er_interrupt+0x1a/0x20 [ 549.387242][ C0] RIP: 0010:__sanitizer_cov_trace_cmp8+0x8/0x90 [ 549.393509][ C0] Code: 44 0a 20 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 0c 25 00 d6 03 00 65 8b 05 a0 8b 70 7e a9 00 01 ff 00 74 [ 549.413158][ C0] RSP: 0018:ffffc900036a66b0 EFLAGS: 00000217 [ 549.419276][ C0] RAX: ffffffff8b82c1a6 RBX: 000000000000003f RCX: 0000000000000000 [ 549.427282][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003f [ 549.435293][ C0] RBP: ffff88802946a0d8 R08: ffffffff8b82c1bf R09: 1ffffffff25f96e8 [ 549.443251][ C0] R10: dffffc0000000000 R11: fffffbfff25f96e9 R12: ffff88801d5a2102 [ 549.451248][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 549.459285][ C0] ? radix_tree_lookup+0xbf/0x290 [ 549.464345][ C0] ? radix_tree_lookup+0xa6/0x290 [ 549.469388][ C0] radix_tree_lookup+0xbf/0x290 [ 549.474278][ C0] ? tcf_idr_check_alloc+0x110/0x900 [ 549.479580][ C0] tcf_idr_check_alloc+0x1de/0x900 [ 549.484729][ C0] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 549.490376][ C0] ? __nla_parse+0x40/0x60 [ 549.494829][ C0] tcf_police_init+0x29b/0x17c0 [ 549.499693][ C0] ? __sock_sendmsg+0x221/0x270 [ 549.504582][ C0] ? ____sys_sendmsg+0x525/0x7d0 [ 549.509542][ C0] ? __pfx_tcf_police_init+0x10/0x10 [ 549.514882][ C0] ? nla_memcpy+0x5d/0xc0 [ 549.519228][ C0] ? __asan_memcpy+0x40/0x70 [ 549.523809][ C0] ? __pfx_tcf_police_init+0x10/0x10 [ 549.529121][ C0] tcf_action_init_1+0x5d7/0x890 [ 549.534114][ C0] ? __pfx_tcf_action_init_1+0x10/0x10 [ 549.539577][ C0] ? tcf_action_fill_size+0x1e/0x2d0 [ 549.544888][ C0] tcf_action_init+0x2e4/0x940 [ 549.549675][ C0] ? __pfx_tcf_action_init+0x10/0x10 [ 549.555046][ C0] ? apparmor_capable+0x138/0x1b0 [ 549.560095][ C0] tc_ctl_action+0x47d/0xcf0 [ 549.564720][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 549.569940][ C0] ? __pfx_tc_ctl_action+0x10/0x10 [ 549.575119][ C0] ? trace_contention_end+0x3c/0x120 [ 549.580425][ C0] ? __mutex_lock+0x2ef/0xd70 [ 549.585149][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 549.590197][ C0] ? __pfx_tc_ctl_action+0x10/0x10 [ 549.595339][ C0] rtnetlink_rcv_msg+0x892/0x1170 [ 549.600383][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 549.605618][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 549.611092][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 549.616505][ C0] ? __pfx_validate_chain+0x10/0x10 [ 549.621720][ C0] ? __pfx_validate_chain+0x10/0x10 [ 549.626955][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 549.631912][ C0] ? mark_lock+0x9a/0x360 [ 549.636274][ C0] ? __pfx_validate_chain+0x10/0x10 [ 549.641493][ C0] ? __lock_acquire+0x1359/0x2000 [ 549.646561][ C0] ? mark_lock+0x9a/0x360 [ 549.650909][ C0] ? __lock_acquire+0x1359/0x2000 [ 549.655983][ C0] netlink_rcv_skb+0x1e3/0x430 [ 549.660768][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 549.666262][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 549.671574][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 549.676804][ C0] netlink_unicast+0x7ea/0x980 [ 549.681585][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 549.686900][ C0] ? __virt_addr_valid+0x183/0x520 [ 549.692029][ C0] ? __check_object_size+0x49c/0x900 [ 549.697345][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 549.702472][ C0] netlink_sendmsg+0x8db/0xcb0 [ 549.707286][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.712589][ C0] ? __import_iovec+0x536/0x820 [ 549.717474][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 549.722427][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 549.727745][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 549.733224][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.738554][ C0] __sock_sendmsg+0x221/0x270 [ 549.743259][ C0] ____sys_sendmsg+0x525/0x7d0 [ 549.748069][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 549.753383][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 549.758020][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 549.763171][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 549.769200][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 549.775571][ C0] ? exc_page_fault+0x590/0x8c0 [ 549.780416][ C0] ? do_syscall_64+0xb6/0x230 [ 549.785129][ C0] do_syscall_64+0xf3/0x230 [ 549.789651][ C0] ? clear_bhb_loop+0x35/0x90 [ 549.794365][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.800274][ C0] RIP: 0033:0x7f8da6f14df9 [ 549.804721][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 549.824377][ C0] RSP: 002b:00007fffaea36f98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.832782][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8da6f14df9 [ 549.840784][ C0] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 549.848791][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006 [ 549.856832][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.864850][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 549.872825][ C0] [ 549.875874][ C0] DEBUG: waiting rtnl_mutex for 14541 jiffies. [ 549.882029][ C0] task:kworker/u8:0 state:D stack:23784 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 549.892258][ C0] Workqueue: ipv6_addrconf addrconf_verify_work [ 549.898556][ C0] Call Trace: [ 549.901825][ C0] [ 549.904790][ C0] __schedule+0x17e8/0x4a20 [ 549.909339][ C0] ? __pfx___schedule+0x10/0x10 [ 549.914238][ C0] ? __pfx_lock_release+0x10/0x10 [ 549.919285][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 549.924782][ C0] ? kthread_data+0x52/0xd0 [ 549.929303][ C0] ? schedule+0x90/0x320 [ 549.933534][ C0] ? wq_worker_sleeping+0x66/0x240 [ 549.938686][ C0] ? schedule+0x90/0x320 [ 549.942977][ C0] schedule+0x14b/0x320 [ 549.947177][ C0] schedule_preempt_disabled+0x13/0x30 [ 549.952651][ C0] __mutex_lock+0x6a4/0xd70 [ 549.957195][ C0] ? __mutex_lock+0x527/0xd70 [ 549.961889][ C0] ? addrconf_verify_work+0x19/0x30 [ 549.967127][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 549.972167][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 549.978185][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 549.984556][ C0] ? process_scheduled_works+0x945/0x1830 [ 549.990282][ C0] ? rtnl_lock+0xe7/0x130 [ 549.994663][ C0] ? process_scheduled_works+0x945/0x1830 [ 550.000407][ C0] addrconf_verify_work+0x19/0x30 [ 550.005469][ C0] process_scheduled_works+0xa2c/0x1830 [ 550.011047][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 550.017072][ C0] ? assign_work+0x364/0x3d0 [ 550.021682][ C0] worker_thread+0x86d/0xd50 [ 550.026323][ C0] ? __kthread_parkme+0x169/0x1d0 [ 550.031367][ C0] ? __pfx_worker_thread+0x10/0x10 [ 550.036512][ C0] kthread+0x2f0/0x390 [ 550.040596][ C0] ? __pfx_worker_thread+0x10/0x10 [ 550.045742][ C0] ? __pfx_kthread+0x10/0x10 [ 550.050349][ C0] ret_from_fork+0x4b/0x80 [ 550.054800][ C0] ? __pfx_kthread+0x10/0x10 [ 550.059408][ C0] ret_from_fork_asm+0x1a/0x30 [ 550.064223][ C0] [ 550.067251][ C0] [ 550.067251][ C0] Showing all locks held in the system: [ 550.074990][ C0] 3 locks held by kworker/u8:0/11: [ 550.080106][ C0] #0: ffff8880298d2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 550.091715][ C0] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 550.105439][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 550.114993][ C0] 1 lock held by klogd/4533: [ 550.119581][ C0] #0: ffff8880b953e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 550.129538][ C0] 2 locks held by getty/4852: [ 550.134239][ C0] #0: ffff88807b4780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 550.144015][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 550.154186][ C0] 5 locks held by syz-executor310/5107: [ 550.159713][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 550.169246][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: tcf_idr_check_alloc+0x110/0x900 [ 550.179145][ C0] #2: ffffc900000079e0 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 550.189273][ C0] #3: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 550.199080][ C0] #4: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 550.208947][ C0] [ 550.211274][ C0] ============================================= [ 550.211274][ C0] [ 551.263908][ C1] DEBUG: holding rtnl_mutex for 20611 jiffies. [ 551.270127][ C1] task:syz-executor310 state:R running task stack:22384 pid:5107 tgid:5107 ppid:5106 flags:0x00004006 [ 551.281889][ C1] Call Trace: [ 551.285181][ C1] [ 551.288123][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 551.294480][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 551.300391][ C1] ? mark_lock+0x9a/0x360 [ 551.304740][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 551.310743][ C1] ? mark_lock+0x9a/0x360 [ 551.315091][ C1] ? __lock_acquire+0x1359/0x2000 [ 551.320159][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 551.325201][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 551.330504][ C1] ? __pfx_lock_release+0x10/0x10 [ 551.335545][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 551.340852][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 551.346153][ C1] ? tcf_idr_check_alloc+0x12d/0x900 [ 551.351451][ C1] ? tcf_idr_check_alloc+0x153/0x900 [ 551.356759][ C1] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 551.362408][ C1] ? __nla_parse+0x40/0x60 [ 551.366849][ C1] ? tcf_police_init+0x29b/0x17c0 [ 551.371891][ C1] ? __sock_sendmsg+0x221/0x270 [ 551.376759][ C1] ? ____sys_sendmsg+0x525/0x7d0 [ 551.381803][ C1] ? __pfx_tcf_police_init+0x10/0x10 [ 551.387138][ C1] ? nla_memcpy+0x5d/0xc0 [ 551.391482][ C1] ? __asan_memcpy+0x40/0x70 [ 551.396095][ C1] ? __pfx_tcf_police_init+0x10/0x10 [ 551.401396][ C1] ? tcf_action_init_1+0x5d7/0x890 [ 551.406531][ C1] ? __pfx_tcf_action_init_1+0x10/0x10 [ 551.412030][ C1] ? tcf_action_fill_size+0x1e/0x2d0 [ 551.417334][ C1] ? tcf_action_init+0x2e4/0x940 [ 551.422298][ C1] ? __pfx_tcf_action_init+0x10/0x10 [ 551.427658][ C1] ? apparmor_capable+0x138/0x1b0 [ 551.432709][ C1] ? tc_ctl_action+0x47d/0xcf0 [ 551.437489][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 551.442716][ C1] ? __pfx_tc_ctl_action+0x10/0x10 [ 551.447873][ C1] ? trace_contention_end+0x3c/0x120 [ 551.453180][ C1] ? __mutex_lock+0x2ef/0xd70 [ 551.457890][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 551.462948][ C1] ? __pfx_tc_ctl_action+0x10/0x10 [ 551.468075][ C1] ? rtnetlink_rcv_msg+0x892/0x1170 [ 551.473300][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 551.478520][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 551.483995][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 551.489303][ C1] ? __pfx_validate_chain+0x10/0x10 [ 551.494520][ C1] ? __pfx_validate_chain+0x10/0x10 [ 551.499735][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 551.504695][ C1] ? mark_lock+0x9a/0x360 [ 551.509041][ C1] ? __pfx_validate_chain+0x10/0x10 [ 551.514304][ C1] ? __lock_acquire+0x1359/0x2000 [ 551.519360][ C1] ? mark_lock+0x9a/0x360 [ 551.523707][ C1] ? __lock_acquire+0x1359/0x2000 [ 551.528768][ C1] ? netlink_rcv_skb+0x1e3/0x430 [ 551.533721][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 551.539201][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 551.544535][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 551.549754][ C1] ? netlink_unicast+0x7ea/0x980 [ 551.554718][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 551.560015][ C1] ? __virt_addr_valid+0x183/0x520 [ 551.565150][ C1] ? __check_object_size+0x49c/0x900 [ 551.570450][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 551.575583][ C1] ? netlink_sendmsg+0x8db/0xcb0 [ 551.580549][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.585854][ C1] ? __import_iovec+0x536/0x820 [ 551.590721][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 551.595677][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 551.600977][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 551.606457][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.611763][ C1] ? __sock_sendmsg+0x221/0x270 [ 551.616640][ C1] ? ____sys_sendmsg+0x525/0x7d0 [ 551.621601][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.626919][ C1] ? __sys_sendmsg+0x2b0/0x3a0 [ 551.631703][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 551.636866][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 551.642870][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 551.649213][ C1] ? exc_page_fault+0x590/0x8c0 [ 551.654095][ C1] ? do_syscall_64+0xb6/0x230 [ 551.658785][ C1] ? do_syscall_64+0xf3/0x230 [ 551.663473][ C1] ? clear_bhb_loop+0x35/0x90 [ 551.668171][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.674271][ C1] [ 551.677297][ C1] DEBUG: waiting rtnl_mutex for 14721 jiffies. [ 551.683447][ C1] task:kworker/u8:0 state:D stack:23784 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 551.693639][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 551.699900][ C1] Call Trace: [ 551.703183][ C1] [ 551.706132][ C1] __schedule+0x17e8/0x4a20 [ 551.710677][ C1] ? __pfx___schedule+0x10/0x10 [ 551.715546][ C1] ? __pfx_lock_release+0x10/0x10 [ 551.720589][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 551.726068][ C1] ? kthread_data+0x52/0xd0 [ 551.730583][ C1] ? schedule+0x90/0x320 [ 551.734842][ C1] ? wq_worker_sleeping+0x66/0x240 [ 551.739972][ C1] ? schedule+0x90/0x320 [ 551.744233][ C1] schedule+0x14b/0x320 [ 551.748415][ C1] schedule_preempt_disabled+0x13/0x30 [ 551.753891][ C1] __mutex_lock+0x6a4/0xd70 [ 551.758423][ C1] ? __mutex_lock+0x527/0xd70 [ 551.763126][ C1] ? addrconf_verify_work+0x19/0x30 [ 551.768340][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 551.773381][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 551.779384][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 551.785734][ C1] ? process_scheduled_works+0x945/0x1830 [ 551.791465][ C1] ? rtnl_lock+0xe7/0x130 [ 551.795810][ C1] ? process_scheduled_works+0x945/0x1830 [ 551.801543][ C1] addrconf_verify_work+0x19/0x30 [ 551.806582][ C1] process_scheduled_works+0xa2c/0x1830 [ 551.812175][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 551.818188][ C1] ? assign_work+0x364/0x3d0 [ 551.822801][ C1] worker_thread+0x86d/0xd50 [ 551.827424][ C1] ? __kthread_parkme+0x169/0x1d0 [ 551.832467][ C1] ? __pfx_worker_thread+0x10/0x10 [ 551.837594][ C1] kthread+0x2f0/0x390 [ 551.841681][ C1] ? __pfx_worker_thread+0x10/0x10 [ 551.846804][ C1] ? __pfx_kthread+0x10/0x10 [ 551.851415][ C1] ret_from_fork+0x4b/0x80 [ 551.855848][ C1] ? __pfx_kthread+0x10/0x10 [ 551.860486][ C1] ret_from_fork_asm+0x1a/0x30 [ 551.865286][ C1] [ 551.868313][ C1] [ 551.868313][ C1] Showing all locks held in the system: [ 551.876028][ C1] 3 locks held by kworker/u8:0/11: [ 551.881141][ C1] #0: ffff8880298d2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 551.892763][ C1] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 551.906460][ C1] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 551.915989][ C1] 2 locks held by kworker/u8:2/35: [ 551.921101][ C1] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 551.932807][ C1] #1: ffffc90000ab7d00 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 551.945758][ C1] 2 locks held by getty/4852: [ 551.950449][ C1] #0: ffff88807b4780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 551.960240][ C1] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 551.970376][ C1] 2 locks held by syz-executor310/5107: [ 551.975924][ C1] [ 551.978252][ C1] ============================================= [ 551.978252][ C1] [ 553.023929][ C0] DEBUG: holding rtnl_mutex for 20787 jiffies. [ 553.030117][ C0] task:syz-executor310 state:R running task stack:22384 pid:5107 tgid:5107 ppid:5106 flags:0x00004006 [ 553.041897][ C0] Call Trace: [ 553.045221][ C0] [ 553.048089][ C0] sched_show_task+0x578/0x740 [ 553.052867][ C0] ? report_rtnl_holders+0x183/0x2d0 [ 553.058191][ C0] ? __pfx__printk+0x10/0x10 [ 553.062805][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 553.068143][ C0] report_rtnl_holders+0x1ba/0x2d0 [ 553.073275][ C0] ? report_rtnl_holders+0x20/0x2d0 [ 553.078518][ C0] call_timer_fn+0x18e/0x650 [ 553.083133][ C0] ? call_timer_fn+0xc0/0x650 [ 553.087855][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 553.093507][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 553.098659][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 553.104361][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 553.109996][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 553.115654][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.120866][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 553.126104][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 553.131784][ C0] __run_timer_base+0x66a/0x8e0 [ 