last executing test programs: 1m44.152372614s ago: executing program 4 (id=5): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001000000000030"], 0x58}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="a0a56a609c43bef92332be200b1cc091", @ANYRES16, @ANYBLOB="000529bd7000ffdbdf2506000000140001"], 0xa0}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x24d8}], 0x1}, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_uring_setup(0x7c33, &(0x7f0000000200)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f00000005c0)=""/102384, 0x18ff0) r4 = socket(0x1d, 0x0, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040), 0x18) 1m38.821601046s ago: executing program 4 (id=8): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x6b}}, 0x0}, 0x90) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6bd, &(0x7f0000000d00)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioperm(0x0, 0x2534, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000009c0)={0x1d, r4, 0x1, {}, 0xff}, 0x18) r5 = socket$alg(0x26, 0x5, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000040), 0x7, 0x50d, &(0x7f00000006c0)="$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") quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0xfffffffffffffdf5, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_MARK_MASK={0x8}]}, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) 1m36.637520723s ago: executing program 4 (id=12): lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x1000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r3, 0x0, 0x2fff, 0x1, &(0x7f0000000180)='\x00', 0x5}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x19}, 0x14}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) 1m34.305784598s ago: executing program 2 (id=15): gettid() mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) semget$private(0x0, 0x7, 0x0) semop(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0xa1]) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) lgetxattr(&(0x7f00000001c0)='\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="5b792400032dd9e34e07000000"], &(0x7f00000005c0)=""/137, 0x89) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5}, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='alloc_mode=default,resgid=', @ANYRESHEX=0x0, @ANYBLOB=',background_gc=off,resgid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\b'], 0x1, 0x5501, &(0x7f0000005880)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) timerfd_create(0x0, 0x0) mkdir(&(0x7f0000000380)='./file2\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x2000000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) 1m31.510164149s ago: executing program 4 (id=23): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x8008662c, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) 1m31.298988645s ago: executing program 3 (id=24): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) recvmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c}}], 0x20}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r9, 0x1}, 0x14}}, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000a00000000040000b7bcaad11109b0a6", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) 1m31.17567104s ago: executing program 1 (id=25): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000000)=ANY=[], 0x8b, 0x2a7, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) listen(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0x401c5820, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0xa) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000037a000/0x3000)=nil], 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) 1m30.240984859s ago: executing program 3 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 1m30.093904341s ago: executing program 2 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$unix(0x1, 0x5, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x1c}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8}]}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) rt_sigaction(0x22, 0x0, 0x0, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000580)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) 1m27.99444942s ago: executing program 4 (id=29): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005d4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="5b0f01c2c29c028ed0660f388236af0083ee2c0f20c06635000004200f22c0643e1f0fb7c2", 0x25}], 0x1, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m27.023353204s ago: executing program 1 (id=30): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1m25.459338456s ago: executing program 1 (id=31): r0 = syz_open_dev$video(&(0x7f0000002c40), 0x7fffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'ipvlan0\x00'}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000b40), 0x2b842ac, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x10002, 0x4) bind$inet(r2, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c00078008000b4000000000050001000700000011000300686173683a69702c6d61726b0000000005000400000000000900020073797a310000000005000500020000007d883951bb64450c55d8994a0b786f0cf7"], 0x58}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x94040000}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)="cb", 0x1}], 0x1, &(0x7f0000000400)=[@ip_retopts={{0x10, 0x84}}], 0x10}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001e00)={@map, 0xffffffffffffffff, 0x36, 0x1002, 0xffffffffffffffff, @prog_id}, 0x20) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x2, "61a383835e7449d3f751591538e5fe23a81bcf9c307319290bd82a046f9c1290"}) socket(0x400000000010, 0x3, 0x0) 5.245221204s ago: executing program 0 (id=32): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) bind$packet(r0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="90030ec29ad0d72204000e210806000108000604000180b572da3e9647000000ae513569487147"], 0x120) 5.111557915s ago: executing program 0 (id=37): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) recvmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c}}], 0x20}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r9, 0x1}, 0x14}}, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000a00000000040000b7bcaad11109b0a6", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) 3.810898131s ago: executing program 0 (id=38): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x6b}}, 0x0}, 0x90) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6bd, &(0x7f0000000d00)="$eJzs3c9rHOf9B/D3rFZrrb/BXzmxE1NSamxIC6a2bOG07qVuKcWHUEJ66FnYciy8loMkFyWUVmkLPRV6yB+QFnTrqdC7i3tOb7mKngKFXkwPpheVmZ2VV9rVD0uy1k5eLzF6npl55pnPfObX7qzEBvjKunEhzYcpcuPCO8vl+NrqdGdtdfpYPbuTpKw3kma3SDGfFI+S6+X8om9IXzngk7lr733+eO2L7lizHqr2jZ2WG2JI25V6yNkkY3U5aHyvq9jU380krww0ae21r00Ny6Sdr0sYufUBKzu0/ueJLROe5bwFXjC9u1PRvW8OmEyOJ5moXwekvjo0ji7C52OnqxwAAAB8WXx2f9QRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMun/v7/oh4adZmzKXrf/9/qTavrL7WHow4AAAAAAAAAADZr72ehbzzJkyznRG98vag+8z9XjZzKf9eT/8uDLGY2C7mY5cxkKUtZyOUkk30dtZZnlpYWLm8sWRq+5JWhS17Z51YDAAAAAAAAwFfJ9n8d8OvcePr5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvAiKZKxbZD3JqY0ZK41md3Ja1Wjyj179JVEMm/jw6OMAAACAA5nYxzL//yRPspwTvfH1onrP/3r1fnkiDzKfpcxlKZ3M5lb9Hrp8199YW53urK1O3yuHwX5/8O9nCqPqMd1nD9WaN96s99Z8pmrRzu3MVVMu5mbV5lYa1ZKlM714hsf1cRlT8f3aQAzNoZE167SWK/vDdk8RDsWzPoqYrEPuZWSqjq3MxsluBorqQU2yNRO77p3m1jWlkfGNNV1OY+PJz6kD5Xy443VZPKjLPS53qFaGTdzIRCNVJq70HX2v75yJ5Jt//fPP7nTm7965vXhhJJu0H2PbTK8z0TvCMt2XiTde6kwMvw5sb6rKxOmN8Rv5cX6aCzmbd7OQufw8M1nKbPU8tTRTH8/l78mdM3V909i7u0XSqvdLd5/tJaaz+VFVm8m5atkTmUuR+7mV2bxd/VzJ5XwnV3M11/r28Olt4662rTrrG1vP+t6e/tvQ4M9/q660k/yuLgdyUFtZ79ru6Dws3Wt/mdeTfXntXgkfb7Q62XdtnOrL0qu97IwP7Xw/18bm1+pKuY7f1OWLYbLORHkC9e4Svehe62aiWd2LBo/zP1bnxmJn/u7CnZkPtul/6wX5rbosD6vVr+81yuG74nCVx8urmaivJJuPjnLea+WOHCuTc3LTXbVVf+LSXa4xMO90Na8oemfqT7Y9U1v1a7jBnq5U894YOm+6mnemb96m11u5n05uHUH+ADigyRxvtf/V/qz9afu37TvtdyZ+eOy7x95sZfzv499rTo291Xiz+Es+zS/HTow6UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DJY/PCjuzOdzuzC8Epj+1m7VHbreUulqL/QZ1/rOsRKK8lh9DOxtZ/xcsKRb057181Z/1Vy5HnufYng8Da/LyvN7KXD67u1+XhfETaSjPY4PLrKWIYfACO+MAHP3aWlex9cWvzwo2/P3Zt5f/b92fnxq1evTV27+vb0pdtzndmp7u9RRwk8D09v+qOOBAAAAAAAAAAAANirYf8YcO6Vw/gfmJa/LAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxY0LaT5MkctTF6fK8bXV6U459OpPWzaTNBpJ8YukeJRcT3fIZF93Rf70KOtD1vPJ3LX3Pn+89sXTvprd9kmjLg9gpR5yNslYXR5WfzcP3F/xn94Wlgk730scjNr/AgAA//8zePjB") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioperm(0x0, 0x2534, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000009c0)={0x1d, r4, 0x1, {}, 0xff}, 0x18) r5 = socket$alg(0x26, 0x5, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000040), 0x7, 0x50d, &(0x7f00000006c0)="$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") quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0xfffffffffffffdf5, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_MARK_MASK={0x8}]}, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) 3.631721149s ago: executing program 2 (id=34): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6bd, &(0x7f0000000d00)="$eJzs3c9rHOf9B/D3rFZrrb/BXzmxE1NSamxIC6a2bOG07qVuKcWHUEJ66FnYciy8loMkFyWUVmkLPRV6yB+QFnTrqdC7i3tOb7mKngKFXkwPpheVmZ2VV9rVD0uy1k5eLzF6npl55pnPfObX7qzEBvjKunEhzYcpcuPCO8vl+NrqdGdtdfpYPbuTpKw3kma3SDGfFI+S6+X8om9IXzngk7lr733+eO2L7lizHqr2jZ2WG2JI25V6yNkkY3U5aHyvq9jU380krww0ae21r00Ny6Sdr0sYufUBKzu0/ueJLROe5bwFXjC9u1PRvW8OmEyOJ5moXwekvjo0ji7C52OnqxwAAAB8WXx2f9QRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMun/v7/oh4adZmzKXrf/9/qTavrL7WHow4AAAAAAAAAADZr72ehbzzJkyznRG98vag+8z9XjZzKf9eT/8uDLGY2C7mY5cxkKUtZyOUkk30dtZZnlpYWLm8sWRq+5JWhS17Z51YDAAAAAAAAwFfJ9n8d8OvcePr5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvAiKZKxbZD3JqY0ZK41md3Ja1Wjyj179JVEMm/jw6OMAAACAA5nYxzL//yRPspwTvfH1onrP/3r1fnkiDzKfpcxlKZ3M5lb9Hrp8199YW53urK1O3yuHwX5/8O9nCqPqMd1nD9WaN96s99Z8pmrRzu3MVVMu5mbV5lYa1ZKlM714hsf1cRlT8f3aQAzNoZE167SWK/vDdk8RDsWzPoqYrEPuZWSqjq3MxsluBorqQU2yNRO77p3m1jWlkfGNNV1OY+PJz6kD5Xy443VZPKjLPS53qFaGTdzIRCNVJq70HX2v75yJ5Jt//fPP7nTm7965vXhhJJu0H2PbTK8z0TvCMt2XiTde6kwMvw5sb6rKxOmN8Rv5cX6aCzmbd7OQufw8M1nKbPU8tTRTH8/l78mdM3V909i7u0XSqvdLd5/tJaaz+VFVm8m5atkTmUuR+7mV2bxd/VzJ5XwnV3M11/r28Olt4662rTrrG1vP+t6e/tvQ4M9/q660k/yuLgdyUFtZ79ru6Dws3Wt/mdeTfXntXgkfb7Q62XdtnOrL0qu97IwP7Xw/18bm1+pKuY7f1OWLYbLORHkC9e4Svehe62aiWd2LBo/zP1bnxmJn/u7CnZkPtul/6wX5rbosD6vVr+81yuG74nCVx8urmaivJJuPjnLea+WOHCuTc3LTXbVVf+LSXa4xMO90Na8oemfqT7Y9U1v1a7jBnq5U894YOm+6mnemb96m11u5n05uHUH+ADigyRxvtf/V/qz9afu37TvtdyZ+eOy7x95sZfzv499rTo291Xiz+Es+zS/HTow6UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DJY/PCjuzOdzuzC8Epj+1m7VHbreUulqL/QZ1/rOsRKK8lh9DOxtZ/xcsKRb057181Z/1Vy5HnufYng8Da/LyvN7KXD67u1+XhfETaSjPY4PLrKWIYfACO+MAHP3aWlex9cWvzwo2/P3Zt5f/b92fnxq1evTV27+vb0pdtzndmp7u9RRwk8D09v+qOOBAAAAAAAAAAAANirYf8YcO6Vw/gfmJa/LAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxY0LaT5MkctTF6fK8bXV6U459OpPWzaTNBpJ8YukeJRcT3fIZF93Rf70KOtD1vPJ3LX3Pn+89sXTvprd9kmjLg9gpR5yNslYXR5WfzcP3F/xn94Wlgk730scjNr/AgAA//8zePjB") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioperm(0x0, 0x2534, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_IO_FLUSHER(0x3a, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000009c0)={0x1d, r3, 0x1, {}, 0xff}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg$can_j1939(r5, &(0x7f0000000000)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x2000) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) 3.530377522s ago: executing program 1 (id=33): lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x1000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r3, 0x0, 0x2fff, 0x1, &(0x7f0000000180)='\x00', 0x5}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x19}, 0x14}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) 2.789633108s ago: executing program 0 (id=39): r0 = dup(0xffffffffffffffff) read$FUSE(r0, 0x0, 0x0) 2.578110539s ago: executing program 0 (id=40): syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX], 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.576092845s ago: executing program 2 (id=41): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.324290152s ago: executing program 3 (id=35): capset(&(0x7f0000000080), &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 2.219286887s ago: executing program 0 (id=42): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0x0, 0x3}, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00') ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x8, &(0x7f0000004800)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7bb}, 0x10}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecomp\a\x00e,decompnsd=\x00'/36, @ANYRESHEX, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0/file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x0, 0x0) semget$private(0x0, 0x4001, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000340)) 2.108343103s ago: executing program 3 (id=43): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xc32c, 0x0, 0x0, 0x10}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r4) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r4) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf25040000000d000a0000000030323135340000000008"], 0xc0}}, 0x0) 1.528891966s ago: executing program 2 (id=44): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x8008662c, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) 1.04703636s ago: executing program 3 (id=45): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x8008662c, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) 1.019274586s ago: executing program 1 (id=46): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00431123186ca5ea15ce9fbf21d1780164ee7c8b05157dfe69e55cb0bf3d8b03000000b0c6eb226f8e"], 0x1, 0x4a4, &(0x7f0000000580)="$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") r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x80086601, 0x0) 566.593971ms ago: executing program 2 (id=47): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) socket$inet6_mptcp(0xa, 0x1, 0x106) capset(0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'veth1\x00'}) 513.864877ms ago: executing program 3 (id=48): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x198, 0x3a010003, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback=0x7f000008, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xc}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x18, r3}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000002100000225bd70abb503c1aa02d5bcf8295b2fd125db000100000809003400080002007f80000108000200ac1e010108000200ac14142008000b00060000005b8db751644226d0c489028dfd6539b8859c0b7ccb74485f226bee6c377871a44e00d19985b8ffccd2339325a43258ff93a0ed7e16e9ff19f6bc4bbb1d8100d0c6be85134796334153ed4b70624d9538d8ffffffffc99ccd4fc58389a5c54909c1f035d27602c18cf59b769558a0ec8cc53c4fff001a00accac04c6fc5af92d0cde682915bfc66d630b18cfd7f1ce446179e3726cc9d40ea83e6630b139d431677b0cb0d0b9733fc8b287f64377c21818ffeac80192a2f3f8a609cab321c7918ac05651ecbdf84223d3c2910fe95f6a54289cac47eee5f1f1d3b503bf7b9fa35a2752efa590b88956c3d65439dcbf49833fe32e6048da148a12f174e8c464477d95dc93d4383c6c30e0997d4820b898bf4edbcd420494a40a50072f6f7eb2961faf46212029aa86b79d69d4e0a5a0d981caa7443dc49fa41e10532e6ab713ed7468059c6c93a594bb4fa50be958c6c2a90443676e19318d0279e445ed0ccf91e8f756ce0a5731a7db9ebf3bbd312043295f2f6c7b6380ac2d1403aa6ed31905cfd60e5ef605b297e57d7623b40049bb6da2751b22c2734884d7f2173defac372347ce02c71072a4c8113907324cdd34b99bc72ad93b87f50a249430a94749825bf687c6d10d7800cca5c5addb8c8087b2c5b59cae2699f9d9bf89d0309c0644f40f530c34e8aaa7db3b49bcf87cf6be765378631a0f26a0ae2835c43038cb8eba939f631a2b164f916b978d7bd663414ba977c3784b901567f4d7d06c27c1e98d10ccbc237c358af219a1cb457621cc7953290d82c48c2fd7b95d4c4e210195f2a9657775b0e48d8bc81048e25bc105fc7d7e6dca8a2b59a5b58c0dbe2a76e763551b92d2bb7e6e7b118fb20235fc7b08d4236bd2ccf43dd3ab3edcc54f7"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x10880) r5 = socket(0x1, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0xfffffffffffffffe, 0x4008845) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan1\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={&(0x7f0000000400), 0xc, &(0x7f0000000880)={&(0x7f0000000540)=@deltclass={0x70, 0x29, 0x122, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xb}, {0x6, 0x8}, {0xd, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x6}}, @TCA_RATE={0x6, 0x5, {0x5, 0xff}}, @TCA_RATE={0x6, 0x5, {0x4, 0xb3}}, @TCA_RATE={0x6, 0x5, {0xf, 0x81}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000840}, 0x804) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@private0, 0x7d, r3}) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) 413.759021ms ago: executing program 1 (id=49): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000640)={0x0, 0x2, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fa6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x24080, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r4, &(0x7f00000021c0)={0x18, 0x0, r6, {0x7}}, 0x18) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r4, &(0x7f0000002140)={0x20, 0x0, r7}, 0x20) lstat(&(0x7f0000008800)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004340)="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", 0x2000, &(0x7f0000008c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x0) r8 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000002a40)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1, @mcast1, 0xfffff000}, 0x1c, &(0x7f00000025c0)=[{&(0x7f0000002300)="eaf2389a08593cc6f7ea16bc1ab01b28e054170795f0ef10e182092ee04253f9085df3a8a7ba1f8d5471e144cf6058f832e645748e60562cd75563e1c4a95d2b71165b9b0744190b853cd8f279f5be604097aa7a428de87e4db815c4220cb53f438fdd51a22621e2c24f9e877a26d0cae7f7ddc8b5db750d4d47a3088d90885c43d36c8ad37f4e97c7e6b89db3be6ea3e3650bc6464b174411ec9eccf8d8fa95fad4630175a24f5922da442657f96114076df5ee33ae002c573620da2a3ce9ead0dd6c10890fe9387776b7d82c8dd84641bdb2f25d7647e254ef3c0672d2c5f154b1af23044812e511643eaf65441e95ad2a4f24", 0xf4}, {&(0x7f0000002400)="68ba58c8579efaf94e2d2e767ec32abf1907d269e8ac11b566a5f29a8b7303164f7de6d8e4a9cd8708d09330bbd83bf4b364b536dc316edca61837ec6bc06ee631fff528b39a0b92cae30af3dad5f77e7337f6be65b28f6472607af8354137bda31f03588776add8f3723b27987be844b953f5437e79bf728939bc3799d3b9fef87c073cc63a1be046ce96b89b5c75b0f889a62eb1f082f96fc2c28ed9a3c958b83f0f55b88fc6ca6a7d0e02f1e0db18c4ea19530ce23eee70792f961fde0d1b0be77e024643e0f0", 