffffffff8fc75b10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1728.237729][ C1] #3: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1728.237775][ C1] #4: ffff88806fca8d40 (team->team_lock_key#83){+.+.}-{3:3}, at: team_del_slave+0x32/0x1d0 [ 1728.237822][ C1] #5: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1728.237874][ C1] #6: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1728.237944][ C1] #7: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1728.237992][ C1] #8: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1728.238049][ C1] 1 lock held by syz.4.3296/18428: [ 1728.238061][ C1] 1 lock held by syz-executor/18702: [ 1728.238084][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1728.238130][ C1] 1 lock held by syz-executor/18705: [ 1728.238141][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1728.238188][ C1] 4 locks held by syz-executor/18734: [ 1728.238199][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1728.238255][ C1] #1: ffff88802bff9888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1728.238301][ C1] #2: ffff88802339c788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1728.238352][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 1728.238402][ C1] 7 locks held by syz-executor/18737: [ 1728.238412][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1728.238468][ C1] #1: ffff88802d0a8c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1728.238514][ C1] #2: ffff88802339c878 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1728.238565][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1728.238614][ C1] #4: ffff88805fb680e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1728.238662][ C1] #5: ffff88805fb6c250 (&devlink->lock_key#80){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1728.238720][ C1] #6: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 1728.238774][ C1] 4 locks held by syz-executor/18750: [ 1728.238785][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1728.238841][ C1] #1: ffff88802ffb8088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1728.238886][ C1] #2: ffff88802339c878 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1728.238942][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1728.238993][ C1] 2 locks held by syz-executor/18777: [ 1728.239004][ C1] #0: ffffffff8fc75b10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1728.239067][ C1] #1: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock_killable+0x26/0x150 [ 1728.239114][ C1] 1 lock held by syz-executor/18780: [ 1728.239123][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1728.239168][ C1] [ 1728.239173][ C1] ============================================= [ 1728.239173][ C1] [ 1729.265418][ C1] DEBUG: waiting rtnl_mutex for 6024 jiffies. [ 1729.265436][ C1] task:kworker/u8:4 state:D stack:18640 pid:63 tgid:63 ppid:2 flags:0x00004000 [ 1729.265469][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 1729.265497][ C1] Call Trace: [ 1729.265505][ C1] [ 1729.265519][ C1] __schedule+0x1800/0x4a60 [ 1729.265571][ C1] ? __pfx___schedule+0x10/0x10 [ 1729.265598][ C1] ? __pfx_lock_release+0x10/0x10 [ 1729.265626][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1729.265647][ C1] ? kthread_data+0x52/0xd0 [ 1729.265670][ C1] ? schedule+0x90/0x320 [ 1729.265693][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1729.265720][ C1] ? schedule+0x90/0x320 [ 1729.265742][ C1] schedule+0x14b/0x320 [ 1729.265774][ C1] schedule_preempt_disabled+0x13/0x30 [ 1729.265796][ C1] __mutex_lock+0x6a4/0xd70 [ 1729.265820][ C1] ? mark_lock+0x9a/0x360 [ 1729.265850][ C1] ? __mutex_lock+0x527/0xd70 [ 1729.265877][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 1729.265901][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1729.265938][ C1] ? get_rtnl_holder+0x144/0x190 [ 1729.265982][ C1] addrconf_dad_work+0xd0/0x16f0 [ 1729.266013][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1729.266034][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1729.266071][ C1] ? process_scheduled_works+0x945/0x1830 [ 1729.266093][ C1] process_scheduled_works+0xa2c/0x1830 [ 1729.266145][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1729.266188][ C1] ? assign_work+0x364/0x3d0 [ 1729.266215][ C1] worker_thread+0x86d/0xd40 [ 1729.266251][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1729.266277][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1729.266298][ C1] kthread+0x2f0/0x390 [ 1729.266313][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1729.266333][ C1] ? __pfx_kthread+0x10/0x10 [ 1729.266350][ C1] ret_from_fork+0x4b/0x80 [ 1729.266371][ C1] ? __pfx_kthread+0x10/0x10 [ 1729.266387][ C1] ret_from_fork_asm+0x1a/0x30 [ 1729.266424][ C1] [ 1729.266431][ C1] DEBUG: waiting rtnl_mutex for 5983 jiffies. [ 1729.266440][ C1] task:syz-executor state:D stack:20992 pid:18705 tgid:18705 ppid:1 flags:0x00004006 [ 1729.266466][ C1] Call Trace: [ 1729.266473][ C1] [ 1729.266484][ C1] __schedule+0x1800/0x4a60 [ 1729.266526][ C1] ? __pfx___schedule+0x10/0x10 [ 1729.266550][ C1] ? __pfx_lock_release+0x10/0x10 [ 1729.266573][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1729.266601][ C1] ? schedule+0x90/0x320 [ 1729.266620][ C1] schedule+0x14b/0x320 [ 1729.266643][ C1] schedule_preempt_disabled+0x13/0x30 [ 1729.266663][ C1] __mutex_lock+0x6a4/0xd70 [ 1729.266689][ C1] ? __mutex_lock+0x527/0xd70 [ 1729.266713][ C1] ? tun_chr_close+0x3e/0x1b0 [ 1729.266732][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1729.266772][ C1] ? get_rtnl_holder+0x144/0x190 [ 1729.266798][ C1] tun_chr_close+0x3e/0x1b0 [ 1729.266814][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1729.266830][ C1] __fput+0x24a/0x8a0 [ 1729.266863][ C1] task_work_run+0x24f/0x310 [ 1729.266886][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1729.266906][ C1] ? do_exit+0xa2a/0x27f0 [ 1729.266920][ C1] ? kmem_cache_free+0x145/0x350 [ 1729.266945][ C1] do_exit+0xa2f/0x27f0 [ 1729.266970][ C1] ? __pfx_do_exit+0x10/0x10 [ 1729.266986][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1729.267009][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1729.267034][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1729.267054][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1729.267079][ C1] do_group_exit+0x207/0x2c0 [ 1729.267094][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1729.267113][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1729.267138][ C1] get_signal+0x16a1/0x1740 [ 1729.267169][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1729.267187][ C1] ? __pfx_get_signal+0x10/0x10 [ 1729.267216][ C1] arch_do_signal_or_restart+0x96/0x830 [ 1729.267241][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1729.267279][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1729.267316][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1729.267342][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 1729.267370][ C1] do_syscall_64+0x100/0x230 [ 1729.267394][ C1] ? clear_bhb_loop+0x35/0x90 [ 1729.267416][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.267434][ C1] RIP: 0033:0x7f8c93f77cac [ 1729.267448][ C1] RSP: 002b:00007ffd00b7b310 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1729.267466][ C1] RAX: 0000000000000028 RBX: 00007f8c94c34620 RCX: 00007f8c93f77cac [ 1729.267478][ C1] RDX: 0000000000000028 RSI: 00007f8c94c34670 RDI: 0000000000000003 [ 1729.267490][ C1] RBP: 0000000000000000 R08: 00007ffd00b7b364 R09: 000000000000000c [ 1729.267502][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1729.267513][ C1] R13: 0000000000000000 R14: 00007f8c94c34670 R15: 0000000000000000 [ 1729.267542][ C1] [ 1729.267549][ C1] DEBUG: waiting rtnl_mutex for 5954 jiffies. [ 1729.267558][ C1] task:kworker/0:8 state:D stack:23680 pid:14078 tgid:14078 ppid:2 flags:0x00004000 [ 1729.267586][ C1] Workqueue: events linkwatch_event [ 1729.267603][ C1] Call Trace: [ 1729.267610][ C1] [ 1729.267622][ C1] __schedule+0x1800/0x4a60 [ 1729.267667][ C1] ? __pfx___schedule+0x10/0x10 [ 1729.267690][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1729.267713][ C1] ? __pfx_lock_release+0x10/0x10 [ 1729.267737][ C1] ? kick_pool+0x1bd/0x620 [ 1729.267769][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1729.267790][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1729.267813][ C1] ? schedule+0x90/0x320 [ 1729.267833][ C1] schedule+0x14b/0x320 [ 1729.267857][ C1] schedule_preempt_disabled+0x13/0x30 [ 1729.267896][ C1] __mutex_lock+0x6a4/0xd70 [ 1729.267926][ C1] ? __mutex_lock+0x527/0xd70 [ 1729.267972][ C1] ? linkwatch_event+0xe/0x60 [ 1729.267992][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1729.268030][ C1] ? get_rtnl_holder+0x144/0x190 [ 1729.268060][ C1] ? process_scheduled_works+0x945/0x1830 [ 1729.268084][ C1] linkwatch_event+0xe/0x60 [ 1729.268100][ C1] process_scheduled_works+0xa2c/0x1830 [ 1729.268158][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1729.268194][ C1] ? assign_work+0x364/0x3d0 [ 1729.268225][ C1] worker_thread+0x86d/0xd40 [ 1729.268267][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1729.268298][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1729.268323][ C1] kthread+0x2f0/0x390 [ 1729.268340][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1729.268364][ C1] ? __pfx_kthread+0x10/0x10 [ 1729.268383][ C1] ret_from_fork+0x4b/0x80 [ 1729.268408][ C1] ? __pfx_kthread+0x10/0x10 [ 1729.268426][ C1] ret_from_fork_asm+0x1a/0x30 [ 1729.268469][ C1] [ 1729.268477][ C1] DEBUG: waiting rtnl_mutex for 5944 jiffies. [ 1729.268487][ C1] task:syz-executor state:D stack:24992 pid:18780 tgid:18780 ppid:18779 flags:0x00000000 [ 1729.268515][ C1] Call Trace: [ 1729.268522][ C1] [ 1729.268535][ C1] __schedule+0x1800/0x4a60 [ 1729.268585][ C1] ? __pfx___schedule+0x10/0x10 [ 1729.268613][ C1] ? __pfx_lock_release+0x10/0x10 [ 1729.268640][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1729.268674][ C1] ? schedule+0x90/0x320 [ 1729.268696][ C1] schedule+0x14b/0x320 [ 1729.268723][ C1] schedule_preempt_disabled+0x13/0x30 [ 1729.268751][ C1] __mutex_lock+0x6a4/0xd70 [ 1729.268781][ C1] ? __mutex_lock+0x527/0xd70 [ 1729.268810][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1729.268838][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1729.268878][ C1] ? get_rtnl_holder+0x144/0x190 [ 1729.268908][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1729.268932][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1729.268959][ C1] ? __lock_acquire+0x1384/0x2050 [ 1729.268986][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1729.269044][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1729.269071][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1729.269112][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1729.269172][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1729.269198][ C1] netlink_unicast+0x7f6/0x990 [ 1729.269228][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1729.269246][ C1] ? __virt_addr_valid+0x183/0x530 [ 1729.269266][ C1] ? __check_object_size+0x49c/0x900 [ 1729.269283][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1729.269309][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1729.269345][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1729.269370][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1729.269394][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1729.269408][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1729.269427][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1729.269448][ C1] __sock_sendmsg+0x221/0x270 [ 1729.269474][ C1] __sys_sendto+0x3a4/0x4f0 [ 1729.269496][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1729.269539][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1729.269564][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1729.269587][ C1] ? exc_page_fault+0x590/0x8c0 [ 1729.269610][ C1] __x64_sys_sendto+0xde/0x100 [ 1729.269630][ C1] do_syscall_64+0xf3/0x230 [ 1729.269652][ C1] ? clear_bhb_loop+0x35/0x90 [ 1729.269672][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.269688][ C1] RIP: 0033:0x7f10b6377cac [ 1729.269700][ C1] RSP: 002b:00007ffec80227f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1729.269716][ C1] RAX: ffffffffffffffda RBX: 00007f10b7034620 RCX: 00007f10b6377cac [ 1729.269728][ C1] RDX: 0000000000000028 RSI: 00007f10b7034670 RDI: 0000000000000003 [ 1729.269739][ C1] RBP: 0000000000000000 R08: 00007ffec8022844 R09: 000000000000000c [ 1729.269753][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1729.269763][ C1] R13: 0000000000000000 R14: 00007f10b7034670 R15: 0000000000000000 [ 1729.269790][ C1] [ 1729.269798][ C1] DEBUG: waiting rtnl_mutex for 6081 jiffies. [ 1729.269807][ C1] task:syz-executor state:D stack:24992 pid:18777 tgid:18777 ppid:18776 flags:0x00004002 [ 1729.269831][ C1] Call Trace: [ 1729.269838][ C1] [ 1729.269849][ C1] __schedule+0x1800/0x4a60 [ 1729.269891][ C1] ? __pfx___schedule+0x10/0x10 [ 1729.269915][ C1] ? __pfx_lock_release+0x10/0x10 [ 1729.269938][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1729.269966][ C1] ? schedule+0x90/0x320 [ 1729.269985][ C1] schedule+0x14b/0x320 [ 1729.270007][ C1] schedule_preempt_disabled+0x13/0x30 [ 1729.270027][ C1] __mutex_lock+0x6a4/0xd70 [ 1729.270053][ C1] ? __mutex_lock+0x527/0xd70 [ 1729.270077][ C1] ? rtnl_lock_killable+0x26/0x150 [ 1729.270102][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1729.270129][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 1729.270145][ C1] ? alloc_netdev_mqs+0xb9d/0x1000 [ 1729.270168][ C1] ? get_rtnl_holder+0x144/0x190 [ 1729.270194][ C1] rtnl_lock_killable+0x26/0x150 [ 1729.270221][ C1] register_netdev+0x13/0x50 [ 1729.270238][ C1] ip6gre_init_net+0x228/0x300 [ 1729.270264][ C1] ops_init+0x359/0x610 [ 1729.270288][ C1] setup_net+0x515/0xca0 [ 1729.270310][ C1] ? __pfx_down_read_killable+0x10/0x10 [ 1729.270330][ C1] ? __pfx_setup_net+0x10/0x10 [ 1729.270365][ C1] copy_net_ns+0x4e2/0x7b0 [ 1729.270394][ C1] create_new_namespaces+0x425/0x7b0 [ 1729.270417][ C1] ? bpf_lsm_capable+0x9/0x10 [ 1729.270446][ C1] unshare_nsproxy_namespaces+0x124/0x180 [ 1729.270470][ C1] ksys_unshare+0x619/0xc10 [ 1729.270495][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 1729.270509][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1729.270537][ C1] ? do_syscall_64+0x100/0x230 [ 1729.270569][ C1] __x64_sys_unshare+0x38/0x40 [ 1729.270585][ C1] do_syscall_64+0xf3/0x230 [ 1729.270607][ C1] ? clear_bhb_loop+0x35/0x90 [ 1729.270626][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.270641][ C1] RIP: 0033:0x7f5760b77677 [ 1729.270653][ C1] RSP: 002b:00007ffc61df7f08 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1729.270669][ C1] RAX: ffffffffffffffda RBX: 00007f5760d05f20 RCX: 00007f5760b77677 [ 1729.270682][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1729.270692][ C1] RBP: 00007f5760d06a18 R08: 0000000000000000 R09: 0000000000000000 [ 1729.270703][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 1729.270713][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1729.270739][ C1] [ 1729.270749][ C1] DEBUG: holding rtnl_mutex for 6064 jiffies. [ 1729.270757][ C1] task:kworker/u8:8 state:R running task stack:22064 pid:16080 tgid:16080 ppid:2 flags:0x00004008 [ 1729.270787][ C1] Workqueue: netns cleanup_net [ 1729.270802][ C1] Call Trace: [ 1729.270809][ C1] [ 1729.270817][ C1] sched_show_task+0x506/0x6d0 [ 1729.270836][ C1] ? report_rtnl_holders+0x2a5/0x400 [ 1729.270857][ C1] ? __pfx__printk+0x10/0x10 [ 1729.270878][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 1729.270896][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1729.270916][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1729.270944][ C1] report_rtnl_holders+0x327/0x400 [ 1729.270972][ C1] call_timer_fn+0x18e/0x650 [ 1729.270990][ C1] ? call_timer_fn+0xc0/0x650 [ 1729.271004][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1729.271024][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1729.271044][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1729.271066][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1729.271086][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1729.271104][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1729.271123][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1729.271142][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1729.271164][ C1] __run_timer_base+0x66a/0x8e0 [ 1729.271200][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1729.271230][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1729.271277][ C1] run_timer_softirq+0xb7/0x170 [ 1729.271294][ C1] handle_softirqs+0x2c4/0x970 [ 1729.271321][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 1729.271348][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1729.271374][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 1729.271402][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 1729.271424][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1729.271455][ C1] irq_exit_rcu+0x9/0x30 [ 1729.271474][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1729.271496][ C1] [ 1729.271503][ C1] [ 1729.271511][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1729.271529][ C1] RIP: 0010:console_flush_all+0x9f7/0xf50 [ 1729.271548][ C1] Code: 20 00 90 0f 0b 90 e9 f3 f9 ff ff e8 83 1c 20 00 e8 8e a7 45 0a 4d 85 f6 74 c0 e8 74 1c 20 00 fb 49 bd 00 00 00 00 00 fc ff df <43> 80 3c 2f 00 48 8b 5c 24 30 74 08 48 89 df e8 e5 a0 87 00 4c 8b [ 1729.271563][ C1] RSP: 0018:ffffc90003a0eec0 EFLAGS: 00000293 [ 1729.271578][ C1] RAX: ffffffff8173aeac RBX: 0000000000000000 RCX: ffff8880689e5a00 [ 1729.271591][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1729.271601][ C1] RBP: ffffc90003a0f050 R08: ffffffff8173ae53 R09: 1ffffffff26e6b00 [ 1729.271615][ C1] R10: dffffc0000000000 R11: fffffbfff26e6b01 R12: ffffffff8f1328e0 [ 1729.271628][ C1] R13: dffffc0000000000 