553.136705][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 553.142132][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.147372][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 553.152589][ C0] tmigr_handle_remote+0xb8e/0x1700 [ 553.157838][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 553.162887][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 553.168563][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 553.174021][ C0] handle_softirqs+0x2c4/0x970 [ 553.178789][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 553.183540][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 553.188856][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 553.194104][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 553.198682][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 553.203923][ C0] irq_exit_rcu+0x9/0x30 [ 553.208179][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 553.213803][ C0] [ 553.216763][ C0] [ 553.219707][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 553.225731][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 553.231904][ C0] Code: 00 d6 03 00 65 8b 15 00 8e 70 7e f7 c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc [ 553.251548][ C0] RSP: 0018:ffffc900036a66b0 EFLAGS: 00000246 [ 553.257662][ C0] RAX: ffffffff8b82c1a6 RBX: ffff88801d5a2100 RCX: ffff8880183a3c00 [ 553.265665][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000040 [ 553.273643][ C0] RBP: ffff88802946a0d8 R08: ffffffff8b82c197 R09: 1ffffffff25f96e8 [ 553.281650][ C0] R10: dffffc0000000000 R11: fffffbfff25f96e9 R12: ffff88801d5a2102 [ 553.289660][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 553.297671][ C0] ? radix_tree_lookup+0x97/0x290 [ 553.302802][ C0] ? radix_tree_lookup+0xa6/0x290 [ 553.307869][ C0] radix_tree_lookup+0xa6/0x290 [ 553.312735][ C0] ? tcf_idr_check_alloc+0x110/0x900 [ 553.318063][ C0] tcf_idr_check_alloc+0x1de/0x900 [ 553.323192][ C0] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 553.328861][ C0] ? __nla_parse+0x40/0x60 [ 553.333292][ C0] tcf_police_init+0x29b/0x17c0 [ 553.338178][ C0] ? __sock_sendmsg+0x221/0x270 [ 553.343047][ C0] ? ____sys_sendmsg+0x525/0x7d0 [ 553.348123][ C0] ? __pfx_tcf_police_init+0x10/0x10 [ 553.353524][ C0] ? nla_memcpy+0x5d/0xc0 [ 553.357891][ C0] ? __asan_memcpy+0x40/0x70 [ 553.362498][ C0] ? __pfx_tcf_police_init+0x10/0x10 [ 553.367823][ C0] tcf_action_init_1+0x5d7/0x890 [ 553.372786][ C0] ? __pfx_tcf_action_init_1+0x10/0x10 [ 553.378301][ C0] ? tcf_action_fill_size+0x1e/0x2d0 [ 553.383600][ C0] tcf_action_init+0x2e4/0x940 [ 553.388417][ C0] ? __pfx_tcf_action_init+0x10/0x10 [ 553.393745][ C0] ? apparmor_capable+0x138/0x1b0 [ 553.398822][ C0] tc_ctl_action+0x47d/0xcf0 [ 553.403428][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 553.408675][ C0] ? __pfx_tc_ctl_action+0x10/0x10 [ 553.413842][ C0] ? trace_contention_end+0x3c/0x120 [ 553.419189][ C0] ? __mutex_lock+0x2ef/0xd70 [ 553.423955][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 553.429000][ C0] ? __pfx_tc_ctl_action+0x10/0x10 [ 553.434149][ C0] rtnetlink_rcv_msg+0x892/0x1170 [ 553.439196][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 553.444435][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 553.449916][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 553.455242][ C0] ? __pfx_validate_chain+0x10/0x10 [ 553.460455][ C0] ? __pfx_validate_chain+0x10/0x10 [ 553.465692][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 553.470672][ C0] ? mark_lock+0x9a/0x360 [ 553.475037][ C0] ? __pfx_validate_chain+0x10/0x10 [ 553.480253][ C0] ? __lock_acquire+0x1359/0x2000 [ 553.485328][ C0] ? mark_lock+0x9a/0x360 [ 553.489675][ C0] ? __lock_acquire+0x1359/0x2000 [ 553.494760][ C0] netlink_rcv_skb+0x1e3/0x430 [ 553.499560][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 553.505058][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 553.510371][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 553.515606][ C0] netlink_unicast+0x7ea/0x980 [ 553.520390][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 553.525707][ C0] ? __virt_addr_valid+0x183/0x520 [ 553.530842][ C0] ? __check_object_size+0x49c/0x900 [ 553.536163][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 553.541318][ C0] netlink_sendmsg+0x8db/0xcb0 [ 553.546133][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.551433][ C0] ? __import_iovec+0x536/0x820 [ 553.556318][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 553.561270][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 553.566588][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 553.572066][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.577383][ C0] __sock_sendmsg+0x221/0x270 [ 553.582081][ C0] ____sys_sendmsg+0x525/0x7d0 [ 553.586896][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.592222][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 553.596854][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 553.602000][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 553.608025][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 553.614397][ C0] ? exc_page_fault+0x590/0x8c0 [ 553.619244][ C0] ? do_syscall_64+0xb6/0x230 [ 553.623959][ C0] do_syscall_64+0xf3/0x230 [ 553.628475][ C0] ? clear_bhb_loop+0x35/0x90 [ 553.633142][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.639071][ C0] RIP: 0033:0x7f8da6f14df9 [ 553.643499][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 553.663148][ C0] RSP: 002b:00007fffaea36f98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.671608][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8da6f14df9 [ 553.679608][ C0] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 553.687614][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006 [ 553.695612][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.703591][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 553.711611][ C0] [ 553.714659][ C0] DEBUG: waiting rtnl_mutex for 14925 jiffies. [ 553.720790][ C0] task:kworker/u8:0 state:D stack:23784 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 553.731004][ C0] Workqueue: ipv6_addrconf addrconf_verify_work [ 553.737290][ C0] Call Trace: [ 553.740553][ C0] [ 553.743468][ C0] __schedule+0x17e8/0x4a20 [ 553.748023][ C0] ? __pfx___schedule+0x10/0x10 [ 553.752895][ C0] ? __pfx_lock_release+0x10/0x10 [ 553.757956][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 553.763433][ C0] ? kthread_data+0x52/0xd0 [ 553.767972][ C0] ? schedule+0x90/0x320 [ 553.772231][ C0] ? wq_worker_sleeping+0x66/0x240 [ 553.777382][ C0] ? schedule+0x90/0x320 [ 553.781641][ C0] schedule+0x14b/0x320 [ 553.785864][ C0] schedule_preempt_disabled+0x13/0x30 [ 553.791355][ C0] __mutex_lock+0x6a4/0xd70 [ 553.795914][ C0] ? __mutex_lock+0x527/0xd70 [ 553.800613][ C0] ? addrconf_verify_work+0x19/0x30 [ 553.805854][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 553.810899][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 553.816925][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 553.823283][ C0] ? process_scheduled_works+0x945/0x1830 [ 553.829060][ C0] ? rtnl_lock+0xe7/0x130 [ 553.833416][ C0] ? process_scheduled_works+0x945/0x1830 [ 553.839185][ C0] addrconf_verify_work+0x19/0x30 [ 553.844252][ C0] process_scheduled_works+0xa2c/0x1830 [ 553.849805][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 553.855826][ C0] ? assign_work+0x364/0x3d0 [ 553.860440][ C0] worker_thread+0x86d/0xd50 [ 553.865082][ C0] ? __kthread_parkme+0x169/0x1d0 [ 553.870121][ C0] ? __pfx_worker_thread+0x10/0x10 [ 553.875265][ C0] kthread+0x2f0/0x390 [ 553.879351][ C0] ? __pfx_worker_thread+0x10/0x10 [ 553.884492][ C0] ? __pfx_kthread+0x10/0x10 [ 553.889102][ C0] ret_from_fork+0x4b/0x80 [ 553.893504][ C0] ? __pfx_kthread+0x10/0x10 [ 553.898125][ C0] ret_from_fork_asm+0x1a/0x30 [ 553.902921][ C0] [ 553.905981][ C0] [ 553.905981][ C0] Showing all locks held in the system: [ 553.913702][ C0] 3 locks held by kworker/u8:0/11: [ 553.918855][ C0] #0: ffff8880298d2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 553.930494][ C0] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 553.944176][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 553.953731][ C0] 2 locks held by getty/4852: [ 553.958433][ C0] #0: ffff88807b4780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 553.968242][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 553.978431][ C0] 5 locks held by syz-executor310/5107: [ 553.984021][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 553.993502][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: tcf_idr_check_alloc+0x110/0x900 [ 554.003374][ C0] #2: ffffc900000079e0 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 554.013539][ C0] #3: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 554.023319][ C0] #4: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 554.033235][ C0] [ 554.035591][ C0] ============================================= [ 554.035591][ C0] [ 555.103936][ C0] DEBUG: holding rtnl_mutex for 20995 jiffies. [ 555.110100][ C0] task:syz-executor310 state:R running task stack:22384 pid:5107 tgid:5107 ppid:5106 flags:0x0000400e [ 555.121861][ C0] Call Trace: [ 555.125194][ C0] [ 555.128044][ C0] sched_show_task+0x578/0x740 [ 555.132797][ C0] ? report_rtnl_holders+0x183/0x2d0 [ 555.138108][ C0] ? __pfx__printk+0x10/0x10 [ 555.142711][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 555.148064][ C0] report_rtnl_holders+0x1ba/0x2d0 [ 555.153191][ C0] ? report_rtnl_holders+0x20/0x2d0 [ 555.158423][ C0] call_timer_fn+0x18e/0x650 [ 555.163029][ C0] ? call_timer_fn+0xc0/0x650 [ 555.167734][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 555.173406][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 555.178556][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 555.184250][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 555.189889][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 555.195550][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.200780][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 555.206011][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 555.211660][ C0] __run_timer_base+0x66a/0x8e0 [ 555.216585][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 555.221979][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.227209][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 555.232447][ C0] tmigr_handle_remote+0xb8e/0x1700 [ 555.237702][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 555.244108][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 555.249734][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 555.255145][ C0] handle_softirqs+0x2c4/0x970 [ 555.259923][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 555.264727][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 555.270022][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 555.275253][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 555.279855][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 555.285090][ C0] irq_exit_rcu+0x9/0x30 [ 555.289343][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 555.295011][ C0] [ 555.297949][ C0] [ 555.300866][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 555.306873][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x35/0x90 [ 555.313739][ C0] Code: 14 25 00 d6 03 00 65 8b 05 00 8b 70 7e a9 00 01 ff 00 74 10 a9 00 01 00 00 74 5b 83 ba 1c 16 00 00 00 74 52 8b 82 f8 15 00 00 <83> f8 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc 15 00 00 49 c1 e1 [ 555.333396][ C0] RSP: 0018:ffffc900036a66b0 EFLAGS: 00000246 [ 555.339511][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8880183a3c00 [ 555.347519][ C0] RDX: ffff8880183a3c00 RSI: 0000000000000000 RDI: 0000000000000040 [ 555.355540][ C0] RBP: 1ffff11003ab4420 R08: ffffffff8b82c1f2 R09: 1ffffffff25f96e8 [ 555.363520][ C0] R10: dffffc0000000000 R11: fffffbfff25f96e9 R12: ffff88801d5a2100 [ 555.371605][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 555.379632][ C0] ? radix_tree_lookup+0xf2/0x290 [ 555.384704][ C0] radix_tree_lookup+0xf2/0x290 [ 555.389570][ C0] ? tcf_idr_check_alloc+0x110/0x900 [ 555.394885][ C0] tcf_idr_check_alloc+0x1de/0x900 [ 555.400013][ C0] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 555.405682][ C0] ? __nla_parse+0x40/0x60 [ 555.410113][ C0] tcf_police_init+0x29b/0x17c0 [ 555.414994][ C0] ? __sock_sendmsg+0x221/0x270 [ 555.419857][ C0] ? ____sys_sendmsg+0x525/0x7d0 [ 555.424838][ C0] ? __pfx_tcf_police_init+0x10/0x10 [ 555.430147][ C0] ? nla_memcpy+0x5d/0xc0 [ 555.434509][ C0] ? __asan_memcpy+0x40/0x70 [ 555.439120][ C0] ? __pfx_tcf_police_init+0x10/0x10 [ 555.444438][ C0] tcf_action_init_1+0x5d7/0x890 [ 555.449391][ C0] ? __pfx_tcf_action_init_1+0x10/0x10 [ 555.454903][ C0] ? tcf_action_fill_size+0x1e/0x2d0 [ 555.460202][ C0] tcf_action_init+0x2e4/0x940 [ 555.465007][ C0] ? __pfx_tcf_action_init+0x10/0x10 [ 555.470334][ C0] ? apparmor_capable+0x138/0x1b0 [ 555.475397][ C0] tc_ctl_action+0x47d/0xcf0 [ 555.480000][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 555.485238][ C0] ? __pfx_tc_ctl_action+0x10/0x10 [ 555.490376][ C0] ? trace_contention_end+0x3c/0x120 [ 555.495695][ C0] ? __mutex_lock+0x2ef/0xd70 [ 555.500393][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 555.505464][ C0] ? __pfx_tc_ctl_action+0x10/0x10 [ 555.510587][ C0] rtnetlink_rcv_msg+0x892/0x1170 [ 555.515647][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 555.520861][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 555.526353][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 555.531668][ C0] ? __pfx_validate_chain+0x10/0x10 [ 555.536904][ C0] ? __pfx_validate_chain+0x10/0x10 [ 555.542117][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 555.547094][ C0] ? mark_lock+0x9a/0x360 [ 555.551446][ C0] ? __pfx_validate_chain+0x10/0x10 [ 555.556680][ C0] ? __lock_acquire+0x1359/0x2000 [ 555.561811][ C0] ? mark_lock+0x9a/0x360 [ 555.566179][ C0] ? __lock_acquire+0x1359/0x2000 [ 555.571229][ C0] netlink_rcv_skb+0x1e3/0x430 [ 555.576027][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 555.581503][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 555.586842][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 555.592057][ C0] netlink_unicast+0x7ea/0x980 [ 555.596860][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 555.602154][ C0] ? __virt_addr_valid+0x183/0x520 [ 555.607297][ C0] ? __check_object_size+0x49c/0x900 [ 555.612595][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 555.617738][ C0] netlink_sendmsg+0x8db/0xcb0 [ 555.622520][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.627842][ C0] ? __import_iovec+0x536/0x820 [ 555.632703][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 555.637673][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 555.642968][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 555.648460][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.653758][ C0] __sock_sendmsg+0x221/0x270 [ 555.658472][ C0] ____sys_sendmsg+0x525/0x7d0 [ 555.663254][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.668594][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 555.673197][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 555.678371][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 555.684412][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 555.690731][ C0] ? exc_page_fault+0x590/0x8c0 [ 555.695616][ C0] ? do_syscall_64+0xb6/0x230 [ 555.700308][ C0] do_syscall_64+0xf3/0x230 [ 555.704844][ C0] ? clear_bhb_loop+0x35/0x90 [ 555.709540][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.715461][ C0] RIP: 0033:0x7f8da6f14df9 [ 555.719903][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 555.739565][ C0] RSP: 002b:00007fffaea36f98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.748057][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8da6f14df9 [ 555.756067][ C0] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 555.764088][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006 [ 555.772056][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.780048][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 555.788079][ C0] [ 555.791093][ C0] DEBUG: waiting rtnl_mutex for 15132 jiffies. [ 555.797260][ C0] task:kworker/u8:0 state:D stack:23784 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 555.807478][ C0] Workqueue: ipv6_addrconf addrconf_verify_work [ 555.813721][ C0] Call Trace: [ 555.817044][ C0] [ 555.819982][ C0] __schedule+0x17e8/0x4a20 [ 555.824549][ C0] ? __pfx___schedule+0x10/0x10 [ 555.829414][ C0] ? __pfx_lock_release+0x10/0x10 [ 