0xc8}, {&(0x7f0000002200)="63fe77dc348738c5ce3c4c054ab719fd9978209a3f702db5ae206b09efc283b5a7a0cc65eadfddb81ecb8f876c243eb4b2081badacd6a1254d9c877556ab5163e5b90b288ab1cb5459297a57b7e9ccd5dae93795efa32364cd7ec60373fc47e0c620a021413e90c29ed93c3d60", 0x6d}, {&(0x7f0000002500)="f04d7d36f21c5ca29eb2cf1722650e302c3471ab2989cd4be24f48b9af330a7c314d414f34d0ac36834e659915018f7dfeb48d36c0733891d5b8478a42bd886af9253c5d2423c0cdb87ae62d64df53f246536a5e4c0b279213132d130b47fbb3a2874eed87f35a4dad6a861d5d961ebcd5ddf41702cead4d270a022788447ec859667d00de7618977d31ff56803946ffefdd5a86057c6d13aad89ef6f8263e74842a7b2a41535e", 0xa7}, {&(0x7f0000002180)="23a4d019c6b7612628cb686c8f0eec54ce49fcf3b71176d77ea9b1f7c5", 0x1d}], 0x5, &(0x7f0000002a80)=[@dstopts={{0xb0, 0x29, 0x37, {0x2b, 0x12, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @generic={0x2, 0x8d, "6b7ed57f39276c093c71a474ca62185d4d292ef2bfaf68ccd0246d038bdb348fe10cfa6f64a44d29359ac7a70c174d261224ac7da259141d6c086fc259b82c2ff019cfaf950bbff84142e3a7bda6a869883c98bf50e608fe0895b4898dee52264afd4c773331a56ba0a721c22a8ff3558b8ed6473db7986b68b92500733e73925553a15e35f0a80ac34dc70ede"}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x0, 0x10, 0x1, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x38}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @hopopts={{0x158, 0x29, 0x36, {0x33, 0x28, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x1, 0xae, "efe72631c8cf786c95ad0d346d2fe3fbf4eec4b69bcb26654b07784a741933c096dbcba1ef0baa019661bc4c1f421bf4954cd83bee005d244a72c253422a6e98880eea375b48f4169c6a47bbeff1e1554c2c685467e950dedca44dc8d0bf36d8849293fe95cbd9bcc0e1b029435269a36cef19b965332b8ea37a83b7386ebe8e15ec1352de0215def866d0c96e7c3cb41490f435eb74b4843fa31d7fbc4d1231041cf5c58b1432f041add3b655c7"}, @generic={0x2, 0x8b, "0f6b400d24de53f6cb85fc856b3de72c8ba848de86b3d75741140cd770155e4ebbee8b474bbdfcd298e69e16c53645eb8b637e33e4db1d782a755ee02616d42a95f7d0eadbadf2b1a417162c76465a050f0230d1b72a058ac2c56ff03b61ad8d4e6c7c1073e8002c080b2ca996892e04b9dd4ecc6c1c09f9524bd57db3c301e0082b89042fd33a6c27fba4"}]}}}, @dstopts={{0x118, 0x29, 0x37, {0x16, 0x20, '\x00', [@generic={0xfe, 0xe5, "bebdaa79f92d0fcaaf7c0607aeda61b06f37543716f71da02c581fc034d321f51b3e7b5a41bd417507cc29fadf24a6709242e67fdb032296791d61495cca904f63f2d3a9cb99cc6289697e11a986e86378b8938614c67185e7d1f6e7d53fc8947e2616b2c89d543bbbde2c70f014c040d760697b697c1c7ebe8aab39ff18927d74e9babc3a07109738cc460d513a3d9655c761037ead66c782276575185eef3896c84b330ac656be9503cf39daff02cd8c64144ecab09ae5e4f9d142599714e997333ffda1befa6b37c35cf9e1c4c7e3674de17dc9ded238ad34e4233df3c3786bc17407df"}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x3ff}, @hao={0xc9, 0x10, @empty}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x1, 0x12, 0x0, 0x2, 0x0, [@private1, @mcast1, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @empty, @ipv4={'\x00', '\xff\xff', @local}]}}}], 0x460}}], 0x1, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}, @ib={0x1b, 0x0, 0x0, {"b9322b534f61cd1848a76d94f0ba2078"}}}}, 0x118) 0s ago: executing program 4 (id=36): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r3}) kernel console output (not intermixed with test programs): (bridge_slave_0) entered blocking state [ 135.029842][ T5463] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.074960][ T5463] bridge_slave_0: entered allmulticast mode [ 135.083577][ T5463] bridge_slave_0: entered promiscuous mode [ 135.102118][ T5463] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.110999][ T5463] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.119992][ T5463] bridge_slave_1: entered allmulticast mode [ 135.139180][ T5463] bridge_slave_1: entered promiscuous mode [ 135.412602][ T5455] team0: Port device team_slave_1 added [ 135.606286][ T5457] team0: Port device team_slave_1 added [ 135.702172][ T5463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.751142][ T5458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.795052][ T5458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.069160][ T5461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.077411][ T5461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.124826][ T5461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.226079][ T5463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.624972][ T5461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.632040][ T5461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.686343][ T5461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.035510][ T5455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.042585][ T5455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.070629][ T5455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.159624][ T5457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.168218][ T5457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.244275][ T5457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.307525][ T5463] team0: Port device team_slave_0 added [ 137.364826][ T5458] team0: Port device team_slave_0 added [ 137.418872][ T5455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.454453][ T5455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.534247][ T5455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.572156][ T5457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.589299][ T5457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.644775][ T5457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.767846][ T5463] team0: Port device team_slave_1 added [ 137.809445][ T5458] team0: Port device team_slave_1 added [ 138.497645][ T5455] hsr_slave_0: entered promiscuous mode [ 138.526884][ T5455] hsr_slave_1: entered promiscuous mode [ 138.554675][ T5455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.562374][ T5455] Cannot create hsr debugfs directory [ 138.842787][ T5463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.873260][ T5463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.964768][ T5463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.000669][ T5463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.013628][ T5463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.067439][ T5463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.083109][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.090363][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.116685][ T5458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.146773][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.153830][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.181591][ T5458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.214800][ T5461] hsr_slave_0: entered promiscuous mode [ 139.223426][ T5461] hsr_slave_1: entered promiscuous mode [ 139.239750][ T5461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.247803][ T5461] Cannot create hsr debugfs directory [ 139.540636][ T5457] hsr_slave_0: entered promiscuous mode [ 139.566440][ T5457] hsr_slave_1: entered promiscuous mode [ 139.585895][ T5457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.593517][ T5457] Cannot create hsr debugfs directory [ 139.650844][ T2546] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.042311][ T2546] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.247371][ T5463] hsr_slave_0: entered promiscuous mode [ 140.277383][ T5463] hsr_slave_1: entered promiscuous mode [ 140.316716][ T5463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.363545][ T5463] Cannot create hsr debugfs directory [ 140.927843][ T2546] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.159356][ T5458] hsr_slave_0: entered promiscuous mode [ 141.197681][ T5458] hsr_slave_1: entered promiscuous mode [ 141.225829][ T5458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.233546][ T5458] Cannot create hsr debugfs directory [ 141.417204][ T2546] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.179845][ T2546] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.300521][ T2546] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.474839][ T2546] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.619393][ T2546] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.469712][ T2546] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.712572][ T2546] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.890052][ T5455] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.131320][ T5461] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.286463][ T2546] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.346019][ T5455] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.428943][ T5461] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.537282][ T5455] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.656767][ T2546] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.757904][ T5461] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.806449][ T5455] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 147.037321][ T5461] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.060650][ T2546] bridge_slave_1: left allmulticast mode [ 148.068886][ T2546] bridge_slave_1: left promiscuous mode [ 148.080083][ T2546] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.097312][ T2546] bridge_slave_0: left allmulticast mode [ 148.103084][ T2546] bridge_slave_0: left promiscuous mode [ 148.121109][ T2546] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.151987][ T2546] bridge_slave_1: left allmulticast mode [ 148.160252][ T2546] bridge_slave_1: left promiscuous mode [ 148.168696][ T2546] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.189647][ T2546] bridge_slave_0: left allmulticast mode [ 148.195816][ T2546] bridge_slave_0: left promiscuous mode [ 148.201953][ T2546] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.220621][ T2546] bridge_slave_1: left allmulticast mode [ 148.229980][ T2546] bridge_slave_1: left promiscuous mode [ 148.240497][ T2546] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.257705][ T2546] bridge_slave_0: left allmulticast mode [ 148.263390][ T2546] bridge_slave_0: left promiscuous mode [ 148.275320][ T2546] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.289068][ T2546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.325832][ T2546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.347406][ T2546] bond0 (unregistering): Released all slaves [ 150.469766][ T2546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.497227][ T2546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.511220][ T2546] bond0 (unregistering): Released all slaves [ 150.622552][ T2546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.658739][ T2546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.676508][ T2546] bond0 (unregistering): Released all slaves [ 152.900319][ T5457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 153.082983][ T5455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.146946][ T5457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 153.183619][ T5457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 153.251292][ T5457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 153.596746][ T2546] hsr_slave_0: left promiscuous mode [ 153.629012][ T2546] hsr_slave_1: left promiscuous mode [ 153.640294][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.648343][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.659081][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.669236][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.688628][ T2546] hsr_slave_0: left promiscuous mode [ 153.724240][ T2546] hsr_slave_1: left promiscuous mode [ 153.746352][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.753965][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.768384][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.777256][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.793916][ T2546] hsr_slave_0: left promiscuous mode [ 153.800800][ T2546] hsr_slave_1: left promiscuous mode [ 153.813120][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.821008][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.837993][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.846422][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.923016][ T2546] veth1_macvtap: left promiscuous mode [ 153.929098][ T2546] veth0_macvtap: left promiscuous mode [ 153.935624][ T2546] veth1_vlan: left promiscuous mode [ 153.941339][ T2546] veth0_vlan: left promiscuous mode [ 153.957310][ T2546] veth1_macvtap: left promiscuous mode [ 153.963010][ T2546] veth0_macvtap: left promiscuous mode [ 153.975070][ T2546] veth1_vlan: left promiscuous mode [ 153.980736][ T2546] veth0_vlan: left promiscuous mode [ 153.991186][ T2546] veth1_macvtap: left promiscuous mode [ 153.997449][ T2546] veth0_macvtap: left promiscuous mode [ 154.003266][ T2546] veth1_vlan: left promiscuous mode [ 154.009262][ T2546] veth0_vlan: left promiscuous mode [ 156.072581][ T2546] team0 (unregistering): Port device team_slave_1 removed [ 156.142959][ T2546] team0 (unregistering): Port device team_slave_0 removed [ 156.761587][ T2546] team0 (unregistering): Port device team_slave_1 removed [ 156.799115][ T2546] team0 (unregistering): Port device team_slave_0 removed [ 157.364722][ T2546] team0 (unregistering): Port device team_slave_1 removed [ 157.401908][ T2546] team0 (unregistering): Port device team_slave_0 removed [ 157.766989][ T5455] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.787395][ T5287] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.794604][ T5287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.861123][ T5287] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.868317][ T5287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.979773][ T5458] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 157.990621][ T5458] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 158.003638][ T5458] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 158.013518][ T5458] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 158.347249][ T5458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.376027][ T5457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.417867][ T5458] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.497892][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.505081][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.526257][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.533425][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.632157][ T5457] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.639888][ T5463] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.654074][ T5463] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.698106][ T5463] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.709167][ T5463] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.723954][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.731106][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.746115][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.753230][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.777686][ T5455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.989024][ T5461] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 159.035227][ T5461] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 159.067393][ T5461] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 159.098797][ T5461] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 159.138886][ T5455] veth0_vlan: entered promiscuous mode [ 159.307695][ T5455] veth1_vlan: entered promiscuous mode [ 159.331454][ T5458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.361750][ T5457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.389814][ T5463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.413505][ T2546] bridge_slave_1: left allmulticast mode [ 159.419460][ T2546] bridge_slave_1: left promiscuous mode [ 159.426795][ T2546] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.435962][ T2546] bridge_slave_0: left allmulticast mode [ 159.441606][ T2546] bridge_slave_0: left promiscuous mode [ 159.450618][ T2546] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.723603][ T2546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.737116][ T2546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.747424][ T2546] bond0 (unregistering): Released all slaves [ 159.779442][ T5463] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.802299][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.809426][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.896704][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.903814][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.937785][ T5455] veth0_macvtap: entered promiscuous mode [ 159.959514][ T5455] veth1_macvtap: entered promiscuous mode [ 160.061741][ T5458] veth0_vlan: entered promiscuous mode [ 160.086097][ T5455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.098486][ T5455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.110223][ T5455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.121395][ T5461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.153495][ T2546] hsr_slave_0: left promiscuous mode [ 160.161813][ T2546] hsr_slave_1: left promiscuous mode [ 160.168772][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.176853][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.185634][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.193045][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.209496][ T2546] veth1_macvtap: left promiscuous mode [ 160.216099][ T2546] veth0_macvtap: left promiscuous mode [ 160.221661][ T2546] veth1_vlan: left promiscuous mode [ 160.227185][ T2546] veth0_vlan: left promiscuous mode [ 160.551099][ T2546] team0 (unregistering): Port device team_slave_1 removed [ 160.584446][ T2546] team0 (unregistering): Port device team_slave_0 removed [ 160.862600][ T5455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.880928][ T5458] veth1_vlan: entered promiscuous mode [ 160.895852][ T5457] veth0_vlan: entered promiscuous mode [ 160.925046][ T5455] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.933780][ T5455] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.943123][ T5455] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.953273][ T5455] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.005283][ T5457] veth1_vlan: entered