R14: 0000000000000200 R15: 1ffffffff1e26527 [ 1729.271647][ C1] ? console_flush_all+0x993/0xf50 [ 1729.271665][ C1] ? console_flush_all+0x9ec/0xf50 [ 1729.271699][ C1] ? console_flush_all+0x147/0xf50 [ 1729.271726][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1729.271754][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1729.271782][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1729.271812][ C1] console_unlock+0x13b/0x4d0 [ 1729.271837][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1729.271853][ C1] ? _printk+0xd5/0x120 [ 1729.271875][ C1] ? _printk+0xd5/0x120 [ 1729.271896][ C1] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 1729.271932][ C1] vprintk_emit+0x7a1/0x900 [ 1729.271957][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1729.271983][ C1] ? mark_lock+0x9a/0x360 [ 1729.272014][ C1] _printk+0xd5/0x120 [ 1729.272035][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1729.272061][ C1] ? __netdev_printk+0x19e/0x4d0 [ 1729.272080][ C1] ? __pfx__printk+0x10/0x10 [ 1729.272106][ C1] ? __netdev_printk+0x1c2/0x4d0 [ 1729.272133][ C1] netdev_info+0x122/0x170 [ 1729.272162][ C1] ? __pfx_netdev_info+0x10/0x10 [ 1729.272194][ C1] ? team_port_del+0xab3/0xcc0 [ 1729.272221][ C1] team_port_del+0xb57/0xcc0 [ 1729.272252][ C1] ? __pfx_team_port_del+0x10/0x10 [ 1729.272271][ C1] ? bond_netdev_event+0xdd/0xf20 [ 1729.272310][ C1] ? __asan_memset+0x23/0x50 [ 1729.272340][ C1] team_del_slave+0x3d/0x1d0 [ 1729.272363][ C1] team_device_event+0x200/0x5b0 [ 1729.272384][ C1] ? notifier_call_chain+0x162/0x3e0 [ 1729.272410][ C1] notifier_call_chain+0x19f/0x3e0 [ 1729.272440][ C1] unregister_netdevice_many_notify+0xd81/0x1c40 [ 1729.272478][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1729.272504][ C1] ? batadv_hash_remove+0x504/0x680 [ 1729.272538][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1729.272565][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1729.272592][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1729.272626][ C1] ? __pfx___might_resched+0x10/0x10 [ 1729.272648][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1729.272682][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1729.272702][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1729.272729][ C1] cleanup_net+0x89d/0xcc0 [ 1729.272757][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1729.272786][ C1] ? process_scheduled_works+0x945/0x1830 [ 1729.272808][ C1] process_scheduled_works+0xa2c/0x1830 [ 1729.272860][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1729.272892][ C1] ? assign_work+0x364/0x3d0 [ 1729.272920][ C1] worker_thread+0x86d/0xd40 [ 1729.272952][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1729.272978][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1729.273005][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1729.273028][ C1] kthread+0x2f0/0x390 [ 1729.273044][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1729.273065][ C1] ? __pfx_kthread+0x10/0x10 [ 1729.273083][ C1] ret_from_fork+0x4b/0x80 [ 1729.273104][ C1] ? __pfx_kthread+0x10/0x10 [ 1729.273121][ C1] ret_from_fork_asm+0x1a/0x30 [ 1729.273160][ C1] [ 1729.273167][ C1] DEBUG: waiting rtnl_mutex for 6057 jiffies. [ 1729.273176][ C1] task:syz-executor state:D stack:21728 pid:18737 tgid:18737 ppid:18736 flags:0x00004002 [ 1729.273202][ C1] Call Trace: [ 1729.273209][ C1] [ 1729.273221][ C1] __schedule+0x1800/0x4a60 [ 1729.273266][ C1] ? __pfx___schedule+0x10/0x10 [ 1729.273291][ C1] ? __pfx_lock_release+0x10/0x10 [ 1729.273316][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1729.273345][ C1] ? schedule+0x90/0x320 [ 1729.273366][ C1] schedule+0x14b/0x320 [ 1729.273390][ C1] schedule_preempt_disabled+0x13/0x30 [ 1729.273411][ C1] __mutex_lock+0x6a4/0xd70 [ 1729.273438][ C1] ? __mutex_lock+0x527/0xd70 [ 1729.273464][ C1] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 1729.273491][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1729.273526][ C1] ? get_rtnl_holder+0x144/0x190 [ 1729.273554][ C1] unregister_netdevice_notifier_net+0x89/0x3a0 [ 1729.273582][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1729.273602][ C1] ? mntput_no_expire+0x2da/0x850 [ 1729.273624][ C1] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 1729.273654][ C1] ? __pfx_mntput_no_expire+0x10/0x10 [ 1729.273682][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1729.273701][ C1] ? simple_release_fs+0x9c/0xd0 [ 1729.273726][ C1] nsim_dev_hwstats_exit+0x81/0x290 [ 1729.273753][ C1] ? kfree+0x149/0x360 [ 1729.273777][ C1] nsim_dev_reload_destroy+0x2ad/0x490 [ 1729.273807][ C1] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1729.273826][ C1] nsim_drv_remove+0x58/0x160 [ 1729.273852][ C1] device_release_driver_internal+0x4a9/0x7c0 [ 1729.273882][ C1] bus_remove_device+0x34f/0x420 [ 1729.273914][ C1] device_del+0x57a/0x9b0 [ 1729.273941][ C1] ? __pfx_device_del+0x10/0x10 [ 1729.273969][ C1] device_unregister+0x20/0xc0 [ 1729.273988][ C1] del_device_store+0x363/0x480 [ 1729.274012][ C1] ? __pfx_del_device_store+0x10/0x10 [ 1729.274037][ C1] ? sysfs_kf_write+0x182/0x2a0 [ 1729.274106][ C1] ? bus_attr_store+0x4f/0xa0 [ 1729.274145][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1729.274171][ C1] kernfs_fop_write_iter+0x3a1/0x500 [ 1729.274209][ C1] vfs_write+0xa72/0xc90 [ 1729.274260][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1729.274288][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1729.274346][ C1] ksys_write+0x1a0/0x2c0 [ 1729.274375][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1729.274398][ C1] ? do_syscall_64+0x100/0x230 [ 1729.274424][ C1] ? do_syscall_64+0xb6/0x230 [ 1729.274449][ C1] do_syscall_64+0xf3/0x230 [ 1729.274471][ C1] ? clear_bhb_loop+0x35/0x90 [ 1729.274490][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.274506][ C1] RIP: 0033:0x7fa96cd74a9f [ 1729.274519][ C1] RSP: 002b:00007ffe9b423a20 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1729.274536][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa96cd74a9f [ 1729.274548][ C1] RDX: 0000000000000001 RSI: 00007ffe9b423a70 RDI: 0000000000000005 [ 1729.274559][ C1] RBP: 00007fa96cde45b2 R08: 0000000000000000 R09: 00007ffe9b423877 [ 1729.274570][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1729.274580][ C1] R13: 00007ffe9b423a70 R14: 00007fa96da34620 R15: 0000000000000003 [ 1729.274608][ C1] [ 1729.274615][ C1] DEBUG: waiting rtnl_mutex for 6056 jiffies. [ 1729.274624][ C1] task:syz-executor state:D stack:20992 pid:18702 tgid:18702 ppid:1 flags:0x00004006 [ 1729.274649][ C1] Call Trace: [ 1729.274656][ C1] [ 1729.274667][ C1] __schedule+0x1800/0x4a60 [ 1729.274710][ C1] ? __pfx___schedule+0x10/0x10 [ 1729.274733][ C1] ? __pfx_lock_release+0x10/0x10 [ 1729.274762][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1729.274791][ C1] ? schedule+0x90/0x320 [ 1729.274810][ C1] schedule+0x14b/0x320 [ 1729.274833][ C1] schedule_preempt_disabled+0x13/0x30 [ 1729.274852][ C1] __mutex_lock+0x6a4/0xd70 [ 1729.274879][ C1] ? __mutex_lock+0x527/0xd70 [ 1729.274903][ C1] ? tun_chr_close+0x3e/0x1b0 [ 1729.274921][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1729.274955][ C1] ? get_rtnl_holder+0x144/0x190 [ 1729.274982][ C1] tun_chr_close+0x3e/0x1b0 [ 1729.274997][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1729.275014][ C1] __fput+0x24a/0x8a0 [ 1729.275046][ C1] task_work_run+0x24f/0x310 [ 1729.275069][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1729.275107][ C1] ? do_exit+0xa2a/0x27f0 [ 1729.275122][ C1] ? kmem_cache_free+0x145/0x350 [ 1729.275148][ C1] do_exit+0xa2f/0x27f0 [ 1729.275174][ C1] ? __pfx_do_exit+0x10/0x10 [ 1729.275191][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1729.275216][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1729.275243][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1729.275264][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1729.275291][ C1] do_group_exit+0x207/0x2c0 [ 1729.275307][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1729.275327][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1729.275352][ C1] get_signal+0x16a1/0x1740 [ 1729.275385][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1729.275404][ C1] ? __pfx_get_signal+0x10/0x10 [ 1729.275434][ C1] arch_do_signal_or_restart+0x96/0x830 [ 1729.275461][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1729.275481][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1729.275518][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1729.275544][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 1729.275571][ C1] do_syscall_64+0x100/0x230 [ 1729.275594][ C1] ? clear_bhb_loop+0x35/0x90 [ 1729.275615][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.275632][ C1] RIP: 0033:0x7fb144d77cac [ 1729.275645][ C1] RSP: 002b:00007ffce9d45100 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1729.275662][ C1] RAX: 0000000000000020 RBX: 00007fb145a34620 RCX: 00007fb144d77cac [ 1729.275674][ C1] RDX: 0000000000000020 RSI: 00007fb145a34670 RDI: 0000000000000003 [ 1729.275685][ C1] RBP: 0000000000000000 R08: 00007ffce9d45154 R09: 000000000000000c [ 1729.275697][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1729.275708][ C1] R13: 0000000000000000 R14: 00007fb145a34670 R15: 0000000000000000 [ 1729.275736][ C1] [ 1729.275744][ C1] [ 1729.275744][ C1] Showing all locks held in the system: [ 1729.275760][ C1] 2 locks held by kworker/u8:2/35: [ 1729.275774][ C1] 3 locks held by kworker/u8:4/63: [ 1729.275784][ C1] #0: ffff88802a07f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1729.275835][ C1] #1: ffffc900015efd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1729.275884][ C1] #2: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1729.275952][ C1] 1 lock held by dhcpcd/4893: [ 1729.275963][ C1] 2 locks held by getty/4985: [ 1729.275973][ C1] #0: ffff88802b4dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1729.276022][ C1] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1729.276069][ C1] 2 locks held by kworker/u8:14/9270: [ 1729.276081][ C1] 1 lock held by syz.3.1887/13425: [ 1729.276092][ C1] 3 locks held by kworker/0:8/14078: [ 1729.276101][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1729.276150][ C1] #1: ffffc90003ef7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1729.276198][ C1] #2: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1729.276241][ C1] 9 locks held by kworker/u8:8/16080: [ 1729.276251][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1729.276299][ C1] #1: ffffc90003a0fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1729.276346][ C1] #2: ffffffff8fc75b10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1729.276388][ C1] #3: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1729.276437][ C1] #4: ffff88806fca8d40 (team->team_lock_key#83){+.+.}-{3:3}, at: team_del_slave+0x32/0x1d0 [ 1729.276498][ C1] #5: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1729.276541][ C1] #6: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1729.276583][ C1] #7: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1729.276623][ C1] #8: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1729.276672][ C1] 1 lock held by syz.4.3296/18428: [ 1729.276682][ C1] 1 lock held by syz-executor/18702: [ 1729.276691][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1729.276731][ C1] 1 lock held by syz-executor/18705: [ 1729.276740][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1729.276785][ C1] 4 locks held by syz-executor/18734: [ 1729.276795][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1729.276864][ C1] #1: ffff88802bff9888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1729.276917][ C1] #2: ffff88802339c788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1729.276962][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 1729.277007][ C1] 7 locks held by syz-executor/18737: [ 1729.277016][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1729.277065][ C1] #1: ffff88802d0a8c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1729.277105][ C1] #2: ffff88802339c878 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1729.277150][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1729.277193][ C1] #4: ffff88805fb680e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1729.277235][ C1] #5: ffff88805fb6c250 (&devlink->lock_key#80){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1729.277285][ C1] #6: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 1729.277333][ C1] 4 locks held by syz-executor/18750: [ 1729.277342][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1729.277392][ C1] #1: ffff88802ffb8088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1729.277432][ C1] #2: ffff88802339c878 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1729.277477][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1729.277522][ C1] 2 locks held by syz-executor/18777: [ 1729.277531][ C1] #0: ffffffff8fc75b10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1729.277576][ C1] #1: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock_killable+0x26/0x150 [ 1729.277623][ C1] 1 lock held by syz-executor/18780: [ 1729.277632][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1729.277678][ C1] [ 1729.277683][ C1] ============================================= [ 1729.277683][ C1] [ 1730.307775][ C1] DEBUG: waiting rtnl_mutex for 6128 jiffies. [ 1730.307791][ C1] task:kworker/u8:4 state:D stack:18640 pid:63 tgid:63 ppid:2 flags:0x00004000 [ 1730.307822][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 1730.307849][ C1] Call Trace: [ 1730.307856][ C1] [ 1730.307869][ C1] __schedule+0x1800/0x4a60 [ 1730.307941][ C1] ? __pfx___schedule+0x10/0x10 [ 1730.307969][ C1] ? __pfx_lock_release+0x10/0x10 [ 1730.307997][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1730.308019][ C1] ? kthread_data+0x52/0xd0 [ 1730.308043][ C1] ? schedule+0x90/0x320 [ 1730.308066][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1730.308095][ C1] ? schedule+0x90/0x320 [ 1730.308118][ C1] schedule+0x14b/0x320 [ 1730.308144][ C1] schedule_preempt_disabled+0x13/0x30 [ 1730.308168][ C1] __mutex_lock+0x6a4/0xd70 [ 1730.308192][ C1] ? mark_lock+0x9a/0x360 [ 1730.308222][ C1] ? __mutex_lock+0x527/0xd70 [ 1730.308251][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 1730.308275][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1730.308314][ C1] ? get_rtnl_holder+0x144/0x190 [ 1730.308347][ C1] addrconf_dad_work+0xd0/0x16f0 [ 1730.308381][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1730.308405][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1730.308446][ C1] ? process_scheduled_works+0x945/0x1830 [ 1730.308470][ C1] process_scheduled_works+0xa2c/0x1830 [ 1730.308528][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1730.308564][ C1] ? assign_work+0x364/0x3d0 [ 1730.308595][ C1] worker_thread+0x86d/0xd40 [ 1730.308637][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1730.308675][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1730.308700][ C1] kthread+0x2f0/0x390 [ 1730.308718][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1730.308742][ C1] ? __pfx_kthread+0x10/0x10 [ 1730.308762][ C1] ret_from_fork+0x4b/0x80 [ 1730.308786][ C1] ? __pfx_kthread+0x10/0x10 [ 1730.308805][ C1] ret_from_fork_asm+0x1a/0x30 [ 1730.308849][ C1] [ 1730.308857][ C1] DEBUG: waiting rtnl_mutex for 6087 jiffies. [ 1730.308868][ C1] task:syz-executor state:D stack:20992 pid:18705 tgid:18705 ppid:1 flags:0x00004006 [ 1730.308898][ C1] Call Trace: [ 1730.308906][ C1] [ 1730.308919][ C1] __schedule+0x1800/0x4a60 [ 1730.308980][ C1] ? __pfx___schedule+0x10/0x10 [ 1730.309007][ C1] ? __pfx_lock_release+0x10/0x10 [ 1730.309033][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1730.309077][ C1] ? schedule+0x90/0x320 [ 1730.309097][ C1] schedule+0x14b/0x320 [ 1730.309133][ C1] schedule_preempt_disabled+0x13/0x30 [ 1730.309153][ C1] __mutex_lock+0x6a4/0xd70 [ 1730.309179][ C1] ? __mutex_lock+0x527/0xd70 [ 1730.309203][ C1] ? tun_chr_close+0x3e/0x1b0 [ 1730.309222][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1730.309256][ C1] ? get_rtnl_holder+0x144/0x190 [ 1730.309283][ C1] tun_chr_close+0x3e/0x1b0 [ 1730.309298][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1730.309315][ C1] __fput+0x24a/0x8a0 [ 1730.309347][ C1] task_work_run+0x24f/0x310 [ 1730.309371][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1730.309391][ C1] ? do_exit+0xa2a/0x27f0 [ 1730.309404][ C1] ? kmem_cache_free+0x145/0x350 [ 1730.309429][ C1] do_exit+0xa2f/0x27f0 [ 1730.309454][ C1] ? __pfx_do_exit+0x10/0x10 [ 1730.309470][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1730.309493][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1730.309518][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1730.309539][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1730.309564][ C1] do_group_exit+0x207/0x2c0 [ 1730.309579][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1730.309598][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1730.309622][ C1] get_signal+0x16a1/0x1740 [ 1730.309654][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1730.309676][ C1] ? __pfx_get_signal+0x10/0x10 [ 1730.309705][ C1] arch_do_signal_or_restart+0x96/0x830 [ 1730.309730][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1730.309749][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1730.309784][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1730.309808][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 1730.309834][ C1] do_syscall_64+0x100/0x230 [ 1730.309857][ C1] ? clear_bhb_loop+0x35/0x90 [ 1730.309877][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.309893][ C1] RIP: 0033:0x7f8c93f77cac [ 1730.309907][ C1] RSP: 002b:00007ffd00b7b310 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1730.309924][ C1] RAX: 0000000000000028 RBX: 00007f8c94c34620 RCX: 00007f8c93f77cac [ 