555.834468][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 555.839961][ C0] ? kthread_data+0x52/0xd0 [ 555.844495][ C0] ? schedule+0x90/0x320 [ 555.848750][ C0] ? wq_worker_sleeping+0x66/0x240 [ 555.853846][ C0] ? schedule+0x90/0x320 [ 555.858141][ C0] schedule+0x14b/0x320 [ 555.862282][ C0] schedule_preempt_disabled+0x13/0x30 [ 555.867766][ C0] __mutex_lock+0x6a4/0xd70 [ 555.872288][ C0] ? __mutex_lock+0x527/0xd70 [ 555.876998][ C0] ? addrconf_verify_work+0x19/0x30 [ 555.882205][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 555.887257][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 555.893251][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 555.899615][ C0] ? process_scheduled_works+0x945/0x1830 [ 555.905370][ C0] ? rtnl_lock+0xe7/0x130 [ 555.909685][ C0] ? process_scheduled_works+0x945/0x1830 [ 555.915425][ C0] addrconf_verify_work+0x19/0x30 [ 555.920475][ C0] process_scheduled_works+0xa2c/0x1830 [ 555.926082][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 555.932075][ C0] ? assign_work+0x364/0x3d0 [ 555.936714][ C0] worker_thread+0x86d/0xd50 [ 555.941323][ C0] ? __kthread_parkme+0x169/0x1d0 [ 555.946404][ C0] ? __pfx_worker_thread+0x10/0x10 [ 555.951532][ C0] kthread+0x2f0/0x390 [ 555.955634][ C0] ? __pfx_worker_thread+0x10/0x10 [ 555.960757][ C0] ? __pfx_kthread+0x10/0x10 [ 555.965397][ C0] ret_from_fork+0x4b/0x80 [ 555.969833][ C0] ? __pfx_kthread+0x10/0x10 [ 555.974465][ C0] ret_from_fork_asm+0x1a/0x30 [ 555.979273][ C0] [ 555.982276][ C0] [ 555.982276][ C0] Showing all locks held in the system: [ 555.990012][ C0] 3 locks held by kworker/u8:0/11: [ 555.995151][ C0] #0: ffff8880298d2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 556.006747][ C0] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 556.020477][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 556.030068][ C0] 1 lock held by klogd/4533: [ 556.034695][ C0] #0: ffff8880b953e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 556.044657][ C0] 2 locks held by getty/4852: [ 556.049339][ C0] #0: ffff88807b4780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 556.059127][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 556.069303][ C0] 5 locks held by syz-executor310/5107: [ 556.074871][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 556.084431][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: tcf_idr_check_alloc+0x110/0x900 [ 556.094296][ C0] #2: ffffc900000079e0 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 556.104456][ C0] #3: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 556.114238][ C0] #4: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 556.124141][ C0] [ 556.126449][ C0] ============================================= [ 556.126449][ C0] [ 557.183910][ C1] DEBUG: holding rtnl_mutex for 21203 jiffies. [ 557.190134][ C1] task:syz-executor310 state:R running task stack:22384 pid:5107 tgid:5107 ppid:5106 flags:0x00004006 [ 557.201909][ C1] Call Trace: [ 557.205198][ C1] [ 557.208147][ C1] ? __pfx_validate_chain+0x10/0x10 [ 557.213368][ C1] ? mark_lock+0x9a/0x360 [ 557.217718][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 557.223720][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 557.230067][ C1] ? mark_lock+0x9a/0x360 [ 557.234415][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 557.240327][ C1] ? mark_lock+0x9a/0x360 [ 557.244681][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 557.250682][ C1] ? mark_lock+0x9a/0x360 [ 557.255024][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 557.261368][ C1] ? __lock_acquire+0xc1d/0x2000 [ 557.266339][ C1] ? lock_acquire+0x1ed/0x550 [ 557.271025][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 557.276325][ C1] ? lock_acquire+0xe3/0x550 [ 557.280935][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 557.285976][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 557.291274][ C1] ? __pfx_lock_release+0x10/0x10 [ 557.296310][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 557.301616][ C1] ? __rcu_read_lock+0x2b/0xb0 [ 557.306399][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 557.311694][ C1] ? tcf_idr_check_alloc+0x12d/0x900 [ 557.317006][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 557.322329][ C1] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 557.328003][ C1] ? __nla_parse+0x40/0x60 [ 557.332455][ C1] ? tcf_police_init+0x29b/0x17c0 [ 557.337501][ C1] ? __sock_sendmsg+0x221/0x270 [ 557.342377][ C1] ? ____sys_sendmsg+0x525/0x7d0 [ 557.347352][ C1] ? __pfx_tcf_police_init+0x10/0x10 [ 557.352700][ C1] ? nla_memcpy+0x5d/0xc0 [ 557.357050][ C1] ? __asan_memcpy+0x40/0x70 [ 557.361670][ C1] ? __pfx_tcf_police_init+0x10/0x10 [ 557.366972][ C1] ? tcf_action_init_1+0x5d7/0x890 [ 557.372108][ C1] ? __pfx_tcf_action_init_1+0x10/0x10 [ 557.377606][ C1] ? tcf_action_fill_size+0x1e/0x2d0 [ 557.383000][ C1] ? tcf_action_init+0x2e4/0x940 [ 557.387970][ C1] ? __pfx_tcf_action_init+0x10/0x10 [ 557.393333][ C1] ? apparmor_capable+0x138/0x1b0 [ 557.398381][ C1] ? tc_ctl_action+0x47d/0xcf0 [ 557.403161][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 557.408382][ C1] ? __pfx_tc_ctl_action+0x10/0x10 [ 557.413537][ C1] ? trace_contention_end+0x3c/0x120 [ 557.418841][ C1] ? __mutex_lock+0x2ef/0xd70 [ 557.423547][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 557.428604][ C1] ? __pfx_tc_ctl_action+0x10/0x10 [ 557.433733][ C1] ? rtnetlink_rcv_msg+0x892/0x1170 [ 557.438951][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 557.444174][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 557.449650][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 557.454960][ C1] ? __pfx_validate_chain+0x10/0x10 [ 557.460174][ C1] ? __pfx_validate_chain+0x10/0x10 [ 557.465394][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 557.470356][ C1] ? mark_lock+0x9a/0x360 [ 557.474697][ C1] ? __pfx_validate_chain+0x10/0x10 [ 557.479913][ C1] ? __lock_acquire+0x1359/0x2000 [ 557.484970][ C1] ? mark_lock+0x9a/0x360 [ 557.489317][ C1] ? __lock_acquire+0x1359/0x2000 [ 557.494376][ C1] ? netlink_rcv_skb+0x1e3/0x430 [ 557.499332][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 557.504810][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 557.510135][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 557.515439][ C1] ? netlink_unicast+0x7ea/0x980 [ 557.520399][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 557.525696][ C1] ? __virt_addr_valid+0x183/0x520 [ 557.530825][ C1] ? __check_object_size+0x49c/0x900 [ 557.536123][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 557.541252][ C1] ? netlink_sendmsg+0x8db/0xcb0 [ 557.546222][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.551527][ C1] ? __import_iovec+0x536/0x820 [ 557.556389][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 557.561337][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 557.566637][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 557.572113][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.577411][ C1] ? __sock_sendmsg+0x221/0x270 [ 557.582286][ C1] ? ____sys_sendmsg+0x525/0x7d0 [ 557.587248][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.592563][ C1] ? __sys_sendmsg+0x2b0/0x3a0 [ 557.597345][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 557.602506][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 557.608511][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 557.614856][ C1] ? exc_page_fault+0x590/0x8c0 [ 557.619730][ C1] ? do_syscall_64+0xb6/0x230 [ 557.624422][ C1] ? do_syscall_64+0xf3/0x230 [ 557.629107][ C1] ? clear_bhb_loop+0x35/0x90 [ 557.633800][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.639893][ C1] [ 557.642917][ C1] DEBUG: waiting rtnl_mutex for 15317 jiffies. [ 557.649075][ C1] task:kworker/u8:0 state:D stack:23784 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 557.659263][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 557.665522][ C1] Call Trace: [ 557.668809][ C1] [ 557.671751][ C1] __schedule+0x17e8/0x4a20 [ 557.676294][ C1] ? __pfx___schedule+0x10/0x10 [ 557.681162][ C1] ? __pfx_lock_release+0x10/0x10 [ 557.686202][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 557.691683][ C1] ? kthread_data+0x52/0xd0 [ 557.696199][ C1] ? schedule+0x90/0x320 [ 557.700461][ C1] ? wq_worker_sleeping+0x66/0x240 [ 557.705590][ C1] ? schedule+0x90/0x320 [ 557.709848][ C1] schedule+0x14b/0x320 [ 557.714022][ C1] schedule_preempt_disabled+0x13/0x30 [ 557.719498][ C1] __mutex_lock+0x6a4/0xd70 [ 557.724021][ C1] ? __mutex_lock+0x527/0xd70 [ 557.728719][ C1] ? addrconf_verify_work+0x19/0x30 [ 557.733933][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 557.738973][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 557.744970][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 557.751314][ C1] ? process_scheduled_works+0x945/0x1830 [ 557.757046][ C1] ? rtnl_lock+0xe7/0x130 [ 557.761395][ C1] ? process_scheduled_works+0x945/0x1830 [ 557.767129][ C1] addrconf_verify_work+0x19/0x30 [ 557.772167][ C1] process_scheduled_works+0xa2c/0x1830 [ 557.777759][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 557.783761][ C1] ? assign_work+0x364/0x3d0 [ 557.788455][ C1] worker_thread+0x86d/0xd50 [ 557.793077][ C1] ? __kthread_parkme+0x169/0x1d0 [ 557.798121][ C1] ? __pfx_worker_thread+0x10/0x10 [ 557.803244][ C1] kthread+0x2f0/0x390 [ 557.807328][ C1] ? __pfx_worker_thread+0x10/0x10 [ 557.812449][ C1] ? __pfx_kthread+0x10/0x10 [ 557.817055][ C1] ret_from_fork+0x4b/0x80 [ 557.821506][ C1] ? __pfx_kthread+0x10/0x10 [ 557.826131][ C1] ret_from_fork_asm+0x1a/0x30 [ 557.830943][ C1] [ 557.833975][ C1] [ 557.833975][ C1] Showing all locks held in the system: [ 557.841694][ C1] 3 locks held by kworker/u8:0/11: [ 557.846813][ C1] #0: ffff8880298d2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 557.858430][ C1] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 557.872125][ C1] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 557.881658][ C1] 2 locks held by kworker/u8:2/35: [ 557.886781][ C1] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 557.898481][ C1] #1: ffffc90000ab7d00 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 557.911281][ C1] 2 locks held by getty/4852: [ 557.915976][ C1] #0: ffff88807b4780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 557.925785][ C1] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 557.935931][ C1] 1 lock held by syz-executor310/5107: [ 557.941398][ C1] [ 557.943728][ C1] ============================================= [ 557.943728][ C1] [ 559.023883][ C1] DEBUG: holding rtnl_mutex for 21387 jiffies. [ 559.030056][ C1] task:syz-executor310 state:R running task stack:22384 pid:5107 tgid:5107 ppid:5106 flags:0x00004006 [ 559.041824][ C1] Call Trace: [ 559.045159][ C1] [ 559.048021][ C1] sched_show_task+0x578/0x740 [ 559.052771][ C1] ? report_rtnl_holders+0x183/0x2d0 [ 559.058095][ C1] ? __pfx__printk+0x10/0x10 [ 559.062706][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 559.068037][ C1] report_rtnl_holders+0x1ba/0x2d0 [ 559.073179][ C1] ? report_rtnl_holders+0x20/0x2d0 [ 559.078427][ C1] call_timer_fn+0x18e/0x650 [ 559.083036][ C1] ? call_timer_fn+0xc0/0x650 [ 559.087748][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 559.093485][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 559.098636][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 559.104391][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 559.110022][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 559.115681][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.120907][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 559.126145][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 559.131797][ C1] __run_timer_base+0x66a/0x8e0 [ 559.136695][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 559.142085][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 559.148453][ C1] run_timer_softirq+0xb7/0x170 [ 559.153320][ C1] handle_softirqs+0x2c4/0x970 [ 559.158122][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 559.162900][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 559.168335][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 559.173562][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 559.178215][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 559.183440][ C1] irq_exit_rcu+0x9/0x30 [ 559.187730][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 559.193379][ C1] [ 559.196347][ C1] [ 559.199285][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 559.205299][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 559.210598][ C1] Code: 2b 00 74 08 4c 89 f7 e8 1a 18 8a 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 559.230246][ C1] RSP: 0018:ffffc900036a65a0 EFLAGS: 00000206 [ 559.236371][ C1] RAX: 0000000000000001 RBX: 1ffff920006d4cc0 RCX: 0337f8dd78d00f00 [ 559.244381][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcad320 RDI: ffffffff8c200760 [ 559.252362][ C1] RBP: ffffc900036a66e8 R08: ffffffff92fcb747 R09: 1ffffffff25f96e8 [ 559.260368][ C1] R10: dffffc0000000000 R11: fffffbfff25f96e9 R12: 1ffff920006d4cbc [ 559.268390][ C1] R13: dffffc0000000000 R14: ffffc900036a6600 R15: 0000000000000246 [ 559.276421][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 559.281462][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 559.286785][ C1] ? __pfx_lock_release+0x10/0x10 [ 559.291993][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 559.297346][ C1] ? radix_tree_lookup+0xd/0x290 [ 559.302308][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 559.307735][ C1] tcf_idr_check_alloc+0x12d/0x900 [ 559.312867][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 559.318214][ C1] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 559.323920][ C1] ? __nla_parse+0x40/0x60 [ 559.328334][ C1] tcf_police_init+0x29b/0x17c0 [ 559.333165][ C1] ? __sock_sendmsg+0x221/0x270 [ 559.338061][ C1] ? ____sys_sendmsg+0x525/0x7d0 [ 559.343042][ C1] ? __pfx_tcf_police_init+0x10/0x10 [ 559.348381][ C1] ? nla_memcpy+0x5d/0xc0 [ 559.352722][ C1] ? __asan_memcpy+0x40/0x70 [ 559.357350][ C1] ? __pfx_tcf_police_init+0x10/0x10 [ 559.362651][ C1] tcf_action_init_1+0x5d7/0x890 [ 559.367629][ C1] ? __pfx_tcf_action_init_1+0x10/0x10 [ 559.373112][ C1] ? tcf_action_fill_size+0x1e/0x2d0 [ 559.378429][ C1] tcf_action_init+0x2e4/0x940 [ 559.383266][ C1] ? __pfx_tcf_action_init+0x10/0x10 [ 559.388636][ C1] ? apparmor_capable+0x138/0x1b0 [ 559.393682][ C1] tc_ctl_action+0x47d/0xcf0 [ 559.398329][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 559.403550][ C1] ? __pfx_tc_ctl_action+0x10/0x10 [ 559.408724][ C1] ? trace_contention_end+0x3c/0x120 [ 559.414065][ C1] ? __mutex_lock+0x2ef/0xd70 [ 559.418750][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 559.423763][ C1] ? __pfx_tc_ctl_action+0x10/0x10 [ 559.428925][ C1] rtnetlink_rcv_msg+0x892/0x1170 [ 559.434011][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 559.439242][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 559.444775][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 559.450092][ C1] ? __pfx_validate_chain+0x10/0x10 [ 559.455347][ C1] ? __pfx_validate_chain+0x10/0x10 [ 559.460559][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 559.465542][ C1] ? mark_lock+0x9a/0x360 [ 559.469881][ C1] ? __pfx_validate_chain+0x10/0x10 [ 559.475115][ C1] ? __lock_acquire+0x1359/0x2000 [ 559.480181][ C1] ? mark_lock+0x9a/0x360 [ 559.484550][ C1] ? __lock_acquire+0x1359/0x2000 [ 559.489599][ C1] netlink_rcv_skb+0x1e3/0x430 [ 559.494397][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 559.499873][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 559.505217][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 559.510428][ C1] netlink_unicast+0x7ea/0x980 [ 559.515239][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 559.520536][ C1] ? __virt_addr_valid+0x183/0x520 [ 559.525683][ C1] ? __check_object_size+0x49c/0x900 [ 559.530993][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 559.536164][ C1] netlink_sendmsg+0x8db/0xcb0 [ 559.540956][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.546278][ C1] ? __import_iovec+0x536/0x820 [ 559.551139][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 559.556130][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 559.561434][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 559.566952][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.572259][ C1] __sock_sendmsg+0x221/0x270 [ 559.577002][ C1] ____sys_sendmsg+0x525/0x7d0 [ 559.581801][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.587157][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 