promiscuous mode [ 161.045754][ T5461] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.108925][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.116140][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.141720][ T5457] veth0_macvtap: entered promiscuous mode [ 161.202478][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.209677][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.223544][ T5458] veth0_macvtap: entered promiscuous mode [ 161.283774][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.312655][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.330617][ T5457] veth1_macvtap: entered promiscuous mode [ 161.374049][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.390943][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.405764][ T5457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.426977][ T5458] veth1_macvtap: entered promiscuous mode [ 161.523629][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.547495][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.567077][ T5457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.586469][ T2546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.612350][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.624299][ T2546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.624337][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.642278][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.653718][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.672326][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.693335][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.703922][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.714891][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.726804][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.738673][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.766096][ T5458] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.776551][ T5458] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.786973][ T5458] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.796736][ T5458] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.826503][ T5457] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.839185][ T5457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.850070][ T5457] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.859519][ T5457] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.987387][ T5463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.318528][ T5461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.356501][ T5445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.518067][ T5445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.720625][ T5461] veth0_vlan: entered promiscuous mode [ 162.917838][ T5445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.018937][ T5445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.078583][ T5461] veth1_vlan: entered promiscuous mode [ 163.173648][ T1833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.222827][ T1833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.278014][ T1833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.320693][ T1833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.399947][ T5634] loop0: detected capacity change from 0 to 1024 [ 163.406232][ T5461] veth0_macvtap: entered promiscuous mode [ 163.467313][ T5634] hfsplus: failed to load root directory [ 163.477561][ T5461] veth1_macvtap: entered promiscuous mode [ 163.550290][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.649100][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.701283][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.723801][ T5638] loop2: detected capacity change from 0 to 1024 [ 163.730972][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.761526][ T5638] hfsplus: failed to load root directory [ 163.774728][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.798622][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.829204][ T5461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.863191][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.880459][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.892039][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.913289][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.925847][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.951094][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.971036][ T5461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.018418][ T5461] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.034312][ T1169] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 164.034315][ T5461] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.055594][ T5461] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.068665][ T5461] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.244339][ T1169] usb 2-1: Using ep0 maxpacket: 8 [ 164.265749][ T1169] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.298415][ T5463] veth0_vlan: entered promiscuous mode [ 164.328037][ T1169] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.393052][ T1169] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.416561][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.438002][ T1169] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.465292][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.487182][ T1169] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.500425][ T5463] veth1_vlan: entered promiscuous mode [ 164.512091][ T1169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.663285][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.695068][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.756005][ T5463] veth0_macvtap: entered promiscuous mode [ 164.773880][ T1169] usb 2-1: GET_CAPABILITIES returned 0 [ 164.787126][ T5463] veth1_macvtap: entered promiscuous mode [ 164.810110][ T1169] usbtmc 2-1:16.0: can't read capabilities [ 164.880525][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.914237][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.935058][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.966609][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.007222][ T5278] usb 2-1: USB disconnect, device number 2 [ 165.024197][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.051730][ T5668] loop0: detected capacity change from 0 to 1024 [ 165.055263][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.059067][ T5668] hfsplus: unable to parse mount options [ 165.101357][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.168768][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.237807][ T5463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.476543][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.600570][ T5676] No control pipe specified [ 165.601639][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.621861][ T5676] netlink: 'syz.3.43': attribute type 10 has an invalid length. [ 165.622536][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.640570][ T5676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.43'. [ 165.653202][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.982031][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.074600][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.113568][ T5679] loop2: detected capacity change from 0 to 128 [ 166.124709][ T5463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.144354][ T5463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.189145][ T5463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.195635][ T5679] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.261306][ T5463] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.261735][ T5684] loop3: detected capacity change from 0 to 128 [ 166.290833][ T5685] loop1: detected capacity change from 0 to 128 [ 166.298692][ T5463] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.302279][ T5684] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.318209][ T5679] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.331053][ T5463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.340958][ T5463] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.368683][ T5684] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.416709][ T5685] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 166.482181][ T5685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.482627][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.561362][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.595849][ T5458] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.666402][ T5461] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.705031][ T1833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.712901][ T1833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.914507][ T5695] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 167.003745][ T5699] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 174.564217][ C0] DEBUG: holding rtnl_mutex for 548 jiffies. [ 174.570231][ C0] task:syz.2.47 state:R running task stack:25104 pid:5695 tgid:5692 ppid:5458 flags:0x00004002 [ 174.582096][ C0] Call Trace: [ 174.585382][ C0] [ 174.588312][ C0] __schedule+0x1800/0x4a60 [ 174.592821][ C0] ? __pfx___schedule+0x10/0x10 [ 174.597687][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 174.602878][ C0] ? preempt_schedule+0xe1/0xf0 [ 174.607735][ C0] preempt_schedule_common+0x84/0xd0 [ 174.613005][ C0] preempt_schedule+0xe1/0xf0 [ 174.617684][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 174.623132][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 174.629169][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.635581][ C0] preempt_schedule_thunk+0x1a/0x30 [ 174.640817][ C0] ? mark_lock+0x9a/0x360 [ 174.645202][ C0] __local_bh_enable_ip+0x179/0x200 [ 174.650406][ C0] ? fib6_run_gc+0x6e2/0x7e0 [ 174.655022][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 174.660743][ C0] ? fib6_run_gc+0x2fb/0x7e0 [ 174.665372][ C0] fib6_run_gc+0x6e2/0x7e0 [ 174.669797][ C0] ? fib6_run_gc+0x16b/0x7e0 [ 174.674414][ C0] ? __pfx_fib6_run_gc+0x10/0x10 [ 174.679360][ C0] ndisc_netdev_event+0xd8/0x4e0 [ 174.684324][ C0] notifier_call_chain+0x19f/0x3e0 [ 174.689446][ C0] __dev_notify_flags+0x207/0x400 [ 174.694517][ C0] ? dev_set_rx_mode+0x233/0x2e0 [ 174.699466][ C0] ? __pfx___dev_notify_flags+0x10/0x10 [ 174.705128][ C0] ? __dev_change_flags+0x515/0x6f0 [ 174.710338][ C0] ? __pfx___dev_change_flags+0x10/0x10 [ 174.715908][ C0] ? __mutex_lock+0x9a5/0xd70 [ 174.720597][ C0] dev_change_flags+0xf0/0x1a0 [ 174.725382][ C0] dev_ifsioc+0x7c8/0xe70 [ 174.729712][ C0] ? __pfx_dev_ifsioc+0x10/0x10 [ 174.734584][ C0] ? get_rtnl_holder+0x144/0x190 [ 174.739516][ C0] dev_ioctl+0x719/0x1340 [ 174.743846][ C0] sock_do_ioctl+0x240/0x460 [ 174.748465][ C0] ? __pfx_sock_do_ioctl+0x10/0x10 [ 174.753591][ C0] sock_ioctl+0x629/0x8e0 [ 174.757949][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 174.762801][ C0] ? __fget_files+0x29/0x470 [ 174.767415][ C0] ? __fget_files+0x3f6/0x470 [ 174.772086][ C0] ? __fget_files+0x29/0x470 [ 174.776698][ C0] ? bpf_lsm_file_ioctl+0x9/0x10 [ 174.781630][ C0] ? security_file_ioctl+0x87/0xb0 [ 174.786758][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 174.791614][ C0] __se_sys_ioctl+0xfc/0x170 [ 174.796226][ C0] do_syscall_64+0xf3/0x230 [ 174.800721][ C0] ? clear_bhb_loop+0x35/0x90 [ 174.805415][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.811326][ C0] RIP: 0033:0x7feb7bd779f9 [ 174.815798][ C0] RSP: 002b:00007feb7cc21048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.824264][ C0] RAX: ffffffffffffffda RBX: 00007feb7bf05f80 RCX: 00007feb7bd779f9 [ 174.832250][ C0] RDX: 0000000020000100 RSI: 0000000000008914 RDI: 0000000000000007 [ 174.840264][ C0] RBP: 00007feb7bde58ee R08: 0000000000000000 R09: 0000000000000000 [ 174.848259][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.856279][ C0] R13: 000000000000000b R14: 00007feb7bf05f80 R15: 00007ffeb9beec48 [ 174.864322][ C0] [ 174.867351][ C0] DEBUG: waiting rtnl_mutex for 571 jiffies. [ 174.873318][ C0] task:kworker/u8:7 state:D stack:21200 pid:1833 tgid:1833 ppid:2 flags:0x00004000 [ 174.883510][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 174.889520][ C0] Call Trace: [ 174.892792][ C0] [ 174.895752][ C0] __schedule+0x1800/0x4a60 [ 174.900281][ C0] ? __pfx___schedule+0x10/0x10 [ 174.906372][ C0] ? __pfx_lock_release+0x10/0x10 [ 174.911396][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 174.916875][ C0] ? kthread_data+0x52/0xd0 [ 174.921374][ C0] ? schedule+0x90/0x320 [ 174.925637][ C0] ? wq_worker_sleeping+0x66/0x240 [ 174.930747][ C0] ? schedule+0x90/0x320 [ 174.935006][ C0] schedule+0x14b/0x320 [ 174.939164][ C0] schedule_preempt_disabled+0x13/0x30 [ 174.944648][ C0] __mutex_lock+0x6a4/0xd70 [ 174.949145][ C0] ? mark_lock+0x9a/0x360 [ 174.953472][ C0] ? __mutex_lock+0x527/0xd70 [ 174.958165][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 174.963279][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 174.968338][ C0] ? get_rtnl_holder+0x144/0x190 [ 174.973284][ C0] addrconf_dad_work+0xd0/0x16f0 [ 174.978246][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 174.983702][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.990057][ C0] ? process_scheduled_works+0x945/0x1830 [ 174.995795][ C0] process_scheduled_works+0xa2c/0x1830 [ 175.001362][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 175.007368][ C0] ? assign_work+0x364/0x3d0 [ 175.011959][ C0] worker_thread+0x86d/0xd40 [ 175.016576][ C0] ? __kthread_parkme+0x169/0x1d0 [ 175.021635][ C0] ? __pfx_worker_thread+0x10/0x10 [ 175.026811][ C0] kthread+0x2f0/0x390 [ 175.030886][ C0] ? __pfx_worker_thread+0x10/0x10 [ 175.036032][ C0] ? __pfx_kthread+0x10/0x10 [ 175.040617][ C0] ret_from_fork+0x4b/0x80 [ 175.045056][ C0] ? __pfx_kthread+0x10/0x10 [ 175.049642][ C0] ret_from_fork_asm+0x1a/0x30 [ 175.054445][ C0] [ 175.057483][ C0] DEBUG: waiting rtnl_mutex for 589 jiffies. [ 175.063449][ C0] task:kworker/1:7 state:D stack:22064 pid:5279 tgid:5279 ppid:2 flags:0x00004000 [ 175.073670][ C0] Workqueue: events linkwatch_event [ 175.078895][ C0] Call Trace: [ 175.082166][ C0] [ 175.085115][ C0] __schedule+0x1800/0x4a60 [ 175.089633][ C0] ? __pfx___schedule+0x10/0x10 [ 175.094502][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 175.100483][ C0] ? __pfx_lock_release+0x10/0x10 [ 175.105546][ C0] ? kick_pool+0x45c/0x620 [ 175.109969][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 175.115360][ C0] ? schedule+0x90/0x320 [ 175.119601][ C0] schedule+0x14b/0x320 [ 175.123756][ C0] schedule_preempt_disabled+0x13/0x30 [ 175.129233][ C0] __mutex_lock+0x6a4/0xd70 [ 175.133734][ C0] ? __mutex_lock+0x527/0xd70 [ 175.138429][ C0] ? linkwatch_event+0xe/0x60 [ 175.143101][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 175.148147][ C0] ? get_rtnl_holder+0x144/0x190 [ 175.153081][ C0] ? process_scheduled_works+0x945/0x1830 [ 175.158817][ C0] linkwatch_event+0xe/0x60 [ 175.163311][ C0] process_scheduled_works+0xa2c/0x1830 [ 175.168898][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 175.174911][ C0] ? assign_work+0x364/0x3d0 [ 175.179502][ C0] worker_thread+0x86d/0xd40 [ 175.184097][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 175.190040][ C0] ? __kthread_parkme+0x169/0x1d0 [ 175.195083][ C0] ? __pfx_worker_thread+0x10/0x10 [ 175.200189][ C0] kthread+0x2f0/0x390 [ 175.204269][ C0] ? __pfx_worker_thread+0x10/0x10 [ 175.209374][ C0] ? __pfx_kthread+0x10/0x10 [ 175.213953][ C0] ret_from_fork+0x4b/0x80 [ 175.218389][ C0] ? __pfx_kthread+0x10/0x10 [ 175.222971][ C0] ret_from_fork_asm+0x1a/0x30 [ 175.227763][ C0] [ 175.230779][ C0] [ 175.230779][ C0] Showing all locks held in the system: [ 175.238499][ C0] 5 locks held by kworker/u8:0/11: [ 175.243613][ C0] 3 locks held by kworker/u8:1/12: [ 175.248738][ C0] 2 locks held by kworker/u8:2/35: [ 175.253838][ C0] 3 locks held by kworker/u8:3/52: [ 175.258954][ C0] 2 locks held by kworker/u8:4/62: [ 175.264049][ C0] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 175.275784][ C0] #1: ffffc900015d7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 175.287915][ C0] 2 locks held by kworker/u8:5/64: [ 175.293023][ C0] 3 locks held by kworker/u8:7/1833: [ 175.298314][ C0] #0: ffff88802abad148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 175.309921][ C0] #1: ffffc90004d1fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 175.322733][ C0] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 175.332172][ C0] 3 locks held by kworker/u8:8/2535: [ 175.337460][ C0] 2 locks held by kworker/u8:9/2546: [ 175.342730][ C0] 3 locks held by kworker/u8:10/3032: [ 175.348117][ C0] 2 locks held by getty/4982: [ 175.352777][ C0] #0: ffff88802b6730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 175.362557][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 175.372683][ C0] 3 locks held by kworker/1:7/5279: [ 175.377889][ C0] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 175.388884][ C0] #1: ffffc90004077d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 175.399876][ C0] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 175.408866][ C0] 4 locks held by kworker/0:5/5312: [ 175.414050][ C0] 3 locks held by kworker/u8:11/5443: [ 175.419428][ C0] 3 locks held by kworker/u8:12/5445: [ 175.424820][ C0] 2 locks held by udevd/5535: [ 175.429481][ C0] #0: ffff888022684d98 (&mm->mmap_lock){++++}-{3:3}, at: do_vmi_align_munmap+0x104f/0x18c0 [ 175.439603][ C0] #1: ffff8880295297e8 (&anon_vma->rwsem){++++}-{3:3}, at: validate_mm+0x29a/0x530 [ 175.449031][ C0] 2 locks held by udevd/5543: [ 175.453780][ C0] #0: ffff888042f86098 (&mm->mmap_lock){++++}-{3:3}, at: do_vmi_align_munmap+0x104f/0x18c0 [ 175.463924][ C0] #1: ffff8880295297e8 (&anon_vma->rwsem){++++}-{3:3}, at: validate_mm+0x29a/0x530 [ 175.473382][ C0] 2 locks held by udevd/5544: [ 175.478079][ C0] 2 locks held by udevd/5555: [ 175.482742][ C0] #0: ffff888022685718 (&mm->mmap_lock){++++}-{3:3}, at: do_vmi_align_munmap+0x104f/0x18c0 [ 175.492870][ C0] #1: ffff8880295297e8 (&anon_vma->rwsem){++++}-{3:3}, at: validate_mm+0x29a/0x530 [ 175.502294][ C0] 2 locks held by udevd/5556: [ 175.506973][ C0] #0: ffff888045306a18 (&mm->mmap_lock){++++}-{3:3}, at: do_vmi_align_munmap+0x104f/0x18c0 [ 175.517093][ C0] #1: ffff8880295297e8 (&anon_vma->rwsem){++++}-{3:3}, at: validate_mm+0x29a/0x530 [ 175.526562][ C0] 2 locks held by udevd/5557: [ 175.531247][ C0] 1 lock held by syz.0.42/5671: [ 175.536124][ C0] 1 lock held by syz.2.47/5695: [ 175.540969][ C0] 1 lock held by syz.3.48/5694: [ 175.545838][ C0] 1 lock held by syz.3.48/5700: [ 175.550677][ C0] 2 locks held by syz.1.49/5698: [ 175.555626][ C0] 1 lock held by kworker/u8:4/5709: [ 175.560811][ C0] [ 175.563126][ C0] ============================================= [ 175.563126][ C0] [ 189.124196][ C0] DEBUG: holding rtnl_mutex for 512 jiffies. [ 189.130213][ C0] task:syz-executor state:R running task stack:19952 pid:5457 tgid:5457 ppid:1 flags:0x00004006 [ 189.141979][ C0] Call Trace: [ 189.145263][ C0] [ 189.148182][ C0] __schedule+0x1800/0x4a60 [ 189.152691][ C0] ? __pfx___schedule+0x10/0x10 [ 189.157549][ C0] ? mark_lock+0x9a/0x360 [ 189.161872][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 189.167886][ C0] ? preempt_schedule+0xe1/0xf0 [ 189.172723][ C0] preempt_schedule_common+0x84/0xd0 [ 189.178064][ C0] preempt_schedule+0xe1/0xf0 [ 189.182781][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 189.188239][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 189.194289][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.200659][ C0] preempt_schedule_thunk+0x1a/0x30 [ 189.205904][ C0] ? mark_lock+0x9a/0x360 [ 189.210223][ C0] __local_bh_enable_ip+0x179/0x200 [ 189.215427][ C0] ? __neigh_ifdown+0x1c6/0x400 [ 189.220262][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 189.225990][ C0] __neigh_ifdown+0x1c6/0x400 [ 189.230655][ C0] neigh_ifdown+0x1f/0x30 [ 189.234996][ C0] ndisc_netdev_event+0xcc/0x4e0 [ 189.239929][ C0] notifier_call_chain+0x19f/0x3e0 [ 189.245049][ C0] dev_close_many+0x33c/0x4c0 [ 189.249714][ C0] ? __pfx_dev_close_many+0x10/0x10 [ 189.254924][ C0] unregister_netdevice_many_notify+0x50b/0x1c40 [ 189.261243][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 189.267245][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 189.273993][ C0] ? irqentry_exit+0x63/0x90 [ 189.278586][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 189.283773][ C0] ? queue_delayed_work_on+0x237/0x390 [ 189.289245][ C0] ? queue_delayed_work_on+0x267/0x390 [ 189.294710][ C0] ? queue_delayed_work_on+0x271/0x390 [ 189.300166][ C0] unregister_netdevice_queue+0x303/0x370 [ 189.305906][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 189.312137][ C0] __tun_detach+0x6b9/0x1600 [ 189.316738][ C0] tun_chr_close+0x108/0x1b0 [ 189.321313][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 189.326425][ C0] __fput+0x24a/0x8a0 [ 189.330401][ C0] task_work_run+0x24f/0x310 [ 189.335000][ C0] ? __pfx_task_work_run+0x10/0x10 [ 189.340094][ C0] ? do_exit+0xa2a/0x27f0 [ 189.344431][ C0] ? kmem_cache_free+0x145/0x350 [ 189.349358][ C0] do_exit+0xa2f/0x27f0 [ 189.353495][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 189.359484][ C0] ? __pfx_do_exit+0x10/0x10 [ 189.364058][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 189.369287][ C0] do_group_exit+0x207/0x2c0 [ 189.373864][ C0] get_signal+0x16a1/0x1740 [ 189.378377][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 189.384275][ C0] ? kfree+0x4e/0x360 [ 189.388325][ C0] ? __pfx_get_signal+0x10/0x10 [ 189.393153][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 189.399050][ C0] ? do_sock_setsockopt+0x3e2/0x720 [ 189.404273][ C0] arch_do_signal_or_restart+0x96/0x830 [ 189.409808][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 189.415964][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 189.421938][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 189.427670][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 189.433205][ C0] do_syscall_64+0x100/0x230 [ 189.437796][ C0] ? clear_bhb_loop+0x35/0x90 [ 189.442459][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.448356][ C0] RIP: 0033:0x7f172ed797ea [ 189.452753][ C0] RSP: 002b:00007ffc5c015bb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 189.461172][ C0] RAX: 0000000000000000 RBX: 00007ffc5c015c40 RCX: 00007f172ed797ea [ 189.469145][ C0] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 189.477123][ C0] RBP: 0000000000000003 R08: 0000000000000370 R09: 00007ffc5c015ff7 [ 189.485098][ C0] R10: 00007f172eed4560 R11: 0000000000000206 R12: 00007f172eed4500 [ 189.493053][ C0] R13: 00007ffc5c015bdc R14: 0000000000000000 R15: 00007f172eed6000 [ 189.501034][ C0] [ 189.504041][ C0] DEBUG: waiting rtnl_mutex for 530 jiffies. [ 189.510022][ C0] task:kworker/0:2 state:D stack:22064 pid:1169 tgid:1169 ppid:2 flags:0x00004000 [ 189.520188][ C0] Workqueue: events linkwatch_event [ 189.525397][ C0] Call Trace: [ 189.528658][ C0] [ 189.531572][ C0] __schedule+0x1800/0x4a60 [ 189.536104][ C0] ? __pfx___schedule+0x10/0x10 [ 189.540957][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 189.546962][ C0] ? __pfx_lock_release+0x10/0x10 [ 189.551981][ C0] ? kick_pool+0x1bd/0x620 [ 189.556418][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 189.561610][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 189.566816][ C0] ? schedule+0x90/0x320 [ 189.571046][ C0] schedule+0x14b/0x320 [ 189.575206][ C0] schedule_preempt_disabled+0x13/0x30 [ 189.580649][ C0] __mutex_lock+0x6a4/0xd70 [ 189.585152][ C0] ? __mutex_lock+0x527/0xd70 [ 189.589812][ C0] ? linkwatch_event+0xe/0x60 [ 189.594489][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 189.599497][ C0] ? get_rtnl_holder+0x144/0x190 [ 189.604466][ C0] ? process_scheduled_works+0x945/0x1830 [ 189.610193][ C0] linkwatch_event+0xe/0x60 [ 189.614704][ C0] process_scheduled_works+0xa2c/0x1830 [ 189.620250][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 189.626236][ C0] ? assign_work+0x364/0x3d0 [ 189.630811][ C0] worker_thread+0x86d/0xd40 [ 189.635408][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 189.641295][ C0] ? __kthread_parkme+0x169/0x1d0 [ 189.646336][ C0] ? __pfx_worker_thread+0x10/0x10 [ 189.651432][ C0] kthread+0x2f0/0x390 [ 189.655505][ C0] ? __pfx_worker_thread+0x10/0x10 [ 189.660600][ C0] ? __pfx_kthread+0x10/0x10 [ 189.665191][ C0] ret_from_fork+0x4b/0x80 [ 189.669592][ C0] ? __pfx_kthread+0x10/0x10 [ 189.674195][ C0] ret_from_fork_asm+0x1a/0x30 [ 189.678960][ C0] [ 189.681961][ C0] [ 189.681961][ C0] Showing all locks held in the system: [ 189.689671][ C0] 3 locks held by kworker/u8:0/11: [ 189.694781][ C0] 3 locks held by kworker/u8:1/12: [ 189.699887][ C0] 3 locks held by kworker/1:2/58: [ 189.704919][ C0] 3 locks held by kworker/0:2/1169: [ 189.710100][ C0] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 189.721084][ C0] #1: ffffc900043c7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 189.732094][ C0] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 189.741100][ C0] 2 locks held by getty/4982: [ 189.745787][ C0] #0: ffff88802b6730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 189.755545][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 189.765664][ C0] 1 lock held by syz-executor/5457: [ 189.770848][ C0] 3 locks held by syz-executor/5458: [ 189.776151][ C0] 1 lock held by dhcpcd-run-hook/5726: [ 189.781595][ C0] [ 189.783902][ C0] ============================================= [ 189.783902][ C0] [ 190.813663][ C0] DEBUG: holding rtnl_mutex for 680 jiffies. [ 190.819884][ C0] task:syz-executor state:R running task stack:19952 pid:5457 tgid:5457 ppid:1 flags:0x00004006 [ 190.831786][ C0] Call Trace: [ 190.835166][ C0] [ 190.838142][ C0] __schedule+0x1800/0x4a60 [ 190.842759][ C0] ? __pfx___schedule+0x10/0x10 [ 190.847731][ C0] ? mark_lock+0x9a/0x360 [ 190.852144][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 190.858297][ C0] ? preempt_schedule+0xe1/0xf0 [ 190.863209][ C0] preempt_schedule_common+0x84/0xd0 [ 190.868649][ C0] preempt_schedule+0xe1/0xf0 [ 190.873446][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 190.878976][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 190.885110][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 190.891489][ C0] preempt_schedule_thunk+0x1a/0x30 [ 190.896826][ C0] ? mark_lock+0x9a/0x360 [ 190.901206][ C0] __local_bh_enable_ip+0x179/0x200 [ 190.906571][ C0] ? __neigh_ifdown+0x1c6/0x400 [ 190.911469][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 190.917342][ C0] __neigh_ifdown+0x1c6/0x400 [ 190.922074][ C0] neigh_ifdown+0x1f/0x30 [ 190.926541][ C0] ndisc_netdev_event+0xcc/0x4e0 [ 190.931526][ C0] notifier_call_chain+0x19f/0x3e0 [ 190.937006][ C0] dev_close_many+0x33c/0x4c0 [ 190.941749][ C0] ? __pfx_dev_close_many+0x10/0x10 [ 190.947101][ C0] unregister_netdevice_many_notify+0x50b/0x1c40 [ 190.953506][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 190.959632][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 190.966713][ C0] ? irqentry_exit+0x63/0x90 [ 190.971356][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 190.976706][ C0] ? queue_delayed_work_on+0x237/0x390 [ 190.982214][ C0] ? queue_delayed_work_on+0x267/0x390 [ 190.987818][ C0] ? queue_delayed_work_on+0x271/0x390 [ 190.993332][ C0] unregister_netdevice_queue+0x303/0x370 [ 190.999201][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 191.005587][ C0] __tun_detach+0x6b9/0x1600 [ 191.010256][ C0] tun_chr_close+0x108/0x1b0 [ 191.014964][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 191.020117][ C0] __fput+0x24a/0x8a0 [ 191.024186][ C0] task_work_run+0x24f/0x310 [ 191.028812][ C0] ? __pfx_task_work_run+0x10/0x10 [ 191.033969][ C0] ? do_exit+0xa2a/0x27f0 [ 191.038386][ C0] ? kmem_cache_free+0x145/0x350 [ 191.043365][ C0] do_exit+0xa2f/0x27f0 [ 191.047661][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 191.053701][ C0] ? __pfx_do_exit+0x10/0x10 [ 191.058449][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 191.063735][ C0] do_group_exit+0x207/0x2c0 [ 191.068464][ C0] get_signal+0x16a1/0x1740 [ 191.073042][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 191.079054][ C0] ? kfree+0x4e/0x360 [ 191.083077][ C0] ? __pfx_get_signal+0x10/0x10 [ 191.088040][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 191.093971][ C0] ? do_sock_setsockopt+0x3e2/0x720 [ 191.099324][ C0] arch_do_signal_or_restart+0x96/0x830 [ 191.104978][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 191.111175][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 191.117246][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 191.123009][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 191.128701][ C0] do_syscall_64+0x100/0x230 [ 191.133338][ C0] ? clear_bhb_loop+0x35/0x90 [ 191.138132][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.144083][ C0] RIP: 0033:0x7f172ed797ea [ 191.148577][ C0] RSP: 002b:00007ffc5c015bb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 191.157133][ C0] RAX: 0000000000000000 RBX: 00007ffc5c015c40 RCX: 00007f172ed797ea [ 191.165251][ C0] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 191.173282][ C0] RBP: 0000000000000003 R08: 0000000000000370 R09: 00007ffc5c015ff7 [ 191.181390][ C0] R10: 00007f172eed4560 R11: 0000000000000206 R12: 00007f172eed4500 [ 191.189515][ C0] R13: 00007ffc5c015bdc R14: 0000000000000000 R15: 00007f172eed6000 [ 191.197659][ C0] [ 191.200719][ C0] DEBUG: waiting rtnl_mutex for 700 jiffies. [ 191.206810][ C0] task:kworker/0:2 state:D stack:22064 pid:1169 tgid:1169 ppid:2 flags:0x00004000 [ 191.217156][ C0] Workqueue: events linkwatch_event [ 191.222427][ C0] Call Trace: [ 191.225828][ C0] [ 191.228796][ C0] __schedule+0x1800/0x4a60 [ 191.233413][ C0] ? __pfx___schedule+0x10/0x10 [ 191.238390][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 191.244500][ C0] ? __pfx_lock_release+0x10/0x10 [ 191.249576][ C0] ? kick_pool+0x1bd/0x620 [ 191.254042][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 191.259357][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 191.264673][ C0] ? schedule+0x90/0x320 [ 191.268968][ C0] schedule+0x14b/0x320 [ 191.273169][ C0] schedule_preempt_disabled+0x13/0x30 [ 191.278781][ C0] __mutex_lock+0x6a4/0xd70 [ 191.283334][ C0] ? __mutex_lock+0x527/0xd70 [ 191.288128][ C0] ? linkwatch_event+0xe/0x60 [ 191.292846][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 191.298028][ C0] ? get_rtnl_holder+0x144/0x190 [ 191.303013][ C0] ? process_scheduled_works+0x945/0x1830 [ 191.308852][ C0] linkwatch_event+0xe/0x60 [ 191.313397][ C0] process_scheduled_works+0xa2c/0x1830 [ 191.319206][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 191.325364][ C0] ? assign_work+0x364/0x3d0 [ 191.330017][ C0] worker_thread+0x86d/0xd40 [ 191.334777][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 191.340726][ C0] ? __kthread_parkme+0x169/0x1d0 [ 191.345918][ C0] ? __pfx_worker_thread+0x10/0x10 [ 191.351084][ C0] kthread+0x2f0/0x390 [ 191.355295][ C0] ? __pfx_worker_thread+0x10/0x10 [ 191.360454][ C0] ? __pfx_kthread+0x10/0x10 [ 191.365161][ C0] ret_from_fork+0x4b/0x80 [ 191.369620][ C0] ? __pfx_kthread+0x10/0x10 [ 191.374310][ C0] ret_from_fork_asm+0x1a/0x30 [ 191.379157][ C0] [ 191.382215][ C0] [ 191.382215][ C0] Showing all locks held in the system: [ 191.390042][ C0] 3 locks held by kworker/u8:0/11: [ 191.395260][ C0] 3 locks held by kworker/u8:1/12: [ 191.400408][ C0] 3 locks held by kworker/1:2/58: [ 191.405636][ C0] 3 locks held by kworker/0:2/1169: [ 191.410924][ C0] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 191.422179][ C0] #1: ffffc900043c7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 191.433445][ C0] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 191.442848][ C0] 1 lock held by syslogd/4663: [ 191.447713][ C0] 2 locks held by getty/4982: [ 191.452422][ C0] #0: ffff88802b6730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 191.462464][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 191.472837][ C0] 2 locks held by syz-executor/5457: [ 191.478229][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 191.487441][ C0] #1: ffffffff8e7d1b50 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5c4/0x1c40 [ 191.499000][ C0] 3 locks held by syz-executor/5458: [ 191.504393][ C0] #0: ffff88805b45cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 191.514558][ C0] #1: ffff88805b45c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 191.524526][ C0] #2: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 191.535726][ C0] 1 lock held by syz.0.42/5671: [ 191.540631][ C0] 3 locks held by dhcpcd-run-hook/5726: [ 191.546332][ C0] 2 locks held by udevd/5727: [ 191.551077][ C0] [ 191.553513][ C0] ============================================= [ 191.553513][ C0] [ 192.564225][ C0] DEBUG: holding rtnl_mutex for 856 jiffies. [ 192.570393][ C0] task:syz-executor state:D stack:19952 pid:5457 tgid:5457 ppid:1 flags:0x00004006 [ 192.580763][ C0] Call Trace: [ 192.584101][ C0] [ 192.587086][ C0] __schedule+0x1800/0x4a60 [ 192.591708][ C0] ? __pfx___schedule+0x10/0x10 [ 192.596684][ C0] ? __pfx_lock_release+0x10/0x10 [ 192.601754][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 192.607355][ C0] ? schedule+0x90/0x320 [ 192.611645][ C0] schedule+0x14b/0x320 [ 192.615942][ C0] schedule_preempt_disabled+0x13/0x30 [ 192.621454][ C0] __mutex_lock+0x6a4/0xd70 [ 192.626086][ C0] ? __mutex_lock+0x527/0xd70 [ 192.630799][ C0] ? synchronize_rcu_expedited+0x451/0x830 [ 192.636744][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 192.641811][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 192.647195][ C0] synchronize_rcu_expedited+0x451/0x830 [ 192.653012][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 192.659423][ C0] ? __pfx___might_resched+0x10/0x10 [ 192.664845][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 192.670883][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 192.677427][ C0] synchronize_rcu+0x11b/0x360 [ 192.682252][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 192.687705][ C0] ? __phys_addr+0x105/0x170 [ 192.692352][ C0] lockdep_unregister_key+0x4b7/0x540 [ 192.697863][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 192.703806][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 192.709149][ C0] ? __qdisc_destroy+0x150/0x410 [ 192.714156][ C0] ? kfree+0x149/0x360 [ 192.718265][ C0] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 192.723856][ C0] __qdisc_destroy+0x165/0x410 [ 192.728764][ C0] dev_shutdown+0x357/0x450 [ 192.733347][ C0] unregister_netdevice_many_notify+0x97b/0x1c40 [ 192.739913][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 192.746881][ C0] ? irqentry_exit+0x63/0x90 [ 192.751614][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 192.756970][ C0] ? queue_delayed_work_on+0x237/0x390 [ 192.762486][ C0] ? queue_delayed_work_on+0x267/0x390 [ 192.768096][ C0] ? queue_delayed_work_on+0x271/0x390 [ 192.773612][ C0] unregister_netdevice_queue+0x303/0x370 [ 192.779427][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 192.785817][ C0] __tun_detach+0x6b9/0x1600 [ 192.790490][ C0] tun_chr_close+0x108/0x1b0 [ 192.795194][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 192.800347][ C0] __fput+0x24a/0x8a0 [ 192.804473][ C0] task_work_run+0x24f/0x310 [ 192.809109][ C0] ? __pfx_task_work_run+0x10/0x10 [ 192.814357][ C0] ? do_exit+0xa2a/0x27f0 [ 192.818723][ C0] ? kmem_cache_free+0x145/0x350 [ 192.823710][ C0] do_exit+0xa2f/0x27f0 [ 192.828001][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 192.834028][ C0] ? __pfx_do_exit+0x10/0x10 [ 192.838754][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 192.844036][ C0] do_group_exit+0x207/0x2c0 [ 192.848770][ C0] get_signal+0x16a1/0x1740 [ 192.853335][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 192.859339][ C0] ? kfree+0x4e/0x360 [ 192.863361][ C0] ? __pfx_get_signal+0x10/0x10 [ 192.868321][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 192.874322][ C0] ? do_sock_setsockopt+0x3e2/0x720 [ 192.879570][ C0] arch_do_signal_or_restart+0x96/0x830 [ 192.885252][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 192.891453][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 192.897590][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 192.903355][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 192.909045][ C0] do_syscall_64+0x100/0x230 [ 192.913672][ C0] ? clear_bhb_loop+0x35/0x90 [ 192.918464][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.924472][ C0] RIP: 0033:0x7f172ed797ea [ 192.928923][ C0] RSP: 002b:00007ffc5c015bb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 192.937469][ C0] RAX: 0000000000000000 RBX: 00007ffc5c015c40 RCX: 00007f172ed797ea [ 192.945547][ C0] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 192.953548][ C0] RBP: 0000000000000003 R08: 0000000000000370 R09: 00007ffc5c015ff7 [ 192.961630][ C0] R10: 00007f172eed4560 R11: 0000000000000206 R12: 00007f172eed4500 [ 192.969706][ C0] R13: 00007ffc5c015bdc R14: 0000000000000000 R15: 00007f172eed6000 [ 192.977849][ C0] [ 192.980904][ C0] DEBUG: waiting rtnl_mutex for 878 jiffies. [ 192.986997][ C0] task:kworker/0:2 state:D stack:22064 pid:1169 tgid:1169 ppid:2 flags:0x00004000 [ 192.997321][ C0] Workqueue: events linkwatch_event [ 193.002569][ C0] Call Trace: [ 193.005966][ C0] [ 193.008936][ C0] __schedule+0x1800/0x4a60 [ 193.013532][ C0] ? __pfx___schedule+0x10/0x10 [ 193.018507][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 193.024609][ C0] ? __pfx_lock_release+0x10/0x10 [ 193.029685][ C0] ? kick_pool+0x1bd/0x620 [ 193.034184][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 193.039443][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 193.044792][ C0] ? schedule+0x90/0x320 [ 193.049075][ C0] schedule+0x14b/0x320 [ 193.053275][ C0] schedule_preempt_disabled+0x13/0x30 [ 193.058855][ C0] __mutex_lock+0x6a4/0xd70 [ 193.063406][ C0] ? __mutex_lock+0x527/0xd70 [ 193.068192][ C0] ? linkwatch_event+0xe/0x60 [ 193.072909][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 193.078073][ C0] ? get_rtnl_holder+0x144/0x190 [ 193.083052][ C0] ? process_scheduled_works+0x945/0x1830 [ 193.088905][ C0] linkwatch_event+0xe/0x60 [ 193.093454][ C0] process_scheduled_works+0xa2c/0x1830 [ 193.099211][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 193.105340][ C0] ? assign_work+0x364/0x3d0 [ 193.109981][ C0] worker_thread+0x86d/0xd40 [ 193.114717][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 193.120666][ C0] ? __kthread_parkme+0x169/0x1d0 [ 193.125832][ C0] ? __pfx_worker_thread+0x10/0x10 [ 193.130984][ C0] kthread+0x2f0/0x390 [ 193.135165][ C0] ? __pfx_worker_thread+0x10/0x10 [ 193.140318][ C0] ? __pfx_kthread+0x10/0x10 [ 193.145018][ C0] ret_from_fork+0x4b/0x80 [ 193.149476][ C0] ? __pfx_kthread+0x10/0x10 [ 193.154099][ C0] ret_from_fork_asm+0x1a/0x30 [ 193.158984][ C0] [ 193.162047][ C0] [ 193.162047][ C0] Showing all locks held in the system: [ 193.169878][ C0] 1 lock held by pool_workqueue_/3: [ 193.175211][ C0] 2 locks held by kworker/u8:3/52: [ 193.180351][ C0] 5 locks held by kworker/u8:5/64: [ 193.185573][ C0] 3 locks held by kworker/0:2/1169: [ 193.190860][ C0] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 193.202092][ C0] #1: ffffc900043c7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 193.213301][ C0] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 193.222545][ C0] 2 locks held by getty/4982: [ 193.227326][ C0] #0: ffff88802b6730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 193.237323][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 193.247677][ C0] 3 locks held by kworker/1:7/5279: [ 193.252910][ C0] 3 locks held by kworker/0:3/5282: [ 193.258217][ C0] 2 locks held by syz-executor/5457: [ 193.263549][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 193.272770][ C0] #1: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 193.283890][ C0] 1 lock held by syz-executor/5458: [ 193.289183][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 193.298437][ C0] 1 lock held by syz.0.42/5671: [ 193.303342][ C0] 1 lock held by syz.3.48/5700: [ 193.308300][ C0] 2 locks held by syz-executor/5717: [ 193.313616][ C0] 1 lock held by sed/5731: [ 193.318115][ C0] [ 193.320453][ C0] ============================================= [ 193.320453][ C0] [ 194.406219][ C0] DEBUG: holding rtnl_mutex for 1040 jiffies. [ 194.412404][ C0] task:syz-executor state:D stack:19952 pid:5457 tgid:5457 ppid:1 flags:0x00004006 [ 194.422795][ C0] Call Trace: [ 194.426184][ C0] [ 194.429156][ C0] __schedule+0x1800/0x4a60 [ 194.433771][ C0] ? __pfx___schedule+0x10/0x10 [ 194.438771][ C0] ? __pfx_lock_release+0x10/0x10 [ 194.443844][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 194.449888][ C0] ? schedule+0x90/0x320 [ 194.454204][ C0] schedule+0x14b/0x320 [ 194.458409][ C0] synchronize_rcu_expedited+0x684/0x830 [ 194.464088][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 194.470369][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 194.475771][ C0] ? __pfx___might_resched+0x10/0x10 [ 194.481228][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 194.487374][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 194.493494][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 194.499990][ C0] synchronize_rcu+0x11b/0x360 [ 194.504871][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 194.510198][ C0] ? __phys_addr+0x105/0x170 [ 194.514922][ C0] lockdep_unregister_key+0x4b7/0x540 [ 194.520367][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 194.526368][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 194.531621][ C0] ? __qdisc_destroy+0x150/0x410 [ 194.536746][ C0] ? kfree+0x149/0x360 [ 194.540871][ C0] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 194.546572][ C0] __qdisc_destroy+0x165/0x410 [ 194.551395][ C0] dev_shutdown+0x357/0x450 [ 194.556038][ C0] unregister_netdevice_many_notify+0x97b/0x1c40 [ 194.562477][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 194.569373][ C0] ? irqentry_exit+0x63/0x90 [ 194.574006][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 194.579363][ C0] ? queue_delayed_work_on+0x237/0x390 [ 194.584941][ C0] ? queue_delayed_work_on+0x267/0x390 [ 194.590452][ C0] ? queue_delayed_work_on+0x271/0x390 [ 194.596062][ C0] unregister_netdevice_queue+0x303/0x370 [ 194.601828][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 194.608200][ C0] __tun_detach+0x6b9/0x1600 [ 194.612870][ C0] tun_chr_close+0x108/0x1b0 [ 194.617577][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 194.622746][ C0] __fput+0x24a/0x8a0 [ 194.626868][ C0] task_work_run+0x24f/0x310 [ 194.631506][ C0] ? __pfx_task_work_run+0x10/0x10 [ 194.636729][ C0] ? do_exit+0xa2a/0x27f0 [ 194.641096][ C0] ? kmem_cache_free+0x145/0x350 [ 194.646175][ C0] do_exit+0xa2f/0x27f0 [ 194.650393][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 194.656587][ C0] ? __pfx_do_exit+0x10/0x10 [ 194.661258][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 194.666631][ C0] do_group_exit+0x207/0x2c0 [ 194.671276][ C0] get_signal+0x16a1/0x1740 [ 194.675942][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 194.681915][ C0] ? kfree+0x4e/0x360 [ 194.686039][ C0] ? __pfx_get_signal+0x10/0x10 [ 194.690936][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 194.696953][ C0] ? do_sock_setsockopt+0x3e2/0x720 [ 194.702210][ C0] arch_do_signal_or_restart+0x96/0x830 [ 194.707948][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 194.714198][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 194.720249][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 194.726141][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 194.731743][ C0] do_syscall_64+0x100/0x230 [ 194.736478][ C0] ? clear_bhb_loop+0x35/0x90 [ 194.741201][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.747204][ C0] RIP: 0033:0x7f172ed797ea [ 194.751653][ C0] RSP: 002b:00007ffc5c015bb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 194.760206][ C0] RAX: 0000000000000000 RBX: 00007ffc5c015c40 RCX: 00007f172ed797ea [ 194.769896][ C0] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 194.778027][ C0] RBP: 0000000000000003 R08: 0000000000000370 R09: 00007ffc5c015ff7 [ 194.786154][ C0] R10: 00007f172eed4560 R11: 0000000000000206 R12: 00007f172eed4500 [ 194.794202][ C0] R13: 00007ffc5c015bdc R14: 0000000000000000 R15: 00007f172eed6000 [ 194.802258][ C0] [ 194.805395][ C0] DEBUG: waiting rtnl_mutex for 1061 jiffies. [ 194.811491][ C0] task:kworker/0:2 state:D stack:22064 pid:1169 tgid:1169 ppid:2 flags:0x00004000 [ 194.821845][ C0] Workqueue: events linkwatch_event [ 194.827148][ C0] Call Trace: [ 194.830453][ C0] [ 194.833770][ C0] __schedule+0x1800/0x4a60 [ 194.838528][ C0] ? __pfx___schedule+0x10/0x10 [ 194.843451][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 194.849564][ C0] ? __pfx_lock_release+0x10/0x10 [ 194.854720][ C0] ? kick_pool+0x1bd/0x620 [ 194.859194][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.864515][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 194.869763][ C0] ? schedule+0x90/0x320 [ 194.874048][ C0] schedule+0x14b/0x320 [ 194.878333][ C0] schedule_preempt_disabled+0x13/0x30 [ 194.883873][ C0] __mutex_lock+0x6a4/0xd70 [ 194.888588][ C0] ? __mutex_lock+0x527/0xd70 [ 194.893328][ C0] ? linkwatch_event+0xe/0x60 [ 194.898166][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 194.903250][ C0] ? get_rtnl_holder+0x144/0x190 [ 194.908317][ C0] ? process_scheduled_works+0x945/0x1830 [ 194.914086][ C0] linkwatch_event+0xe/0x60 [ 194.918664][ C0] process_scheduled_works+0xa2c/0x1830 [ 194.924419][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 194.930462][ C0] ? assign_work+0x364/0x3d0 [ 194.935207][ C0] worker_thread+0x86d/0xd40 [ 194.939877][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 194.945922][ C0] ? __kthread_parkme+0x169/0x1d0 [ 194.951000][ C0] ? __pfx_worker_thread+0x10/0x10 [ 194.956231][ C0] kthread+0x2f0/0x390 [ 194.960344][ C0] ? __pfx_worker_thread+0x10/0x10 [ 194.965549][ C0] ? __pfx_kthread+0x10/0x10 [ 194.970173][ C0] ret_from_fork+0x4b/0x80 [ 194.974708][ C0] ? __pfx_kthread+0x10/0x10 [ 194.979337][ C0] ret_from_fork_asm+0x1a/0x30 [ 194.984258][ C0] [ 194.987340][ C0] [ 194.987340][ C0] Showing all locks held in the system: [ 194.995185][ C0] 2 locks held by kworker/u8:3/52: [ 195.000362][ C0] 3 locks held by kworker/0:2/1169: [ 195.005664][ C0] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 195.016900][ C0] #1: ffffc900043c7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 195.028108][ C0] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 195.037395][ C0] 3 locks held by kworker/u8:9/2546: [ 195.042722][ C0] 2 locks held by syslogd/4663: [ 195.047679][ C0] 1 lock held by klogd/4670: [ 195.052346][ C0] 1 lock held by udevd/4681: [ 195.057044][ C0] 2 locks held by getty/4982: [ 195.061751][ C0] #0: ffff88802b6730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 195.071725][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 195.082080][ C0] 3 locks held by kworker/1:6/5278: [ 195.087389][ C0] 2 locks held by kworker/0:4/5287: [ 195.092619][ C0] 2 locks held by syz-executor/5457: [ 195.098012][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 195.107218][ C0] #1: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 195.118336][ C0] 1 lock held by syz-executor/5458: [ 195.123583][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 195.132795][ C0] 1 lock held by syz.0.42/5671: [ 195.137773][ C0] 1 lock held by syz.3.48/5700: [ 195.142656][ C0] 2 locks held by syz-executor/5717: [ 195.148056][ C0] 2 locks held by sed/5731: [ 195.152614][ C0] [ 195.155050][ C0] ============================================= [ 195.155050][ C0] [ 195.171317][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.258455][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.902123][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.068268][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 196.170874][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.180845][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.194236][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.207010][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 196.228894][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 196.247468][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 196.279488][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 196.308400][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.649481][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 196.674768][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 196.798754][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.205876][ C0] DEBUG: holding rtnl_mutex for 502 jiffies. [ 197.211947][ C0] task:syz-executor state:R running task stack:20992 pid:5458 tgid:5458 ppid:1 flags:0x00004006 [ 197.223914][ C0] Call Trace: [ 197.227306][ C0] [ 197.230303][ C0] __schedule+0x1800/0x4a60 [ 197.234994][ C0] ? __pfx___schedule+0x10/0x10 [ 197.239899][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 197.246061][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.252505][ C0] ? preempt_schedule+0xe1/0xf0 [ 197.257548][ C0] preempt_schedule_common+0x84/0xd0 [ 197.262911][ C0] preempt_schedule+0xe1/0xf0 [ 197.267708][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 197.273128][ C0] ? unwind_next_frame+0x7be/0x2a00 [ 197.278466][ C0] preempt_schedule_thunk+0x1a/0x30 [ 197.283707][ C0] ? unwind_next_frame+0x196f/0x2a00 [ 197.289128][ C0] ? unwind_next_frame+0x1e75/0x2a00 [ 197.294535][ C0] ? unwind_next_frame+0x211f/0x2a00 [ 197.299869][ C0] unwind_next_frame+0x2124/0x2a00 [ 197.305125][ C0] ? do_group_exit+0x207/0x2c0 [ 197.309930][ C0] ? do_group_exit+0x207/0x2c0 [ 197.314800][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 197.321000][ C0] arch_stack_walk+0x151/0x1b0 [ 197.325899][ C0] ? get_signal+0x16a1/0x1740 [ 197.330622][ C0] stack_trace_save+0x118/0x1d0 [ 197.335599][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 197.341049][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 197.347185][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 197.353101][ C0] ? __schedule+0x17bc/0x4a60 [ 197.357931][ C0] ? __pfx_lock_release+0x10/0x10 [ 197.363075][ C0] ? __schedule+0x1800/0x4a60 [ 197.367964][ C0] ? __pfx___schedule+0x10/0x10 [ 197.372862][ C0] ? __pfx_lock_release+0x10/0x10 [ 197.378004][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 197.383514][ C0] ? schedule+0x90/0x320 [ 197.387882][ C0] ? schedule+0x14b/0x320 [ 197.392260][ C0] ? schedule_preempt_disabled+0x13/0x30 [ 197.398099][ C0] ? __mutex_lock+0x6a4/0xd70 [ 197.402866][ C0] ? __mutex_lock+0x527/0xd70 [ 197.407699][ C0] ? synchronize_rcu_expedited+0x451/0x830 [ 197.413555][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 197.418720][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 197.423970][ C0] ? synchronize_rcu_expedited+0x451/0x830 [ 197.429917][ C0] ? ib_device_get_by_netdev+0x85/0x5e0 [ 197.435599][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 197.441815][ C0] ? is_hsr_master+0x19/0x70 [ 197.446531][ C0] ? hsr_netdev_notify+0x295/0xb50 [ 197.451687][ C0] ? __pfx_hsr_netdev_notify+0x10/0x10 [ 197.457355][ C0] ? udp_tunnel_nic_netdevice_event+0x192/0x12f0 [ 197.463742][ C0] ? tun_net_uninit+0x419/0xa00 [ 197.468734][ C0] ? __pfx_tun_net_uninit+0x10/0x10 [ 197.473978][ C0] ? unregister_netdevice_many_notify+0x15ea/0x1c40 [ 197.480730][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 197.487629][ C0] ? mark_lock+0x9a/0x360 [ 197.492039][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 197.498217][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.504724][ C0] ? queue_delayed_work_on+0x1eb/0x390 [ 197.510232][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 197.515575][ C0] ? unregister_netdevice_queue+0x303/0x370 [ 197.521515][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 197.527906][ C0] ? __tun_detach+0x6b9/0x1600 [ 197.532744][ C0] ? tun_chr_close+0x108/0x1b0 [ 197.537651][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 197.542807][ C0] ? __fput+0x24a/0x8a0 [ 197.547096][ C0] ? task_work_run+0x24f/0x310 [ 197.551908][ C0] ? __pfx_task_work_run+0x10/0x10 [ 197.557153][ C0] ? do_exit+0xa2a/0x27f0 [ 197.561518][ C0] ? kmem_cache_free+0x145/0x350 [ 197.566591][ C0] ? do_exit+0xa2f/0x27f0 [ 197.570961][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 197.576582][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.577023][ C0] ? __pfx_do_exit+0x10/0x10 [ 197.585260][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.588505][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 197.597387][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.600643][ C0] ? do_group_exit+0x207/0x2c0 [ 197.612505][ C0] ? get_signal+0x16a1/0x1740 [ 197.617331][ C0] ? __pfx_vfs_read+0x10/0x10 [ 197.622055][ C0] ? __pfx_get_signal+0x10/0x10 [ 197.627052][ C0] ? arch_do_signal_or_restart+0x96/0x830 [ 197.632818][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 197.639103][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 197.645252][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 197.651022][ C0] ? syscall_exit_to_user_mode+0xc9/0x370 [ 197.656879][ C0] ? do_syscall_64+0x100/0x230 [ 197.661677][ C0] ? clear_bhb_loop+0x35/0x90 [ 197.666538][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.672681][ C0] [ 197.675848][ C0] [ 197.675848][ C0] Showing all locks held in the system: [ 197.683619][ C0] 2 locks held by kworker/u8:0/11: [ 197.688949][ C0] 3 locks held by kworker/0:2/1169: [ 197.694263][ C0] 4 locks held by kworker/u8:9/2546: [ 197.699577][ C0] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 197.710723][ C0] #1: ffffc900093a7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 197.721512][ C0] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 197.731193][ C0] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 197.740780][ C0] 4 locks held by udevd/4681: [ 197.745593][ C0] 2 locks held by getty/4982: [ 197.750309][ C0] #0: ffff88802b6730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 197.760291][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 197.770642][ C0] 3 locks held by kworker/u9:9/5244: [ 197.776119][ C0] #0: ffff888043338948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 197.787143][ C0] #1: ffffc90003dd7d00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 197.799503][ C0] #2: ffff88807ca80d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1bf/0x6b0 [ 197.809157][ C0] 3 locks held by kworker/0:3/5282: [ 197.814475][ C0] 2 locks held by syz-executor/5458: [ 197.819789][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 197.829026][ C0] #1: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 197.840158][ C0] 4 locks held by syz.0.42/5671: [ 197.845200][ C0] #0: ffff88807bd90d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 197.855386][ C0] #1: ffff88807bd90078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 197.865308][ C0] #2: ffffffff8fded8e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 197.875546][ C0] #3: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 197.886694][ C0] 1 lock held by syz.3.48/5700: [ 197.891577][ C0] 3 locks held by kworker/u8:13/5713: [ 197.897058][ C0] 2 locks held by syz-executor/5722: [ 197.902386][ C0] 1 lock held by syz-executor/5733: [ 197.907719][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 197.917358][ C0] 1 lock held by syz-executor/5734: [ 197.922589][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 197.932240][ C0] 3 locks held by dhcpcd-run-hook/5739: [ 197.937892][ C0] [ 197.940246][ C0] ============================================= [ 197.940246][ C0] [ 198.032954][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 198.964394][ C0] DEBUG: holding rtnl_mutex for 678 jiffies. [ 198.970397][ C0] task:syz-executor state:R running task stack:20992 pid:5458 tgid:5458 ppid:1 flags:0x00004006 [ 198.982147][ C0] Call Trace: [ 198.985438][ C0] [ 198.988356][ C0] __schedule+0x1800/0x4a60 [ 198.992863][ C0] ? __pfx___schedule+0x10/0x10 [ 198.997728][ C0] ? __pfx_lock_release+0x10/0x10 [ 199.002745][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 199.008230][ C0] ? schedule+0x90/0x320 [ 199.012458][ C0] schedule+0x14b/0x320 [ 199.016621][ C0] schedule_preempt_disabled+0x13/0x30 [ 199.022067][ C0] __mutex_lock+0x6a4/0xd70 [ 199.024389][ T5230] Bluetooth: hci0: command tx timeout [ 199.026579][ C0] ? __mutex_lock+0x527/0xd70 [ 199.026607][ C0] ? synchronize_rcu_expedited+0x451/0x830 [ 199.026632][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 199.026659][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 199.026691][ C0] synchronize_rcu_expedited+0x451/0x830 [ 199.026714][ C0] ? ib_device_get_by_netdev+0x85/0x5e0 [ 199.026745][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 199.026788][ C0] ? is_hsr_master+0x19/0x70 [ 199.026815][ C0] ? hsr_netdev_notify+0x295/0xb50 [ 199.026844][ C0] ? __pfx_hsr_netdev_notify+0x10/0x10 [ 199.026869][ C0] ? udp_tunnel_nic_netdevice_event+0x192/0x12f0 [ 199.026913][ C0] tun_net_uninit+0x419/0xa00 [ 199.026945][ C0] ? __pfx_tun_net_uninit+0x10/0x10 [ 199.026975][ C0] unregister_netdevice_many_notify+0x15ea/0x1c40 [ 199.027022][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 199.027056][ C0] ? mark_lock+0x9a/0x360 [ 199.027089][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 199.027121][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.027156][ C0] ? queue_delayed_work_on+0x1eb/0x390 [ 199.027187][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 199.033051][ T5230] Bluetooth: hci1: command tx timeout [ 199.037389][ C0] unregister_netdevice_queue+0x303/0x370 [ 199.037421][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 199.037454][ C0] __tun_detach+0x6b9/0x1600 [ 199.037495][ C0] tun_chr_close+0x108/0x1b0 [ 199.037517][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 199.037539][ C0] __fput+0x24a/0x8a0 [ 199.037576][ C0] task_work_run+0x24f/0x310 [ 199.037606][ C0] ? __pfx_task_work_run+0x10/0x10 [ 199.037633][ C0] ? do_exit+0xa2a/0x27f0 [ 199.037652][ C0] ? kmem_cache_free+0x145/0x350 [ 199.037684][ C0] do_exit+0xa2f/0x27f0 [ 199.037709][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 199.037743][ C0] ? __pfx_do_exit+0x10/0x10 [ 199.037770][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 199.037813][ C0] do_group_exit+0x207/0x2c0 [ 199.037842][ C0] get_signal+0x16a1/0x1740 [ 199.037886][ C0] ? __pfx_vfs_read+0x10/0x10 [ 199.230808][ C0] ? __pfx_get_signal+0x10/0x10 [ 199.235686][ C0] arch_do_signal_or_restart+0x96/0x830 [ 199.241220][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 199.247373][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 199.253347][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 199.259072][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 199.264623][ C0] do_syscall_64+0x100/0x230 [ 199.269191][ C0] ? clear_bhb_loop+0x35/0x90 [ 199.273853][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.279745][ C0] RIP: 0033:0x7feb7bd7643c [ 199.284176][ C0] RSP: 002b:00007ffeb9beefa0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.292572][ C0] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007feb7bd7643c [ 199.300544][ C0] RDX: 0000000000000028 RSI: 00007ffeb9bef050 RDI: 00000000000000f9 [ 199.308516][ C0] RBP: 00007ffeb9beeffc R08: 0000000000000000 R09: 0079746972756365 [ 199.316488][ C0] R10: 00007feb7bed37e0 R11: 0000000000000246 R12: 0000000000000045 [ 199.324460][ C0] R13: 00000000000294a0 R14: 0000000000028b4d R15: 00007ffeb9bef050 [ 199.332445][ C0] [ 199.335486][ C0] [ 199.335486][ C0] Showing all locks held in the system: [ 199.343180][ C0] 2 locks held by kworker/u8:0/11: [ 199.348302][ C0] 4 locks held by kworker/u8:6/1113: [ 199.353563][ C0] 2 locks held by kworker/0:2/1169: [ 199.358757][ C0] 3 locks held by kworker/u8:7/1833: [ 199.364026][ C0] 4 locks held by kworker/u8:9/2546: [ 199.369306][ C0] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 199.380191][ C0] #1: ffffc900093a7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 199.390723][ C0] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 199.400237][ C0] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 199.409581][ C0] 4 locks held by udevd/4681: [ 199.414263][ C0] 2 locks held by getty/4982: [ 199.418919][ C0] #0: ffff88802b6730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 199.428674][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 199.438785][ C0] 3 locks held by kworker/u9:9/5244: [ 199.444067][ C0] #0: ffff888043338948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 199.454919][ C0] #1: ffffc90003dd7d00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 199.467045][ C0] #2: ffff88807ca80d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1bf/0x6b0 [ 199.476472][ C0] 3 locks held by kworker/0:3/5282: [ 199.481660][ C0] 2 locks held by syz-executor/5458: [ 199.486952][ C0] 2 locks held by syz.0.42/5671: [ 199.491869][ C0] #0: ffff88807bd90d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 199.501800][ C0] #1: ffff88807bd90078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 199.511468][ C0] 3 locks held by kworker/u8:13/5713: [ 199.516839][ C0] 2 locks held by syz-executor/5722: [ 199.522107][ C0] 1 lock held by syz-executor/5733: [ 199.527301][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 199.536737][ C0] 1 lock held by syz-executor/5734: [ 199.541927][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 199.551369][ C0] [ 199.553679][ C0] ============================================= [ 199.553679][ C0] [ 199.568722][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.605016][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.615385][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.624505][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.685882][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.769144][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 200.777685][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.097052][ T5240] Bluetooth: hci0: command tx timeout [ 201.102692][ T5244] Bluetooth: hci1: command tx timeout [ 201.604153][ C0] DEBUG: waiting rtnl_mutex for 522 jiffies. [ 201.610177][ C0] task:syz-executor state:D stack:24992 pid:5733 tgid:5733 ppid:5716 flags:0x00004000 [ 201.620378][ C0] Call Trace: [ 201.623641][ C0] [ 201.626581][ C0] __schedule+0x1800/0x4a60 [ 201.631089][ C0] ? __pfx___schedule+0x10/0x10 [ 201.635977][ C0] ? __pfx_lock_release+0x10/0x10 [ 201.641014][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 201.646497][ C0] ? schedule+0x90/0x320 [ 201.650725][ C0] schedule+0x14b/0x320 [ 201.654931][ C0] schedule_preempt_disabled+0x13/0x30 [ 201.660423][ C0] __mutex_lock+0x6a4/0xd70 [ 201.665014][ C0] ? __mutex_lock+0x527/0xd70 [ 201.669699][ C0] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 201.674849][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 201.679881][ C0] ? get_rtnl_holder+0x144/0x190 [ 201.684846][ C0] rtnetlink_rcv_msg+0x6eb/0xd00 [ 201.689793][ C0] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 201.694942][ C0] ? __lock_acquire+0x1384/0x2050 [ 201.699974][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.705472][ C0] netlink_rcv_skb+0x1e3/0x430 [ 201.710235][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.715716][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.721009][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 201.726224][ C0] netlink_unicast+0x7f6/0x990 [ 201.730992][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 201.736296][ C0] ? __virt_addr_valid+0x183/0x530 [ 201.741402][ C0] ? __check_object_size+0x49c/0x900 [ 201.746702][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 201.751812][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 201.756600][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.761894][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 201.766850][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 201.772126][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 201.777607][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.782885][ C0] __sock_sendmsg+0x221/0x270 [ 201.787590][ C0] __sys_sendto+0x3a4/0x4f0 [ 201.792104][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 201.797169][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 201.803155][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.809504][ C0] ? exc_page_fault+0x590/0x8c0 [ 201.814379][ C0] __x64_sys_sendto+0xde/0x100 [ 201.819142][ C0] do_syscall_64+0xf3/0x230 [ 201.823638][ C0] ? clear_bhb_loop+0x35/0x90 [ 201.828335][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.834246][ C0] RIP: 0033:0x7ff2ab97978c [ 201.838656][ C0] RSP: 002b:00007ffe6d2d4a30 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 201.847087][ C0] RAX: ffffffffffffffda RBX: 00007ff2ac634620 RCX: 00007ff2ab97978c [ 201.855078][ C0] RDX: 0000000000000028 RSI: 00007ff2ac634670 RDI: 0000000000000003 [ 201.863041][ C0] RBP: 0000000000000000 R08: 00007ffe6d2d4a84 R09: 000000000000000c [ 201.871029][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 201.879015][ C0] R13: 0000000000000000 R14: 00007ff2ac634670 R15: 0000000000000000 [ 201.887011][ C0] [ 201.890021][ C0] DEBUG: waiting rtnl_mutex for 509 jiffies. [ 201.896019][ C0] task:syz-executor state:D stack:24992 pid:5734 tgid:5734 ppid:5717 flags:0x00000000 [ 201.906203][ C0] Call Trace: [ 201.909472][ C0] [ 201.912397][ C0] __schedule+0x1800/0x4a60 [ 201.916946][ C0] ? __pfx___schedule+0x10/0x10 [ 201.921797][ C0] ? __pfx_lock_release+0x10/0x10 [ 201.926842][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 201.932301][ C0] ? schedule+0x90/0x320 [ 201.936565][ C0] schedule+0x14b/0x320 [ 201.940724][ C0] schedule_preempt_disabled+0x13/0x30 [ 201.946200][ C0] __mutex_lock+0x6a4/0xd70 [ 201.950698][ C0] ? __mutex_lock+0x527/0xd70 [ 201.955387][ C0] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 201.960499][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 201.965544][ C0] ? get_rtnl_holder+0x144/0x190 [ 201.970478][ C0] rtnetlink_rcv_msg+0x6eb/0xd00 [ 201.975433][ C0] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 201.980546][ C0] ? __lock_acquire+0x1384/0x2050 [ 201.985597][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.991070][ C0] netlink_rcv_skb+0x1e3/0x430 [ 201.995856][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 202.001317][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 202.006649][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 202.011844][ C0] netlink_unicast+0x7f6/0x990 [ 202.016637][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 202.021918][ C0] ? __virt_addr_valid+0x183/0x530 [ 202.027046][ C0] ? __check_object_size+0x49c/0x900 [ 202.032326][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 202.037464][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 202.042231][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.047534][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 202.052471][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 202.057768][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 202.063223][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.068523][ C0] __sock_sendmsg+0x221/0x270 [ 202.073206][ C0] __sys_sendto+0x3a4/0x4f0 [ 202.077727][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 202.082762][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 202.088763][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 202.095106][ C0] ? exc_page_fault+0x590/0x8c0 [ 202.099961][ C0] __x64_sys_sendto+0xde/0x100 [ 202.104776][ C0] do_syscall_64+0xf3/0x230 [ 202.109276][ C0] ? clear_bhb_loop+0x35/0x90 [ 202.113951][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.119864][ C0] RIP: 0033:0x7f605557978c [ 202.124294][ C0] RSP: 002b:00007fff35f473d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 202.132707][ C0] RAX: ffffffffffffffda RBX: 00007f6056234620 RCX: 00007f605557978c [ 202.140698][ C0] RDX: 0000000000000028 RSI: 00007f6056234670 RDI: 0000000000000003 [ 202.148686][ C0] RBP: 0000000000000000 R08: 00007fff35f47424 R09: 000000000000000c [ 202.156675][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 202.164661][ C0] R13: 0000000000000000 R14: 00007f6056234670 R15: 0000000000000000 [ 202.172634][ C0] [ 202.175669][ C0] [ 202.175669][ C0] Showing all locks held in the system: [ 202.183369][ C0] 5 locks held by kworker/u8:1/12: [ 202.188508][ C0] 4 locks held by kworker/u8:5/64: [ 202.193614][ C0] 3 locks held by kworker/0:2/1169: [ 202.198839][ C0] 7 locks held by kworker/u8:9/2546: [ 202.204144][ C0] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 202.215080][ C0] #1: ffffc900093a7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 202.225641][ C0] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 202.235066][ C0] #3: ffff888011d490e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 202.245103][ C0] #4: ffff88804347d250 (&devlink->lock_key#7){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 202.255927][ C0] #5: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 202.264833][ C0] #6: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 202.275734][ C0] 1 lock held by udevd/4681: [ 202.280312][ C0] 2 locks held by getty/4982: [ 202.284992][ C0] #0: ffff88802b6730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 202.294767][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 202.304897][ C0] 3 locks held by kworker/u9:9/5244: [ 202.310168][ C0] #0: ffff88802b193948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 202.321166][ C0] #1: ffffc90003dd7d00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 202.333285][ C0] #2: ffff88802b018d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1bf/0x6b0 [ 202.342712][ C0] 2 locks held by kworker/1:6/5278: [ 202.347917][ C0] 3 locks held by kworker/0:4/5287: [ 202.353104][ C0] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 202.364096][ C0] #1: ffffc900040d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 202.375117][ C0] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 202.384091][ C0] 1 lock held by syz.0.42/5671: [ 202.388952][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 202.397944][ C0] 1 lock held by syz-executor/5733: [ 202.403131][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 202.412572][ C0] 1 lock held by syz-executor/5734: [ 202.417785][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 202.427225][ C0] 1 lock held by syz-executor/5738: [ 202.432413][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 202.441843][ C0] 1 lock held by syz-executor/5742: [ 202.447044][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 202.456472][ C0] 1 lock held by syz-executor/5745: [ 202.461657][ C0] [ 202.463993][ C0] ============================================= [ 202.463993][ C0] [ 202.557390][ T5240] Bluetooth: hci2: command tx timeout [ 202.580100][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.647589][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.750125][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.767907][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.778236][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 202.786617][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.884854][ T5240] Bluetooth: hci3: command tx timeout [ 203.124874][ T5244] Bluetooth: hci0: command tx timeout [ 203.125938][ T2546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.130425][ T5240] Bluetooth: hci1: command tx timeout [ 203.524320][ C0] DEBUG: waiting rtnl_mutex for 714 jiffies. [ 203.530394][ C0] task:syz-executor state:D stack:24992 pid:5733 tgid:5733 ppid:5716 flags:0x00004000 [ 203.540772][ C0] Call Trace: [ 203.544094][ C0] [ 203.547122][ C0] __schedule+0x1800/0x4a60 [ 203.551739][ C0] ? __pfx___schedule+0x10/0x10 [ 203.556769][ C0] ? __pfx_lock_release+0x10/0x10 [ 203.561842][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 203.567457][ C0] ? schedule+0x90/0x320 [ 203.571749][ C0] schedule+0x14b/0x320 [ 203.576048][ C0] schedule_preempt_disabled+0x13/0x30 [ 203.581555][ C0] __mutex_lock+0x6a4/0xd70 [ 203.586193][ C0] ? __mutex_lock+0x527/0xd70 [ 203.590946][ C0] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 203.596219][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 203.601358][ C0] ? get_rtnl_holder+0x144/0x190 [ 203.606468][ C0] rtnetlink_rcv_msg+0x6eb/0xd00 [ 203.611483][ C0] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 203.616745][ C0] ? __lock_acquire+0x1384/0x2050 [ 203.621820][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 203.627442][ C0] netlink_rcv_skb+0x1e3/0x430 [ 203.632249][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 203.637856][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.643250][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.648585][ C0] netlink_unicast+0x7f6/0x990 [ 203.653429][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 203.658832][ C0] ? __virt_addr_valid+0x183/0x530 [ 203.663981][ C0] ? __check_object_size+0x49c/0x900 [ 203.669373][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 203.674618][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 