1730.309936][ C1] RDX: 0000000000000028 RSI: 00007f8c94c34670 RDI: 0000000000000003 [ 1730.309947][ C1] RBP: 0000000000000000 R08: 00007ffd00b7b364 R09: 000000000000000c [ 1730.309957][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1730.309968][ C1] R13: 0000000000000000 R14: 00007f8c94c34670 R15: 0000000000000000 [ 1730.309995][ C1] [ 1730.310002][ C1] DEBUG: waiting rtnl_mutex for 6058 jiffies. [ 1730.310011][ C1] task:kworker/0:8 state:D stack:23680 pid:14078 tgid:14078 ppid:2 flags:0x00004000 [ 1730.310037][ C1] Workqueue: events linkwatch_event [ 1730.310053][ C1] Call Trace: [ 1730.310060][ C1] [ 1730.310071][ C1] __schedule+0x1800/0x4a60 [ 1730.310113][ C1] ? __pfx___schedule+0x10/0x10 [ 1730.310135][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1730.310157][ C1] ? __pfx_lock_release+0x10/0x10 [ 1730.310180][ C1] ? kick_pool+0x1bd/0x620 [ 1730.310206][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1730.310225][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1730.310247][ C1] ? schedule+0x90/0x320 [ 1730.310266][ C1] schedule+0x14b/0x320 [ 1730.310289][ C1] schedule_preempt_disabled+0x13/0x30 [ 1730.310308][ C1] __mutex_lock+0x6a4/0xd70 [ 1730.310334][ C1] ? __mutex_lock+0x527/0xd70 [ 1730.310358][ C1] ? linkwatch_event+0xe/0x60 [ 1730.310375][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1730.310407][ C1] ? get_rtnl_holder+0x144/0x190 [ 1730.310450][ C1] ? process_scheduled_works+0x945/0x1830 [ 1730.310471][ C1] linkwatch_event+0xe/0x60 [ 1730.310486][ C1] process_scheduled_works+0xa2c/0x1830 [ 1730.310538][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1730.310570][ C1] ? assign_work+0x364/0x3d0 [ 1730.310598][ C1] worker_thread+0x86d/0xd40 [ 1730.310636][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1730.310668][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1730.310691][ C1] kthread+0x2f0/0x390 [ 1730.310706][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1730.310728][ C1] ? __pfx_kthread+0x10/0x10 [ 1730.310745][ C1] ret_from_fork+0x4b/0x80 [ 1730.310767][ C1] ? __pfx_kthread+0x10/0x10 [ 1730.310783][ C1] ret_from_fork_asm+0x1a/0x30 [ 1730.310822][ C1] [ 1730.310829][ C1] DEBUG: waiting rtnl_mutex for 6048 jiffies. [ 1730.310839][ C1] task:syz-executor state:D stack:24992 pid:18780 tgid:18780 ppid:18779 flags:0x00000000 [ 1730.310866][ C1] Call Trace: [ 1730.310872][ C1] [ 1730.310884][ C1] __schedule+0x1800/0x4a60 [ 1730.310929][ C1] ? __pfx___schedule+0x10/0x10 [ 1730.310954][ C1] ? __pfx_lock_release+0x10/0x10 [ 1730.310979][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1730.311008][ C1] ? schedule+0x90/0x320 [ 1730.311029][ C1] schedule+0x14b/0x320 [ 1730.311053][ C1] schedule_preempt_disabled+0x13/0x30 [ 1730.311074][ C1] __mutex_lock+0x6a4/0xd70 [ 1730.311102][ C1] ? __mutex_lock+0x527/0xd70 [ 1730.311127][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1730.311152][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1730.311188][ C1] ? get_rtnl_holder+0x144/0x190 [ 1730.311216][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1730.311237][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1730.311261][ C1] ? __lock_acquire+0x1384/0x2050 [ 1730.311286][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1730.311328][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1730.311353][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1730.311379][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1730.311428][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1730.311455][ C1] netlink_unicast+0x7f6/0x990 [ 1730.311487][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1730.311507][ C1] ? __virt_addr_valid+0x183/0x530 [ 1730.311527][ C1] ? __check_object_size+0x49c/0x900 [ 1730.311546][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1730.311573][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1730.311611][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1730.311639][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1730.311668][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1730.311683][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1730.311703][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1730.311726][ C1] __sock_sendmsg+0x221/0x270 [ 1730.311753][ C1] __sys_sendto+0x3a4/0x4f0 [ 1730.311789][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1730.311831][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1730.311856][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1730.311879][ C1] ? exc_page_fault+0x590/0x8c0 [ 1730.311902][ C1] __x64_sys_sendto+0xde/0x100 [ 1730.311922][ C1] do_syscall_64+0xf3/0x230 [ 1730.311944][ C1] ? clear_bhb_loop+0x35/0x90 [ 1730.311964][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.311980][ C1] RIP: 0033:0x7f10b6377cac [ 1730.311992][ C1] RSP: 002b:00007ffec80227f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1730.312009][ C1] RAX: ffffffffffffffda RBX: 00007f10b7034620 RCX: 00007f10b6377cac [ 1730.312021][ C1] RDX: 0000000000000028 RSI: 00007f10b7034670 RDI: 0000000000000003 [ 1730.312031][ C1] RBP: 0000000000000000 R08: 00007ffec8022844 R09: 000000000000000c [ 1730.312042][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1730.312052][ C1] R13: 0000000000000000 R14: 00007f10b7034670 R15: 0000000000000000 [ 1730.312079][ C1] [ 1730.312087][ C1] DEBUG: waiting rtnl_mutex for 6185 jiffies. [ 1730.312096][ C1] task:syz-executor state:D stack:24992 pid:18777 tgid:18777 ppid:18776 flags:0x00004002 [ 1730.312120][ C1] Call Trace: [ 1730.312127][ C1] [ 1730.312138][ C1] __schedule+0x1800/0x4a60 [ 1730.312180][ C1] ? __pfx___schedule+0x10/0x10 [ 1730.312204][ C1] ? __pfx_lock_release+0x10/0x10 [ 1730.312227][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1730.312255][ C1] ? schedule+0x90/0x320 [ 1730.312274][ C1] schedule+0x14b/0x320 [ 1730.312297][ C1] schedule_preempt_disabled+0x13/0x30 [ 1730.312316][ C1] __mutex_lock+0x6a4/0xd70 [ 1730.312342][ C1] ? __mutex_lock+0x527/0xd70 [ 1730.312366][ C1] ? rtnl_lock_killable+0x26/0x150 [ 1730.312391][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1730.312418][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 1730.312434][ C1] ? alloc_netdev_mqs+0xb9d/0x1000 [ 1730.312457][ C1] ? get_rtnl_holder+0x144/0x190 [ 1730.312483][ C1] rtnl_lock_killable+0x26/0x150 [ 1730.312509][ C1] register_netdev+0x13/0x50 [ 1730.312527][ C1] ip6gre_init_net+0x228/0x300 [ 1730.312552][ C1] ops_init+0x359/0x610 [ 1730.312577][ C1] setup_net+0x515/0xca0 [ 1730.312599][ C1] ? __pfx_down_read_killable+0x10/0x10 [ 1730.312619][ C1] ? __pfx_setup_net+0x10/0x10 [ 1730.312676][ C1] copy_net_ns+0x4e2/0x7b0 [ 1730.312707][ C1] create_new_namespaces+0x425/0x7b0 [ 1730.312732][ C1] ? bpf_lsm_capable+0x9/0x10 [ 1730.312763][ C1] unshare_nsproxy_namespaces+0x124/0x180 [ 1730.312789][ C1] ksys_unshare+0x619/0xc10 [ 1730.312815][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 1730.312830][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1730.312861][ C1] ? do_syscall_64+0x100/0x230 [ 1730.312891][ C1] __x64_sys_unshare+0x38/0x40 [ 1730.312907][ C1] do_syscall_64+0xf3/0x230 [ 1730.312930][ C1] ? clear_bhb_loop+0x35/0x90 [ 1730.312951][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.312967][ C1] RIP: 0033:0x7f5760b77677 [ 1730.312980][ C1] RSP: 002b:00007ffc61df7f08 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1730.312997][ C1] RAX: ffffffffffffffda RBX: 00007f5760d05f20 RCX: 00007f5760b77677 [ 1730.313010][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1730.313021][ C1] RBP: 00007f5760d06a18 R08: 0000000000000000 R09: 0000000000000000 [ 1730.313032][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 1730.313043][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1730.313071][ C1] [ 1730.313079][ C1] DEBUG: holding rtnl_mutex for 6168 jiffies. [ 1730.313088][ C1] task:kworker/u8:8 state:R running task stack:22064 pid:16080 tgid:16080 ppid:2 flags:0x00004008 [ 1730.313119][ C1] Workqueue: netns cleanup_net [ 1730.313134][ C1] Call Trace: [ 1730.313142][ C1] [ 1730.313150][ C1] sched_show_task+0x506/0x6d0 [ 1730.313170][ C1] ? report_rtnl_holders+0x2a5/0x400 [ 1730.313193][ C1] ? __pfx__printk+0x10/0x10 [ 1730.313215][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 1730.313234][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1730.313256][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1730.313285][ C1] report_rtnl_holders+0x327/0x400 [ 1730.313315][ C1] call_timer_fn+0x18e/0x650 [ 1730.313333][ C1] ? call_timer_fn+0xc0/0x650 [ 1730.313349][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1730.313370][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1730.313392][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1730.313414][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1730.313436][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1730.313455][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1730.313476][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1730.313508][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1730.313529][ C1] __run_timer_base+0x66a/0x8e0 [ 1730.313565][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1730.313595][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1730.313624][ C1] run_timer_softirq+0xb7/0x170 [ 1730.313641][ C1] handle_softirqs+0x2c4/0x970 [ 1730.313670][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 1730.313695][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1730.313720][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 1730.313746][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 1730.313766][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1730.313795][ C1] irq_exit_rcu+0x9/0x30 [ 1730.313813][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1730.313834][ C1] [ 1730.313840][ C1] [ 1730.313848][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1730.313864][ C1] RIP: 0010:console_flush_all+0x9f7/0xf50 [ 1730.313883][ C1] Code: 20 00 90 0f 0b 90 e9 f3 f9 ff ff e8 83 1c 20 00 e8 8e a7 45 0a 4d 85 f6 74 c0 e8 74 1c 20 00 fb 49 bd 00 00 00 00 00 fc ff df <43> 80 3c 2f 00 48 8b 5c 24 30 74 08 48 89 df e8 e5 a0 87 00 4c 8b [ 1730.313897][ C1] RSP: 0018:ffffc90003a0eec0 EFLAGS: 00000293 [ 1730.313911][ C1] RAX: ffffffff8173aeac RBX: 0000000000000000 RCX: ffff8880689e5a00 [ 1730.313923][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1730.313933][ C1] RBP: ffffc90003a0f050 R08: ffffffff8173ae53 R09: 1ffffffff26e6b00 [ 1730.313945][ C1] R10: dffffc0000000000 R11: fffffbfff26e6b01 R12: ffffffff8f1328e0 [ 1730.313957][ C1] R13: dffffc0000000000 R14: 0000000000000200 R15: 1ffffffff1e26527 [ 1730.313975][ C1] ? console_flush_all+0x993/0xf50 [ 1730.313992][ C1] ? console_flush_all+0x9ec/0xf50 [ 1730.314024][ C1] ? console_flush_all+0x147/0xf50 [ 1730.314088][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1730.314122][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1730.314159][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1730.314197][ C1] console_unlock+0x13b/0x4d0 [ 1730.314221][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1730.314236][ C1] ? _printk+0xd5/0x120 [ 1730.314257][ C1] ? _printk+0xd5/0x120 [ 1730.314276][ C1] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 1730.314310][ C1] vprintk_emit+0x7a1/0x900 [ 1730.314333][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1730.314357][ C1] ? mark_lock+0x9a/0x360 [ 1730.314387][ C1] _printk+0xd5/0x120 [ 1730.314407][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1730.314431][ C1] ? __netdev_printk+0x19e/0x4d0 [ 1730.314449][ C1] ? __pfx__printk+0x10/0x10 [ 1730.314474][ C1] ? __netdev_printk+0x1c2/0x4d0 [ 1730.314499][ C1] netdev_info+0x122/0x170 [ 1730.314526][ C1] ? __pfx_netdev_info+0x10/0x10 [ 1730.314557][ C1] ? team_port_del+0xab3/0xcc0 [ 1730.314607][ C1] team_port_del+0xb57/0xcc0 [ 1730.314649][ C1] ? __pfx_team_port_del+0x10/0x10 [ 1730.314681][ C1] ? bond_netdev_event+0xdd/0xf20 [ 1730.314735][ C1] ? __asan_memset+0x23/0x50 [ 1730.314776][ C1] team_del_slave+0x3d/0x1d0 [ 1730.314809][ C1] team_device_event+0x200/0x5b0 [ 1730.314837][ C1] ? notifier_call_chain+0x162/0x3e0 [ 1730.314872][ C1] notifier_call_chain+0x19f/0x3e0 [ 1730.314915][ C1] unregister_netdevice_many_notify+0xd81/0x1c40 [ 1730.314954][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1730.314978][ C1] ? batadv_hash_remove+0x504/0x680 [ 1730.315010][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1730.315036][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1730.315061][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1730.315093][ C1] ? __pfx___might_resched+0x10/0x10 [ 1730.315114][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1730.315146][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1730.315165][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1730.315190][ C1] cleanup_net+0x89d/0xcc0 [ 1730.315212][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1730.315240][ C1] ? process_scheduled_works+0x945/0x1830 [ 1730.315260][ C1] process_scheduled_works+0xa2c/0x1830 [ 1730.315309][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1730.315339][ C1] ? assign_work+0x364/0x3d0 [ 1730.315373][ C1] worker_thread+0x86d/0xd40 [ 1730.315417][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1730.315453][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1730.315492][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1730.315521][ C1] kthread+0x2f0/0x390 [ 1730.315536][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1730.315557][ C1] ? __pfx_kthread+0x10/0x10 [ 1730.315573][ C1] ret_from_fork+0x4b/0x80 [ 1730.315594][ C1] ? __pfx_kthread+0x10/0x10 [ 1730.315610][ C1] ret_from_fork_asm+0x1a/0x30 [ 1730.315647][ C1] [ 1730.315654][ C1] DEBUG: waiting rtnl_mutex for 6162 jiffies. [ 1730.315668][ C1] task:syz-executor state:D stack:21728 pid:18737 tgid:18737 ppid:18736 flags:0x00004002 [ 1730.315695][ C1] Call Trace: [ 1730.315701][ C1] [ 1730.315712][ C1] __schedule+0x1800/0x4a60 [ 1730.315755][ C1] ? __pfx___schedule+0x10/0x10 [ 1730.315779][ C1] ? __pfx_lock_release+0x10/0x10 [ 1730.315802][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1730.315830][ C1] ? schedule+0x90/0x320 [ 1730.315849][ C1] schedule+0x14b/0x320 [ 1730.315872][ C1] schedule_preempt_disabled+0x13/0x30 [ 1730.315891][ C1] __mutex_lock+0x6a4/0xd70 [ 1730.315917][ C1] ? __mutex_lock+0x527/0xd70 [ 1730.315941][ C1] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 1730.315966][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1730.315999][ C1] ? get_rtnl_holder+0x144/0x190 [ 1730.316026][ C1] unregister_netdevice_notifier_net+0x89/0x3a0 [ 1730.316053][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1730.316071][ C1] ? mntput_no_expire+0x2da/0x850 [ 1730.316092][ C1] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 1730.316120][ C1] ? __pfx_mntput_no_expire+0x10/0x10 [ 1730.316146][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1730.316164][ C1] ? simple_release_fs+0x9c/0xd0 [ 1730.316188][ C1] nsim_dev_hwstats_exit+0x81/0x290 [ 1730.316209][ C1] ? kfree+0x149/0x360 [ 1730.316232][ C1] nsim_dev_reload_destroy+0x2ad/0x490 [ 1730.316260][ C1] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1730.316277][ C1] nsim_drv_remove+0x58/0x160 [ 1730.316302][ C1] device_release_driver_internal+0x4a9/0x7c0 [ 1730.316330][ C1] bus_remove_device+0x34f/0x420 [ 1730.316359][ C1] device_del+0x57a/0x9b0 [ 1730.316385][ C1] ? __pfx_device_del+0x10/0x10 [ 1730.316412][ C1] device_unregister+0x20/0xc0 [ 1730.316429][ C1] del_device_store+0x363/0x480 [ 1730.316452][ C1] ? __pfx_del_device_store+0x10/0x10 [ 1730.316475][ C1] ? sysfs_kf_write+0x182/0x2a0 [ 1730.316493][ C1] ? bus_attr_store+0x4f/0xa0 [ 1730.316517][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1730.316535][ C1] kernfs_fop_write_iter+0x3a1/0x500 [ 1730.316559][ C1] vfs_write+0xa72/0xc90 [ 1730.316586][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1730.316605][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1730.316650][ C1] ksys_write+0x1a0/0x2c0 [ 1730.316682][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1730.316706][ C1] ? do_syscall_64+0x100/0x230 [ 1730.316731][ C1] ? do_syscall_64+0xb6/0x230 [ 1730.316756][ C1] do_syscall_64+0xf3/0x230 [ 1730.316778][ C1] ? clear_bhb_loop+0x35/0x90 [ 1730.316797][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.316813][ C1] RIP: 0033:0x7fa96cd74a9f [ 1730.316825][ C1] RSP: 002b:00007ffe9b423a20 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1730.316842][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa96cd74a9f [ 1730.316854][ C1] RDX: 0000000000000001 RSI: 00007ffe9b423a70 RDI: 0000000000000005 [ 1730.316864][ C1] RBP: 00007fa96cde45b2 R08: 0000000000000000 R09: 00007ffe9b423877 [ 1730.316875][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1730.316885][ C1] R13: 00007ffe9b423a70 R14: 00007fa96da34620 R15: 0000000000000003 [ 1730.316913][ C1] [ 1730.316920][ C1] DEBUG: waiting rtnl_mutex for 6160 jiffies. [ 1730.316928][ C1] task:syz-executor state:D stack:20992 pid:18702 tgid:18702 ppid:1 flags:0x00004006 [ 1730.316952][ C1] Call Trace: [ 1730.316959][ C1] [ 1730.316970][ C1] __schedule+0x1800/0x4a60 [ 1730.317012][ C1] ? __pfx___schedule+0x10/0x10 [ 1730.317036][ C1] ? __pfx_lock_release+0x10/0x10 [ 1730.317059][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1730.317087][ C1] ? schedule+0x90/0x320 [ 1730.317106][ C1] schedule+0x14b/0x320 [ 1730.317129][ C1] schedule_preempt_disabled+0x13/0x30 [ 1730.317148][ C1] __mutex_lock+0x6a4/0xd70 [ 1730.317174][ C1] ? __mutex_lock+0x527/0xd70 [ 1730.317198][ C1] ? tun_chr_close+0x3e/0x1b0 [ 1730.317216][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1730.317250][ C1] ? get_rtnl_holder+0x144/0x190 [ 1730.317277][ C1] tun_chr_close+0x3e/0x1b0 [ 1730.317292][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1730.317309][ C1] __fput+0x24a/0x8a0 [ 1730.317341][ C1] task_work_run+0x24f/0x310 [ 1730.317364][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1730.317384][ C1] ? do_exit+0xa2a/0x27f0 [ 1730.317397][ C1] ? kmem_cache_free+0x145/0x350 [ 1730.317422][ C1] do_exit+0xa2f/0x27f0 [ 1730.317446][ C1] ? __pfx_do_exit+0x10/0x10 [ 1730.317462][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1730.317485][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1730.317510][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1730.317530][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1730.317555][ C1] do_group_exit+0x207/0x2c0 [ 1730.317569][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1730.317588][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1730.317612][ C1] get_signal+0x16a1/0x1740 [ 1730.317643][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1730.317660][ C1] ? __pfx_get_signal+0x10/0x10 [ 1730.317692][ C1] arch_do_signal_or_restart+0x96/0x830 [ 1730.317716][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1730.317735][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1730.317770][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1730.317795][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 1730.317820][ C1] do_syscall_64+0x100/0x230 [ 1730.317842][ C1] ? clear_bhb_loop+0x35/0x90 [ 1730.317861][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.317877][ C1] RIP: 0033:0x7fb144d77cac [ 1730.317908][ C1] RSP: 002b:00007ffce9d45100 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1730.317928][ C1] RAX: 0000000000000020 RBX: 00007fb145a34620 RCX: 00007fb144d77cac [ 1730.317941][ C1] RDX: 0000000000000020 RSI: 00007fb145a34670 RDI: 0000000000000003 [ 1730.317954][ C1] RBP: 0000000000000000 R08: 00007ffce9d45154 R09: 000000000000000c [ 1730.317966][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1730.317978][ C1] R13: 0000000000000000 R14: 00007fb145a34670 R15: 0000000000000000 [ 1730.318010][ C1] [ 1730.318019][ C1] [ 1730.318019][ C1] Showing all locks held in the system: [ 1730.318032][ C1] 2 locks held by kworker/u8:2/35: [ 1730.318048][ C1] 3 locks held by kworker/u8:4/63: [ 1730.318059][ C1] #0: ffff88802a07f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1730.318115][ C1] #1: ffffc900015efd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1730.318170][ C1] #2: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1730.318242][ C1] 1 lock held by dhcpcd/4893: [ 1730.318254][ C1] 2 locks held by getty/4985: [ 1730.318265][ C1] #0: ffff88802b4dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1730.318332][ C1] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1730.318382][ C1] 2 locks held by kworker/u8:14/9270: [ 1730.318395][ C1] 1 lock held by syz.3.1887/13425: [ 1730.318406][ C1] 3 locks held by kworker/0:8/14078: [ 1730.318416][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1730.318468][ C1] #1: ffffc90003ef7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1730.318519][ C1] #2: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1730.318565][ C1] 9 locks held by kworker/u8:8/16080: [ 1730.318576][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1730.318626][ C1] #1: ffffc90003a0fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1730.318681][ C1] #2: ffffffff8fc75b10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1730.318726][ C1] #3: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1730.318779][ C1] #4: ffff88806fca8d40 (team->team_lock_key#83){+.+.}-{3:3}, at: team_del_slave+0x32/0x1d0 [ 1730.318833][ C1] #5: ffffffff8e813280 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 1730.318882][ C1] #6: ffffffff8e812e90 (console_srcu){....}-{0:0}, at: console_flush_all+0x147/0xf50 [ 1730.318930][ C1] #7: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1730.318976][ C1] #8: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1730.319031][ C1] 1 lock held by syz.4.3296/18428: [ 1730.319043][ C1] 1 lock held by syz-executor/18702: [ 1730.319053][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1730.319119][ C1] 1 lock held by syz-executor/18705: [ 1730.319129][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1730.319170][ C1] 4 locks held by syz-executor/18734: [ 1730.319180][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1730.319229][ C1] #1: ffff88802bff9888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1730.319269][ C1] #2: ffff88802339c788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1730.319314][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 1730.319358][ C1] 7 locks held by syz-executor/18737: [ 1730.319367][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1730.319416][ C1] #1: ffff88802d0a8c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1730.319456][ C1] #2: ffff88802339c878 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1730.319500][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1730.319543][ C1] #4: ffff88805fb680e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1730.319585][ C1] #5: ffff88805fb6c250 (&devlink->lock_key#80){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1730.319636][ C1] #6: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 1730.319687][ C1] 4 locks held by syz-executor/18750: [ 1730.319697][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1730.319746][ C1] #1: ffff88802ffb8088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1730.319786][ C1] #2: ffff88802339c878 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1730.319830][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1730.319876][ C1] 2 locks held by syz-executor/18777: [ 1730.319885][ C1] #0: ffffffff8fc75b10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1730.319930][ C1] #1: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock_killable+0x26/0x150 [ 1730.319977][ C1] 1 lock held by syz-executor/18780: [ 1730.319986][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1730.320032][ C1] [ 1730.320037][ C1] ============================================= [ 1730.320037][ C1] [ 1730.484714][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.344128][ C1] DEBUG: waiting rtnl_mutex for 6232 jiffies. [ 1731.377018][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.382852][ C1] task:kworker/u8:4 state:D [ 1757.994167][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P18786 1-.... } 2629 jiffies s: 118097 root: 0x2/T [ 1757.994222][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 1757.994237][ T19] Sending NMI from CPU 0 to CPUs 1: [ 1757.994272][ C1] NMI backtrace for cpu 1 [ 1757.994286][ C1] CPU: 1 UID: 0 PID: 18783 Comm: syz-executor Not tainted 6.10.0-next-20240725-syzkaller #0 [ 1757.994305][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1757.994316][ C1] RIP: 0010:io_serial_in+0x76/0xb0 [ 1757.994340][ C1] Code: 60 df 51 fc 89 e9 41 d3 e6 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 d1 63 b9 fc 44 03 33 44 89 f2 ec <0f> b6 c0 5b 41 5e 41 5f 5d c3 cc cc cc cc 89 e9 80 e1 07 38 c1 7c [ 1757.994355][ C1] RSP: 0018:ffffc90000a18378 EFLAGS: 00000002 [ 1757.994369][ C1] RAX: 1ffffffff2a4b700 RBX: ffffffff9525bf20 RCX: 0000000000000000 [ 1757.994382][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1757.994393][ C1] RBP: 0000000000000000 R08: ffffffff8541ebb6 R09: 1ffff11004088046 [ 1757.994405][ C1] R10: dffffc0000000000 R11: ffffffff8541eb70 R12: dffffc0000000000 [ 1757.994418][ C1] R13: ffffffff94f6df30 R14: 00000000000003fd R15: dffffc0000000000 [ 1757.994449][ C1] FS: 000055558a4f0500(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1757.994466][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1757.994479][ C1] CR2: 00007f2585009107 CR3: 0000000025a28000 CR4: 00000000003506f0 [ 1757.994495][ C1] Call Trace: [ 1757.994503][ C1] [ 1757.994512][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1757.994532][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1757.994561][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1757.994580][ C1] ? nmi_handle+0x2a/0x5a0 [ 1757.994608][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1757.994631][ C1] ? nmi_handle+0x14f/0x5a0 [ 1757.994649][ C1] ? nmi_handle+0x2a/0x5a0 [ 1757.994668][ C1] ? io_serial_in+0x76/0xb0 [ 1757.994685][ C1] ? default_do_nmi+0x63/0x160 [ 1757.994706][ C1] ? exc_nmi+0x123/0x1f0 [ 1757.994725][ C1] ? end_repeat_nmi+0xf/0x53 [ 1757.994747][ C1] ? __pfx_io_serial_in+0x10/0x10 [ 1757.994765][ C1] ? io_serial_in+0x46/0xb0 [ 1757.994784][ C1] ? io_serial_in+0x76/0xb0 [ 1757.994802][ C1] ? io_serial_in+0x76/0xb0 [ 1757.994820][ C1] ? io_serial_in+0x76/0xb0 [ 1757.994838][ C1] [ 1757.994845][ C1] [ 1757.994853][ C1] serial8250_console_write+0x1373/0x1ed0 [ 1757.994894][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1757.994923][ C1] ? __pfx_lock_release+0x10/0x10 [ 1757.994947][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1757.994974][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1757.994998][ C1] ? __pfx_univ8250_console_write+0x10/0x10 [ 1757.995023][ C1] console_flush_all+0x880/0xf50 [ 1757.995049][ C1] ? mark_lock+0x9a/0x360 [ 1757.995075][ C1] ? console_flush_all+0x147/0xf50 [ 1757.995100][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1757.995132][ C1] console_unlock+0x13b/0x4d0 [ 1757.995156][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1757.995178][ C1] ? vprintk_emit+0x450/0x900 [ 1757.995205][ C1] ? vprintk_emit+0x761/0x900 [ 1757.995226][ C1] vprintk_emit+0x7a1/0x900 [ 1757.995249][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1757.995268][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1757.995298][ C1] _printk+0xd5/0x120 [ 1757.995323][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1757.995344][ C1] ? __pfx__printk+0x10/0x10 [ 1757.995375][ C1] sched_show_task+0x268/0x6d0 [ 1757.995397][ C1] ? report_rtnl_holders+0x2a5/0x400 [ 1757.995421][ C1] ? __pfx__printk+0x10/0x10 [ 1757.995445][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 1757.995466][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1757.995491][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1757.995520][ C1] report_rtnl_holders+0x327/0x400 [ 1757.995548][ C1] call_timer_fn+0x18e/0x650 [ 1757.995568][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1757.995591][ C1] ? call_timer_fn+0xc0/0x650 [ 1757.995609][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1757.995632][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1757.995653][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1757.995678][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1757.995701][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1757.995723][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1757.995746][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1757.995770][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 1757.995794][ C1] __run_timer_base+0x66a/0x8e0 [ 1757.995831][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1757.995862][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1757.995893][ C1] run_timer_softirq+0xb7/0x170 [ 1757.995911][ C1] handle_softirqs+0x2c4/0x970 [ 1757.995938][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 1757.995964][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1757.995990][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 1757.996019][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 1757.996043][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1757.996071][ C1] irq_exit_rcu+0x9/0x30 [ 1757.996093][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1757.996118][ C1] [ 1757.996124][ C1] [ 1757.996131][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1757.996151][ C1] RIP: 0010:memset_orig+0x8d/0xb0 [ 1757.996178][ C1] Code: e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 48 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 75 f6 4c 89 d0 cc cc cc cc 48 83 fa 07 76 e3 48 89 07 49 c7 c0 08 00 00 00 4d [ 1757.996194][ C1] RSP: 0018:ffffc9000cdf73a0 EFLAGS: 00000246 [ 1757.996214][ C1] RAX: ffffc9000cdf74d0 RBX: ffffc9000cdf74b8 RCX: 0000000000000000 [ 1757.996227][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000cdf74e0 [ 1757.996239][ C1] RBP: ffffc9000cdf74c8 R08: ffffc9000cdf74df R09: 0000000000000000 [ 1757.996252][ C1] R10: ffffc9000cdf74d0 R11: fffff520019bee9c R12: ffffc9000cdf7c78 [ 1757.996266][ C1] R13: dffffc0000000000 R14: ffffc9000cdf74d0 R15: 1ffff920019bee90 [ 1757.996290][ C1] unwind_next_frame+0x13ab/0x2a00 [ 1757.996323][ C1] ? alloc_pages_mpol_noprof+0x3e8/0x680 [ 1757.996347][ C1] ? alloc_pages_mpol_noprof+0x3e8/0x680 [ 1757.996366][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1757.996393][ C1] arch_stack_walk+0x151/0x1b0 [ 1757.996415][ C1] ? __vmalloc_node_range_noprof+0x971/0x1460 [ 1757.996440][ C1] stack_trace_save+0x118/0x1d0 [ 1757.996468][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1757.996501][ C1] save_stack+0xfb/0x1f0 [ 1757.996523][ C1] ? __pfx_save_stack+0x10/0x10 [ 1757.996542][ C1] ? post_alloc_hook+0x1f3/0x230 [ 1757.996568][ C1] ? get_page_from_freelist+0x2e4c/0x2f10 [ 1757.996598][ C1] ? __alloc_pages_noprof+0x256/0x6c0 [ 1757.996615][ C1] ? alloc_pages_mpol_noprof+0x3e8/0x680 [ 1757.996645][ C1] __set_page_owner+0x92/0x800 [ 1757.996666][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1757.996691][ C1] ? __pfx_lock_release+0x10/0x10 [ 1757.996715][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1757.996733][ C1] ? do_raw_spin_trylock+0xc8/0x1f0 [ 1757.996759][ C1] post_alloc_hook+0x1f3/0x230 [ 1757.996786][ C1] get_page_from_freelist+0x2e4c/0x2f10 [ 1757.996812][ C1] ? __alloc_pages_noprof+0x166/0x6c0 [ 1757.996835][ C1] ? alloc_pages_bulk_noprof+0x729/0xd40 [ 1757.996859][ C1] ? prepare_alloc_pages+0x369/0x5d0 [ 1757.996881][ C1] __alloc_pages_noprof+0x256/0x6c0 [ 1757.996901][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1757.996931][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1757.996954][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1757.996973][ C1] ? rcu_is_watching+0x15/0xb0 [ 1757.996990][ C1] ? trace_kmalloc+0x1f/0xd0 [ 1757.997010][ C1] ? __vmalloc_node_range_noprof+0x5dd/0x1460 [ 1757.997031][ C1] ? alloc_pages_noprof+0xef/0x170 [ 1757.997052][ C1] __vmalloc_node_range_noprof+0x971/0x1460 [ 1757.997089][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1757.997117][ C1] vmalloc_user_noprof+0x74/0x80 [ 1757.997137][ C1] ? kcov_ioctl+0x59/0x640 [ 1757.997152][ C1] kcov_ioctl+0x59/0x640 [ 1757.997168][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1757.997187][ C1] ? security_file_ioctl+0x87/0xb0 [ 1757.997211][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 1757.997227][ C1] __se_sys_ioctl+0xfc/0x170 [ 1757.997254][ C1] do_syscall_64+0xf3/0x230 [ 1757.997279][ C1] ? clear_bhb_loop+0x35/0x90 [ 1757.997299][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.997317][ C1] RIP: 0033:0x7f5fa1175b1b [ 1757.997331][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1757.997346][ C1] RSP: 002b:00007fffe40684a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1757.997362][ C1] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f5fa1175b1b [ 1757.997375][ C1] RDX: 0000000000040000 RSI: ffffffff80086301 RDI: 00000000000000dc [ 1757.997387][ C1] RBP: 00007f5fa1306358 R08: 00000000000000da R09: 0000000000000000 [ 1757.997398][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1757.997409][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1757.997428][ C1] [ 1758.918214][ C1] stack:18640 pid:63 tgid:63 ppid:2 flags:0x00004000 [ 1758.925962][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 1758.931955][ C1] Call Trace: [ 1758.935252][ C1] [ 1758.938191][ C1] __schedule+0x1800/0x4a60 [ 1758.942718][ C1] ? __pfx___schedule+0x10/0x10 [ 1758.947603][ C1] ? __pfx_lock_release+0x10/0x10 [ 1758.952637][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1758.958125][ C1] ? kthread_data+0x52/0xd0 [ 1758.962636][ C1] ? schedule+0x90/0x320 [ 1758.966949][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1758.972072][ C1] ? schedule+0x90/0x320 [ 1758.976342][ C1] schedule+0x14b/0x320 [ 1758.980510][ C1] schedule_preempt_disabled+0x13/0x30 [ 1758.985996][ C1] __mutex_lock+0x6a4/0xd70 [ 1758.990509][ C1] ? mark_lock+0x9a/0x360 [ 1758.994872][ C1] ? __mutex_lock+0x527/0xd70 [ 1758.999560][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 1759.004699][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1759.009741][ C1] ? get_rtnl_holder+0x144/0x190 [ 1759.014714][ C1] addrconf_dad_work+0xd0/0x16f0 [ 1759.019664][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1759.025146][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1759.031502][ C1] ? process_scheduled_works+0x945/0x1830 [ 1759.037246][ C1] process_scheduled_works+0xa2c/0x1830 [ 1759.042817][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1759.048832][ C1] ? assign_work+0x364/0x3d0 [ 1759.053433][ C1] worker_thread+0x86d/0xd40 [ 1759.058060][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1759.063094][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1759.068237][ C1] kthread+0x2f0/0x390 [ 1759.072304][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1759.077439][ C1] ? __pfx_kthread+0x10/0x10 [ 1759.082029][ C1] ret_from_fork+0x4b/0x80 [ 1759.086476][ C1] ? __pfx_kthread+0x10/0x10 [ 1759.091070][ C1] ret_from_fork_asm+0x1a/0x30 [ 1759.095880][ C1] [ 1759.098898][ C1] DEBUG: waiting rtnl_mutex for 8966 jiffies. [ 1759.104977][ C1] task:syz-executor state:D stack:20992 pid:18705 tgid:18705 ppid:1 flags:0x00004006 [ 1759.115172][ C1] Call Trace: [ 1759.118449][ C1] [ 1759.121400][ C1] __schedule+0x1800/0x4a60 [ 1759.125951][ C1] ? __pfx___schedule+0x10/0x10 [ 1759.130807][ C1] ? __pfx_lock_release+0x10/0x10 [ 1759.135864][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1759.141337][ C1] ? schedule+0x90/0x320 [ 1759.145609][ C1] schedule+0x14b/0x320 [ 1759.149779][ C1] schedule_preempt_disabled+0x13/0x30 [ 1759.155268][ C1] __mutex_lock+0x6a4/0xd70 [ 1759.159782][ C1] ? __mutex_lock+0x527/0xd70 [ 1759.164488][ C1] ? tun_chr_close+0x3e/0x1b0 [ 1759.169177][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1759.174242][ C1] ? get_rtnl_holder+0x144/0x190 [ 1759.179190][ C1] tun_chr_close+0x3e/0x1b0 [ 1759.183688][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1759.188819][ C1] __fput+0x24a/0x8a0 [ 1759.192814][ C1] task_work_run+0x24f/0x310 [ 1759.197433][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1759.202548][ C1] ? do_exit+0xa2a/0x27f0 [ 1759.206893][ C1] ? kmem_cache_free+0x145/0x350 [ 1759.211835][ C1] do_exit+0xa2f/0x27f0 [ 1759.216018][ C1] ? __pfx_do_exit+0x10/0x10 [ 1759.220607][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1759.226006][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1759.231990][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1759.238339][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1759.243455][ C1] do_group_exit+0x207/0x2c0 [ 1759.248081][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1759.253279][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1759.258501][ C1] get_signal+0x16a1/0x1740 [ 1759.263023][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1759.268085][ C1] ? __pfx_get_signal+0x10/0x10 [ 1759.272953][ C1] arch_do_signal_or_restart+0x96/0x830 [ 1759.278547][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1759.284726][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1759.290717][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1759.296463][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 1759.302012][ C1] do_syscall_64+0x100/0x230 [ 1759.306630][ C1] ? clear_bhb_loop+0x35/0x90 [ 1759.311308][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.317225][ C1] RIP: 0033:0x7f8c93f77cac [ 1759.321635][ C1] RSP: 002b:00007ffd00b7b310 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1759.330069][ C1] RAX: 0000000000000028 RBX: 00007f8c94c34620 RCX: 00007f8c93f77cac [ 1759.338084][ C1] RDX: 0000000000000028 RSI: 00007f8c94c34670 RDI: 0000000000000003 [ 1759.346092][ C1] RBP: 0000000000000000 R08: 00007ffd00b7b364 R09: 000000000000000c [ 1759.354104][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1759.362098][ C1] R13: 0000000000000000 R14: 00007f8c94c34670 R15: 0000000000000000 [ 1759.370149][ C1] [ 1759.373162][ C1] DEBUG: waiting rtnl_mutex for 8964 jiffies. [ 1759.379239][ C1] task:kworker/0:8 state:D stack:23680 pid:14078 tgid:14078 ppid:2 flags:0x00004000 [ 1759.389433][ C1] Workqueue: events linkwatch_event [ 1759.394653][ C1] Call Trace: [ 1759.397961][ C1] [ 1759.400893][ C1] __schedule+0x1800/0x4a60 [ 1759.405440][ C1] ? __pfx___schedule+0x10/0x10 [ 1759.410295][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1759.416293][ C1] ? __pfx_lock_release+0x10/0x10 [ 1759.421316][ C1] ? kick_pool+0x1bd/0x620 [ 1759.425760][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1759.431007][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1759.436225][ C1] ? schedule+0x90/0x320 [ 1759.440467][ C1] schedule+0x14b/0x320 [ 1759.444648][ C1] schedule_preempt_disabled+0x13/0x30 [ 1759.450102][ C1] __mutex_lock+0x6a4/0xd70 [ 1759.454696][ C1] ? __mutex_lock+0x527/0xd70 [ 1759.459379][ C1] ? linkwatch_event+0xe/0x60 [ 1759.464084][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1759.469139][ C1] ? get_rtnl_holder+0x144/0x190 [ 1759.474119][ C1] ? process_scheduled_works+0x945/0x1830 [ 1759.479844][ C1] linkwatch_event+0xe/0x60 [ 1759.484367][ C1] process_scheduled_works+0xa2c/0x1830 [ 1759.489944][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1759.495952][ C1] ? assign_work+0x364/0x3d0 [ 1759.500552][ C1] worker_thread+0x86d/0xd40 [ 1759.505189][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1759.510225][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1759.515363][ C1] kthread+0x2f0/0x390 [ 1759.519428][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1759.524594][ C1] ? __pfx_kthread+0x10/0x10 [ 1759.529183][ C1] ret_from_fork+0x4b/0x80 [ 1759.533597][ C1] ? __pfx_kthread+0x10/0x10 [ 1759.538207][ C1] ret_from_fork_asm+0x1a/0x30 [ 1759.542991][ C1] [ 1759.546031][ C1] DEBUG: waiting rtnl_mutex for 8972 jiffies. [ 1759.552085][ C1] task:syz-executor state:D stack:24992 pid:18780 tgid:18780 ppid:1 flags:0x00000004 [ 1759.562273][ C1] Call Trace: [ 1759.565568][ C1] [ 1759.568497][ C1] __schedule+0x1800/0x4a60 [ 1759.573017][ C1] ? __pfx___schedule+0x10/0x10 [ 1759.577898][ C1] ? __pfx_lock_release+0x10/0x10 [ 1759.582930][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1759.588418][ C1] ? schedule+0x90/0x320 [ 1759.592657][ C1] schedule+0x14b/0x320 [ 1759.596826][ C1] schedule_preempt_disabled+0x13/0x30 [ 1759.602291][ C1] __mutex_lock+0x6a4/0xd70 [ 1759.606834][ C1] ? __mutex_lock+0x527/0xd70 [ 1759.611520][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1759.616748][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1759.621784][ C1] ? get_rtnl_holder+0x144/0x190 [ 1759.626755][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1759.631694][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1759.636826][ C1] ? __lock_acquire+0x1384/0x2050 [ 1759.641845][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1759.647337][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1759.652116][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1759.657603][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1759.662911][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1759.668147][ C1] netlink_unicast+0x7f6/0x990 [ 1759.672931][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1759.678235][ C1] ? __virt_addr_valid+0x183/0x530 [ 1759.683348][ C1] ? __check_object_size+0x49c/0x900 [ 1759.688653][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1759.693771][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1759.698572][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1759.703866][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1759.708830][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1759.714137][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1759.719587][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1759.724892][ C1] __sock_sendmsg+0x221/0x270 [ 1759.729568][ C1] __sys_sendto+0x3a4/0x4f0 [ 1759.734105][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1759.739163][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1759.745162][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1759.751486][ C1] ? exc_page_fault+0x590/0x8c0 [ 1759.756352][ C1] __x64_sys_sendto+0xde/0x100 [ 1759.761126][ C1] do_syscall_64+0xf3/0x230 [ 1759.765648][ C1] ? clear_bhb_loop+0x35/0x90 [ 1759.770319][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.776220][ C1] RIP: 0033:0x7f10b6377cac [ 1759.780623][ C1] RSP: 002b:00007ffec80227f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1759.789066][ C1] RAX: ffffffffffffffda RBX: 00007f10b7034620 RCX: 00007f10b6377cac [ 1759.797086][ C1] RDX: 0000000000000028 RSI: 00007f10b7034670 RDI: 0000000000000003 [ 1759.805067][ C1] RBP: 0000000000000000 R08: 00007ffec8022844 R09: 000000000000000c [ 1759.813032][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1759.821013][ C1] R13: 0000000000000000 R14: 00007f10b7034670 R15: 0000000000000000 [ 1759.829017][ C1] [ 1759.832048][ C1] DEBUG: waiting rtnl_mutex for 2871 jiffies. [ 1759.838134][ C1] task:syz-executor state:D stack:24992 pid:18777 tgid:18777 ppid:1 flags:0x00004006 [ 1759.848320][ C1] Call Trace: [ 1759.851596][ C1] [ 1759.854551][ C1] __schedule+0x1800/0x4a60 [ 1759.859092][ C1] ? __pfx___schedule+0x10/0x10 [ 1759.863964][ C1] ? __pfx_lock_release+0x10/0x10 [ 1759.869018][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1759.874516][ C1] ? schedule+0x90/0x320 [ 1759.878759][ C1] schedule+0x14b/0x320 [ 1759.882919][ C1] schedule_preempt_disabled+0x13/0x30 [ 1759.888403][ C1] __mutex_lock+0x6a4/0xd70 [ 1759.892915][ C1] ? __mutex_lock+0x527/0xd70 [ 1759.897607][ C1] ? wg_netns_pre_exit+0x1f/0x1e0 [ 1759.902624][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1759.907685][ C1] ? ops_init+0x4ac/0x610 [ 1759.912006][ C1] ? kfree+0x149/0x360 [ 1759.916097][ C1] ? get_rtnl_holder+0x144/0x190 [ 1759.921036][ C1] wg_netns_pre_exit+0x1f/0x1e0 [ 1759.925921][ C1] setup_net+0x7b4/0xca0 [ 1759.930179][ C1] ? __pfx_down_read_killable+0x10/0x10 [ 1759.935749][ C1] ? __pfx_setup_net+0x10/0x10 [ 1759.940517][ C1] copy_net_ns+0x4e2/0x7b0 [ 1759.944953][ C1] create_new_namespaces+0x425/0x7b0 [ 1759.950238][ C1] ? bpf_lsm_capable+0x9/0x10 [ 1759.954949][ C1] unshare_nsproxy_namespaces+0x124/0x180 [ 1759.960667][ C1] ksys_unshare+0x619/0xc10 [ 1759.965228][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 1759.970245][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1759.976243][ C1] ? do_syscall_64+0x100/0x230 [ 1759.981008][ C1] __x64_sys_unshare+0x38/0x40 [ 1759.985781][ C1] do_syscall_64+0xf3/0x230 [ 1759.990280][ C1] ? clear_bhb_loop+0x35/0x90 [ 1759.994968][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.000853][ C1] RIP: 0033:0x7f5760b77677 [ 1760.005278][ C1] RSP: 002b:00007ffc61df7f08 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1760.013708][ C1] RAX: ffffffffffffffda RBX: 00007f5760d05f20 RCX: 00007f5760b77677 [ 1760.021694][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1760.029675][ C1] RBP: 00007f5760d06a18 R08: 0000000000000000 R09: 0000000000000000 [ 1760.037742][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 1760.045808][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1760.053777][ C1] [ 1760.056810][ C1] DEBUG: holding rtnl_mutex for 9143 jiffies. [ 1760.062861][ C1] task:kworker/u8:8 state:D stack:22064 pid:16080 tgid:16080 ppid:2 flags:0x00004000 [ 1760.073048][ C1] Workqueue: netns cleanup_net [ 1760.077831][ C1] Call Trace: [ 1760.081102][ C1] [ 1760.084026][ C1] __schedule+0x1800/0x4a60 [ 1760.088591][ C1] ? __pfx___schedule+0x10/0x10 [ 1760.093446][ C1] ? __pfx_lock_release+0x10/0x10 [ 1760.098494][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1760.104410][ C1] ? kthread_data+0x52/0xd0 [ 1760.108912][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1760.114029][ C1] ? schedule+0x90/0x320 [ 1760.118327][ C1] schedule+0x14b/0x320 [ 1760.122484][ C1] synchronize_rcu_expedited+0x70a/0x830 [ 1760.128139][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1760.134309][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1760.140379][ C1] ? __pfx___might_resched+0x10/0x10 [ 1760.145764][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1760.151738][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1760.158097][ C1] synchronize_rcu+0x11b/0x360 [ 1760.162857][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 1760.168168][ C1] lockdep_unregister_key+0x4b7/0x540 [ 1760.173544][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1760.179451][ C1] ? rcu_is_watching+0x15/0xb0 [ 1760.184221][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 1760.188814][ C1] __qdisc_destroy+0x165/0x410 [ 1760.193580][ C1] dev_shutdown+0x357/0x450 [ 1760.198105][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 1760.204460][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1760.211216][ C1] ? batadv_hash_remove+0x504/0x680 [ 1760.216442][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1760.222333][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1760.228533][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1760.234200][ C1] ? __pfx___might_resched+0x10/0x10 [ 1760.239480][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1760.245656][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1760.250937][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1760.257112][ C1] cleanup_net+0x89d/0xcc0 [ 1760.261529][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1760.266487][ C1] ? process_scheduled_works+0x945/0x1830 [ 1760.272203][ C1] process_scheduled_works+0xa2c/0x1830 [ 1760.277795][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1760.283787][ C1] ? assign_work+0x364/0x3d0 [ 1760.288416][ C1] worker_thread+0x86d/0xd40 [ 1760.293019][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1760.298947][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1760.303977][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1760.309133][ C1] kthread+0x2f0/0x390 [ 1760.313196][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1760.318336][ C1] ? __pfx_kthread+0x10/0x10 [ 1760.322926][ C1] ret_from_fork+0x4b/0x80 [ 1760.327365][ C1] ? __pfx_kthread+0x10/0x10 [ 1760.331948][ C1] ret_from_fork_asm+0x1a/0x30 [ 1760.336738][ C1] [ 1760.339747][ C1] DEBUG: waiting rtnl_mutex for 9164 jiffies. [ 1760.345819][ C1] task:syz-executor state:D stack:21728 pid:18737 tgid:18737 ppid:1 flags:0x00004006 [ 1760.355997][ C1] Call Trace: [ 1760.359357][ C1] [ 1760.362284][ C1] __schedule+0x1800/0x4a60 [ 1760.366825][ C1] ? __pfx___schedule+0x10/0x10 [ 1760.371677][ C1] ? __pfx_lock_release+0x10/0x10 [ 1760.376723][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1760.382183][ C1] ? schedule+0x90/0x320 [ 1760.386441][ C1] schedule+0x14b/0x320 [ 1760.390613][ C1] schedule_preempt_disabled+0x13/0x30 [ 1760.396102][ C1] __mutex_lock+0x6a4/0xd70 [ 1760.400610][ C1] ? __mutex_lock+0x527/0xd70 [ 1760.405306][ C1] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 1760.411719][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1760.416783][ C1] ? get_rtnl_holder+0x144/0x190 [ 1760.421725][ C1] unregister_netdevice_notifier_net+0x89/0x3a0 [ 1760.428007][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1760.432860][ C1] ? mntput_no_expire+0x2da/0x850 [ 1760.437921][ C1] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 1760.444904][ C1] ? __pfx_mntput_no_expire+0x10/0x10 [ 1760.450279][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1760.455155][ C1] ? simple_release_fs+0x9c/0xd0 [ 1760.460097][ C1] nsim_dev_hwstats_exit+0x81/0x290 [ 1760.465312][ C1] ? kfree+0x149/0x360 [ 1760.469378][ C1] nsim_dev_reload_destroy+0x2ad/0x490 [ 1760.474860][ C1] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1760.480140][ C1] nsim_drv_remove+0x58/0x160 [ 1760.484835][ C1] device_release_driver_internal+0x4a9/0x7c0 [ 1760.490901][ C1] bus_remove_device+0x34f/0x420 [ 1760.495860][ C1] device_del+0x57a/0x9b0 [ 1760.500188][ C1] ? __pfx_device_del+0x10/0x10 [ 1760.505075][ C1] device_unregister+0x20/0xc0 [ 1760.509829][ C1] del_device_store+0x363/0x480 [ 1760.514694][ C1] ? __pfx_del_device_store+0x10/0x10 [ 1760.520064][ C1] ? sysfs_kf_write+0x182/0x2a0 [ 1760.524932][ C1] ? bus_attr_store+0x4f/0xa0 [ 1760.529618][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1760.534829][ C1] kernfs_fop_write_iter+0x3a1/0x500 [ 1760.540110][ C1] vfs_write+0xa72/0xc90 [ 1760.544554][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1760.550351][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1760.555181][ C1] ksys_write+0x1a0/0x2c0 [ 1760.559519][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1760.564388][ C1] ? do_syscall_64+0x100/0x230 [ 1760.569191][ C1] ? do_syscall_64+0xb6/0x230 [ 1760.573865][ C1] do_syscall_64+0xf3/0x230 [ 1760.578410][ C1] ? clear_bhb_loop+0x35/0x90 [ 1760.583097][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.589043][ C1] RIP: 0033:0x7fa96cd74a9f [ 1760.593503][ C1] RSP: 002b:00007ffe9b423a20 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1760.602040][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa96cd74a9f [ 1760.610028][ C1] RDX: 0000000000000001 RSI: 00007ffe9b423a70 RDI: 0000000000000005 [ 1760.618016][ C1] RBP: 00007fa96cde45b2 R08: 0000000000000000 R09: 00007ffe9b423877 [ 1760.626010][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1760.634099][ C1] R13: 00007ffe9b423a70 R14: 00007fa96da34620 R15: 0000000000000003 [ 1760.642099][ C1] [ 1760.645144][ C1] DEBUG: waiting rtnl_mutex for 9193 jiffies. [ 1760.651202][ C1] task:syz-executor state:D stack:20992 pid:18702 tgid:18702 ppid:1 flags:0x00004006 [ 1760.661379][ C1] Call Trace: [ 1760.664670][ C1] [ 1760.667608][ C1] __schedule+0x1800/0x4a60 [ 1760.672141][ C1] ? __pfx___schedule+0x10/0x10 [ 1760.677043][ C1] ? __pfx_lock_release+0x10/0x10 [ 1760.682078][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1760.687561][ C1] ? schedule+0x90/0x320 [ 1760.691887][ C1] schedule+0x14b/0x320 [ 1760.696081][ C1] schedule_preempt_disabled+0x13/0x30 [ 1760.701544][ C1] __mutex_lock+0x6a4/0xd70 [ 1760.706073][ C1] ? __mutex_lock+0x527/0xd70 [ 1760.710750][ C1] ? tun_chr_close+0x3e/0x1b0 [ 1760.715460][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1760.720513][ C1] ? get_rtnl_holder+0x144/0x190 [ 1760.725477][ C1] tun_chr_close+0x3e/0x1b0 [ 1760.729983][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1760.735113][ C1] __fput+0x24a/0x8a0 [ 1760.739117][ C1] task_work_run+0x24f/0x310 [ 1760.743709][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1760.748943][ C1] ? do_exit+0xa2a/0x27f0 [ 1760.753279][ C1] ? kmem_cache_free+0x145/0x350 [ 1760.758250][ C1] do_exit+0xa2f/0x27f0 [ 1760.762414][ C1] ? __pfx_do_exit+0x10/0x10 [ 1760.767019][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1760.772410][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1760.778414][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1760.784767][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1760.789887][ C1] do_group_exit+0x207/0x2c0 [ 1760.794493][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1760.799687][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1760.804904][ C1] get_signal+0x16a1/0x1740 [ 1760.809414][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1760.814461][ C1] ? __pfx_get_signal+0x10/0x10 [ 1760.819313][ C1] arch_do_signal_or_restart+0x96/0x830 [ 