559.591762][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 559.596935][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 559.602932][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 559.609289][ C1] ? exc_page_fault+0x590/0x8c0 [ 559.614205][ C1] ? do_syscall_64+0xb6/0x230 [ 559.618883][ C1] do_syscall_64+0xf3/0x230 [ 559.623385][ C1] ? clear_bhb_loop+0x35/0x90 [ 559.628126][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.634089][ C1] RIP: 0033:0x7f8da6f14df9 [ 559.638518][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 559.658176][ C1] RSP: 002b:00007fffaea36f98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.666657][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8da6f14df9 [ 559.674668][ C1] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 559.682662][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006 [ 559.690674][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.698727][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 559.706773][ C1] [ 559.709806][ C1] DEBUG: waiting rtnl_mutex for 15524 jiffies. [ 559.716015][ C1] task:kworker/u8:0 state:D stack:23784 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 559.726225][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 559.732456][ C1] Call Trace: [ 559.735761][ C1] [ 559.738722][ C1] __schedule+0x17e8/0x4a20 [ 559.743226][ C1] ? __pfx___schedule+0x10/0x10 [ 559.748198][ C1] ? __pfx_lock_release+0x10/0x10 [ 559.753239][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 559.758742][ C1] ? kthread_data+0x52/0xd0 [ 559.763257][ C1] ? schedule+0x90/0x320 [ 559.767545][ C1] ? wq_worker_sleeping+0x66/0x240 [ 559.772686][ C1] ? schedule+0x90/0x320 [ 559.776967][ C1] schedule+0x14b/0x320 [ 559.781142][ C1] schedule_preempt_disabled+0x13/0x30 [ 559.786635][ C1] __mutex_lock+0x6a4/0xd70 [ 559.791155][ C1] ? __mutex_lock+0x527/0xd70 [ 559.795869][ C1] ? addrconf_verify_work+0x19/0x30 [ 559.801080][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 559.806144][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 559.812163][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 559.818552][ C1] ? process_scheduled_works+0x945/0x1830 [ 559.824358][ C1] ? rtnl_lock+0xe7/0x130 [ 559.828719][ C1] ? process_scheduled_works+0x945/0x1830 [ 559.834510][ C1] addrconf_verify_work+0x19/0x30 [ 559.839551][ C1] process_scheduled_works+0xa2c/0x1830 [ 559.845165][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 559.851165][ C1] ? assign_work+0x364/0x3d0 [ 559.855796][ C1] worker_thread+0x86d/0xd50 [ 559.860408][ C1] ? __kthread_parkme+0x169/0x1d0 [ 559.865478][ C1] ? __pfx_worker_thread+0x10/0x10 [ 559.870623][ C1] kthread+0x2f0/0x390 [ 559.874739][ C1] ? __pfx_worker_thread+0x10/0x10 [ 559.879865][ C1] ? __pfx_kthread+0x10/0x10 [ 559.884493][ C1] ret_from_fork+0x4b/0x80 [ 559.888925][ C1] ? __pfx_kthread+0x10/0x10 [ 559.893514][ C1] ret_from_fork_asm+0x1a/0x30 [ 559.898356][ C1] [ 559.901385][ C1] [ 559.901385][ C1] Showing all locks held in the system: [ 559.909142][ C1] 3 locks held by kworker/u8:0/11: [ 559.914289][ C1] #0: ffff8880298d2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 559.925914][ C1] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 559.939650][ C1] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 559.949229][ C1] 2 locks held by getty/4852: [ 559.953958][ C1] #0: ffff88807b4780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 559.963764][ C1] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 559.974021][ C1] 5 locks held by syz-executor310/5107: [ 559.979567][ C1] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 559.989099][ C1] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: tcf_idr_check_alloc+0x110/0x900 [ 559.999018][ C1] #2: ffffc90000a18c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 560.009250][ C1] #3: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 560.019072][ C1] #4: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 560.028959][ C1] [ 560.031291][ C1] ============================================= [ 560.031291][ C1] [ 561.103911][ C1] DEBUG: holding rtnl_mutex for 21595 jiffies. [ 561.110144][ C1] task:syz-executor310 state:R running task stack:22384 pid:5107 tgid:5107 ppid:5106 flags:0x00004006 [ 561.121908][ C1] Call Trace: [ 561.125197][ C1] [ 561.128143][ C1] ? __lock_acquire+0x1359/0x2000 [ 561.133205][ C1] ? __pfx_validate_chain+0x10/0x10 [ 561.138426][ C1] ? mark_lock+0x9a/0x360 [ 561.142778][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 561.148776][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 561.155129][ C1] ? mark_lock+0x9a/0x360 [ 561.159480][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 561.165481][ C1] ? mark_lock+0x9a/0x360 [ 561.169836][ C1] ? __lock_acquire+0x1359/0x2000 [ 561.174921][ C1] ? rcu_is_watching+0x15/0xb0 [ 561.179715][ C1] ? sysvec_apic_timer_interrupt+0x86/0xc0 [ 561.185540][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 561.191708][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 561.197015][ C1] ? radix_tree_lookup+0x161/0x290 [ 561.202147][ C1] ? __pfx_debug_lockdep_rcu_enabled+0x10/0x10 [ 561.208329][ C1] ? tcf_idr_check_alloc+0x1ef/0x900 [ 561.213639][ C1] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 561.219299][ C1] ? __nla_parse+0x40/0x60 [ 561.223745][ C1] ? tcf_police_init+0x29b/0x17c0 [ 561.228785][ C1] ? __sock_sendmsg+0x221/0x270 [ 561.233655][ C1] ? ____sys_sendmsg+0x525/0x7d0 [ 561.238623][ C1] ? __pfx_tcf_police_init+0x10/0x10 [ 561.243952][ C1] ? nla_memcpy+0x5d/0xc0 [ 561.248303][ C1] ? __asan_memcpy+0x40/0x70 [ 561.252920][ C1] ? __pfx_tcf_police_init+0x10/0x10 [ 561.258225][ C1] ? tcf_action_init_1+0x5d7/0x890 [ 561.263373][ C1] ? __pfx_tcf_action_init_1+0x10/0x10 [ 561.268873][ C1] ? tcf_action_fill_size+0x1e/0x2d0 [ 561.274176][ C1] ? tcf_action_init+0x2e4/0x940 [ 561.279143][ C1] ? __pfx_tcf_action_init+0x10/0x10 [ 561.284507][ C1] ? apparmor_capable+0x138/0x1b0 [ 561.289569][ C1] ? tc_ctl_action+0x47d/0xcf0 [ 561.294353][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 561.299582][ C1] ? __pfx_tc_ctl_action+0x10/0x10 [ 561.304739][ C1] ? trace_contention_end+0x3c/0x120 [ 561.310047][ C1] ? __mutex_lock+0x2ef/0xd70 [ 561.314756][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 561.319813][ C1] ? __pfx_tc_ctl_action+0x10/0x10 [ 561.324942][ C1] ? rtnetlink_rcv_msg+0x892/0x1170 [ 561.330171][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 561.335395][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 561.340877][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 561.346190][ C1] ? __pfx_validate_chain+0x10/0x10 [ 561.351411][ C1] ? __pfx_validate_chain+0x10/0x10 [ 561.356630][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 561.361592][ C1] ? mark_lock+0x9a/0x360 [ 561.365939][ C1] ? __pfx_validate_chain+0x10/0x10 [ 561.371155][ C1] ? __lock_acquire+0x1359/0x2000 [ 561.376212][ C1] ? mark_lock+0x9a/0x360 [ 561.380649][ C1] ? __lock_acquire+0x1359/0x2000 [ 561.385710][ C1] ? netlink_rcv_skb+0x1e3/0x430 [ 561.390667][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 561.396147][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.401474][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.406694][ C1] ? netlink_unicast+0x7ea/0x980 [ 561.411740][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 561.417043][ C1] ? __virt_addr_valid+0x183/0x520 [ 561.422179][ C1] ? __check_object_size+0x49c/0x900 [ 561.427482][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 561.432611][ C1] ? netlink_sendmsg+0x8db/0xcb0 [ 561.437579][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.442888][ C1] ? __import_iovec+0x536/0x820 [ 561.447756][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 561.452709][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 561.458013][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 561.463492][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.468795][ C1] ? __sock_sendmsg+0x221/0x270 [ 561.473669][ C1] ? ____sys_sendmsg+0x525/0x7d0 [ 561.478684][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.484003][ C1] ? __sys_sendmsg+0x2b0/0x3a0 [ 561.488782][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 561.493942][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 561.499948][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 561.506290][ C1] ? exc_page_fault+0x590/0x8c0 [ 561.511165][ C1] ? do_syscall_64+0xb6/0x230 [ 561.515856][ C1] ? do_syscall_64+0xf3/0x230 [ 561.520543][ C1] ? clear_bhb_loop+0x35/0x90 [ 561.525237][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.531331][ C1] [ 561.534358][ C1] DEBUG: waiting rtnl_mutex for 15707 jiffies. [ 561.540511][ C1] task:kworker/u8:0 state:D stack:23784 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 561.550693][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 561.556953][ C1] Call Trace: [ 561.560240][ C1] [ 561.563180][ C1] __schedule+0x17e8/0x4a20 [ 561.567726][ C1] ? __pfx___schedule+0x10/0x10 [ 561.572595][ C1] ? __pfx_lock_release+0x10/0x10 [ 561.577637][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 561.583115][ C1] ? kthread_data+0x52/0xd0 [ 561.587630][ C1] ? schedule+0x90/0x320 [ 561.591885][ C1] ? wq_worker_sleeping+0x66/0x240 [ 561.597014][ C1] ? schedule+0x90/0x320 [ 561.601269][ C1] schedule+0x14b/0x320 [ 561.605443][ C1] schedule_preempt_disabled+0x13/0x30 [ 561.610917][ C1] __mutex_lock+0x6a4/0xd70 [ 561.615444][ C1] ? __mutex_lock+0x527/0xd70 [ 561.620140][ C1] ? addrconf_verify_work+0x19/0x30 [ 561.625352][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 561.630391][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 561.636389][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 561.642732][ C1] ? process_scheduled_works+0x945/0x1830 [ 561.648551][ C1] ? rtnl_lock+0xe7/0x130 [ 561.652890][ C1] ? process_scheduled_works+0x945/0x1830 [ 561.658620][ C1] addrconf_verify_work+0x19/0x30 [ 561.663658][ C1] process_scheduled_works+0xa2c/0x1830 [ 561.669253][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 561.675256][ C1] ? assign_work+0x364/0x3d0 [ 561.679864][ C1] worker_thread+0x86d/0xd50 [ 561.684483][ C1] ? __kthread_parkme+0x169/0x1d0 [ 561.689527][ C1] ? __pfx_worker_thread+0x10/0x10 [ 561.694652][ C1] kthread+0x2f0/0x390 [ 561.698738][ C1] ? __pfx_worker_thread+0x10/0x10 [ 561.703862][ C1] ? __pfx_kthread+0x10/0x10 [ 561.708467][ C1] ret_from_fork+0x4b/0x80 [ 561.712900][ C1] ? __pfx_kthread+0x10/0x10 [ 561.717510][ C1] ret_from_fork_asm+0x1a/0x30 [ 561.722308][ C1] [ 561.725335][ C1] [ 561.725335][ C1] Showing all locks held in the system: [ 561.733050][ C1] 3 locks held by kworker/u8:0/11: [ 561.738165][ C1] #0: ffff8880298d2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 561.749785][ C1] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 561.763481][ C1] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 561.773007][ C1] 2 locks held by kworker/u8:2/35: [ 561.778121][ C1] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 561.789822][ C1] #1: ffffc90000ab7d00 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 561.802602][ C1] 2 locks held by getty/4852: [ 561.807284][ C1] #0: ffff88807b4780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 561.817078][ C1] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 561.827219][ C1] 2 locks held by syz-executor310/5107: [ 561.832768][ C1] [ 561.835097][ C1] ============================================= [ 561.835097][ C1] [ 562.863906][ C1] DEBUG: holding rtnl_mutex for 21771 jiffies. [ 562.870105][ C1] task:syz-executor310 state:R running task stack:22384 pid:5107 tgid:5107 ppid:5106 flags:0x00004006 [ 562.881920][ C1] Call Trace: [ 562.885232][ C1] [ 562.888179][ C1] ? __lock_acquire+0x1359/0x2000 [ 562.893238][ C1] ? __pfx_validate_chain+0x10/0x10 [ 562.898476][ C1] ? mark_lock+0x9a/0x360 [ 562.902828][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 562.908848][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 562.915217][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 562.921129][ C1] ? mark_lock+0x9a/0x360 [ 562.925498][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 562.931496][ C1] ? mark_lock+0x9a/0x360 [ 562.935862][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 562.942239][ C1] ? __lock_acquire+0x1359/0x2000 [ 562.947362][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 562.952690][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 562.957797][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 562.963115][ C1] ? __pfx_lock_release+0x10/0x10 [ 562.968186][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 562.973493][ C1] ? tcf_idr_check_alloc+0x141/0x900 [ 562.978828][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 562.984162][ C1] ? tcf_idr_check_alloc+0x1de/0x900 [ 562.989470][ C1] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 562.995146][ C1] ? __nla_parse+0x40/0x60 [ 562.999583][ C1] ? tcf_police_init+0x29b/0x17c0 [ 563.004666][ C1] ? __sock_sendmsg+0x221/0x270 [ 563.009546][ C1] ? ____sys_sendmsg+0x525/0x7d0 [ 563.014543][ C1] ? __pfx_tcf_police_init+0x10/0x10 [ 563.019881][ C1] ? nla_memcpy+0x5d/0xc0 [ 563.024258][ C1] ? __asan_memcpy+0x40/0x70 [ 563.028875][ C1] ? __pfx_tcf_police_init+0x10/0x10 [ 563.034202][ C1] ? tcf_action_init_1+0x5d7/0x890 [ 563.039340][ C1] ? __pfx_tcf_action_init_1+0x10/0x10 [ 563.044859][ C1] ? tcf_action_fill_size+0x1e/0x2d0 [ 563.050163][ C1] ? tcf_action_init+0x2e4/0x940 [ 563.055152][ C1] ? __pfx_tcf_action_init+0x10/0x10 [ 563.060513][ C1] ? apparmor_capable+0x138/0x1b0 [ 563.065585][ C1] ? tc_ctl_action+0x47d/0xcf0 [ 563.070365][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 563.075615][ C1] ? __pfx_tc_ctl_action+0x10/0x10 [ 563.080773][ C1] ? trace_contention_end+0x3c/0x120 [ 563.086106][ C1] ? __mutex_lock+0x2ef/0xd70 [ 563.090819][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 563.095902][ C1] ? __pfx_tc_ctl_action+0x10/0x10 [ 563.101029][ C1] ? rtnetlink_rcv_msg+0x892/0x1170 [ 563.106275][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 563.111493][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 563.116988][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 563.122302][ C1] ? __pfx_validate_chain+0x10/0x10 [ 563.127541][ C1] ? __pfx_validate_chain+0x10/0x10 [ 563.132755][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 563.137736][ C1] ? mark_lock+0x9a/0x360 [ 563.142081][ C1] ? __pfx_validate_chain+0x10/0x10 [ 563.147320][ C1] ? __lock_acquire+0x1359/0x2000 [ 563.152377][ C1] ? mark_lock+0x9a/0x360 [ 563.156750][ C1] ? __lock_acquire+0x1359/0x2000 [ 563.161814][ C1] ? netlink_rcv_skb+0x1e3/0x430 [ 563.166789][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 563.172268][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.177612][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 563.182827][ C1] ? netlink_unicast+0x7ea/0x980 [ 563.187815][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 563.193118][ C1] ? __virt_addr_valid+0x183/0x520 [ 563.198278][ C1] ? __check_object_size+0x49c/0x900 [ 563.203580][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 563.208738][ C1] ? netlink_sendmsg+0x8db/0xcb0 [ 563.213708][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.219036][ C1] ? __import_iovec+0x536/0x820 [ 563.223928][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 563.228884][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 563.234206][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 563.239685][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.245008][ C1] ? __sock_sendmsg+0x221/0x270 [ 563.249891][ C1] ? ____sys_sendmsg+0x525/0x7d0 [ 563.254882][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.260202][ C1] ? __sys_sendmsg+0x2b0/0x3a0 [ 563.265012][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 563.270180][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 563.276210][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 563.282555][ C1] ? exc_page_fault+0x590/0x8c0 [ 563.287453][ C1] ? do_syscall_64+0xb6/0x230 [ 563.292145][ C1] ? do_syscall_64+0xf3/0x230 [ 563.296863][ C1] ? clear_bhb_loop+0x35/0x90 [ 563.301561][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.307681][ C1] [ 563.310708][ C1] DEBUG: waiting rtnl_mutex for 15884 jiffies. [ 563.316918][ C1] task:kworker/u8:0 state:D stack:23784 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 563.327161][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 563.333438][ C1] Call Trace: [ 563.336759][ C1] [ 563.339725][ C1] __schedule+0x17e8/0x4a20 [ 563.344313][ C1] ? __pfx___schedule+0x10/0x10 [ 563.349194][ C1] ? __pfx_lock_release+0x10/0x10 [ 563.354271][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 563.359762][ C1] ? kthread_data+0x52/0xd0 [ 563.364311][ C1] ? schedule+0x90/0x320 [ 563.368570][ C1] ? wq_worker_sleeping+0x66/0x240 [ 563.373697][ C1] ? schedule+0x90/0x320 [ 563.377977][ C1] schedule+0x14b/0x320 [ 563.382222][ C1] schedule_preempt_disabled+0x13/0x30 [ 563.387726][ C1] __mutex_lock+0x6a4/0xd70 [ 563.392256][ C1] ? __mutex_lock+0x527/0xd70 [ 563.396978][ C1] ? addrconf_verify_work+0x19/0x30 [ 563.402191][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 563.407255][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 563.413255][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 563.419626][ C1] ? process_scheduled_works+0x945/0x1830 [ 563.425384][ C1] ? rtnl_lock+0xe7/0x130 [ 563.429728][ C1] ? process_scheduled_works+0x945/0x1830 [ 563.435483][ C1] addrconf_verify_work+0x19/0x30 [ 563.440523][ C1] process_scheduled_works+0xa2c/0x1830 [ 563.446140][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 563.452146][ C1] ? assign_work+0x364/0x3d0 [ 563.456780][ C1] worker_thread+0x86d/0xd50 [ 563.461402][ C1] ? __kthread_parkme+0x169/0x1d0 [ 563.466472][ C1] ? __pfx_worker_thread+0x10/0x10 [ 563.471598][ C1] kthread+0x2f0/0x390 [ 563.475711][ C1] ? __pfx_worker_thread+0x10/0x10 [ 563.480839][ C1] ? __pfx_kthread+0x10/0x10 [ 563.485471][ C1] ret_from_fork+0x4b/0x80 [ 563.489908][ C1] ? __pfx_kthread+0x10/0x10 [ 563.494541][ C1] ret_from_fork_asm+0x1a/0x30 [ 563.499342][ C1] [ 563.502370][ C1] [ 563.502370][ C1] Showing all locks held in the system: [ 563.510108][ C1] 3 locks held by kworker/u8:0/11: [ 563.515247][ C1] #0: ffff8880298d2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 563.526890][ C1] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 563.540612][ C1] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 563.550168][ C1] 2 locks held by kworker/u8:2/35: [ 563.555308][ C1] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 563.567038][ C1] #1: ffffc90000ab7d00 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 563.579844][ C1] 2 locks held by getty/4852: [ 563.584551][ C1] #0: ffff88807b4780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 563.594370][ C1] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 563.604535][ C1] 3 locks held by kworker/0:3/5077: [ 563.609737][ C1] 1 lock held by syz-executor310/5107: [ 563.615222][ C1] [ 563.617553][ C1] ============================================= [ 563.617553][ C1] [ 564.703892][ C0] DEBUG: holding rtnl_mutex for 21955 jiffies. [ 564.710067][ C0] task:syz-executor310 state:R running task stack:22384 pid:5107 tgid:5107 ppid:5106 flags:0x00004006 [ 564.721865][ C0] Call Trace: [ 564.725196][ C0] [ 564.728051][ C0] sched_show_task+0x578/0x740 [ 564.732831][ C0] ? report_rtnl_holders+0x183/0x2d0 [ 564.738167][ C0] ? __pfx__printk+0x10/0x10 [ 564.742781][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 564.748112][ C0] report_rtnl_holders+0x1ba/0x2d0 [ 564.753241][ C0] ? report_rtnl_holders+0x20/0x2d0 [ 564.758479][ C0] call_timer_fn+0x18e/0x650 [ 564.763087][ C0] ? call_timer_fn+0xc0/0x650 [ 564.767797][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 564.773446][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 564.778599][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 564.784276][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 564.789935][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 564.795627][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 564.800874][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 564.806230][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 564.811891][ C0] __run_timer_base+0x66a/0x8e0 [ 564.816907][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 564.822306][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 564.827544][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 564.832763][ C0] tmigr_handle_remote+0xb8e/0x1700 [ 564.838021][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 564.843073][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 564.848743][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 564.854169][ C0] handle_softirqs+0x2c4/0x970 [ 564.858924][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 564.863679][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 564.869038][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 564.874289][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 564.878873][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 564.884110][ C0] irq_exit_rcu+0x9/0x30 [ 564.888367][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 564.894042][ C0] [ 564.896982][ C0] [ 564.899900][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 564.905918][ C0] RIP: 0010:lock_release+0x630/0x9f0 [ 564.911224][ C0] Code: 3c 3b 00 74 08 4c 89 f7 e8 8d ed 89 00 f6 84 24 91 00 00 00 02 75 77 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 4b c7 44 27 08 00 00 00 00 65 48 8b 04 25 [ 564.930904][ C0] RSP: 0018:ffffc900036a65c0 EFLAGS: 00000206 [ 564.937016][ C0] RAX: 0000000000000001 RBX: 1ffff920006d4cca RCX: ffffc900036a6603 [ 564.945023][ C0] RDX: 0000000000000001 RSI: ffffffff8bcad320 RDI: ffffffff8c200760 [ 564.953094][ C0] RBP: ffffc900036a66f0 R08: ffffffff8fae04af R09: 1ffffffff1f5c095 [ 564.961105][ C0] R10: dffffc0000000000 R11: fffffbfff1f5c096 R12: 1ffff920006d4cc4 [ 564.969121][ C0] R13: 0000000000000246 R14: ffffc900036a6650 R15: dffffc0000000000 [ 564.977148][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 564.982197][ C0] ? tcf_idr_check_alloc+0x110/0x900 [ 564.987603][ C0] ? __pfx_lock_release+0x10/0x10 [ 564.992669][ C0] ? tcf_idr_check_alloc+0x110/0x900 [ 564.998010][ C0] ? tcf_idr_check_alloc+0x141/0x900 [ 565.003324][ C0] ? tcf_idr_check_alloc+0x110/0x900 [ 565.008664][ C0] tcf_idr_check_alloc+0xff/0x900 [ 565.013714][ C0] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 565.019392][ C0] ? __nla_parse+0x40/0x60 [ 565.023829][ C0] tcf_police_init+0x29b/0x17c0 [ 565.028748][ C0] ? __sock_sendmsg+0x221/0x270 [ 565.033612][ C0] ? ____sys_sendmsg+0x525/0x7d0 [ 565.038600][ C0] ? __pfx_tcf_police_init+0x10/0x10 [ 565.043972][ C0] ? nla_memcpy+0x5d/0xc0 [ 565.048294][ C0] ? __asan_memcpy+0x40/0x70 [ 565.052872][ C0] ? __pfx_tcf_police_init+0x10/0x10 [ 565.058188][ C0] tcf_action_init_1+0x5d7/0x890 [ 565.063149][ C0] ? __pfx_tcf_action_init_1+0x10/0x10 [ 565.068676][ C0] ? tcf_action_fill_size+0x1e/0x2d0 [ 565.074028][ C0] tcf_action_init+0x2e4/0x940 [ 565.078801][ C0] ? __pfx_tcf_action_init+0x10/0x10 [ 565.084165][ C0] ? apparmor_capable+0x138/0x1b0 [ 565.089242][ C0] tc_ctl_action+0x47d/0xcf0 [ 565.093826][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 565.099074][ C0] ? __pfx_tc_ctl_action+0x10/0x10 [ 565.104253][ C0] ? trace_contention_end+0x3c/0x120 [ 565.109530][ C0] ? __mutex_lock+0x2ef/0xd70 [ 565.114253][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 565.119307][ C0] ? __pfx_tc_ctl_action+0x10/0x10 [ 565.124458][ C0] rtnetlink_rcv_msg+0x892/0x1170 [ 565.129509][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 565.134749][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 565.140261][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 565.145593][ C0] ? __pfx_validate_chain+0x10/0x10 [ 565.150816][ C0] ? __pfx_validate_chain+0x10/0x10 [ 565.156058][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 565.161012][ C0] ? mark_lock+0x9a/0x360 [ 565.165408][ C0] ? __pfx_validate_chain+0x10/0x10 [ 565.170624][ C0] ? __lock_acquire+0x1359/0x2000 [ 565.175784][ C0] ? mark_lock+0x9a/0x360 [ 565.180131][ C0] ? __lock_acquire+0x1359/0x2000 [ 565.185209][ C0] netlink_rcv_skb+0x1e3/0x430 [ 565.189993][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 565.195514][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 565.200829][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 565.206067][ C0] netlink_unicast+0x7ea/0x980 [ 565.210852][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 565.216171][ C0] ? __virt_addr_valid+0x183/0x520 [ 565.221302][ C0] ? __check_object_size+0x49c/0x900 [ 565.226730][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 565.231861][ C0] netlink_sendmsg+0x8db/0xcb0 [ 565.236684][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.241987][ C0] ? __import_iovec+0x536/0x820 [ 565.246872][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 565.251826][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 565.257147][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 565.262630][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.267951][ C0] __sock_sendmsg+0x221/0x270 [ 565.272652][ C0] ____sys_sendmsg+0x525/0x7d0 [ 565.277464][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.282775][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 565.287403][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 565.292545][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 565.298570][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 565.304945][ C0] ? exc_page_fault+0x590/0x8c0 [ 565.309788][ C0] ? do_syscall_64+0xb6/0x230 [ 565.314490][ C0] do_syscall_64+0xf3/0x230 [ 565.319007][ C0] ? clear_bhb_loop+0x35/0x90 [ 565.323669][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.329590][ C0] RIP: 0033:0x7f8da6f14df9 [ 565.334078][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 565.353749][ C0] RSP: 002b:00007fffaea36f98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.362224][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8da6f14df9 [ 565.370232][ C0] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 565.378247][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006 [ 565.386258][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.394269][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 565.402238][ C0] [ 565.405282][ C0] DEBUG: waiting rtnl_mutex for 16094 jiffies. [ 565.411438][ C0] task:kworker/u8:0 state:D stack:23784 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 565.421637][ C0] Workqueue: ipv6_addrconf addrconf_verify_work [ 565.427925][ C0] Call Trace: [ 565.431217][ C0] [ 565.434180][ C0] __schedule+0x17e8/0x4a20 [ 565.438718][ C0] ? __pfx___schedule+0x10/0x10 [ 565.443557][ C0] ? __pfx_lock_release+0x10/0x10 [ 565.448618][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 565.454123][ C0] ? kthread_data+0x52/0xd0 [ 565.458618][ C0] ? schedule+0x90/0x320 [ 565.462843][ C0] ? wq_worker_sleeping+0x66/0x240 [ 565.467982][ C0] ? schedule+0x90/0x320 [ 565.472239][ C0] schedule+0x14b/0x320 [ 565.476433][ C0] schedule_preempt_disabled+0x13/0x30 [ 565.481911][ C0] __mutex_lock+0x6a4/0xd70 [ 565.486456][ C0] ? __mutex_lock+0x527/0xd70 [ 565.491150][ C0] ? addrconf_verify_work+0x19/0x30 [ 565.496387][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 565.501427][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 565.507444][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 565.513790][ C0] ? process_scheduled_works+0x945/0x1830 [ 565.519544][ C0] ? rtnl_lock+0xe7/0x130 [ 565.523974][ C0] ? process_scheduled_works+0x945/0x1830 [ 565.529682][ C0] addrconf_verify_work+0x19/0x30 [ 565.534732][ C0] process_scheduled_works+0xa2c/0x1830 [ 565.540308][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 565.546330][ C0] ? assign_work+0x364/0x3d0 [ 565.550942][ C0] worker_thread+0x86d/0xd50 [ 565.555584][ C0] ? __kthread_parkme+0x169/0x1d0 [ 565.560631][ C0] ? __pfx_worker_thread+0x10/0x10 [ 565.565774][ C0] kthread+0x2f0/0x390 [ 565.569860][ C0] ? __pfx_worker_thread+0x10/0x10 [ 565.575006][ C0] ? __pfx_kthread+0x10/0x10 [ 565.579621][ C0] ret_from_fork+0x4b/0x80 [ 565.584075][ C0] ? __pfx_kthread+0x10/0x10 [ 565.588686][ C0] ret_from_fork_asm+0x1a/0x30 [ 565.593447][ C0] [ 565.596515][ C0] [ 565.596515][ C0] Showing all locks held in the system: [ 565.604257][ C0] 3 locks held by kworker/u8:0/11: [ 565.609349][ C0] #0: ffff8880298d2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 565.620951][ C0] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 565.634674][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 565.644234][ C0] 2 locks held by getty/4852: [ 565.648912][ C0] #0: ffff88807b4780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 565.658696][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 565.668887][ C0] 4 locks held by syz-executor310/5107: [ 565.674456][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 565.684033][ C0] #1: ffffc900000079e0 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 565.694158][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 565.704001][ C0] #3: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 565.713844][ C0] [ 565.716221][ C0] ============================================= [ 565.716221][ C0] [ 566.783943][ C0] DEBUG: holding rtnl_mutex for 22163 jiffies. [ 566.790125][ C0] task:syz-executor310 state:R running task stack:22384 pid:5107 tgid:5107 ppid:5106 flags:0x0000400e [ 566.801900][ C0] Call Trace: [ 566.805242][ C0] [ 566.808116][ C0] sched_show_task+0x578/0x740 [ 566.812907][ C0] ? report_rtnl_holders+0x183/0x2d0 [ 566.818257][ C0] ? __pfx__printk+0x10/0x10 [ 566.822873][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 566.828216][ C0] report_rtnl_holders+0x1ba/0x2d0 [ 566.833371][ C0] ? report_rtnl_holders+0x20/0x2d0 [ 566.838624][ C0] call_timer_fn+0x18e/0x650 [ 566.843253][ C0] ? call_timer_fn+0xc0/0x650 [ 566.847999][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 566.853667][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 566.858843][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 566.864592][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 566.870237][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 566.875899][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.881112][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 566.886396][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 566.892078][ C0] __run_timer_base+0x66a/0x8e0 [ 566.897037][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 566.902453][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.907709][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 566.912932][ C0] tmigr_handle_remote+0xb8e/0x1700 [ 566.918187][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 566.924610][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 566.930252][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 566.935718][ C0] handle_softirqs+0x2c4/0x970 [ 566.940528][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 566.945343][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 566.950658][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 566.955906][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 566.960514][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 566.965760][ C0] irq_exit_rcu+0x9/0x30 [ 566.970029][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 566.975717][ C0] [ 566.978701][ C0] [ 566.981625][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 566.987650][ C0] RIP: 0010:__rcu_read_unlock+0x3e/0x110 [ 566.993355][ C0] Code: 00 fc ff df 65 4c 8b 34 25 00 d6 03 00 4d 8d ae 44 04 00 00 4c 89 eb 48 c1 eb 03 42 0f b6 04 23 84 c0 75 6b 41 8b 6d 00 ff cd <42> 0f b6 04 23 84 c0 75 76 41 89 6d 00 85 ed 75 21 4d 8d be 48 04 [ 567.013005][ C0] RSP: 0018:ffffc900036a66c8 EFLAGS: 00000246 [ 567.019131][ C0] RAX: 0000000000000000 RBX: 1ffff11003074808 RCX: ffffc900036a6603 [ 567.027145][ C0] RDX: 0000000000000001 RSI: ffffffff8bcad320 RDI: ffffffff8c200760 [ 567.035168][ C0] RBP: 0000000000000000 R08: ffffffff8fae04af R09: 1ffffffff1f5c095 [ 567.043138][ C0] R10: dffffc0000000000 R11: fffffbfff1f5c096 R12: dffffc0000000000 [ 567.051137][ C0] R13: ffff8880183a4044 R14: ffff8880183a3c00 R15: dffffc0000000000 [ 567.059205][ C0] ? tcf_idr_check_alloc+0x110/0x900 [ 567.064532][ C0] tcf_idr_check_alloc+0x104/0x900 [ 567.069667][ C0] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 567.075338][ C0] ? __nla_parse+0x40/0x60 [ 567.079781][ C0] tcf_police_init+0x29b/0x17c0 [ 567.084667][ C0] ? __sock_sendmsg+0x221/0x270 [ 567.089536][ C0] ? ____sys_sendmsg+0x525/0x7d0 [ 567.094531][ C0] ? __pfx_tcf_police_init+0x10/0x10 [ 567.099845][ C0] ? nla_memcpy+0x5d/0xc0 [ 567.104212][ C0] ? __asan_memcpy+0x40/0x70 [ 567.108819][ C0] ? __pfx_tcf_police_init+0x10/0x10 [ 567.114141][ C0] tcf_action_init_1+0x5d7/0x890 [ 567.119096][ C0] ? __pfx_tcf_action_init_1+0x10/0x10 [ 567.124614][ C0] ? tcf_action_fill_size+0x1e/0x2d0 [ 567.129916][ C0] tcf_action_init+0x2e4/0x940 [ 567.134728][ C0] ? __pfx_tcf_action_init+0x10/0x10 [ 567.140057][ C0] ? apparmor_capable+0x138/0x1b0 [ 567.145123][ C0] tc_ctl_action+0x47d/0xcf0 [ 567.149729][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 567.154972][ C0] ? __pfx_tc_ctl_action+0x10/0x10 [ 567.160110][ C0] ? trace_contention_end+0x3c/0x120 [ 567.165431][ C0] ? __mutex_lock+0x2ef/0xd70 [ 567.170137][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 567.175213][ C0] ? __pfx_tc_ctl_action+0x10/0x10 [ 567.180336][ C0] rtnetlink_rcv_msg+0x892/0x1170 [ 567.185404][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 567.190655][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 567.196149][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 567.201465][ C0] ? __pfx_validate_chain+0x10/0x10 [ 567.206700][ C0] ? __pfx_validate_chain+0x10/0x10 [ 567.211917][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 567.216900][ C0] ? mark_lock+0x9a/0x360 [ 567.221244][ C0] ? __pfx_validate_chain+0x10/0x10 [ 567.226483][ C0] ? __lock_acquire+0x1359/0x2000 [ 567.231529][ C0] ? mark_lock+0x9a/0x360 [ 567.235902][ C0] ? __lock_acquire+0x1359/0x2000 [ 567.240949][ C0] netlink_rcv_skb+0x1e3/0x430 [ 567.245750][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 567.251227][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 567.256569][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 567.261787][ C0] netlink_unicast+0x7ea/0x980 [ 567.266624][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 567.271919][ C0] ? __virt_addr_valid+0x183/0x520 [ 567.277067][ C0] ? __check_object_size+0x49c/0x900 [ 567.282368][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 567.287515][ C0] netlink_sendmsg+0x8db/0xcb0 [ 567.292301][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.297619][ C0] ? __import_iovec+0x536/0x820 [ 567.302481][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 567.307454][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 567.312753][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 567.318245][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.323544][ C0] __sock_sendmsg+0x221/0x270 [ 567.328260][ C0] ____sys_sendmsg+0x525/0x7d0 [ 567.333046][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 567.338399][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 567.343029][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 567.348203][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 567.354248][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 567.360571][ C0] ? exc_page_fault+0x590/0x8c0 [ 567.365459][ C0] ? do_syscall_64+0xb6/0x230 [ 567.370149][ C0] do_syscall_64+0xf3/0x230 [ 567.374682][ C0] ? clear_bhb_loop+0x35/0x90 [ 567.379379][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.385306][ C0] RIP: 0033:0x7f8da6f14df9 [ 567.389731][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 567.409369][ C0] RSP: 002b:00007fffaea36f98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.417868][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8da6f14df9 [ 567.425900][ C0] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 567.433936][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006 [ 567.441896][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.449889][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 567.457923][ C0] [ 567.460955][ C0] DEBUG: waiting rtnl_mutex for 16299 jiffies. [ 567.467127][ C0] task:kworker/u8:0 state:D stack:23784 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 567.477347][ C0] Workqueue: ipv6_addrconf addrconf_verify_work [ 567.483595][ C0] Call Trace: [ 567.486901][ C0] [ 567.489840][ C0] __schedule+0x17e8/0x4a20 [ 567.494495][ C0] ? __pfx___schedule+0x10/0x10 [ 567.499357][ C0] ? __pfx_lock_release+0x10/0x10 [ 567.504421][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 567.509898][ C0] ? kthread_data+0x52/0xd0 [ 567.514451][ C0] ? schedule+0x90/0x320 [ 567.518706][ C0] ? wq_worker_sleeping+0x66/0x240 [ 567.523802][ C0] ? schedule+0x90/0x320 [ 567.528072][ C0] schedule+0x14b/0x320 [ 567.532246][ C0] schedule_preempt_disabled+0x13/0x30 [ 567.537736][ C0] __mutex_lock+0x6a4/0xd70 [ 567.542257][ C0] ? __mutex_lock+0x527/0xd70 [ 567.546969][ C0] ? addrconf_verify_work+0x19/0x30 [ 567.552177][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 567.557232][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 567.563228][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 567.569594][ C0] ? process_scheduled_works+0x945/0x1830 [ 567.575370][ C0] ? rtnl_lock+0xe7/0x130 [ 567.579698][ C0] ? process_scheduled_works+0x945/0x1830 [ 567.585443][ C0] addrconf_verify_work+0x19/0x30 [ 567.590485][ C0] process_scheduled_works+0xa2c/0x1830 [ 567.596179][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 567.602178][ C0] ? assign_work+0x364/0x3d0 [ 567.606805][ C0] worker_thread+0x86d/0xd50 [ 567.611421][ C0] ? __kthread_parkme+0x169/0x1d0 [ 567.616482][ C0] ? __pfx_worker_thread+0x10/0x10 [ 567.621605][ C0] kthread+0x2f0/0x390 [ 567.625708][ C0] ? __pfx_worker_thread+0x10/0x10 [ 567.630830][ C0] ? __pfx_kthread+0x10/0x10 [ 567.635460][ C0] ret_from_fork+0x4b/0x80 [ 567.639888][ C0] ? __pfx_kthread+0x10/0x10 [ 567.644509][ C0] ret_from_fork_asm+0x1a/0x30 [ 567.649303][ C0] [ 567.652395][ C0] [ 567.652395][ C0] Showing all locks held in the system: [ 567.660156][ C0] 3 locks held by kworker/u8:0/11: [ 567.665312][ C0] #0: ffff8880298d2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 567.676924][ C0] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 567.690655][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 567.700220][ C0] 2 locks held by getty/4852: [ 567.704941][ C0] #0: ffff88807b4780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 567.714728][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 567.724901][ C0] 4 locks held by syz-executor310/5107: [ 567.730435][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 567.739948][ C0] #1: ffffc900000079e0 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 567.750117][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 567.759909][ C0] #3: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 567.769817][ C0] [ 567.772135][ C0] ============================================= [ 567.772135][ C0] [ 568.783938][ C0] DEBUG: holding rtnl_mutex for 22363 jiffies. [ 568.790120][ C0] task:syz-executor310 state:R running task stack:22384 pid:5107 tgid:5107 ppid:5106 flags:0x0000400e [ 568.801910][ C0] Call Trace: [ 568.805237][ C0] [ 568.808093][ C0] sched_show_task+0x578/0x740 [ 568.812878][ C0] ? report_rtnl_holders+0x183/0x2d0 [ 568.818216][ C0] ? __pfx__printk+0x10/0x10 [ 568.822829][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 568.828165][ C0] report_rtnl_holders+0x1ba/0x2d0 [ 568.833296][ C0] ? report_rtnl_holders+0x20/0x2d0 [ 568.838540][ C0] call_timer_fn+0x18e/0x650 [ 568.843169][ C0] ? call_timer_fn+0xc0/0x650 [ 568.847917][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 568.853584][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 568.858751][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 568.864433][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 568.870062][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 568.875730][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 568.880948][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 568.886189][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 568.891839][ C0] __run_timer_base+0x66a/0x8e0 [ 568.896744][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 568.902133][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 568.907367][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 568.912585][ C0] tmigr_handle_remote+0xb8e/0x1700 [ 568.917821][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 568.924206][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 568.929860][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 568.935286][ C0] handle_softirqs+0x2c4/0x970 [ 568.940064][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 568.944864][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 568.950164][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 568.955401][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 568.960005][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 568.965251][ C0] irq_exit_rcu+0x9/0x30 [ 568.969525][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 568.975196][ C0] [ 568.978139][ C0] [ 568.981057][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 568.987070][ C0] RIP: 0010:check_preemption_disabled+0x4f/0x120 [ 568.993412][ C0] Code: 79 74 a9 ff ff ff 7f 74 26 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 0f 85 ce 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e 41 5f cc cc cc cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 [ 569.013055][ C0] RSP: 0018:ffffc900036a66d8 EFLAGS: 00000286 [ 569.019179][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff8880183a3c00 [ 569.027190][ C0] RDX: ffff8880183a3c00 RSI: ffffffff8c200740 RDI: ffffffff8c200700 [ 569.035206][ C0] RBP: ffffc900036a67d0 R08: ffffffff897eab91 R09: 1ffffffff25f96e8 [ 569.043168][ C0] R10: dffffc0000000000 R11: fffffbfff25f96e9 R12: dffffc0000000000 [ 569.051174][ C0] R13: ffffffff897eab60 R14: ffff88802946a090 R15: dffffc0000000000 [ 569.059185][ C0] ? tcf_idr_check_alloc+0x110/0x900 [ 569.064509][ C0] ? tcf_idr_check_alloc+0x141/0x900 [ 569.069816][ C0] rcu_is_watching+0x15/0xb0 [ 569.074444][ C0] tcf_idr_check_alloc+0x14a/0x900 [ 569.079573][ C0] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 569.085264][ C0] ? __nla_parse+0x40/0x60 [ 569.089723][ C0] tcf_police_init+0x29b/0x17c0 [ 569.094614][ C0] ? __sock_sendmsg+0x221/0x270 [ 569.099483][ C0] ? ____sys_sendmsg+0x525/0x7d0 [ 569.104469][ C0] ? __pfx_tcf_police_init+0x10/0x10 [ 569.109784][ C0] ? nla_memcpy+0x5d/0xc0 [ 569.114150][ C0] ? __asan_memcpy+0x40/0x70 [ 569.118758][ C0] ? __pfx_tcf_police_init+0x10/0x10 [ 569.124110][ C0] tcf_action_init_1+0x5d7/0x890 [ 569.129074][ C0] ? __pfx_tcf_action_init_1+0x10/0x10 [ 569.134592][ C0] ? tcf_action_fill_size+0x1e/0x2d0 [ 569.139892][ C0] tcf_action_init+0x2e4/0x940 [ 569.144726][ C0] ? __pfx_tcf_action_init+0x10/0x10 [ 569.150075][ C0] ? apparmor_capable+0x138/0x1b0 [ 569.155158][ C0] tc_ctl_action+0x47d/0xcf0 [ 569.159765][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 569.165010][ C0] ? __pfx_tc_ctl_action+0x10/0x10 [ 569.170153][ C0] ? trace_contention_end+0x3c/0x120 [ 569.175477][ C0] ? __mutex_lock+0x2ef/0xd70 [ 569.180182][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 569.185266][ C0] ? __pfx_tc_ctl_action+0x10/0x10 [ 569.190390][ C0] rtnetlink_rcv_msg+0x892/0x1170 [ 569.195456][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 569.200673][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 569.206164][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 569.211474][ C0] ? __pfx_validate_chain+0x10/0x10 [ 569.216738][ C0] ? __pfx_validate_chain+0x10/0x10 [ 569.221964][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 569.226953][ C0] ? mark_lock+0x9a/0x360 [ 569.231303][ C0] ? __pfx_validate_chain+0x10/0x10 [ 569.236548][ C0] ? __lock_acquire+0x1359/0x2000 [ 569.241597][ C0] ? mark_lock+0x9a/0x360 [ 569.245973][ C0] ? __lock_acquire+0x1359/0x2000 [ 569.251024][ C0] netlink_rcv_skb+0x1e3/0x430 [ 569.255827][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 569.261317][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 569.266694][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 569.271907][ C0] netlink_unicast+0x7ea/0x980 [ 569.276719][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 569.282017][ C0] ? __virt_addr_valid+0x183/0x520 [ 569.287165][ C0] ? __check_object_size+0x49c/0x900 [ 569.292468][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 569.297615][ C0] netlink_sendmsg+0x8db/0xcb0 [ 569.302403][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.307722][ C0] ? __import_iovec+0x536/0x820 [ 569.312589][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 569.317561][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 569.322862][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 569.328355][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.333652][ C0] __sock_sendmsg+0x221/0x270 [ 569.338369][ C0] ____sys_sendmsg+0x525/0x7d0 [ 569.343153][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.348487][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 569.353097][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 569.358278][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 569.364307][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 569.370620][ C0] ? exc_page_fault+0x590/0x8c0 [ 569.375500][ C0] ? do_syscall_64+0xb6/0x230 [ 569.380192][ C0] do_syscall_64+0xf3/0x230 [ 569.384729][ C0] ? clear_bhb_loop+0x35/0x90 [ 569.389422][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.395343][ C0] RIP: 0033:0x7f8da6f14df9 [ 569.399769][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 569.419406][ C0] RSP: 002b:00007fffaea36f98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.427879][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8da6f14df9 [ 569.435878][ C0] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 569.443897][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006 [ 569.451868][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.459864][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 569.467881][ C0] [ 569.470889][ C0] DEBUG: waiting rtnl_mutex for 16500 jiffies. [ 569.477057][ C0] task:kworker/u8:0 state:D stack:23784 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 569.487283][ C0] Workqueue: ipv6_addrconf addrconf_verify_work [ 569.493516][ C0] Call Trace: [ 569.496820][ C0] [ 569.499762][ C0] __schedule+0x17e8/0x4a20 [ 569.504319][ C0] ? __pfx___schedule+0x10/0x10 [ 569.509185][ C0] ? __pfx_lock_release+0x10/0x10 [ 569.514263][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 569.519739][ C0] ? kthread_data+0x52/0xd0 [ 569.524272][ C0] ? schedule+0x90/0x320 [ 569.528530][ C0] ? wq_worker_sleeping+0x66/0x240 [ 569.533630][ C0] ? schedule+0x90/0x320 [ 569.537906][ C0] schedule+0x14b/0x320 [ 569.542080][ C0] schedule_preempt_disabled+0x13/0x30 [ 569.547576][ C0] __mutex_lock+0x6a4/0xd70 [ 569.552099][ C0] ? __mutex_lock+0x527/0xd70 [ 569.556814][ C0] ? addrconf_verify_work+0x19/0x30 [ 569.562027][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 569.567084][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 569.573082][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 569.579449][ C0] ? process_scheduled_works+0x945/0x1830 [ 569.585245][ C0] ? rtnl_lock+0xe7/0x130 [ 569.589565][ C0] ? process_scheduled_works+0x945/0x1830 [ 569.595309][ C0] addrconf_verify_work+0x19/0x30 [ 569.600347][ C0] process_scheduled_works+0xa2c/0x1830 [ 569.605953][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 569.611958][ C0] ? assign_work+0x364/0x3d0 [ 569.616588][ C0] worker_thread+0x86d/0xd50 [ 569.621214][ C0] ? __kthread_parkme+0x169/0x1d0 [ 569.626280][ C0] ? __pfx_worker_thread+0x10/0x10 [ 569.631413][ C0] kthread+0x2f0/0x390 [ 569.635528][ C0] ? __pfx_worker_thread+0x10/0x10 [ 569.640660][ C0] ? __pfx_kthread+0x10/0x10 [ 569.645291][ C0] ret_from_fork+0x4b/0x80 [ 569.649729][ C0] ? __pfx_kthread+0x10/0x10 [ 569.654359][ C0] ret_from_fork_asm+0x1a/0x30 [ 569.659153][ C0] [ 569.662158][ C0] [ 569.662158][ C0] Showing all locks held in the system: [ 569.669896][ C0] 3 locks held by kworker/u8:0/11: [ 569.675046][ C0] #0: ffff8880298d2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 569.686649][ C0] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 569.700366][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 569.709922][ C0] 2 locks held by getty/4852: [ 569.714629][ C0] #0: ffff88807b4780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 569.724411][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 569.734589][ C0] 5 locks held by syz-executor310/5107: [ 569.740115][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 569.749636][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: tcf_idr_check_alloc+0x110/0x900 [ 569.759529][ C0] #2: ffffc900000079e0 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 569.769658][ C0] #3: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 569.779472][ C0] #4: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 569.789338][ C0] [ 569.791663][ C0] ============================================= [ 569.791663][ C0] [ 570.863934][ C0] DEBUG: holding rtnl_mutex for 22571 jiffies. [ 570.870112][ C0] task:syz-executor310 state:R running task stack:22384 pid:5107 tgid:5107 ppid:5106 flags:0x0000400e [ 570.881874][ C0] Call Trace: [ 570.885215][ C0] [ 570.888093][ C0] sched_show_task+0x578/0x740 [ 570.892885][ C0] ? report_rtnl_holders+0x183/0x2d0 [ 570.898227][ C0] ? __pfx__printk+0x10/0x10 [ 570.902840][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 570.908202][ C0] report_rtnl_holders+0x1ba/0x2d0 [ 570.913335][ C0] ? report_rtnl_holders+0x20/0x2d0 [ 570.918580][ C0] call_timer_fn+0x18e/0x650 [ 570.923190][ C0] ? call_timer_fn+0xc0/0x650 [ 570.927909][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 570.933558][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 570.938714][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 570.944415][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 570.950079][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 570.955741][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 570.960960][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 570.966193][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 570.971845][ C0] __run_timer_base+0x66a/0x8e0 [ 570.976748][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 570.982146][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 570.987386][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 570.992636][ C0] tmigr_handle_remote+0xb8e/0x1700 [ 570.997880][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 571.004299][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 571.009933][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 571.015360][ C0] handle_softirqs+0x2c4/0x970 [ 571.020153][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 571.024965][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 571.030271][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 571.035516][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 571.040125][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 571.045368][ C0] irq_exit_rcu+0x9/0x30 [ 571.049623][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 571.055330][ C0] [ 571.058277][ C0] [ 571.061219][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 571.067252][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 571.072583][ C0] Code: 2b 00 74 08 4c 89 f7 e8 1a 18 8a 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 571.092239][ C0] RSP: 0018:ffffc900036a65a0 EFLAGS: 00000206 [ 571.098371][ C0] RAX: 0000000000000001 RBX: 1ffff920006d4cc0 RCX: 0337f8dd78d00f00 [ 571.106384][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcad320 RDI: ffffffff8c200760 [ 571.114412][ C0] RBP: ffffc900036a66e8 R08: ffffffff92fcb747 R09: 1ffffffff25f96e8 [ 571.122384][ C0] R10: dffffc0000000000 R11: fffffbfff25f96e9 R12: 1ffff920006d4cbc [ 571.130389][ C0] R13: dffffc0000000000 R14: ffffc900036a6600 R15: 0000000000000246 [ 571.138427][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 571.143447][ C0] ? tcf_idr_check_alloc+0x110/0x900 [ 571.148784][ C0] ? __pfx_lock_release+0x10/0x10 [ 571.153825][ C0] ? tcf_idr_check_alloc+0x110/0x900 [ 571.159174][ C0] ? tcf_idr_check_alloc+0x1fa/0x900 [ 571.164517][ C0] ? tcf_idr_check_alloc+0x213/0x900 [ 571.169803][ C0] ? tcf_idr_check_alloc+0x110/0x900 [ 571.175118][ C0] tcf_idr_check_alloc+0x12d/0x900 [ 571.180240][ C0] ? tcf_idr_check_alloc+0x110/0x900 [ 571.185565][ C0] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 571.191242][ C0] ? __nla_parse+0x40/0x60 [ 571.195696][ C0] tcf_police_init+0x29b/0x17c0 [ 571.200563][ C0] ? __sock_sendmsg+0x221/0x270 [ 571.205450][ C0] ? ____sys_sendmsg+0x525/0x7d0 [ 571.210411][ C0] ? __pfx_tcf_police_init+0x10/0x10 [ 571.215754][ C0] ? nla_memcpy+0x5d/0xc0 [ 571.220099][ C0] ? __asan_memcpy+0x40/0x70 [ 571.224727][ C0] ? __pfx_tcf_police_init+0x10/0x10 [ 571.230030][ C0] tcf_action_init_1+0x5d7/0x890 [ 571.235017][ C0] ? __pfx_tcf_action_init_1+0x10/0x10 [ 571.240506][ C0] ? tcf_action_fill_size+0x1e/0x2d0 [ 571.245825][ C0] tcf_action_init+0x2e4/0x940 [ 571.250616][ C0] ? __pfx_tcf_action_init+0x10/0x10 [ 571.255995][ C0] ? apparmor_capable+0x138/0x1b0 [ 571.261044][ C0] tc_ctl_action+0x47d/0xcf0 [ 571.265805][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 571.271045][ C0] ? __pfx_tc_ctl_action+0x10/0x10 [ 571.276230][ C0] ? trace_contention_end+0x3c/0x120 [ 571.281535][ C0] ? __mutex_lock+0x2ef/0xd70 [ 571.286263][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 571.291314][ C0] ? __pfx_tc_ctl_action+0x10/0x10 [ 571.296459][ C0] rtnetlink_rcv_msg+0x892/0x1170 [ 571.301508][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 571.306744][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 571.312221][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 571.317549][ C0] ? __pfx_validate_chain+0x10/0x10 [ 571.322797][ C0] ? __pfx_validate_chain+0x10/0x10 [ 571.328039][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 571.332993][ C0] ? mark_lock+0x9a/0x360 [ 571.337385][ C0] ? __pfx_validate_chain+0x10/0x10 [ 571.342690][ C0] ? __lock_acquire+0x1359/0x2000 [ 571.347793][ C0] ? mark_lock+0x9a/0x360 [ 571.352138][ C0] ? __lock_acquire+0x1359/0x2000 [ 571.357221][ C0] netlink_rcv_skb+0x1e3/0x430 [ 571.362002][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 571.367525][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 571.372866][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 571.378127][ C0] netlink_unicast+0x7ea/0x980 [ 571.382909][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 571.388228][ C0] ? __virt_addr_valid+0x183/0x520 [ 571.393360][ C0] ? __check_object_size+0x49c/0x900 [ 571.398685][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 571.403813][ C0] netlink_sendmsg+0x8db/0xcb0 [ 571.408627][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.413979][ C0] ? __import_iovec+0x536/0x820 [ 571.418842][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 571.423850][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 571.429188][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 571.434684][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.439988][ C0] __sock_sendmsg+0x221/0x270 [ 571.444705][ C0] ____sys_sendmsg+0x525/0x7d0 [ 571.449486][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.454819][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 571.459425][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 571.464604][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 571.470602][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 571.476988][ C0] ? exc_page_fault+0x590/0x8c0 [ 571.481857][ C0] ? do_syscall_64+0xb6/0x230 [ 571.486571][ C0] do_syscall_64+0xf3/0x230 [ 571.491082][ C0] ? clear_bhb_loop+0x35/0x90 [ 571.495798][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.501703][ C0] RIP: 0033:0x7f8da6f14df9 [ 571.506155][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 571.526253][ C0] RSP: 002b:00007fffaea36f98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.534705][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8da6f14df9 [ 571.542689][ C0] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 571.550693][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006 [ 571.558718][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.566727][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 571.574765][ C0] [ 571.577776][ C0] DEBUG: waiting rtnl_mutex for 16711 jiffies. [ 571.583956][ C0] task:kworker/u8:0 state:D stack:23784 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 571.594180][ C0] Workqueue: ipv6_addrconf addrconf_verify_work [ 571.600439][ C0] Call Trace: [ 571.603701][ C0] [ 571.606660][ C0] __schedule+0x17e8/0x4a20 [ 571.611193][ C0] ? __pfx___schedule+0x10/0x10 [ 571.616085][ C0] ? __pfx_lock_release+0x10/0x10 [ 571.621130][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 571.626648][ C0] ? kthread_data+0x52/0xd0 [ 571.631167][ C0] ? schedule+0x90/0x320 [ 571.635448][ C0] ? wq_worker_sleeping+0x66/0x240 [ 571.640576][ C0] ? schedule+0x90/0x320 [ 571.644853][ C0] schedule+0x14b/0x320 [ 571.649029][ C0] schedule_preempt_disabled+0x13/0x30 [ 571.654523][ C0] __mutex_lock+0x6a4/0xd70 [ 571.659047][ C0] ? __mutex_lock+0x527/0xd70 [ 571.663715][ C0] ? addrconf_verify_work+0x19/0x30 [ 571.668944][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 571.674048][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 571.680031][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 571.686388][ C0] ? process_scheduled_works+0x945/0x1830 [ 571.692123][ C0] ? rtnl_lock+0xe7/0x130 [ 571.696489][ C0] ? process_scheduled_works+0x945/0x1830 [ 571.702220][ C0] addrconf_verify_work+0x19/0x30 [ 571.707282][ C0] process_scheduled_works+0xa2c/0x1830 [ 571.712858][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 571.718880][ C0] ? assign_work+0x364/0x3d0 [ 571.723485][ C0] worker_thread+0x86d/0xd50 [ 571.728124][ C0] ? __kthread_parkme+0x169/0x1d0 [ 571.733163][ C0] ? __pfx_worker_thread+0x10/0x10 [ 571.738309][ C0] kthread+0x2f0/0x390 [ 571.742396][ C0] ? __pfx_worker_thread+0x10/0x10 [ 571.747541][ C0] ? __pfx_kthread+0x10/0x10 [ 571.752146][ C0] ret_from_fork+0x4b/0x80 [ 571.756596][ C0] ? __pfx_kthread+0x10/0x10 [ 571.761203][ C0] ret_from_fork_asm+0x1a/0x30 [ 571.766048][ C0] [ 571.769085][ C0] [ 571.769085][ C0] Showing all locks held in the system: [ 571.776823][ C0] 3 locks held by kworker/u8:0/11: [ 571.781938][ C0] #0: ffff8880298d2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 571.793545][ C0] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 571.807264][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 571.816832][ C0] 2 locks held by getty/4852: [ 571.821512][ C0] #0: ffff88807b4780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 571.831300][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 571.841479][ C0] 5 locks held by syz-executor310/5107: [ 571.847057][ C0] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 571.856621][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: tcf_idr_check_alloc+0x110/0x900 [ 571.866569][ C0] #2: ffffc900000079e0 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 571.876720][ C0] #3: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 571.886499][ C0] #4: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 571.896413][ C0] [ 571.898737][ C0] ============================================= [ 571.898737][ C0] [ 572.943907][ C1] DEBUG: holding rtnl_mutex for 22779 jiffies. [ 572.950104][ C1] task:syz-executor310 state:R running task stack:22384 pid:5107 tgid:5107 ppid:5106 flags:0x00004006 [ 572.961879][ C1] Call Trace: [ 572.965213][ C1] [ 572.968068][ C1] sched_show_task+0x578/0x740 [ 572.972875][ C1] ? report_rtnl_holders+0x183/0x2d0 [ 572.978238][ C1] ? __pfx__printk+0x10/0x10 [ 572.982845][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 572.988223][ C1] report_rtnl_holders+0x1ba/0x2d0 [ 572.993362][ C1] ? report_rtnl_holders+0x20/0x2d0 [ 572.998612][ C1] call_timer_fn+0x18e/0x650 [ 573.003228][ C1] ? call_timer_fn+0xc0/0x650 [ 573.007947][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 573.013598][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 573.018753][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 573.024452][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 573.030098][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 573.035763][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.040978][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 573.046216][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 573.051867][ C1] __run_timer_base+0x66a/0x8e0 [ 573.056767][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 573.062159][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 573.068574][ C1] run_timer_softirq+0xb7/0x170 [ 573.073457][ C1] handle_softirqs+0x2c4/0x970 [ 573.078280][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 573.083071][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 573.088429][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 573.093658][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 573.098304][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 573.103520][ C1] irq_exit_rcu+0x9/0x30 [ 573.107821][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 573.113517][ C1] [ 573.116492][ C1] [ 573.119433][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 573.125459][ C1] RIP: 0010:check_preemption_disabled+0x42/0x120 [ 573.131803][ C1] Code: 08 65 8b 1d fc 0e 79 74 65 8b 05 f1 0e 79 74 a9 ff ff ff 7f 74 26 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 0f 85 ce 00 00 00 <89> d8 48 83 c4 10 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 48 c7 04 24 [ 573.151476][ C1] RSP: 0018:ffffc900036a66a8 EFLAGS: 00000246 [ 573.157601][ C1] RAX: 0337f8dd78d00f00 RBX: 0000000000000001 RCX: ffff8880183a3c00 [ 573.165615][ C1] RDX: ffff8880183a3c00 RSI: ffffffff8c200740 RDI: ffffffff8c200700 [ 573.173596][ C1] RBP: ffffc900036a67d0 R08: ffffffff897eac4a R09: 1ffffffff25f96e8 [ 573.181604][ C1] R10: dffffc0000000000 R11: fffffbfff25f96e9 R12: dffffc0000000000 [ 573.189612][ C1] R13: ffffffff897eab60 R14: ffff88802946a090 R15: dffffc0000000000 [ 573.197649][ C1] ? tcf_idr_check_alloc+0x110/0x900 [ 573.202982][ C1] ? tcf_idr_check_alloc+0x1fa/0x900 [ 573.208316][ C1] rcu_is_watching+0x15/0xb0 [ 573.212922][ C1] tcf_idr_check_alloc+0x207/0x900 [ 573.218109][ C1] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 573.223765][ C1] ? __nla_parse+0x40/0x60 [ 573.228243][ C1] tcf_police_init+0x29b/0x17c0 [ 573.233133][ C1] ? __sock_sendmsg+0x221/0x270 [ 573.238044][ C1] ? ____sys_sendmsg+0x525/0x7d0 [ 573.243007][ C1] ? __pfx_tcf_police_init+0x10/0x10 [ 573.248350][ C1] ? nla_memcpy+0x5d/0xc0 [ 573.252694][ C1] ? __asan_memcpy+0x40/0x70 [ 573.257346][ C1] ? __pfx_tcf_police_init+0x10/0x10 [ 573.262669][ C1] tcf_action_init_1+0x5d7/0x890 [ 573.267655][ C1] ? __pfx_tcf_action_init_1+0x10/0x10 [ 573.273142][ C1] ? tcf_action_fill_size+0x1e/0x2d0 [ 573.278487][ C1] tcf_action_init+0x2e4/0x940 [ 573.283274][ C1] ? __pfx_tcf_action_init+0x10/0x10 [ 573.288675][ C1] ? apparmor_capable+0x138/0x1b0 [ 573.293728][ C1] tc_ctl_action+0x47d/0xcf0 [ 573.298358][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 573.303587][ C1] ? __pfx_tc_ctl_action+0x10/0x10 [ 573.308761][ C1] ? trace_contention_end+0x3c/0x120 [ 573.314107][ C1] ? __mutex_lock+0x2ef/0xd70 [ 573.318808][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 573.323822][ C1] ? __pfx_tc_ctl_action+0x10/0x10 [ 573.328963][ C1] rtnetlink_rcv_msg+0x892/0x1170 [ 573.334039][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 573.339238][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 573.344747][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 573.350070][ C1] ? __pfx_validate_chain+0x10/0x10 [ 573.355329][ C1] ? __pfx_validate_chain+0x10/0x10 [ 573.360541][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 573.365521][ C1] ? mark_lock+0x9a/0x360 [ 573.369867][ C1] ? __pfx_validate_chain+0x10/0x10 [ 573.375101][ C1] ? __lock_acquire+0x1359/0x2000 [ 573.380209][ C1] ? mark_lock+0x9a/0x360 [ 573.384593][ C1] ? __lock_acquire+0x1359/0x2000 [ 573.389643][ C1] netlink_rcv_skb+0x1e3/0x430 [ 573.394445][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 573.399930][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.405296][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 573.410513][ C1] netlink_unicast+0x7ea/0x980 [ 573.415338][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 573.420636][ C1] ? __virt_addr_valid+0x183/0x520 [ 573.425784][ C1] ? __check_object_size+0x49c/0x900 [ 573.431106][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 573.436260][ C1] netlink_sendmsg+0x8db/0xcb0 [ 573.441139][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.446461][ C1] ? __import_iovec+0x536/0x820 [ 573.451350][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 573.456342][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 573.461666][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 573.467158][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.472458][ C1] __sock_sendmsg+0x221/0x270 [ 573.477201][ C1] ____sys_sendmsg+0x525/0x7d0 [ 573.482003][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.487359][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 573.491983][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 573.497177][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 573.503180][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 573.509542][ C1] ? exc_page_fault+0x590/0x8c0 [ 573.514455][ C1] ? do_syscall_64+0xb6/0x230 [ 573.519135][ C1] do_syscall_64+0xf3/0x230 [ 573.523619][ C1] ? clear_bhb_loop+0x35/0x90 [ 573.528319][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.534262][ C1] RIP: 0033:0x7f8da6f14df9 [ 573.538680][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 573.558310][ C1] RSP: 002b:00007fffaea36f98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.566779][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8da6f14df9 [ 573.574791][ C1] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 573.582770][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006 [ 573.590772][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.598787][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 573.606841][ C1] [ 573.609878][ C1] DEBUG: waiting rtnl_mutex for 16914 jiffies. [ 573.616078][ C1] task:kworker/u8:0 state:D stack:23784 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 573.626306][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 573.632593][ C1] Call Trace: [ 573.635922][ C1] [ 573.638861][ C1] __schedule+0x17e8/0x4a20 [ 573.643399][ C1] ? __pfx___schedule+0x10/0x10 [ 573.648288][ C1] ? __pfx_lock_release+0x10/0x10 [ 573.653357][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 573.658860][ C1] ? kthread_data+0x52/0xd0 [ 573.663384][ C1] ? schedule+0x90/0x320 [ 573.667664][ C1] ? wq_worker_sleeping+0x66/0x240 [ 573.672792][ C1] ? schedule+0x90/0x320 [ 573.677072][ C1] schedule+0x14b/0x320 [ 573.681244][ C1] schedule_preempt_disabled+0x13/0x30 [ 573.686739][ C1] __mutex_lock+0x6a4/0xd70 [ 573.691266][ C1] ? __mutex_lock+0x527/0xd70 [ 573.696004][ C1] ? addrconf_verify_work+0x19/0x30 [ 573.701216][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 573.706272][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 573.712268][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 573.718635][ C1] ? process_scheduled_works+0x945/0x1830 [ 573.724413][ C1] ? rtnl_lock+0xe7/0x130 [ 573.728748][ C1] ? process_scheduled_works+0x945/0x1830 [ 573.734514][ C1] addrconf_verify_work+0x19/0x30 [ 573.739565][ C1] process_scheduled_works+0xa2c/0x1830 [ 573.745199][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 573.751197][ C1] ? assign_work+0x364/0x3d0 [ 573.755824][ C1] worker_thread+0x86d/0xd50 [ 573.760455][ C1] ? __kthread_parkme+0x169/0x1d0 [ 573.765547][ C1] ? __pfx_worker_thread+0x10/0x10 [ 573.770680][ C1] kthread+0x2f0/0x390 [ 573.774802][ C1] ? __pfx_worker_thread+0x10/0x10 [ 573.779933][ C1] ? __pfx_kthread+0x10/0x10 [ 573.784565][ C1] ret_from_fork+0x4b/0x80 [ 573.789003][ C1] ? __pfx_kthread+0x10/0x10 [ 573.793585][ C1] ret_from_fork_asm+0x1a/0x30 [ 573.798405][ C1] [ 573.801434][ C1] [ 573.801434][ C1] Showing all locks held in the system: [ 573.809188][ C1] 3 locks held by kworker/u8:0/11: [ 573.814351][ C1] #0: ffff8880298d2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 573.825975][ C1] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 573.839745][ C1] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 573.849344][ C1] 1 lock held by klogd/4533: [ 573.853993][ C1] #0: ffff8880b943e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 573.863972][ C1] 2 locks held by getty/4852: [ 573.868661][ C1] #0: ffff88807b4780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 573.878519][ C1] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 573.888702][ C1] 5 locks held by syz-executor310/5107: [ 573.894288][ C1] #0: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 573.903833][ C1] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: tcf_idr_check_alloc+0x110/0x900 [ 573.913729][ C1] #2: ffffc90000a18c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 573.923902][ C1] #3: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 573.933692][ C1] #4: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 573.943566][ C1] [ 573.945915][ C1] ============================================= [ 573.945915][ C1] [ 573.954697][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 573.962475][ T30] Not tainted 6.10.0-rc3-next-20240611-syzkaller #0 [ 573.969740][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.978485][ T30] task:kworker/u8:0 state:D stack:23784 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 573.988760][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 573.995128][ T30] Call Trace: [ 573.998419][ T30] [ 574.001362][ T30] __schedule+0x17e8/0x4a20 [ 574.005951][ T30] ? __pfx___schedule+0x10/0x10 [ 574.010841][ T30] ? __pfx_lock_release+0x10/0x10 [ 574.017785][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 574.023288][ T30] ? kthread_data+0x52/0xd0 [ 574.028210][ T30] ? schedule+0x90/0x320 [ 574.032481][ T30] ? wq_worker_sleeping+0x66/0x240 [ 574.038062][ T30] ? schedule+0x90/0x320 [ 574.042329][ T30] schedule+0x14b/0x320 [ 574.046924][ T30] schedule_preempt_disabled+0x13/0x30 [ 574.052404][ T30] __mutex_lock+0x6a4/0xd70 [ 574.057350][ T30] ? __mutex_lock+0x527/0xd70 [ 574.062051][ T30] ? addrconf_verify_work+0x19/0x30 [ 574.067671][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 574.072718][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 574.079154][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 574.085824][ T30] ? process_scheduled_works+0x945/0x1830 [ 574.091564][ T30] ? rtnl_lock+0xe7/0x130 [ 574.096342][ T30] ? process_scheduled_works+0x945/0x1830 [ 574.102079][ T30] addrconf_verify_work+0x19/0x30 [ 574.107693][ T30] process_scheduled_works+0xa2c/0x1830 [ 574.113286][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.119708][ T30] ? assign_work+0x364/0x3d0 [ 574.124572][ T30] worker_thread+0x86d/0xd50 [ 574.129196][ T30] ? __kthread_parkme+0x169/0x1d0 [ 574.134730][ T30] ? __pfx_worker_thread+0x10/0x10 [ 574.139866][ T30] kthread+0x2f0/0x390 [ 574.144348][ T30] ? __pfx_worker_thread+0x10/0x10 [ 574.149478][ T30] ? __pfx_kthread+0x10/0x10 [ 574.154571][ T30] ret_from_fork+0x4b/0x80 [ 574.159007][ T30] ? __pfx_kthread+0x10/0x10 [ 574.163696][ T30] ret_from_fork_asm+0x1a/0x30 [ 574.169181][ T30] [ 574.172325][ T30] [ 574.172325][ T30] Showing all locks held in the system: [ 574.180783][ T30] 3 locks held by kworker/u8:0/11: [ 574.186155][ T30] #0: ffff8880298d2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 574.198050][ T30] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 574.212102][ T30] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 574.221912][ T30] 1 lock held by khungtaskd/30: [ 574.227022][ T30] #0: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 574.237211][ T30] 2 locks held by getty/4852: [ 574.241900][ T30] #0: ffff88807b4780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 574.252173][ T30] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 574.262703][ T30] 1 lock held by syz-executor310/5107: [ 574.268425][ T30] [ 574.270756][ T30] ============================================= [ 574.270756][ T30] [ 574.279728][ T30] NMI backtrace for cpu 1 [ 574.284073][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc3-next-20240611-syzkaller #0 [ 574.293445][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 574.303501][ T30] Call Trace: [ 574.306792][ T30] [ 574.309724][ T30] dump_stack_lvl+0x241/0x360 [ 574.314414][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.319618][ T30] ? __pfx__printk+0x10/0x10 [ 574.324220][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 574.329261][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 574.334213][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 574.339676][ T30] ? _printk+0xd5/0x120 [ 574.343846][ T30] ? __pfx__printk+0x10/0x10 [ 574.348447][ T30] ? __wake_up_klogd+0x109/0x140 [ 574.353390][ T30] ? __pfx__printk+0x10/0x10 [ 574.357995][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 574.363027][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 574.369012][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 574.375005][ T30] watchdog+0xfde/0x1020 [ 574.379257][ T30] ? watchdog+0x1ea/0x1020 [ 574.383687][ T30] ? __pfx_watchdog+0x10/0x10 [ 574.388376][ T30] kthread+0x2f0/0x390 [ 574.392453][ T30] ? __pfx_watchdog+0x10/0x10 [ 574.397136][ T30] ? __pfx_kthread+0x10/0x10 [ 574.401717][ T30] ret_from_fork+0x4b/0x80 [ 574.406126][ T30] ? __pfx_kthread+0x10/0x10 [ 574.410710][ T30] ret_from_fork_asm+0x1a/0x30 [ 574.415477][ T30] [ 574.418644][ T30] Sending NMI from CPU 1 to CPUs 0: [ 574.423862][ C0] NMI backtrace for cpu 0 [ 574.423883][ C0] CPU: 0 PID: 5107 Comm: syz-executor310 Not tainted 6.10.0-rc3-next-20240611-syzkaller #0 [ 574.423902][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 574.423913][ C0] RIP: 0010:__lock_acquire+0x7fa/0x2000 [ 574.423936][ C0] Code: 85 4c 14 00 00 48 8b 44 24 18 83 38 00 0f 94 c3 00 db 80 c3 02 48 8b 44 24 40 0f b6 04 10 84 c0 0f 85 7d 12 00 00 89 5c 24 08 <48> 8b 44 24 20 44 3b 28 0f 8d a8 02 00 00 4d 63 f5 4b 8d 04 b6 4d [ 574.423951][ C0] RSP: 0018:ffffc900036a64b0 EFLAGS: 00000046 [ 574.423966][ C0] RAX: 0000000000000000 RBX: 0000000000060004 RCX: 0000000000000001 [ 574.423978][ C0] RDX: dffffc0000000000 RSI: ffff8880183a46e0 RDI: 0000000000000005 [ 574.423990][ C0] RBP: 00000000ffffffff R08: ffffffff92fcb747 R09: 1ffffffff25f96e8 [ 574.424003][ C0] R10: dffffc0000000000 R11: fffffbfff25f96e9 R12: ffff8880183a4728 [ 574.424015][ C0] R13: 0000000000000000 R14: 1ffff110030748e5 R15: ffff8880183a3c00 [ 574.424032][ C0] FS: 0000555567706380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 574.424047][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.424060][ C0] CR2: 00005638e72c6600 CR3: 0000000022274000 CR4: 00000000003506f0 [ 574.424074][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 574.424084][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 574.424095][ C0] Call Trace: [ 574.424103][ C0] [ 574.424109][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 574.424129][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 574.424148][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 574.424173][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 574.424191][ C0] ? nmi_handle+0x14f/0x5a0 [ 574.424206][ C0] ? nmi_handle+0x2a/0x5a0 [ 574.424222][ C0] ? __lock_acquire+0x7fa/0x2000 [ 574.424239][ C0] ? default_do_nmi+0x63/0x160 [ 574.424258][ C0] ? exc_nmi+0x123/0x1f0 [ 574.424276][ C0] ? end_repeat_nmi+0xf/0x53 [ 574.424298][ C0] ? __lock_acquire+0x7fa/0x2000 [ 574.424315][ C0] ? __lock_acquire+0x7fa/0x2000 [ 574.424334][ C0] ? __lock_acquire+0x7fa/0x2000 [ 574.424351][ C0] [ 574.424358][ C0] [ 574.424370][ C0] lock_acquire+0x1ed/0x550 [ 574.424387][ C0] ? tcf_idr_check_alloc+0x110/0x900 [ 574.424409][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 574.424427][ C0] ? tcf_idr_check_alloc+0x110/0x900 [ 574.424444][ C0] ? __pfx_lock_release+0x10/0x10 [ 574.424462][ C0] ? tcf_idr_check_alloc+0x110/0x900 [ 574.424482][ C0] ? tcf_idr_check_alloc+0x110/0x900 [ 574.424499][ C0] tcf_idr_check_alloc+0x12d/0x900 [ 574.424516][ C0] ? tcf_idr_check_alloc+0x110/0x900 [ 574.424535][ C0] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 574.424553][ C0] ? __nla_parse+0x40/0x60 [ 574.424574][ C0] tcf_police_init+0x29b/0x17c0 [ 574.424592][ C0] ? __sock_sendmsg+0x221/0x270 [ 574.424612][ C0] ? ____sys_sendmsg+0x525/0x7d0 [ 574.424635][ C0] ? __pfx_tcf_police_init+0x10/0x10 [ 574.424663][ C0] ? nla_memcpy+0x5d/0xc0 [ 574.424681][ C0] ? __asan_memcpy+0x40/0x70 [ 574.424702][ C0] ? __pfx_tcf_police_init+0x10/0x10 [ 574.424720][ C0] tcf_action_init_1+0x5d7/0x890 [ 574.424741][ C0] ? __pfx_tcf_action_init_1+0x10/0x10 [ 574.424768][ C0] ? tcf_action_fill_size+0x1e/0x2d0 [ 574.424787][ C0] tcf_action_init+0x2e4/0x940 [ 574.424810][ C0] ? __pfx_tcf_action_init+0x10/0x10 [ 574.424850][ C0] ? apparmor_capable+0x138/0x1b0 [ 574.424874][ C0] tc_ctl_action+0x47d/0xcf0 [ 574.424892][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 574.424915][ C0] ? __pfx_tc_ctl_action+0x10/0x10 [ 574.424944][ C0] ? trace_contention_end+0x3c/0x120 [ 574.424965][ C0] ? __mutex_lock+0x2ef/0xd70 [ 574.424989][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 574.425014][ C0] ? __pfx_tc_ctl_action+0x10/0x10 [ 574.425035][ C0] rtnetlink_rcv_msg+0x892/0x1170 [ 574.425059][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 574.425080][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 574.425100][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 574.425122][ C0] ? __pfx_validate_chain+0x10/0x10 [ 574.425142][ C0] ? __pfx_validate_chain+0x10/0x10 [ 574.425162][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 574.425181][ C0] ? mark_lock+0x9a/0x360 [ 574.425199][ C0] ? __pfx_validate_chain+0x10/0x10 [ 574.425220][ C0] ? __lock_acquire+0x1359/0x2000 [ 574.425243][ C0] ? mark_lock+0x9a/0x360 [ 574.425263][ C0] ? __lock_acquire+0x1359/0x2000 [ 574.425289][ C0] netlink_rcv_skb+0x1e3/0x430 [ 574.425308][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 574.425330][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.425357][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 574.425377][ C0] netlink_unicast+0x7ea/0x980 [ 574.425399][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 574.425415][ C0] ? __virt_addr_valid+0x183/0x520 [ 574.425436][ C0] ? __check_object_size+0x49c/0x900 [ 574.425455][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 574.425474][ C0] netlink_sendmsg+0x8db/0xcb0 [ 574.425500][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.425519][ C0] ? __import_iovec+0x536/0x820 [ 574.425537][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 574.425554][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 574.425572][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 574.425592][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.425610][ C0] __sock_sendmsg+0x221/0x270 [ 574.425632][ C0] ____sys_sendmsg+0x525/0x7d0 [ 574.425654][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.425678][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 574.425697][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 574.425726][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 574.425748][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 574.425767][ C0] ? exc_page_fault+0x590/0x8c0 [ 574.425788][ C0] ? do_syscall_64+0xb6/0x230 [ 574.425804][ C0] do_syscall_64+0xf3/0x230 [ 574.425820][ C0] ? clear_bhb_loop+0x35/0x90 [ 574.425837][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.425855][ C0] RIP: 0033:0x7f8da6f14df9 [ 574.425869][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 574.425882][ C0] RSP: 002b:00007fffaea36f98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.425899][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8da6f14df9 [ 574.425911][ C0] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 574.425922][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006 [ 574.425932][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.425942][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 574.425959][ C0] [ 574.425966][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.104 msecs [ 574.440225][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 574.440241][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc3-next-20240611-syzkaller #0 [ 574.440261][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 574.440273][ T30] Call Trace: [ 574.440282][ T30] [ 574.440289][ T30] dump_stack_lvl+0x241/0x360 [ 574.440315][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.440333][ T30] ? __pfx__printk+0x10/0x10 [ 575.123970][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 575.129955][ T30] ? vscnprintf+0x5d/0x90 [ 575.134277][ T30] panic+0x349/0x870 [ 575.138170][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 575.144315][ T30] ? __pfx_panic+0x10/0x10 [ 575.148745][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 575.154108][ T30] ? __irq_work_queue_local+0x137/0x410 [ 575.159643][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 575.165005][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 575.171149][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 575.177294][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 575.183436][ T30] watchdog+0x101d/0x1020 [ 575.187760][ T30] ? watchdog+0x1ea/0x1020 [ 575.192170][ T30] ? __pfx_watchdog+0x10/0x10 [ 575.196840][ T30] kthread+0x2f0/0x390 [ 575.200899][ T30] ? __pfx_watchdog+0x10/0x10 [ 575.205566][ T30] ? __pfx_kthread+0x10/0x10 [ 575.210146][ T30] ret_from_fork+0x4b/0x80 [ 575.214552][ T30] ? __pfx_kthread+0x10/0x10 [ 575.219130][ T30] ret_from_fork_asm+0x1a/0x30 [ 575.223895][ T30] [ 575.227191][ T30] Kernel Offset: disabled [ 575.231502][ T30] Rebooting in 86400 seconds..