203.679461][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.684875][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 203.689856][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 203.695242][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 203.700740][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.706129][ C0] __sock_sendmsg+0x221/0x270 [ 203.710857][ C0] __sys_sendto+0x3a4/0x4f0 [ 203.715496][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 203.720625][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 203.726738][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 203.733110][ C0] ? exc_page_fault+0x590/0x8c0 [ 203.738110][ C0] __x64_sys_sendto+0xde/0x100 [ 203.742924][ C0] do_syscall_64+0xf3/0x230 [ 203.747557][ C0] ? clear_bhb_loop+0x35/0x90 [ 203.752281][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.758289][ C0] RIP: 0033:0x7ff2ab97978c [ 203.762754][ C0] RSP: 002b:00007ffe6d2d4a30 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 203.771317][ C0] RAX: ffffffffffffffda RBX: 00007ff2ac634620 RCX: 00007ff2ab97978c [ 203.779404][ C0] RDX: 0000000000000028 RSI: 00007ff2ac634670 RDI: 0000000000000003 [ 203.787487][ C0] RBP: 0000000000000000 R08: 00007ffe6d2d4a84 R09: 000000000000000c [ 203.795563][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 203.803570][ C0] R13: 0000000000000000 R14: 00007ff2ac634670 R15: 0000000000000000 [ 203.811728][ C0] [ 203.814848][ C0] DEBUG: waiting rtnl_mutex for 702 jiffies. [ 203.820858][ C0] task:syz-executor state:D stack:24992 pid:5734 tgid:5734 ppid:5717 flags:0x00000000 [ 203.831174][ C0] Call Trace: [ 203.834553][ C0] [ 203.837521][ C0] __schedule+0x1800/0x4a60 [ 203.842139][ C0] ? __pfx___schedule+0x10/0x10 [ 203.847130][ C0] ? __pfx_lock_release+0x10/0x10 [ 203.852209][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 203.857807][ C0] ? schedule+0x90/0x320 [ 203.862095][ C0] schedule+0x14b/0x320 [ 203.866397][ C0] schedule_preempt_disabled+0x13/0x30 [ 203.871899][ C0] __mutex_lock+0x6a4/0xd70 [ 203.876530][ C0] ? __mutex_lock+0x527/0xd70 [ 203.881244][ C0] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 203.886470][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 203.891561][ C0] ? get_rtnl_holder+0x144/0x190 [ 203.896621][ C0] rtnetlink_rcv_msg+0x6eb/0xd00 [ 203.901615][ C0] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 203.906837][ C0] ? __lock_acquire+0x1384/0x2050 [ 203.911902][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 203.917532][ C0] netlink_rcv_skb+0x1e3/0x430 [ 203.922342][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 203.927941][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.933325][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.938631][ C0] netlink_unicast+0x7f6/0x990 [ 203.943458][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 203.948858][ C0] ? __virt_addr_valid+0x183/0x530 [ 203.954023][ C0] ? __check_object_size+0x49c/0x900 [ 203.959424][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 203.964668][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 203.969558][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.974977][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 203.979995][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 203.985425][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 203.990941][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.996417][ C0] __sock_sendmsg+0x221/0x270 [ 204.001169][ C0] __sys_sendto+0x3a4/0x4f0 [ 204.005871][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 204.010990][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 204.017110][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 204.023489][ C0] ? exc_page_fault+0x590/0x8c0 [ 204.028485][ C0] __x64_sys_sendto+0xde/0x100 [ 204.033301][ C0] do_syscall_64+0xf3/0x230 [ 204.037960][ C0] ? clear_bhb_loop+0x35/0x90 [ 204.042684][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.048701][ C0] RIP: 0033:0x7f605557978c [ 204.053154][ C0] RSP: 002b:00007fff35f473d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 204.061700][ C0] RAX: ffffffffffffffda RBX: 00007f6056234620 RCX: 00007f605557978c [ 204.069778][ C0] RDX: 0000000000000028 RSI: 00007f6056234670 RDI: 0000000000000003 [ 204.077854][ C0] RBP: 0000000000000000 R08: 00007fff35f47424 R09: 000000000000000c [ 204.085918][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 204.093929][ C0] R13: 0000000000000000 R14: 00007f6056234670 R15: 0000000000000000 [ 204.102300][ C0] [ 204.105461][ C0] [ 204.105461][ C0] Showing all locks held in the system: [ 204.113315][ C0] 7 locks held by kworker/u8:9/2546: [ 204.118714][ C0] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 204.129857][ C0] #1: ffffc900093a7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 204.140608][ C0] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 204.150279][ C0] #3: ffff888011d490e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 204.160492][ C0] #4: ffff88804347d250 (&devlink->lock_key#7){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 204.171454][ C0] #5: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 204.180571][ C0] #6: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 204.191699][ C0] 2 locks held by getty/4982: [ 204.196476][ C0] #0: ffff88802b6730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 204.206451][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 204.216774][ C0] 3 locks held by kworker/0:4/5287: [ 204.222005][ C0] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 204.233232][ C0] #1: ffffc900040d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 204.244458][ C0] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 204.253586][ C0] 3 locks held by kworker/0:5/5312: [ 204.258919][ C0] 1 lock held by syz.0.42/5671: [ 204.263815][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 204.272992][ C0] 1 lock held by syz.3.48/5700: [ 204.277949][ C0] 1 lock held by syz-executor/5733: [ 204.283176][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 204.292815][ C0] 1 lock held by syz-executor/5734: [ 204.298109][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 204.307744][ C0] 1 lock held by syz-executor/5738: [ 204.312966][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 204.322610][ C0] 1 lock held by syz-executor/5742: [ 204.327900][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 204.337526][ C0] 1 lock held by syz-executor/5745: [ 204.342750][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 204.352413][ C0] [ 204.354838][ C0] ============================================= [ 204.354838][ C0] [ 204.574243][ T5240] Bluetooth: hci2: command tx timeout [ 204.887649][ T5240] Bluetooth: hci4: command tx timeout [ 204.967390][ T5240] Bluetooth: hci3: command tx timeout [ 205.208401][ T5244] Bluetooth: hci0: command tx timeout [ 205.213985][ T5240] Bluetooth: hci1: command tx timeout [ 205.365768][ C0] DEBUG: waiting rtnl_mutex for 570 jiffies. [ 205.371848][ C0] task:syz-executor state:D stack:24992 pid:5738 tgid:5738 ppid:5721 flags:0x00004000 [ 205.382188][ C0] Call Trace: [ 205.385602][ C0] [ 205.388577][ C0] __schedule+0x1800/0x4a60 [ 205.393251][ C0] ? __pfx___schedule+0x10/0x10 [ 205.398250][ C0] ? __pfx_lock_release+0x10/0x10 [ 205.403327][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 205.408950][ C0] ? schedule+0x90/0x320 [ 205.413236][ C0] schedule+0x14b/0x320 [ 205.417537][ C0] schedule_preempt_disabled+0x13/0x30 [ 205.423039][ C0] __mutex_lock+0x6a4/0xd70 [ 205.427684][ C0] ? __mutex_lock+0x527/0xd70 [ 205.432402][ C0] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 205.437656][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 205.442754][ C0] ? get_rtnl_holder+0x144/0x190 [ 205.447849][ C0] rtnetlink_rcv_msg+0x6eb/0xd00 [ 205.452835][ C0] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 205.458086][ C0] ? __lock_acquire+0x1384/0x2050 [ 205.463175][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.468817][ C0] netlink_rcv_skb+0x1e3/0x430 [ 205.473627][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.479266][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.484747][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.489990][ C0] netlink_unicast+0x7f6/0x990 [ 205.494923][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 205.500254][ C0] ? __virt_addr_valid+0x183/0x530 [ 205.505503][ C0] ? __check_object_size+0x49c/0x900 [ 205.510832][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 205.516090][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 205.520930][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.526354][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 205.531344][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 205.536776][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 205.542283][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.547687][ C0] __sock_sendmsg+0x221/0x270 [ 205.552437][ C0] __sys_sendto+0x3a4/0x4f0 [ 205.557083][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 205.562192][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 205.568277][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 205.574742][ C0] ? exc_page_fault+0x590/0x8c0 [ 205.579650][ C0] __x64_sys_sendto+0xde/0x100 [ 205.584561][ C0] do_syscall_64+0xf3/0x230 [ 205.589110][ C0] ? clear_bhb_loop+0x35/0x90 [ 205.593834][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.599856][ C0] RIP: 0033:0x7fac6bd7978c [ 205.604385][ C0] RSP: 002b:00007fff66a45510 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 205.612883][ C0] RAX: ffffffffffffffda RBX: 00007fac6ca34620 RCX: 00007fac6bd7978c [ 205.620990][ C0] RDX: 0000000000000028 RSI: 00007fac6ca34670 RDI: 0000000000000003 [ 205.629072][ C0] RBP: 0000000000000000 R08: 00007fff66a45564 R09: 000000000000000c [ 205.637155][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 205.645238][ C0] R13: 0000000000000000 R14: 00007fac6ca34670 R15: 0000000000000000 [ 205.653285][ C0] [ 205.656441][ C0] [ 205.656441][ C0] Showing all locks held in the system: [ 205.664395][ C0] 9 locks held by kworker/u8:9/2546: [ 205.669753][ C0] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 205.680851][ C0] #1: ffffc900093a7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 205.691668][ C0] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 205.701345][ C0] #3: ffff888011d490e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 205.711611][ C0] #4: ffff88804347d250 (&devlink->lock_key#7){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 205.722682][ C0] #5: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 205.731793][ C0] #6: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: __fib6_clean_all+0xae/0x4b0 [ 205.741530][ C0] #7: ffffc90000007ca0 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 205.751871][ C0] #8: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 205.761992][ C0] 2 locks held by getty/4982: [ 205.766774][ C0] #0: ffff88802b6730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 205.776754][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 205.787123][ C0] 3 locks held by kworker/0:5/5312: [ 205.792406][ C0] 1 lock held by syz.0.42/5671: [ 205.797363][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 205.806577][ C0] 1 lock held by syz.3.48/5700: [ 205.811463][ C0] 2 locks held by syz-executor/5733: [ 205.816853][ C0] #0: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 205.826504][ C0] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 205.836751][ C0] 2 locks held by syz-executor/5734: [ 205.842064][ C0] #0: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 205.851700][ C0] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 205.861959][ C0] 1 lock held by syz-executor/5738: [ 205.867256][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 205.876900][ C0] 1 lock held by syz-executor/5742: [ 205.882129][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 205.891812][ C0] 1 lock held by syz-executor/5745: [ 205.897112][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 205.906802][ C0] 2 locks held by cmp/5750: [ 205.911357][ C0] [ 205.913715][ C0] ============================================= [ 205.913715][ C0] [ 206.128908][ T2546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.964425][ C0] DEBUG: waiting rtnl_mutex for 628 jiffies. [ 206.970436][ C0] task:syz.0.42 state:D stack:25360 pid:5671 tgid:5666 ppid:5455 flags:0x00004002 [ 206.980630][ C0] Call Trace: [ 206.983893][ C0] [ 206.986839][ C0] __schedule+0x1800/0x4a60 [ 206.991365][ C0] ? __pfx___schedule+0x10/0x10 [ 206.996226][ C0] ? __pfx_lock_release+0x10/0x10 [ 207.001242][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 207.006752][ C0] ? schedule+0x90/0x320 [ 207.011027][ C0] schedule+0x14b/0x320 [ 207.014240][ T5240] Bluetooth: hci2: command tx timeout [ 207.015232][ C0] schedule_preempt_disabled+0x13/0x30 [ 207.026080][ C0] __mutex_lock+0x6a4/0xd70 [ 207.030590][ C0] ? __mutex_lock+0x527/0xd70 [ 207.035284][ C0] ? tun_chr_close+0x3e/0x1b0 [ 207.039964][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 207.045013][ C0] ? get_rtnl_holder+0x144/0x190 [ 207.049961][ C0] tun_chr_close+0x3e/0x1b0 [ 207.054481][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 207.059587][ C0] __fput+0x24a/0x8a0 [ 207.063573][ C0] task_work_run+0x24f/0x310 [ 207.068186][ C0] ? __pfx_task_work_run+0x10/0x10 [ 207.073313][ C0] ? do_exit+0xa2a/0x27f0 [ 207.077699][ C0] ? kmem_cache_free+0x145/0x350 [ 207.082657][ C0] do_exit+0xa2f/0x27f0 [ 207.086857][ C0] ? __pfx_do_exit+0x10/0x10 [ 207.091490][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 207.096930][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 207.102928][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.109287][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 207.114425][ C0] do_group_exit+0x207/0x2c0 [ 207.119014][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 207.124252][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 207.129463][ C0] get_signal+0x16a1/0x1740 [ 207.133971][ C0] ? __pfx_get_signal+0x10/0x10 [ 207.138853][ C0] arch_do_signal_or_restart+0x96/0x830 [ 207.144424][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 207.150573][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 207.156583][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 207.162306][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 207.167876][ C0] do_syscall_64+0x100/0x230 [ 207.172458][ C0] ? clear_bhb_loop+0x35/0x90 [ 207.177152][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.183040][ C0] RIP: 0033:0x7f6eec3779f9 [ 207.187488][ C0] RSP: 002b:00007f6eed1c4048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 207.195918][ C0] RAX: 0000000000010106 RBX: 00007f6eec506058 RCX: 00007f6eec3779f9 [ 207.203883][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000005 [ 207.211874][ C0] RBP: 00007f6eec3e58ee R08: 0000000000000000 R09: 0000000000000000 [ 207.219864][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 207.227857][ C0] R13: 000000000000006e R14: 00007f6eec506058 R15: 00007ffc16d79108 [ 207.235858][ C0] [ 207.238868][ C0] DEBUG: waiting rtnl_mutex for 757 jiffies. [ 207.244853][ C0] task:syz-executor state:D stack:24992 pid:5738 tgid:5738 ppid:5721 flags:0x00004000 [ 207.255030][ C0] Call Trace: [ 207.258304][ C0] [ 207.261229][ C0] __schedule+0x1800/0x4a60 [ 207.265778][ C0] ? __pfx___schedule+0x10/0x10 [ 207.270630][ C0] ? __pfx_lock_release+0x10/0x10 [ 207.275674][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 207.281134][ C0] ? schedule+0x90/0x320 [ 207.285396][ C0] schedule+0x14b/0x320 [ 207.289554][ C0] schedule_preempt_disabled+0x13/0x30 [ 207.295036][ C0] __mutex_lock+0x6a4/0xd70 [ 207.299539][ C0] ? __mutex_lock+0x527/0xd70 [ 207.304240][ C0] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 207.309353][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 207.314404][ C0] ? get_rtnl_holder+0x144/0x190 [ 207.319337][ C0] rtnetlink_rcv_msg+0x6eb/0xd00 [ 207.324304][ C0] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 207.329435][ C0] ? __lock_acquire+0x1384/0x2050 [ 207.334484][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.339953][ C0] netlink_rcv_skb+0x1e3/0x430 [ 207.344736][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.350196][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.355512][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.360703][ C0] netlink_unicast+0x7f6/0x990 [ 207.365495][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 207.370780][ C0] ? __virt_addr_valid+0x183/0x530 [ 207.375911][ C0] ? __check_object_size+0x49c/0x900 [ 207.381192][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 207.386327][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 207.391095][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.396395][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 207.401332][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 207.406628][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 207.412080][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.417375][ C0] __sock_sendmsg+0x221/0x270 [ 207.422065][ C0] __sys_sendto+0x3a4/0x4f0 [ 207.426608][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 207.431648][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 207.437652][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.443976][ C0] ? exc_page_fault+0x590/0x8c0 [ 207.448849][ C0] __x64_sys_sendto+0xde/0x100 [ 207.453610][ C0] do_syscall_64+0xf3/0x230 [ 207.458183][ C0] ? clear_bhb_loop+0x35/0x90 [ 207.462886][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.468830][ C0] RIP: 0033:0x7fac6bd7978c [ 207.473243][ C0] RSP: 002b:00007fff66a45510 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 207.481732][ C0] RAX: ffffffffffffffda RBX: 00007fac6ca34620 RCX: 00007fac6bd7978c [ 207.489732][ C0] RDX: 0000000000000028 RSI: 00007fac6ca34670 RDI: 0000000000000003 [ 207.497731][ C0] RBP: 0000000000000000 R08: 00007fff66a45564 R09: 000000000000000c [ 207.505726][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 207.513689][ C0] R13: 0000000000000000 R14: 00007fac6ca34670 R15: 0000000000000000 [ 207.521699][ C0] [ 207.524742][ C0] DEBUG: waiting rtnl_mutex for 643 jiffies. [ 207.530724][ C0] task:syz-executor state:D stack:24992 pid:5742 tgid:5742 