1760.824878][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1760.831035][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1760.837063][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1760.842791][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 1760.848367][ C1] do_syscall_64+0x100/0x230 [ 1760.852970][ C1] ? clear_bhb_loop+0x35/0x90 [ 1760.857683][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.863577][ C1] RIP: 0033:0x7fb144d77cac [ 1760.868016][ C1] RSP: 002b:00007ffce9d45100 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1760.876457][ C1] RAX: 0000000000000020 RBX: 00007fb145a34620 RCX: 00007fb144d77cac [ 1760.884445][ C1] RDX: 0000000000000020 RSI: 00007fb145a34670 RDI: 0000000000000003 [ 1760.892411][ C1] RBP: 0000000000000000 R08: 00007ffce9d45154 R09: 000000000000000c [ 1760.900416][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1760.908415][ C1] R13: 0000000000000000 R14: 00007fb145a34670 R15: 0000000000000000 [ 1760.916427][ C1] [ 1760.919468][ C1] [ 1760.919468][ C1] Showing all locks held in the system: [ 1760.927201][ C1] 3 locks held by kworker/u8:4/63: [ 1760.932328][ C1] #0: ffff88802a07f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1760.943966][ C1] #1: ffffc900015efd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1760.956849][ C1] #2: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1760.966399][ C1] 2 locks held by getty/4985: [ 1760.971066][ C1] #0: ffff88802b4dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1760.980836][ C1] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1760.990967][ C1] 1 lock held by syz.3.1887/13425: [ 1760.996097][ C1] 3 locks held by kworker/0:8/14078: [ 1761.001375][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1761.012372][ C1] #1: ffffc90003ef7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1761.023452][ C1] #2: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1761.032445][ C1] 4 locks held by kworker/u8:8/16080: [ 1761.037833][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1761.048790][ C1] #1: ffffc90003a0fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1761.059349][ C1] #2: ffffffff8fc75b10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1761.068788][ C1] #3: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1761.078864][ C1] 1 lock held by syz-executor/18702: [ 1761.084162][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1761.093216][ C1] 1 lock held by syz-executor/18705: [ 1761.098641][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1761.107639][ C1] 4 locks held by syz-executor/18734: [ 1761.112996][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1761.121965][ C1] #1: ffff88802bff9888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1761.131837][ C1] #2: ffff88802339c788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1761.141902][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 1761.152323][ C1] 7 locks held by syz-executor/18737: [ 1761.157727][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1761.166735][ C1] #1: ffff88802d0a8c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1761.176512][ C1] #2: ffff88802339c878 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1761.186551][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1761.196850][ C1] #4: ffff88805fb680e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1761.207489][ C1] #5: ffff88805fb6c250 (&devlink->lock_key#80){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1761.217621][ C1] #6: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 1761.228358][ C1] 4 locks held by syz-executor/18750: [ 1761.233728][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1761.242640][ C1] #1: ffff88802ffb8088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1761.252412][ C1] #2: ffff88802339c878 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1761.262450][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1761.272747][ C1] 2 locks held by syz-executor/18777: [ 1761.278133][ C1] #0: ffffffff8fc75b10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1761.287571][ C1] #1: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 1761.296907][ C1] 1 lock held by syz-executor/18780: [ 1761.302176][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1761.311602][ C1] 2 locks held by dhcpcd/18782: [ 1761.316459][ C1] #0: ffff88805fe50258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 1761.326139][ C1] #1: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1761.337210][ C1] 2 locks held by syz-executor/18783: [ 1761.342763][ C1] #0: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1761.352981][ C1] #1: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1761.362890][ C1] 4 locks held by syz-executor/18786: [ 1761.368285][ C1] [ 1761.370605][ C1] ============================================= [ 1761.370605][ C1] [ 1761.387098][ C1] eth0: bad gso: type: 1, size: 1408 [ 1761.886399][T16080] team0 (unregistering): Port device team_slave_0 removed [ 1762.464124][ C1] DEBUG: waiting rtnl_mutex for 9344 jiffies. [ 1762.470318][ C1] task:kworker/u8:4 state:D stack:18640 pid:63 tgid:63 ppid:2 flags:0x00004000 [ 1762.480497][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 1762.486548][ C1] Call Trace: [ 1762.489848][ C1] [ 1762.492801][ C1] __schedule+0x1800/0x4a60 [ 1762.497408][ C1] ? __pfx___schedule+0x10/0x10 [ 1762.502311][ C1] ? __pfx_lock_release+0x10/0x10 [ 1762.507422][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1762.512902][ C1] ? kthread_data+0x52/0xd0 [ 1762.517470][ C1] ? schedule+0x90/0x320 [ 1762.521740][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1762.526938][ C1] ? schedule+0x90/0x320 [ 1762.531221][ C1] schedule+0x14b/0x320 [ 1762.535448][ C1] schedule_preempt_disabled+0x13/0x30 [ 1762.540939][ C1] __mutex_lock+0x6a4/0xd70 [ 1762.545541][ C1] ? mark_lock+0x9a/0x360 [ 1762.549913][ C1] ? __mutex_lock+0x527/0xd70 [ 1762.554680][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 1762.559831][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1762.564931][ C1] ? get_rtnl_holder+0x144/0x190 [ 1762.569926][ C1] addrconf_dad_work+0xd0/0x16f0 [ 1762.574942][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1762.580432][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1762.586844][ C1] ? process_scheduled_works+0x945/0x1830 [ 1762.592596][ C1] process_scheduled_works+0xa2c/0x1830 [ 1762.598252][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1762.604310][ C1] ? assign_work+0x364/0x3d0 [ 1762.608939][ C1] worker_thread+0x86d/0xd40 [ 1762.613593][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1762.618702][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1762.623866][ C1] kthread+0x2f0/0x390 [ 1762.628029][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1762.633196][ C1] ? __pfx_kthread+0x10/0x10 [ 1762.637852][ C1] ret_from_fork+0x4b/0x80 [ 1762.642349][ C1] ? __pfx_kthread+0x10/0x10 [ 1762.647008][ C1] ret_from_fork_asm+0x1a/0x30 [ 1762.651858][ C1] [ 1762.654933][ C1] DEBUG: waiting rtnl_mutex for 9322 jiffies. [ 1762.661008][ C1] task:syz-executor state:D stack:20992 pid:18705 tgid:18705 ppid:1 flags:0x00004006 [ 1762.671257][ C1] Call Trace: [ 1762.674609][ C1] [ 1762.677579][ C1] __schedule+0x1800/0x4a60 [ 1762.682158][ C1] ? __pfx___schedule+0x10/0x10 [ 1762.687112][ C1] ? __pfx_lock_release+0x10/0x10 [ 1762.692199][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1762.697735][ C1] ? schedule+0x90/0x320 [ 1762.702010][ C1] schedule+0x14b/0x320 [ 1762.706264][ C1] schedule_preempt_disabled+0x13/0x30 [ 1762.711760][ C1] __mutex_lock+0x6a4/0xd70 [ 1762.716338][ C1] ? __mutex_lock+0x527/0xd70 [ 1762.721047][ C1] ? tun_chr_close+0x3e/0x1b0 [ 1762.725788][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1762.730866][ C1] ? get_rtnl_holder+0x144/0x190 [ 1762.735899][ C1] tun_chr_close+0x3e/0x1b0 [ 1762.740434][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1762.745621][ C1] __fput+0x24a/0x8a0 [ 1762.749656][ C1] task_work_run+0x24f/0x310 [ 1762.754318][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1762.759464][ C1] ? do_exit+0xa2a/0x27f0 [ 1762.763814][ C1] ? kmem_cache_free+0x145/0x350 [ 1762.768830][ C1] do_exit+0xa2f/0x27f0 [ 1762.773041][ C1] ? __pfx_do_exit+0x10/0x10 [ 1762.777691][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1762.783118][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1762.789194][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1762.795597][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1762.800741][ C1] do_group_exit+0x207/0x2c0 [ 1762.805386][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1762.810614][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1762.815899][ C1] get_signal+0x16a1/0x1740 [ 1762.820440][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1762.825522][ C1] ? __pfx_get_signal+0x10/0x10 [ 1762.830414][ C1] arch_do_signal_or_restart+0x96/0x830 [ 1762.836037][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1762.842221][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1762.848297][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1762.854084][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 1762.859668][ C1] do_syscall_64+0x100/0x230 [ 1762.860824][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1762.864296][ C1] ? clear_bhb_loop+0x35/0x90 [ 1762.864332][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.876279][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1762.876489][ C1] RIP: 0033:0x7f8c93f77cac [ 1762.893773][ C1] RSP: 002b:00007ffd00b7b310 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1762.894179][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1762.902238][ C1] RAX: 0000000000000028 RBX: 00007f8c94c34620 RCX: 00007f8c93f77cac [ 1762.911704][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1762.917179][ C1] RDX: 0000000000000028 RSI: 00007f8c94c34670 RDI: 0000000000000003 [ 1762.917203][ C1] RBP: 0000000000000000 R08: 00007ffd00b7b364 R09: 000000000000000c [ 1762.925106][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1762.932112][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1762.940730][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1762.947070][ C1] R13: 0000000000000000 R14: 00007f8c94c34670 R15: 0000000000000000 [ 1762.947112][ C1] [ 1762.973175][ C1] DEBUG: waiting rtnl_mutex for 9324 jiffies. [ 1762.979294][ C1] task:kworker/0:8 state:D stack:23680 pid:14078 tgid:14078 ppid:2 flags:0x00004000 [ 1762.989528][ C1] Workqueue: events linkwatch_event [ 1762.994791][ C1] Call Trace: [ 1762.998094][ C1] [ 1763.001055][ C1] __schedule+0x1800/0x4a60 [ 1763.005644][ C1] ? __pfx___schedule+0x10/0x10 [ 1763.010521][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1763.016555][ C1] ? __pfx_lock_release+0x10/0x10 [ 1763.021612][ C1] ? kick_pool+0x1bd/0x620 [ 1763.026103][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1763.031330][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1763.036594][ C1] ? schedule+0x90/0x320 [ 1763.040867][ C1] schedule+0x14b/0x320 [ 1763.045082][ C1] schedule_preempt_disabled+0x13/0x30 [ 1763.050569][ C1] __mutex_lock+0x6a4/0xd70 [ 1763.055144][ C1] ? __mutex_lock+0x527/0xd70 [ 1763.059859][ C1] ? linkwatch_event+0xe/0x60 [ 1763.064607][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1763.069675][ C1] ? get_rtnl_holder+0x144/0x190 [ 1763.074684][ C1] ? process_scheduled_works+0x945/0x1830 [ 1763.080434][ C1] linkwatch_event+0xe/0x60 [ 1763.085006][ C1] process_scheduled_works+0xa2c/0x1830 [ 1763.090712][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1763.096933][ C1] ? assign_work+0x364/0x3d0 [ 1763.101554][ C1] worker_thread+0x86d/0xd40 [ 1763.106233][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1763.111302][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1763.116475][ C1] kthread+0x2f0/0x390 [ 1763.120663][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1763.125846][ C1] ? __pfx_kthread+0x10/0x10 [ 1763.130470][ C1] ret_from_fork+0x4b/0x80 [ 1763.134936][ C1] ? __pfx_kthread+0x10/0x10 [ 1763.139544][ C1] ret_from_fork_asm+0x1a/0x30 [ 1763.144388][ C1] [ 1763.147422][ C1] DEBUG: waiting rtnl_mutex for 9332 jiffies. [ 1763.153494][ C1] task:syz-executor state:D stack:24992 pid:18780 tgid:18780 ppid:1 flags:0x00000004 [ 1763.163715][ C1] Call Trace: [ 1763.167063][ C1] [ 1763.170028][ C1] __schedule+0x1800/0x4a60 [ 1763.174617][ C1] ? __pfx___schedule+0x10/0x10 [ 1763.179515][ C1] ? __pfx_lock_release+0x10/0x10 [ 1763.184611][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1763.190110][ C1] ? schedule+0x90/0x320 [ 1763.194426][ C1] schedule+0x14b/0x320 [ 1763.198632][ C1] schedule_preempt_disabled+0x13/0x30 [ 1763.204160][ C1] __mutex_lock+0x6a4/0xd70 [ 1763.208702][ C1] ? __mutex_lock+0x527/0xd70 [ 1763.213416][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1763.218596][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1763.223666][ C1] ? get_rtnl_holder+0x144/0x190 [ 1763.228672][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1763.233639][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1763.238904][ C1] ? __lock_acquire+0x1384/0x2050 [ 1763.243962][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1763.249514][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1763.254457][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1763.259947][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1763.265321][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1763.270564][ C1] netlink_unicast+0x7f6/0x990 [ 1763.275396][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1763.280702][ C1] ? __virt_addr_valid+0x183/0x530 [ 1763.285864][ C1] ? __check_object_size+0x49c/0x900 [ 1763.291170][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1763.296345][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1763.301154][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1763.306519][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1763.311484][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1763.316821][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1763.322311][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1763.327686][ C1] __sock_sendmsg+0x221/0x270 [ 1763.332400][ C1] __sys_sendto+0x3a4/0x4f0 [ 1763.336966][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1763.342065][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1763.348128][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1763.354593][ C1] ? exc_page_fault+0x590/0x8c0 [ 1763.359479][ C1] __x64_sys_sendto+0xde/0x100 [ 1763.364322][ C1] do_syscall_64+0xf3/0x230 [ 1763.368863][ C1] ? clear_bhb_loop+0x35/0x90 [ 1763.373580][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1763.379537][ C1] RIP: 0033:0x7f10b6377cac [ 1763.383970][ C1] RSP: 002b:00007ffec80227f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1763.392558][ C1] RAX: ffffffffffffffda RBX: 00007f10b7034620 RCX: 00007f10b6377cac [ 1763.400589][ C1] RDX: 0000000000000028 RSI: 00007f10b7034670 RDI: 0000000000000003 [ 1763.408606][ C1] RBP: 0000000000000000 R08: 00007ffec8022844 R09: 000000000000000c [ 1763.416639][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1763.424623][ C1] R13: 0000000000000000 R14: 00007f10b7034670 R15: 0000000000000000 [ 1763.432682][ C1] [ 1763.435715][ C1] DEBUG: waiting rtnl_mutex for 3232 jiffies. [ 1763.441780][ C1] task:syz-executor state:D stack:24992 pid:18777 tgid:18777 ppid:1 flags:0x00004006 [ 1763.451951][ C1] Call Trace: [ 1763.455262][ C1] [ 1763.458197][ C1] __schedule+0x1800/0x4a60 [ 1763.462725][ C1] ? __pfx___schedule+0x10/0x10 [ 1763.467609][ C1] ? __pfx_lock_release+0x10/0x10 [ 1763.472636][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1763.478128][ C1] ? schedule+0x90/0x320 [ 1763.482390][ C1] schedule+0x14b/0x320 [ 1763.486567][ C1] schedule_preempt_disabled+0x13/0x30 [ 1763.492024][ C1] __mutex_lock+0x6a4/0xd70 [ 1763.496556][ C1] ? __mutex_lock+0x527/0xd70 [ 1763.501236][ C1] ? wg_netns_pre_exit+0x1f/0x1e0 [ 1763.506275][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1763.511301][ C1] ? ops_init+0x4ac/0x610 [ 1763.515649][ C1] ? kfree+0x149/0x360 [ 1763.519722][ C1] ? get_rtnl_holder+0x144/0x190 [ 1763.524749][ C1] wg_netns_pre_exit+0x1f/0x1e0 [ 1763.529598][ C1] setup_net+0x7b4/0xca0 [ 1763.533838][ C1] ? __pfx_down_read_killable+0x10/0x10 [ 1763.539427][ C1] ? __pfx_setup_net+0x10/0x10 [ 1763.544229][ C1] copy_net_ns+0x4e2/0x7b0 [ 1763.548665][ C1] create_new_namespaces+0x425/0x7b0 [ 1763.553957][ C1] ? bpf_lsm_capable+0x9/0x10 [ 1763.558718][ C1] unshare_nsproxy_namespaces+0x124/0x180 [ 1763.564473][ C1] ksys_unshare+0x619/0xc10 [ 1763.569004][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 1763.574079][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1763.580084][ C1] ? do_syscall_64+0x100/0x230 [ 1763.584895][ C1] __x64_sys_unshare+0x38/0x40 [ 1763.589661][ C1] do_syscall_64+0xf3/0x230 [ 1763.594214][ C1] ? clear_bhb_loop+0x35/0x90 [ 1763.598903][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1763.604822][ C1] RIP: 0033:0x7f5760b77677 [ 1763.609232][ C1] RSP: 002b:00007ffc61df7f08 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1763.617666][ C1] RAX: ffffffffffffffda RBX: 00007f5760d05f20 RCX: 00007f5760b77677 [ 1763.625654][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1763.633619][ C1] RBP: 00007f5760d06a18 R08: 0000000000000000 R09: 0000000000000000 [ 1763.641604][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 1763.649611][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1763.657623][ C1] [ 1763.660643][ C1] DEBUG: holding rtnl_mutex for 9503 jiffies. [ 1763.666722][ C1] task:kworker/u8:8 state:D stack:22064 pid:16080 tgid:16080 ppid:2 flags:0x00004000 [ 1763.676976][ C1] Workqueue: netns cleanup_net [ 1763.681760][ C1] Call Trace: [ 1763.685055][ C1] [ 1763.687982][ C1] __schedule+0x1800/0x4a60 [ 1763.692502][ C1] ? __pfx___schedule+0x10/0x10 [ 1763.697376][ C1] ? __pfx_lock_release+0x10/0x10 [ 1763.702411][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1763.708351][ C1] ? kthread_data+0x52/0xd0 [ 1763.712859][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1763.718013][ C1] ? schedule+0x90/0x320 [ 1763.722258][ C1] schedule+0x14b/0x320 [ 1763.726439][ C1] synchronize_rcu_expedited+0x684/0x830 [ 1763.732068][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1763.738254][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1763.743537][ C1] ? __pfx___might_resched+0x10/0x10 [ 1763.748848][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1763.754873][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1763.760937][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1763.767310][ C1] synchronize_rcu+0x11b/0x360 [ 1763.772067][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 1763.777371][ C1] lockdep_unregister_key+0x4b7/0x540 [ 1763.782744][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1763.788666][ C1] ? rcu_is_watching+0x15/0xb0 [ 1763.793426][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 1763.798046][ C1] __qdisc_destroy+0x165/0x410 [ 1763.802823][ C1] dev_shutdown+0x9b/0x450 [ 1763.807260][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 1763.813594][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1763.820378][ C1] ? batadv_hash_remove+0x504/0x680 [ 1763.825607][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1763.831500][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1763.837673][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1763.843317][ C1] ? __pfx___might_resched+0x10/0x10 [ 1763.848630][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1763.854815][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1763.860097][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1763.866274][ C1] cleanup_net+0x89d/0xcc0 [ 1763.870690][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1763.875702][ C1] ? process_scheduled_works+0x945/0x1830 [ 1763.881422][ C1] process_scheduled_works+0xa2c/0x1830 [ 1763.887009][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1763.892993][ C1] ? assign_work+0x364/0x3d0 [ 1763.897605][ C1] worker_thread+0x86d/0xd40 [ 1763.902225][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1763.908154][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1763.913184][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1763.918328][ C1] kthread+0x2f0/0x390 [ 1763.922395][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1763.927536][ C1] ? __pfx_kthread+0x10/0x10 [ 1763.932122][ C1] ret_from_fork+0x4b/0x80 [ 1763.936576][ C1] ? __pfx_kthread+0x10/0x10 [ 1763.941160][ C1] ret_from_fork_asm+0x1a/0x30 [ 1763.945965][ C1] [ 1763.949008][ C1] DEBUG: waiting rtnl_mutex for 9525 jiffies. [ 1763.955096][ C1] task:syz-executor state:D stack:21728 pid:18737 tgid:18737 ppid:1 flags:0x00004006 [ 1763.965274][ C1] Call Trace: [ 1763.968548][ C1] [ 1763.971494][ C1] __schedule+0x1800/0x4a60 [ 1763.976042][ C1] ? __pfx___schedule+0x10/0x10 [ 1763.980897][ C1] ? __pfx_lock_release+0x10/0x10 [ 1763.985951][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1763.991421][ C1] ? schedule+0x90/0x320 [ 1763.995693][ C1] schedule+0x14b/0x320 [ 1763.999849][ C1] schedule_preempt_disabled+0x13/0x30 [ 1764.005335][ C1] __mutex_lock+0x6a4/0xd70 [ 1764.009846][ C1] ? __mutex_lock+0x527/0xd70 [ 1764.014567][ C1] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 1764.020985][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1764.026041][ C1] ? get_rtnl_holder+0x144/0x190 [ 1764.030984][ C1] unregister_netdevice_notifier_net+0x89/0x3a0 [ 1764.037250][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1764.042118][ C1] ? mntput_no_expire+0x2da/0x850 [ 1764.047170][ C1] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 1764.054025][ C1] ? __pfx_mntput_no_expire+0x10/0x10 [ 1764.059452][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1764.064324][ C1] ? simple_release_fs+0x9c/0xd0 [ 1764.069265][ C1] nsim_dev_hwstats_exit+0x81/0x290 [ 1764.074487][ C1] ? kfree+0x149/0x360 [ 1764.078556][ C1] nsim_dev_reload_destroy+0x2ad/0x490 [ 1764.084021][ C1] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1764.089369][ C1] nsim_drv_remove+0x58/0x160 [ 1764.094105][ C1] device_release_driver_internal+0x4a9/0x7c0 [ 1764.100172][ C1] bus_remove_device+0x34f/0x420 [ 1764.105132][ C1] device_del+0x57a/0x9b0 [ 1764.109461][ C1] ? __pfx_device_del+0x10/0x10 [ 1764.114336][ C1] device_unregister+0x20/0xc0 [ 1764.119124][ C1] del_device_store+0x363/0x480 [ 1764.124104][ C1] ? __pfx_del_device_store+0x10/0x10 [ 1764.129471][ C1] ? sysfs_kf_write+0x182/0x2a0 [ 1764.134337][ C1] ? bus_attr_store+0x4f/0xa0 [ 1764.139020][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1764.144242][ C1] kernfs_fop_write_iter+0x3a1/0x500 [ 1764.149528][ C1] vfs_write+0xa72/0xc90 [ 1764.153773][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1764.159596][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1764.164390][ C1] ksys_write+0x1a0/0x2c0 [ 1764.168737][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1764.173593][ C1] ? do_syscall_64+0x100/0x230 [ 1764.178400][ C1] ? do_syscall_64+0xb6/0x230 [ 1764.183081][ C1] do_syscall_64+0xf3/0x230 [ 1764.187603][ C1] ? clear_bhb_loop+0x35/0x90 [ 1764.192273][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.198310][ C1] RIP: 0033:0x7fa96cd74a9f [ 1764.202724][ C1] RSP: 002b:00007ffe9b423a20 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1764.211154][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa96cd74a9f [ 1764.219161][ C1] RDX: 0000000000000001 RSI: 00007ffe9b423a70 RDI: 0000000000000005 [ 1764.227148][ C1] RBP: 00007fa96cde45b2 R08: 0000000000000000 R09: 00007ffe9b423877 [ 1764.235129][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1764.243090][ C1] R13: 00007ffe9b423a70 R14: 00007fa96da34620 R15: 0000000000000003 [ 1764.251082][ C1] [ 1764.254126][ C1] DEBUG: waiting rtnl_mutex for 9554 jiffies. [ 1764.260189][ C1] task:syz-executor state:D stack:20992 pid:18702 tgid:18702 ppid:1 flags:0x00004006 [ 1764.270363][ C1] Call Trace: [ 1764.273638][ C1] [ 1764.276589][ C1] __schedule+0x1800/0x4a60 [ 1764.281101][ C1] ? __pfx___schedule+0x10/0x10 [ 1764.285971][ C1] ? __pfx_lock_release+0x10/0x10 [ 1764.290991][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1764.296469][ C1] ? schedule+0x90/0x320 [ 1764.300710][ C1] schedule+0x14b/0x320 [ 1764.304879][ C1] schedule_preempt_disabled+0x13/0x30 [ 1764.310332][ C1] __mutex_lock+0x6a4/0xd70 [ 1764.314864][ C1] ? __mutex_lock+0x527/0xd70 [ 1764.319543][ C1] ? tun_chr_close+0x3e/0x1b0 [ 1764.324239][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1764.329269][ C1] ? get_rtnl_holder+0x144/0x190 [ 1764.334224][ C1] tun_chr_close+0x3e/0x1b0 [ 1764.338720][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1764.343824][ C1] __fput+0x24a/0x8a0 [ 1764.347828][ C1] task_work_run+0x24f/0x310 [ 1764.352415][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1764.357542][ C1] ? do_exit+0xa2a/0x27f0 [ 1764.361862][ C1] ? kmem_cache_free+0x145/0x350 [ 1764.366819][ C1] do_exit+0xa2f/0x27f0 [ 1764.370974][ C1] ? __pfx_do_exit+0x10/0x10 [ 1764.375573][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1764.380949][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1764.386965][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1764.393287][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1764.398422][ C1] do_group_exit+0x207/0x2c0 [ 1764.403008][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1764.408229][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1764.413430][ C1] get_signal+0x16a1/0x1740 [ 1764.417985][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1764.423008][ C1] ? __pfx_get_signal+0x10/0x10 [ 1764.427879][ C1] arch_do_signal_or_restart+0x96/0x830 [ 1764.433475][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1764.439642][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1764.445656][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1764.451375][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 1764.456940][ C1] do_syscall_64+0x100/0x230 [ 1764.461526][ C1] ? clear_bhb_loop+0x35/0x90 [ 1764.466224][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.472109][ C1] RIP: 0033:0x7fb144d77cac [ 1764.476531][ C1] RSP: 002b:00007ffce9d45100 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1764.484958][ C1] RAX: 0000000000000020 RBX: 00007fb145a34620 RCX: 00007fb144d77cac [ 1764.492918][ C1] RDX: 0000000000000020 RSI: 00007fb145a34670 RDI: 0000000000000003 [ 1764.500901][ C1] RBP: 0000000000000000 R08: 00007ffce9d45154 R09: 000000000000000c [ 1764.508905][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1764.516916][ C1] R13: 0000000000000000 R14: 00007fb145a34670 R15: 0000000000000000 [ 1764.524922][ C1] [ 1764.527956][ C1] [ 1764.527956][ C1] Showing all locks held in the system: [ 1764.535690][ C1] 3 locks held by kworker/u9:0/55: [ 1764.540793][ C1] #0: ffff888059487148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1764.551610][ C1] #1: ffffc90000bf7d00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1764.563739][ C1] #2: ffff88801beacd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1bf/0x6b0 [ 1764.573171][ C1] 3 locks held by kworker/u8:4/63: [ 1764.578294][ C1] #0: ffff88802a07f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1764.589903][ C1] #1: ffffc900015efd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1764.602714][ C1] #2: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1764.612167][ C1] 2 locks held by getty/4985: [ 1764.616852][ C1] #0: ffff88802b4dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1764.626671][ C1] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1764.636792][ C1] 1 lock held by syz.3.1887/13425: [ 1764.641892][ C1] 3 locks held by kworker/u9:1/13902: [ 1764.647270][ C1] #0: ffff88807ed70148 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1764.658087][ C1] #1: ffffc9000da17d00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1764.670211][ C1] #2: ffff88805a3dcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1bf/0x6b0 [ 1764.679634][ C1] 3 locks held by kworker/0:8/14078: [ 1764.684946][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1764.695935][ C1] #1: ffffc90003ef7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1764.706932][ C1] #2: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1764.715933][ C1] 5 locks held by kworker/u8:8/16080: [ 1764.721303][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1764.732223][ C1] #1: ffffc90003a0fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1764.742972][ C1] #2: ffffffff8fc75b10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1764.752407][ C1] #3: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1764.762444][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1764.773356][ C1] 3 locks held by syz.4.3296/18428: [ 1764.778570][ C1] #0: ffff888050e920a8 (&ctx->uring_lock){+.+.}-{3:3}, at: __se_sys_io_uring_enter+0x1b6a/0x2670 [ 1764.789228][ C1] #1: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1764.799345][ C1] #2: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1764.809204][ C1] 3 locks held by kworker/u9:3/18574: [ 1764.814625][ C1] #0: ffff88802d302148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1764.825439][ C1] #1: ffffc900040efd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1764.838005][ C1] #2: ffff888049a74d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1764.847883][ C1] 1 lock held by syz-executor/18702: [ 1764.853185][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1764.862179][ C1] 1 lock held by syz-executor/18705: [ 1764.867485][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1764.876477][ C1] 4 locks held by syz-executor/18734: [ 1764.881838][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1764.890768][ C1] #1: ffff88802bff9888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1764.900564][ C1] #2: ffff88802339c788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1764.910614][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 1764.920998][ C1] 7 locks held by syz-executor/18737: [ 1764.926388][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1764.935316][ C1] #1: ffff88802d0a8c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1764.945118][ C1] #2: ffff88802339c878 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1764.955178][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1764.965487][ C1] #4: ffff88805fb680e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1764.976047][ C1] #5: ffff88805fb6c250 (&devlink->lock_key#80){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1764.986184][ C1] #6: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 1764.996930][ C1] 4 locks held by syz-executor/18750: [ 1765.002298][ C1] #0: ffff88802c08e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1765.011221][ C1] #1: ffff88802ffb8088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1765.021012][ C1] #2: ffff88802339c878 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1765.031052][ C1] #3: ffffffff8f51f608 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1765.034362][T11332] Bluetooth: hci1: command tx timeout [ 1765.041348][ C1] 2 locks held by syz-executor/18777: [ 1765.041363][ C1] #0: ffffffff8fc75b10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1765.062630][ C1] #1: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 1765.071984][ C1] 1 lock held by syz-executor/18780: [ 1765.077281][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1765.086715][ C1] 1 lock held by syz-executor/18788: [ 1765.091986][ C1] #0: ffffffff8fc82688 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1765.101408][ C1] [ 1765.103728][ C1] ============================================= [ 1765.103728][ C1] [ 1765.135296][T11332] Bluetooth: hci6: command 0x0406 tx timeout [ 1765.144879][T11332] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1765.173412][T11332] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1765.194580][T18797] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1765.205300][T18797] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1765.207476][T18799] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1765.215467][T18797] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1765.220289][T18799] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1765.237409][T18797] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1765.241206][T18802] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1765.245372][T18797] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1765.254506][T18802] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1765.259242][T18797] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1765.273921][T18802] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1765.274800][T18797] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1765.281381][T18802] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1765.297592][T18802] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1765.306238][T13902] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1765.325970][T13902] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1765.370803][T18797] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1765.385288][T18574] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1765.385301][T13902] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1765.400357][T18574] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1765.404257][T13902] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1765.419267][T13902] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1766.144276][ C1] DEBUG: waiting rtnl_mutex for 9712 jiffies. [ 1766.150385][ C1] task:kworker/u8:4 state:D stack:18640 pid:63 tgid:63 ppid:2 flags:0x00004000 [ 1766.160604][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 1766.166650][ C1] Call Trace: [ 1766.169941][ C1] [ 1766.172888][ C1] __schedule+0x1800/0x4a60 [ 1766.177477][ C1] ? __pfx___schedule+0x10/0x10 [ 1766.182334][ C1] ? __pfx_lock_release+0x10/0x10 [ 1766.187405][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1766.192889][ C1] ? kthread_data+0x52/0xd0 [ 1766.197461][ C1] ? schedule+0x90/0x320 [ 1766.201746][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1766.206916][ C1] ? schedule+0x90/0x320 [ 1766.211180][ C1] schedule+0x14b/0x320 [ 1766.215366][ C1] schedule_preempt_disabled+0x13/0x30 [ 1766.220818][ C1] __mutex_lock+0x6a4/0xd70 [ 1766.225356][ C1] ? mark_lock+0x9a/0x360 [ 1766.229718][ C1] ? __mutex_lock+0x527/0xd70 [ 1766.234449][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 1766.239590][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1766.244685][ C1] ? get_rtnl_holder+0x144/0x190 [ 1766.249668][ C1] addrconf_dad_work+0xd0/0x16f0 [ 1766.254665][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1766.260132][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1766.266533][ C1] ? process_scheduled_works+0x945/0x1830 [ 1766.272275][ C1] process_scheduled_works+0xa2c/0x1830 [ 1766.278024][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1766.284012][ C1] ? assign_work+0x364/0x3d0 [ 1766.288661][ C1] worker_thread+0x86d/0xd40 [ 1766.293298][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1766.298369][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1766.303502][ C1] kthread+0x2f0/0x390 [ 1766.307577][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1766.312682][ C1] ? __pfx_kthread+0x10/0x10 [ 1766.317282][ C1] ret_from_fork+0x4b/0x80 [ 1766.321695][ C1] ? __pfx_kthread+0x10/0x10 [ 1766.326291][ C1] ret_from_fork_asm+0x1a/0x30 [ 1766.331061][ C1] [ 1766.334084][ C1] DEBUG: waiting rtnl_mutex for 9690 jiffies. [ 1766.340135][ C1] task:syz-executor state:D stack:20992 pid:18705 tgid:18705 ppid:1 flags:0x00004006 [ 1766.350306][ C1] Call Trace: [ 1766.353577][ C1] [ 