ppid:5722 flags:0x00000000 [ 207.540921][ C0] Call Trace: [ 207.544218][ C0] [ 207.547144][ C0] __schedule+0x1800/0x4a60 [ 207.551679][ C0] ? __pfx___schedule+0x10/0x10 [ 207.556553][ C0] ? __pfx_lock_release+0x10/0x10 [ 207.561579][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 207.567107][ C0] ? schedule+0x90/0x320 [ 207.571380][ C0] schedule+0x14b/0x320 [ 207.575585][ C0] schedule_preempt_disabled+0x13/0x30 [ 207.581057][ C0] __mutex_lock+0x6a4/0xd70 [ 207.585582][ C0] ? __mutex_lock+0x527/0xd70 [ 207.590254][ C0] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 207.595393][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 207.600417][ C0] ? get_rtnl_holder+0x144/0x190 [ 207.605370][ C0] rtnetlink_rcv_msg+0x6eb/0xd00 [ 207.610307][ C0] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 207.615441][ C0] ? __lock_acquire+0x1384/0x2050 [ 207.620463][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.625952][ C0] netlink_rcv_skb+0x1e3/0x430 [ 207.630712][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.636209][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.641507][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.646724][ C0] netlink_unicast+0x7f6/0x990 [ 207.651494][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 207.656797][ C0] ? __virt_addr_valid+0x183/0x530 [ 207.661914][ C0] ? __check_object_size+0x49c/0x900 [ 207.667220][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 207.672332][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 207.677125][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.682408][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 207.687364][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 207.692639][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 207.698115][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.703398][ C0] __sock_sendmsg+0x221/0x270 [ 207.708099][ C0] __sys_sendto+0x3a4/0x4f0 [ 207.712626][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 207.717736][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 207.723736][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.730096][ C0] ? exc_page_fault+0x590/0x8c0 [ 207.734982][ C0] __x64_sys_sendto+0xde/0x100 [ 207.739750][ C0] do_syscall_64+0xf3/0x230 [ 207.744274][ C0] ? clear_bhb_loop+0x35/0x90 [ 207.748948][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.754866][ C0] RIP: 0033:0x7fc79617978c [ 207.759276][ C0] RSP: 002b:00007ffef9045580 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 207.767741][ C0] RAX: ffffffffffffffda RBX: 00007fc796e34620 RCX: 00007fc79617978c [ 207.775727][ C0] RDX: 0000000000000028 RSI: 00007fc796e34670 RDI: 0000000000000003 [ 207.783691][ C0] RBP: 0000000000000000 R08: 00007ffef90455d4 R09: 000000000000000c [ 207.791675][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 207.799661][ C0] R13: 0000000000000000 R14: 00007fc796e34670 R15: 0000000000000000 [ 207.807658][ C0] [ 207.810672][ C0] [ 207.810672][ C0] Showing all locks held in the system: [ 207.818398][ C0] 2 locks held by kworker/u8:1/12: [ 207.823502][ C0] 5 locks held by kworker/u8:4/62: [ 207.828645][ C0] 6 locks held by kworker/u8:9/2546: [ 207.833923][ C0] 2 locks held by getty/4982: [ 207.838652][ C0] #0: ffff88802b6730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 207.848504][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 207.858669][ C0] 3 locks held by kworker/0:4/5287: [ 207.863858][ C0] 3 locks held by kworker/0:5/5312: [ 207.869068][ C0] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 207.880076][ C0] #1: ffffc90004177d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 207.891082][ C0] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 207.900083][ C0] 1 lock held by syz.0.42/5671: [ 207.904950][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 207.913939][ C0] 1 lock held by syz.3.48/5700: [ 207.918799][ C0] 2 locks held by syz-executor/5733: [ 207.924075][ C0] #0: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 207.933527][ C0] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 207.943602][ C0] 2 locks held by syz-executor/5734: [ 207.948904][ C0] #0: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 207.958345][ C0] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 207.968384][ C0] 1 lock held by syz-executor/5738: [ 207.973569][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 207.983000][ C0] 1 lock held by syz-executor/5742: [ 207.988199][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 207.997632][ C0] 1 lock held by syz-executor/5745: [ 208.002815][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 208.012254][ C0] [ 208.014588][ C0] ============================================= [ 208.014588][ C0] [ 208.134227][ T5240] Bluetooth: hci4: command tx timeout [ 208.143569][ T5240] Bluetooth: hci3: command tx timeout [ 209.044779][ C0] DEBUG: holding rtnl_mutex for 836 jiffies. [ 209.050866][ C0] task:syz.0.42 state:R running task stack:24336 pid:5671 tgid:5666 ppid:5455 flags:0x00004002 [ 209.062844][ C0] Call Trace: [ 209.066279][ C0] [ 209.069314][ C0] __schedule+0x1800/0x4a60 [ 209.073951][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 209.080415][ C0] ? lock_release+0xbf/0xa30 [ 209.085168][ C0] ? __pfx___schedule+0x10/0x10 [ 209.090126][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 209.095518][ C0] ? mark_lock+0x9a/0x360 [ 209.099981][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 209.105214][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 209.111038][ C0] irqentry_exit+0x5e/0x90 [ 209.115632][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 209.121197][ C0] RIP: 0010:synchronize_rcu+0x0/0x360 [ 209.126703][ C0] Code: e1 07 80 c1 03 38 c1 0f 8c 97 fe ff ff 4c 89 f7 e8 65 38 81 00 e9 8a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 209.146525][ C0] RSP: f460:0000000000000a07 EFLAGS: 1ffff9200067de88 [ 209.153401][ C0] ================================================================== [ 209.159360][ T5240] Bluetooth: hci2: command tx timeout [ 209.161449][ C0] BUG: KASAN: stack-out-of-bounds in __show_regs+0xa6/0x610 [ 209.174074][ C0] Read of size 8 at addr ffffc900033ef3b8 by task swapper/0/0 [ 209.181510][ C0] [ 209.183823][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0 [ 209.193608][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 209.203647][ C0] Call Trace: [ 209.206915][ C0] [ 209.209741][ C0] dump_stack_lvl+0x241/0x360 [ 209.214406][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.219580][ C0] ? __pfx__printk+0x10/0x10 [ 209.224157][ C0] ? _printk+0xd5/0x120 [ 209.228303][ C0] print_report+0x169/0x550 [ 209.232785][ C0] ? __virt_addr_valid+0xbd/0x530 [ 209.237787][ C0] ? __show_regs+0xa6/0x610 [ 209.242264][ C0] kasan_report+0x143/0x180 [ 209.246747][ C0] ? show_opcodes+0x148/0x170 [ 209.251405][ C0] ? __show_regs+0xa6/0x610 [ 209.255889][ C0] __show_regs+0xa6/0x610 [ 209.260195][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 209.265817][ C0] ? wq_watchdog_touch+0xef/0x180 [ 209.270847][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 209.276458][ C0] show_trace_log_lvl+0x3d4/0x520 [ 209.281464][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 209.286729][ C0] sched_show_task+0x506/0x6d0 [ 209.291471][ C0] ? report_rtnl_holders+0x2a5/0x400 [ 209.296737][ C0] ? __pfx__printk+0x10/0x10 [ 209.301308][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 209.306572][ C0] ? kasan_check_range+0x4f/0x290 [ 209.311574][ C0] report_rtnl_holders+0x327/0x400 [ 209.316666][ C0] call_timer_fn+0x18e/0x650 [ 209.321252][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 209.326865][ C0] ? call_timer_fn+0xc0/0x650 [ 209.331517][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 209.337128][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 209.342214][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 209.347829][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 209.353438][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 209.359056][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 209.364242][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 209.369423][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 209.375038][ C0] __run_timer_base+0x66a/0x8e0 [ 209.379874][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 209.385227][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 209.391535][ C0] run_timer_softirq+0xb7/0x170 [ 209.396361][ C0] handle_softirqs+0x2c4/0x970 [ 209.401103][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 209.405849][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 209.411115][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 209.416294][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 209.420865][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 209.426045][ C0] irq_exit_rcu+0x9/0x30 [ 209.430261][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 209.435874][ C0] [ 209.438782][ C0] [ 209.441690][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 209.447649][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 209.452909][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 40 d7 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 45 67 b0 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 209.472493][ C0] RSP: 0018:ffffffff8e607ca8 EFLAGS: 00000246 [ 209.478542][ C0] RAX: ffffffff8e694680 RBX: ffff88801c2c1864 RCX: 0000000000b146b9 [ 209.486512][ C0] RDX: 0000000000000001 RSI: ffff88801c2c1800 RDI: ffff88801c2c1864 [ 209.494459][ C0] RBP: 000000000003a6b8 R08: ffff8880b9237c7b R09: 1ffff11017246f8f [ 209.502405][ C0] R10: dffffc0000000000 R11: ffffffff8bb9c830 R12: ffff88801c7b1000 [ 209.510353][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8f0dc960 [ 209.518303][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 209.523569][ C0] acpi_idle_enter+0xe4/0x140 [ 209.528222][ C0] cpuidle_enter_state+0x112/0x480 [ 209.533308][ C0] ? __pfx_menu_select+0x10/0x10 [ 209.538239][ C0] cpuidle_enter+0x5d/0xa0 [ 209.542654][ C0] do_idle+0x375/0x5d0 [ 209.546712][ C0] ? __pfx_do_idle+0x10/0x10 [ 209.551292][ C0] ? do_idle+0xe/0x5d0 [ 209.555342][ C0] ? rest_init+0x31/0x300 [ 209.559651][ C0] cpu_startup_entry+0x42/0x60 [ 209.564395][ C0] rest_init+0x2dc/0x300 [ 209.568613][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 209.574149][ C0] start_kernel+0x47a/0x500 [ 209.578645][ C0] x86_64_start_reservations+0x2a/0x30 [ 209.584080][ C0] x86_64_start_kernel+0x9f/0xa0 [ 209.588995][ C0] common_startup_64+0x13e/0x147 [ 209.593914][ C0] [ 209.596909][ C0] [ 209.599212][ C0] The buggy address belongs to the virtual mapping at [ 209.599212][ C0] [ffffc900033e8000, ffffc900033f1000) created by: [ 209.599212][ C0] copy_process+0x5d1/0x3d90 [ 209.616810][ C0] [ 209.619113][ C0] The buggy address belongs to the physical page: [ 209.625503][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888029c89a68 pfn:0x29c89 [ 209.635545][ C0] memcg:ffff88807c094e02 [ 209.639756][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 209.646850][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 209.655410][ C0] raw: ffff888029c89a68 0000000000000000 00000001ffffffff ffff88807c094e02 [ 209.663961][ C0] page dumped because: kasan: bad access detected [ 209.670350][ C0] page_owner tracks the page as allocated [ 209.676044][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 5618, tgid 5618 (syz.0.37), ts 162413025598, free_ts 162024103231 [ 209.694169][ C0] post_alloc_hook+0x1f3/0x230 [ 209.698919][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 209.704442][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 209.709614][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 209.715053][ C0] __vmalloc_node_range_noprof+0x971/0x1460 [ 209.720924][ C0] dup_task_struct+0x444/0x8c0 [ 209.725667][ C0] copy_process+0x5d1/0x3d90 [ 209.730239][ C0] kernel_clone+0x226/0x8f0 [ 209.734722][ C0] __se_sys_clone3+0x2cb/0x350 [ 209.739463][ C0] do_syscall_64+0xf3/0x230 [ 209.743946][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.749814][ C0] page last free pid 5612 tgid 5612 stack trace: [ 209.756110][ C0] free_unref_folios+0x103a/0x1b00 [ 209.761194][ C0] folios_put_refs+0x76e/0x860 [ 209.765933][ C0] free_pages_and_swap_cache+0x2ea/0x690 [ 209.771541][ C0] tlb_flush_mmu+0x3a3/0x680 [ 209.776106][ C0] tlb_finish_mmu+0xd4/0x200 [ 209.780676][ C0] exit_mmap+0x44f/0xc80 [ 209.784898][ C0] __mmput+0x115/0x390 [ 209.788943][ C0] exit_mm+0x220/0x310 [ 209.792984][ C0] do_exit+0x9b2/0x27f0 [ 209.797112][ C0] do_group_exit+0x207/0x2c0 [ 209.801674][ C0] __x64_sys_exit_group+0x3f/0x40 [ 209.806691][ C0] x64_sys_call+0x26c3/0x26d0 [ 209.811350][ C0] do_syscall_64+0xf3/0x230 [ 209.815829][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.821698][ C0] [ 209.823998][ C0] Memory state around the buggy address: [ 209.829600][ C0] ffffc900033ef280: f2 f2 f2 f2 00 00 00 00 00 f3 f3 f3 f3 f3 f3 f3 [ 209.837637][ C0] ffffc900033ef300: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 209.845680][ C0] >ffffc900033ef380: 00 f2 f2 f2 00 f3 f3 f3 00 00 00 00 00 00 00 00 [ 209.853721][ C0] ^ [ 209.859591][ C0] ffffc900033ef400: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f2 f2 f2 [ 209.867625][ C0] ffffc900033ef480: 00 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 209.875655][ C0] ================================================================== [ 209.883781][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 209.890967][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0 [ 209.900743][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 209.910776][ C0] Call Trace: [ 209.914036][ C0] [ 209.916883][ C0] dump_stack_lvl+0x241/0x360 [ 209.921543][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.926747][ C0] ? __pfx__printk+0x10/0x10 [ 209.931334][ C0] ? vscnprintf+0x5d/0x90 [ 209.935643][ C0] panic+0x349/0x870 [ 209.939522][ C0] ? check_panic_on_warn+0x21/0xb0 [ 209.944612][ C0] ? __pfx_panic+0x10/0x10 [ 209.949005][ C0] ? mark_lock+0x9a/0x360 [ 209.953315][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 209.959190][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 209.965061][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 209.971368][ C0] ? print_report+0x502/0x550 [ 209.976025][ C0] check_panic_on_warn+0x86/0xb0 [ 209.980942][ C0] ? __show_regs+0xa6/0x610 [ 209.985429][ C0] end_report+0x77/0x160 [ 209.989651][ C0] kasan_report+0x154/0x180 [ 209.994136][ C0] ? show_opcodes+0x148/0x170 [ 209.998810][ C0] ? __show_regs+0xa6/0x610 [ 210.003290][ C0] __show_regs+0xa6/0x610 [ 210.007597][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 210.013210][ C0] ? wq_watchdog_touch+0xef/0x180 [ 210.018213][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 210.023847][ C0] show_trace_log_lvl+0x3d4/0x520 [ 210.028861][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 210.034158][ C0] sched_show_task+0x506/0x6d0 [ 210.038919][ C0] ? report_rtnl_holders+0x2a5/0x400 [ 210.044188][ C0] ? __pfx__printk+0x10/0x10 [ 210.048757][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 210.054016][ C0] ? kasan_check_range+0x4f/0x290 [ 210.059018][ C0] report_rtnl_holders+0x327/0x400 [ 210.064135][ C0] call_timer_fn+0x18e/0x650 [ 210.068720][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 210.074334][ C0] ? call_timer_fn+0xc0/0x650 [ 210.078987][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 210.084606][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 210.089717][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 210.095334][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 210.100945][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 210.106555][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 210.111734][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 210.116911][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 210.122546][ C0] __run_timer_base+0x66a/0x8e0 [ 210.127386][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 210.132738][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.139071][ C0] run_timer_softirq+0xb7/0x170 [ 210.143923][ C0] handle_softirqs+0x2c4/0x970 [ 210.148670][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 210.153418][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 210.158685][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 210.163863][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 210.168435][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 210.173615][ C0] irq_exit_rcu+0x9/0x30 [ 210.177838][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 210.183455][ C0] [ 210.186366][ C0] [ 210.189290][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 210.195256][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 210.200523][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 40 d7 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 45 67 b0 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 210.220107][ C0] RSP: 0018:ffffffff8e607ca8 EFLAGS: 00000246 [ 210.226171][ C0] RAX: ffffffff8e694680 RBX: ffff88801c2c1864 RCX: 0000000000b146b9 [ 210.234123][ C0] RDX: 0000000000000001 RSI: ffff88801c2c1800 RDI: ffff88801c2c1864 [ 210.242104][ C0] RBP: 000000000003a6b8 R08: ffff8880b9237c7b R09: 1ffff11017246f8f [ 210.250057][ C0] R10: dffffc0000000000 R11: ffffffff8bb9c830 R12: ffff88801c7b1000 [ 210.258007][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8f0dc960 [ 210.265975][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 210.271251][ C0] acpi_idle_enter+0xe4/0x140 [ 210.275908][ C0] cpuidle_enter_state+0x112/0x480 [ 210.281085][ C0] ? __pfx_menu_select+0x10/0x10 [ 210.286007][ C0] cpuidle_enter+0x5d/0xa0 [ 210.290409][ C0] do_idle+0x375/0x5d0 [ 210.294463][ C0] ? __pfx_do_idle+0x10/0x10 [ 210.299034][ C0] ? do_idle+0xe/0x5d0 [ 210.303079][ C0] ? rest_init+0x31/0x300 [ 210.307414][ C0] cpu_startup_entry+0x42/0x60 [ 210.312157][ C0] rest_init+0x2dc/0x300 [ 210.316379][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 210.321926][ C0] start_kernel+0x47a/0x500 [ 210.326428][ C0] x86_64_start_reservations+0x2a/0x30 [ 210.331866][ C0] x86_64_start_kernel+0x9f/0xa0 [ 210.336785][ C0] common_startup_64+0x13e/0x147 [ 210.341705][ C0] [ 210.344935][ C0] Kernel Offset: disabled [ 210.349242][ C0] Rebooting in 86400 seconds..