1766.356526][ C1] __schedule+0x1800/0x4a60 [ 1766.361062][ C1] ? __pfx___schedule+0x10/0x10 [ 1766.365981][ C1] ? __pfx_lock_release+0x10/0x10 [ 1766.371034][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1766.376554][ C1] ? schedule+0x90/0x320 [ 1766.380821][ C1] schedule+0x14b/0x320 [ 1766.385043][ C1] schedule_preempt_disabled+0x13/0x30 [ 1766.390535][ C1] __mutex_lock+0x6a4/0xd70 [ 1766.395162][ C1] ? __mutex_lock+0x527/0xd70 [ 1766.399873][ C1] ? tun_chr_close+0x3e/0x1b0 [ 1766.404600][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1766.409664][ C1] ? get_rtnl_holder+0x144/0x190 [ 1766.414666][ C1] tun_chr_close+0x3e/0x1b0 [ 1766.419184][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1766.424360][ C1] __fput+0x24a/0x8a0 [ 1766.428384][ C1] task_work_run+0x24f/0x310 [ 1766.433006][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1766.438179][ C1] ? do_exit+0xa2a/0x27f0 [ 1766.442544][ C1] ? kmem_cache_free+0x145/0x350 [ 1766.447540][ C1] do_exit+0xa2f/0x27f0 [ 1766.451733][ C1] ? __pfx_do_exit+0x10/0x10 [ 1766.456371][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1766.461783][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1766.467840][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1766.474251][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1766.479410][ C1] do_group_exit+0x207/0x2c0 [ 1766.484020][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1766.489275][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1766.494512][ C1] get_signal+0x16a1/0x1740 [ 1766.499038][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1766.504116][ C1] ? __pfx_get_signal+0x10/0x10 [ 1766.509061][ C1] arch_do_signal_or_restart+0x96/0x830 [ 1766.514685][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1766.520867][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1766.526891][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1766.532613][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 1766.538212][ C1] do_syscall_64+0x100/0x230 [ 1766.542840][ C1] ? clear_bhb_loop+0x35/0x90 [ 1766.547562][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.553451][ C1] RIP: 0033:0x7f8c93f77cac [ 1766.557901][ C1] RSP: 002b:00007ffd00b7b310 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1766.566419][ C1] RAX: 0000000000000028 RBX: 00007f8c94c34620 RCX: 00007f8c93f77cac [ 1766.574458][ C1] RDX: 0000000000000028 RSI: 00007f8c94c34670 RDI: 0000000000000003 [ 1766.582457][ C1] RBP: 0000000000000000 R08: 00007ffd00b7b364 R09: 000000000000000c [ 1766.590584][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1766.598621][ C1] R13: 0000000000000000 R14: 00007f8c94c34670 R15: 0000000000000000 [ 1766.606642][ C1] [ 1766.609655][ C1] DEBUG: waiting rtnl_mutex for 9688 jiffies. [ 1766.615748][ C1] task:kworker/0:8 state:D stack:23680 pid:14078 tgid:14078 ppid:2 flags:0x00004000 [ 1766.625954][ C1] Workqueue: events linkwatch_event [ 1766.631150][ C1] Call Trace: [ 1766.634460][ C1] [ 1766.637406][ C1] __schedule+0x1800/0x4a60 [ 1766.641958][ C1] ? __pfx___schedule+0x10/0x10 [ 1766.646844][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1766.652823][ C1] ? __pfx_lock_release+0x10/0x10 [ 1766.657886][ C1] ? kick_pool+0x1bd/0x620 [ 1766.662360][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1766.667625][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1766.672852][ C1] ? schedule+0x90/0x320 [ 1766.677153][ C1] schedule+0x14b/0x320 [ 1766.681337][ C1] schedule_preempt_disabled+0x13/0x30 [ 1766.686829][ C1] __mutex_lock+0x6a4/0xd70 [ 1766.691336][ C1] ? __mutex_lock+0x527/0xd70 [ 1766.696068][ C1] ? linkwatch_event+0xe/0x60 [ 1766.700775][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1766.705870][ C1] ? get_rtnl_holder+0x144/0x190 [ 1766.710812][ C1] ? process_scheduled_works+0x945/0x1830 [ 1766.716565][ C1] linkwatch_event+0xe/0x60 [ 1766.721088][ C1] process_scheduled_works+0xa2c/0x1830 [ 1766.726691][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1766.732670][ C1] ? assign_work+0x364/0x3d0 [ 1766.737306][ C1] worker_thread+0x86d/0xd40 [ 1766.741938][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1766.747002][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1766.752109][ C1] kthread+0x2f0/0x390 [ 1766.756248][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1766.761383][ C1] ? __pfx_kthread+0x10/0x10 [ 1766.766026][ C1] ret_from_fork+0x4b/0x80 [ 1766.770458][ C1] ? __pfx_kthread+0x10/0x10 [ 1766.775093][ C1] ret_from_fork_asm+0x1a/0x30 [ 1766.779911][ C1] [ 1766.782946][ C1] DEBUG: waiting rtnl_mutex for 9695 jiffies. [ 1766.789038][ C1] task:syz-executor state:D stack:24992 pid:18780 tgid:18780 ppid:1 flags:0x00000004 [ 1766.799242][ C1] Call Trace: [ 1766.802534][ C1] [ 1766.805512][ C1] __schedule+0x1800/0x4a60 [ 1766.810055][ C1] ? __pfx___schedule+0x10/0x10 [ 1766.814951][ C1] ? __pfx_lock_release+0x10/0x10 [ 1766.820010][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1766.825503][ C1] ? schedule+0x90/0x320 [ 1766.829742][ C1] schedule+0x14b/0x320 [ 1766.833896][ C1] schedule_preempt_disabled+0x13/0x30 [ 1766.839424][ C1] __mutex_lock+0x6a4/0xd70 [ 1766.843971][ C1] ? __mutex_lock+0x527/0xd70 [ 1766.848699][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 1766.853813][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1766.858900][ C1] ? get_rtnl_holder+0x144/0x190 [ 1766.863880][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 1766.868858][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 1766.873980][ C1] ? __lock_acquire+0x1384/0x2050 [ 1766.879149][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1766.884697][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1766.889530][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1766.895049][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1766.900385][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1766.905643][ C1] netlink_unicast+0x7f6/0x990 [ 1766.910454][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1766.915878][ C1] ? __virt_addr_valid+0x183/0x530 [ 1766.921030][ C1] ? __check_object_size+0x49c/0x900 [ 1766.926357][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1766.931662][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1766.936489][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1766.941815][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1766.946825][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1766.952133][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1766.957670][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1766.963017][ C1] __sock_sendmsg+0x221/0x270 [ 1766.967774][ C1] __sys_sendto+0x3a4/0x4f0 [ 1766.972313][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1766.977425][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1766.983451][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1766.989828][ C1] ? exc_page_fault+0x590/0x8c0 [ 1766.994718][ C1] __x64_sys_sendto+0xde/0x100 [ 1766.999507][ C1] do_syscall_64+0xf3/0x230 [ 1767.004096][ C1] ? clear_bhb_loop+0x35/0x90 [ 1767.008815][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.014750][ C1] RIP: 0033:0x7f10b6377cac [ 1767.019155][ C1] RSP: 002b:00007ffec80227f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1767.027579][ C1] RAX: ffffffffffffffda RBX: 00007f10b7034620 RCX: 00007f10b6377cac [ 1767.035581][ C1] RDX: 0000000000000028 RSI: 00007f10b7034670 RDI: 0000000000000003 [ 1767.043567][ C1] RBP: 0000000000000000 R08: 00007ffec8022844 R09: 000000000000000c [ 1767.051566][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1767.059575][ C1] R13: 0000000000000000 R14: 00007f10b7034670 R15: 0000000000000000 [ 1767.067586][ C1] [ 1767.070595][ C1] DEBUG: waiting rtnl_mutex for 3595 jiffies. [ 1767.076689][ C1] task:syz-executor state:D stack:24992 pid:18777 tgid:18777 ppid:1 flags:0x00004006 [ 1767.086898][ C1] Call Trace: [ 1767.090174][ C1] [ 1767.093115][ C1] __schedule+0x1800/0x4a60 [ 1767.097686][ C1] ? __pfx___schedule+0x10/0x10 [ 1767.102566][ C1] ? __pfx_lock_release+0x10/0x10 [ 1767.107649][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1767.113137][ C1] ? schedule+0x90/0x320 [ 1767.117487][ C1] schedule+0x14b/0x320 [ 1767.121677][ C1] schedule_preempt_disabled+0x13/0x30 [ 1767.127191][ C1] __mutex_lock+0x6a4/0xd70 [ 1767.131696][ C1] ? __mutex_lock+0x527/0xd70 [ 1767.136411][ C1] ? wg_netns_pre_exit+0x1f/0x1e0 [ 1767.141473][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1767.146597][ C1] ? ops_init+0x4ac/0x610 [ 1767.150950][ C1] ? kfree+0x149/0x360 [ 1767.155069][ C1] ? get_rtnl_holder+0x144/0x190 [ 1767.160036][ C1] wg_netns_pre_exit+0x1f/0x1e0 [ 1767.164920][ C1] setup_net+0x7b4/0xca0 [ 1767.169191][ C1] ? __pfx_down_read_killable+0x10/0x10 [ 1767.174786][ C1] ? __pfx_setup_net+0x10/0x10 [ 1767.179598][ C1] copy_net_ns+0x4e2/0x7b0 [ 1767.184106][ C1] create_new_namespaces+0x425/0x7b0 [ 1767.189421][ C1] ? bpf_lsm_capable+0x9/0x10 [ 1767.194083][T18574] Bluetooth: hci1: command tx timeout [ 1767.194140][ C1] unshare_nsproxy_namespaces+0x124/0x180 [ 1767.205208][ C1] ksys_unshare+0x619/0xc10 [ 1767.209714][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 1767.214766][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1767.220780][ C1] ? do_syscall_64+0x100/0x230 [ 1767.225587][ C1] __x64_sys_unshare+0x38/0x40 [ 1767.230348][ C1] do_syscall_64+0xf3/0x230 [ 1767.234898][ C1] ? clear_bhb_loop+0x35/0x90 [ 1767.239606][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.245543][ C1] RIP: 0033:0x7f5760b77677 [ 1767.249964][ C1] RSP: 002b:00007ffc61df7f08 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1767.258425][ C1] RAX: ffffffffffffffda RBX: 00007f5760d05f20 RCX: 00007f5760b77677 [ 1767.266431][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1767.274429][ C1] RBP: 00007f5760d06a18 R08: 0000000000000000 R09: 0000000000000000 [ 1767.282423][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 1767.290445][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1767.298568][ C1] [ 1767.301610][ C1] DEBUG: holding rtnl_mutex for 9867 jiffies. [ 1767.307720][ C1] task:kworker/u8:8 state:R running task stack:22064 pid:16080 tgid:16080 ppid:2 flags:0x00004000 [ 1767.319517][ C1] Workqueue: netns cleanup_net [ 1767.324339][ C1] Call Trace: [ 1767.327720][ C1] [ 1767.330674][ C1] __schedule+0x1800/0x4a60 [ 1767.335380][ C1] ? __pfx___schedule+0x10/0x10 [ 1767.340277][ C1] ? preempt_schedule+0xe1/0xf0 [ 1767.345180][ C1] preempt_schedule_common+0x84/0xd0 [ 1767.350581][ C1] preempt_schedule+0xe1/0xf0 [ 1767.355314][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 1767.360723][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1767.366757][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1767.373110][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1767.378376][ C1] _raw_spin_unlock_irqrestore+0x130/0x140 [ 1767.384241][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1767.390603][ C1] kthread_queue_work+0x110/0x180 [ 1767.395689][ C1] synchronize_rcu_expedited+0x5ad/0x830 [ 1767.401342][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1767.407589][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1767.412890][ C1] ? __pfx___might_resched+0x10/0x10 [ 1767.418320][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1767.424372][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1767.430737][ C1] synchronize_rcu+0x11b/0x360 [ 1767.435550][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 1767.438711][T18574] Bluetooth: hci8: command tx timeout [ 1767.440858][ C1] lockdep_unregister_key+0x4b7/0x540 [ 1767.440898][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1767.458681][ C1] ? rcu_is_watching+0x15/0xb0 [ 1767.463444][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 1767.468062][ C1] __qdisc_destroy+0x165/0x410 [ 1767.472833][ C1] dev_shutdown+0x9b/0x450 [ 1767.477285][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 1767.483654][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1767.490468][ C1] ? batadv_hash_remove+0x504/0x680 [ 1767.495725][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 1767.501655][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 1767.507873][ C1] default_device_exit_batch+0xa0f/0xa90 [ 1767.513561][ C1] ? __pfx___might_resched+0x10/0x10 [ 1767.514323][T18574] Bluetooth: hci11: command tx timeout [ 1767.518892][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1767.531127][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1767.536449][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1767.542603][ C1] cleanup_net+0x89d/0xcc0 [ 1767.547033][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1767.551969][ C1] ? process_scheduled_works+0x945/0x1830 [ 1767.557723][ C1] process_scheduled_works+0xa2c/0x1830 [ 1767.563338][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1767.569376][ C1] ? assign_work+0x364/0x3d0 [ 1767.573967][ C1] worker_thread+0x86d/0xd40 [ 1767.578622][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1767.584581][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1767.589623][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1767.594348][T18574] Bluetooth: hci10: command tx timeout [ 1767.594792][ C1] kthread+0x2f0/0x390 [ 1767.604896][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1767.610005][ C1] ? __pfx_kthread+0x10/0x10 [ 1767.614623][ C1] ret_from_fork+0x4b/0x80 [ 1767.619049][ C1] ? __pfx_kthread+0x10/0x10 [ 1767.623731][ C1] ret_from_fork_asm+0x1a/0x30 [ 1767.628542][ C1] [ 1767.631558][ C1] DEBUG: waiting rtnl_mutex for 9893 jiffies. [ 1767.637643][ C1] task:syz-executor state:D stack:21728 pid:18737 tgid:18737 ppid:1 flags:0x00004006 [ 1767.647815][ C1] Call Trace: [ 1767.651089][ C1] [ 1767.654012][ C1] __schedule+0x1800/0x4a60 [ 1767.658579][ C1] ? __pfx___schedule+0x10/0x10 [ 1767.663435][ C1] ? __pfx_lock_release+0x10/0x10 [ 1767.668484][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1767.673947][ C1] ? schedule+0x90/0x320 [ 1767.678207][ C1] schedule+0x14b/0x320 [ 1767.682365][ C1] schedule_preempt_disabled+0x13/0x30 [ 1767.687848][ C1] __mutex_lock+0x6a4/0xd70 [ 1767.692375][ C1] ? __mutex_lock+0x527/0xd70 [ 1767.697091][ C1] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 1767.703510][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1767.708569][ C1] ? get_rtnl_holder+0x144/0x190 [ 1767.713515][ C1] unregister_netdevice_notifier_net+0x89/0x3a0 [ 1767.719773][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1767.724636][ C1] ? mntput_no_expire+0x2da/0x850 [ 1767.729659][ C1] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 1767.736526][ C1] ? __pfx_mntput_no_expire+0x10/0x10 [ 1767.741896][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1767.747023][ C1] ? simple_release_fs+0x9c/0xd0 [ 1767.751957][ C1] nsim_dev_hwstats_exit+0x81/0x290 [ 1767.757171][ C1] ? kfree+0x149/0x360 [ 1767.761236][ C1] nsim_dev_reload_destroy+0x2ad/0x490 [ 1767.766717][ C1] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1767.771997][ C1] nsim_drv_remove+0x58/0x160 [ 1767.776697][ C1] device_release_driver_internal+0x4a9/0x7c0 [ 1767.782766][ C1] bus_remove_device+0x34f/0x420 [ 1767.787738][ C1] device_del+0x57a/0x9b0 [ 1767.792071][ C1] ? __pfx_device_del+0x10/0x10 [ 1767.796950][ C1] device_unregister+0x20/0xc0 [ 1767.801712][ C1] del_device_store+0x363/0x480 [ 1767.806585][ C1] ? __pfx_del_device_store+0x10/0x10 [ 1767.811957][ C1] ? sysfs_kf_write+0x182/0x2a0 [ 1767.816816][ C1] ? bus_attr_store+0x4f/0xa0 [ 1767.821493][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1767.826705][ C1] kernfs_fop_write_iter+0x3a1/0x500 [ 1767.831988][ C1] vfs_write+0xa72/0xc90 [ 1767.836250][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1767.842052][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1767.846856][ C1] ksys_write+0x1a0/0x2c0 [ 1767.851199][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1767.856067][ C1] ? do_syscall_64+0x100/0x230 [ 1767.860830][ C1] ? do_syscall_64+0xb6/0x230 [ 1767.865532][ C1] do_syscall_64+0xf3/0x230 [ 1767.870034][ C1] ? clear_bhb_loop+0x35/0x90 [ 1767.874725][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.880612][ C1] RIP: 0033:0x7fa96cd74a9f [ 1767.885043][ C1] RSP: 002b:00007ffe9b423a20 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1767.893454][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa96cd74a9f [ 1767.901445][ C1] RDX: 0000000000000001 RSI: 00007ffe9b423a70 RDI: 0000000000000005 [ 1767.909456][ C1] RBP: 00007fa96cde45b2 R08: 0000000000000000 R09: 00007ffe9b423877 [ 1767.917449][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1767.925453][ C1] R13: 00007ffe9b423a70 R14: 00007fa96da34620 R15: 0000000000000003 [ 1767.933432][ C1] [ 1767.936466][ C1] DEBUG: waiting rtnl_mutex for 9922 jiffies. [ 1767.942533][ C1] task:syz-executor state:D stack:20992 pid:18702 tgid:18702 ppid:1 flags:0x00004006 [ 1767.952734][ C1] Call Trace: [ 1767.956025][ C1] [ 1767.958965][ C1] __schedule+0x1800/0x4a60 [ 1767.963488][ C1] ? __pfx___schedule+0x10/0x10 [ 1767.968368][ C1] ? __pfx_lock_release+0x10/0x10 [ 1767.973398][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1767.978892][ C1] ? schedule+0x90/0x320 [ 1767.983134][ C1] schedule+0x14b/0x320 [ 1767.987311][ C1] schedule_preempt_disabled+0x13/0x30 [ 1767.992764][ C1] __mutex_lock+0x6a4/0xd70 [ 1767.997289][ C1] ? __mutex_lock+0x527/0xd70 [ 1768.001981][ C1] ? tun_chr_close+0x3e/0x1b0 [ 1768.006735][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1768.011766][ C1] ? get_rtnl_holder+0x144/0x190 [ 1768.016725][ C1] tun_chr_close+0x3e/0x1b0 [ 1768.021220][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1768.026345][ C1] __fput+0x24a/0x8a0 [ 1768.030337][ C1] task_work_run+0x24f/0x310 [ 1768.034942][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1768.040046][ C1] ? do_exit+0xa2a/0x27f0 [ 1768.044387][ C1] ? kmem_cache_free+0x145/0x350