last executing test programs: 20.703950019s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) listen(0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000600), 0xc) 19.099214048s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32, @ANYBLOB="0800050009"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 18.754008612s ago: executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@random="614b0100a01b", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x28, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x2, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback}}}}}}, 0x0) 18.282349653s ago: executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private=0xa010102]}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) 17.308843143s ago: executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) getpid() socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) 16.941244703s ago: executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x7}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x10, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000280)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.806286504s ago: executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x7}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x10, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000280)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.358117985s ago: executing program 1: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffb, 0x1}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000080)={0x0, &(0x7f0000000300)="df", 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 10.462564579s ago: executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@rand_addr=0x64010102]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private=0xa010102]}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) 9.137441882s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000004850000006d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000180009c0a400000000000000040000800500118000000000"], 0x1c}], 0x1}, 0x0) 8.870597579s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x5, 0x50, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r2}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040), 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000001600)={[{@lastblock}, {@umask={'umask', 0x3d, 0x5}}, {@undelete}, {@longad}, {@shortad}, {@dmode={'dmode', 0x3d, 0x1}}, {@undelete}, {@shortad}, {@shortad}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@dmode={'dmode', 0x3d, 0x9}}, {@nostrict}, {@session}, {@longad}]}, 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") 7.521746296s ago: executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) getpid() socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 5.657986137s ago: executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private=0xa010102]}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) 5.181374985s ago: executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001b80), 0x40, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000500)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@test_dummy_encryption}, {@stripe={'stripe', 0x3d, 0x21}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@quota}]}, 0x1, 0x562, &(0x7f0000001080)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1024000, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x60}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) chdir(0x0) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x1014800, &(0x7f0000001a40)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYBLOB="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", @ANYBLOB="a240939593dcf5d96f4ae9a6a307fed9139e08b16fa6096b876c40f3645fe4793498f349e30de690cc6f68a0bd843e5fc9cd54566eb36c05efba9e7e11805a000853610e8dc7c7a9ae20", @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES32], 0xff, 0xda6, &(0x7f0000003c80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random='\x00\x00\a\x00\b\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r4, 0x20000007ffffc, 0x1) pwritev2(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000140)="e7", 0x1}], 0xf, 0xa12, 0x0, 0x0) 5.087700336s ago: executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x7}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000280)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.65675339s ago: executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a0000000000001d0000000000000008000a40000000000900020073797a32"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2b, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.038790084s ago: executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e5930240030473da8ddc000000010902120001000000000904"], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 3.982404952s ago: executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010110}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0) 3.65676312s ago: executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private=0xa010102]}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) 2.87060016s ago: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) socket$inet(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) 2.684154507s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008015ff0edb00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) unshare(0x20000000) unshare(0x2c040400) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000000)={'bridge_slave_1\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x8, r7}, 0x18) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x2, 0x9, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x0, 0x4d4}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}]}, 0x28}}, 0x40) r8 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r8, 0x1f) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000340)=0x8) 2.302680913s ago: executing program 4: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37438e486dd6317ce22080000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8993, &(0x7f0000000500)={'bond0\x00', &(0x7f00000004c0)=@ethtool_ringparam}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$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") syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000006, &(0x7f00000001c0)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@uid_forget}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {}, {}, {@lastblock}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x1, 0xc32, &(0x7f000001fd40)="$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") r2 = open(&(0x7f0000000380)='./file2\x00', 0x14507e, 0x0) pwrite64(r2, &(0x7f0000000000)='+', 0xc0014, 0x7003000) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) r4 = gettid() r5 = syz_open_procfs$userns(r4, &(0x7f0000000000)) r6 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x20000, 0x100}, 0x18) ioctl$RTC_EPOCH_READ(r6, 0x8008700d, &(0x7f00000000c0)) gettid() r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x400080, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000140)) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000180)) ptrace$peekuser(0x3, r4, 0x7) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBMETA(r8, 0x4b63, &(0x7f00000001c0)=0x4) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff}, 0x4080) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1252004, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@debug}, {@version_L}], [{@subj_type={'subj_type', 0x3d, '/dev/rtc0\x00'}}, {@obj_role={'obj_role', 0x3d, 'ns/user\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x63, 0x0, 0x65, 0x61, 0x61, 0x30, 0x64], 0x2d, [0x51, 0x62, 0x0, 0x64], 0x2d, [0x32, 0x38, 0x63, 0x38], 0x2d, [0x65, 0x35, 0x34, 0x64], 0x2d, [0x66, 0x65, 0x39, 0x35, 0x36, 0x0, 0x64, 0x35]}}}, {@subj_type={'subj_type', 0x3d, ']\',I@~#,-'}}, {@hash}]}}) sendmsg$AUDIT_SET(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2738155d33a3346b}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x3e9, 0x200, 0x70bd25, 0x25dfdbff, {0x49, 0x1, 0x1, r4, 0x2, 0x400, 0x4, 0x7, 0x0, 0xfff, 0x1}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 2.150558946s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000380), 0x4010, &(0x7f00000003c0)={[{@subsystem='devices'}], [{@smackfsroot={'smackfsroot', 0x3d, '(/*@]'}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xf, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="000000000000000004020000ff000f"], 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}}, 0x108) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r5, 0x0, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="2238239555624c55088ba212ebfbe9a25099f484c8fa088e4dd9b941f1736df8413b23337d83e692e33409327ab4cec21c6bdf56ca6eb818a382f9648a2e8b3117b0bc36ac3674b4ac37839d36fa15b89aa829369b3af9f045b5ad2055c4cc83bb542c4593b555dd26a6e4b2be09bb016884e413aae08a324dced1b6305d0047ba5605eedd4222a5b0671635e5ce135624366453e7362ab6e246f2ed48d538c1", 0xa0}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff1e, &(0x7f0000000080)=[{&(0x7f0000000040)="c010020023000b05d25a806f8c6394f90824fc60070206000a740108053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r6, 0x58, &(0x7f0000000540)}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) open(&(0x7f0000000140)='./file0\x00', 0x591ec1, 0x100) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[], 0x4e) 1.675780397s ago: executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000093aa81169f41b4422c6d89df578d2b5380e9c35fdba9e5b7b9f7b68e80943492c2", @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000008000900020000000500020000000000"], 0x3c}}, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/159, 0x9f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) syz_open_dev$vcsu(0x0, 0xea, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000003000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055098100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8600000000000061980000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001500000076000000bd9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000440)="120000000d800000", 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x169a82, 0x0) sendfile(r4, r4, 0x0, 0x30) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) 1.601841233s ago: executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x4, 0x0, &(0x7f0000000140)) 1.499906597s ago: executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a0000000000001d0000000000000008000a40000000000900020073797a32"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2b, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.247597024s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000003702000014000000b70300000000d8018500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400ddb6457e7289372cbeb73000b70000000000000095000004000000000000148e761a70a80cf8ca855f9e8e8f69edf4b96a1f58225ddb57be25193afdd704832bd235afafc119f59730c4a0d81dcb429fa699b2a654c0596bac6193"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000200)=ANY=[], 0x12, 0x9ef, &(0x7f0000004cc0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000140)=ANY=[@ANYBLOB='rolir,usefree,iocharset=cp865,uni_xlate=1,codepage=9\"6,utf8=0,check=relaxed,shortname=mixed,nonumtail=0,uni_xlate=0,check=strict,shortname=winnt,\x00'], 0x25, 0x336, &(0x7f0000001200)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000700)='GPL\x00'}, 0x90) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=0x1, r5, 0x2f, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000180), &(0x7f0000000200)='%pB \x00'}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x7000000}, 0x8) 143.059777ms ago: executing program 0: sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x2, 0x200007e9, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) unshare(0x8000000) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000400)=""/86) r2 = socket$inet6(0xa, 0x3, 0x9) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000002c0)=""/225) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x37000000, @local}}}, 0x88) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002200000085000000a00000009500000002000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) syz_usbip_server_init(0x0) keyctl$clear(0x7, 0x0) execve(&(0x7f0000000040)='./file2\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000bc0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 77.717037ms ago: executing program 2: getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000380)) setpgid(0x0, 0x0) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0xfdef) splice(r0, 0x0, r2, 0x0, 0x80, 0x0) 0s ago: executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop0', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000780)=0x426b) readv(r0, &(0x7f0000000040), 0x100000000000020d) setresuid(0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x11) kernel console output (not intermixed with test programs): C0] ? schedule+0x90/0x320 [ 495.484663][ C0] ? wq_worker_sleeping+0x66/0x240 [ 495.489782][ C0] ? schedule+0x90/0x320 [ 495.494010][ C0] schedule+0x14b/0x320 [ 495.498176][ C0] schedule_preempt_disabled+0x13/0x30 [ 495.503625][ C0] __mutex_lock+0x6a4/0xd70 [ 495.508131][ C0] ? mark_lock+0x9a/0x360 [ 495.512449][ C0] ? __mutex_lock+0x527/0xd70 [ 495.517122][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 495.522239][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 495.527257][ C0] ? rtnl_lock+0xe7/0x130 [ 495.531585][ C0] addrconf_dad_work+0xd0/0x16f0 [ 495.536601][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 495.542071][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 495.548439][ C0] ? process_scheduled_works+0x945/0x1830 [ 495.554141][ C0] process_scheduled_works+0xa2c/0x1830 [ 495.559702][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 495.565670][ C0] ? assign_work+0x364/0x3d0 [ 495.570265][ C0] worker_thread+0x86d/0xd50 [ 495.574848][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 495.580749][ C0] ? __kthread_parkme+0x169/0x1d0 [ 495.585760][ C0] ? __pfx_worker_thread+0x10/0x10 [ 495.590868][ C0] kthread+0x2f0/0x390 [ 495.594921][ C0] ? __pfx_worker_thread+0x10/0x10 [ 495.600030][ C0] ? __pfx_kthread+0x10/0x10 [ 495.604603][ C0] ret_from_fork+0x4b/0x80 [ 495.609022][ C0] ? __pfx_kthread+0x10/0x10 [ 495.613601][ C0] ret_from_fork_asm+0x1a/0x30 [ 495.618377][ C0] [ 495.621381][ C0] [ 495.621381][ C0] Showing all locks held in the system: [ 495.629376][ C0] 3 locks held by kworker/u8:7/2427: [ 495.634638][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 495.646228][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 495.659021][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 495.668430][ C0] 2 locks held by getty/4852: [ 495.673083][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 495.682835][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 495.692935][ C0] 2 locks held by kworker/u8:9/5323: [ 495.698218][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 495.709876][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 495.721982][ C0] 1 lock held by syz-executor.4/7574: [ 495.727338][ C0] 8 locks held by syz-executor.1/9587: [ 495.732795][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 495.741679][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 495.751432][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 495.761450][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 495.771808][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 495.781035][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 495.791046][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 495.801073][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 495.811966][ C0] 1 lock held by syz-executor.0/9670: [ 495.817314][ C0] 3 locks held by syz-executor.2/9673: [ 495.822762][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 495.832861][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 495.842625][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 495.852467][ C0] 2 locks held by modprobe/9672: [ 495.857491][ C0] [ 495.859798][ C0] ============================================= [ 495.859798][ C0] [ 496.947455][ C0] DEBUG: waiting rtnl_mutex for 6584 jiffies. [ 496.953554][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 496.963719][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 496.969712][ C0] Call Trace: [ 496.972990][ C0] [ 496.975922][ C0] __schedule+0x17e8/0x4a20 [ 496.980446][ C0] ? __pfx___schedule+0x10/0x10 [ 496.985282][ C0] ? __pfx_lock_release+0x10/0x10 [ 496.990304][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 496.995748][ C0] ? kthread_data+0x52/0xd0 [ 497.000249][ C0] ? schedule+0x90/0x320 [ 497.004473][ C0] ? wq_worker_sleeping+0x66/0x240 [ 497.009585][ C0] ? schedule+0x90/0x320 [ 497.013808][ C0] schedule+0x14b/0x320 [ 497.017965][ C0] schedule_preempt_disabled+0x13/0x30 [ 497.023403][ C0] __mutex_lock+0x6a4/0xd70 [ 497.027905][ C0] ? mark_lock+0x9a/0x360 [ 497.032219][ C0] ? __mutex_lock+0x527/0xd70 [ 497.036879][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 497.041991][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 497.047004][ C0] ? rtnl_lock+0xe7/0x130 [ 497.051331][ C0] addrconf_dad_work+0xd0/0x16f0 [ 497.056263][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 497.061720][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 497.068057][ C0] ? process_scheduled_works+0x945/0x1830 [ 497.073760][ C0] process_scheduled_works+0xa2c/0x1830 [ 497.079326][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 497.085317][ C0] ? assign_work+0x364/0x3d0 [ 497.089927][ C0] worker_thread+0x86d/0xd50 [ 497.094504][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 497.100398][ C0] ? __kthread_parkme+0x169/0x1d0 [ 497.105417][ C0] ? __pfx_worker_thread+0x10/0x10 [ 497.110526][ C0] kthread+0x2f0/0x390 [ 497.114577][ C0] ? __pfx_worker_thread+0x10/0x10 [ 497.119685][ C0] ? __pfx_kthread+0x10/0x10 [ 497.124258][ C0] ret_from_fork+0x4b/0x80 [ 497.128672][ C0] ? __pfx_kthread+0x10/0x10 [ 497.133287][ C0] ret_from_fork_asm+0x1a/0x30 [ 497.138064][ C0] [ 497.141067][ C0] [ 497.141067][ C0] Showing all locks held in the system: [ 497.148799][ C0] 3 locks held by kworker/u8:7/2427: [ 497.154064][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 497.165637][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 497.178426][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 497.187849][ C0] 2 locks held by getty/4852: [ 497.192504][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 497.202255][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 497.212353][ C0] 2 locks held by kworker/u8:9/5323: [ 497.217652][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 497.229349][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 497.241457][ C0] 1 lock held by syz-executor.4/7574: [ 497.246814][ C0] 8 locks held by syz-executor.1/9587: [ 497.252296][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 497.261193][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 497.270968][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 497.281105][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 497.291479][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 497.300712][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 497.310731][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 497.320740][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 497.331624][ C0] 1 lock held by syz-executor.0/9670: [ 497.336970][ C0] 3 locks held by syz-executor.2/9673: [ 497.342421][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 497.352527][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 497.362275][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 497.372108][ C0] 2 locks held by modprobe/9672: [ 497.377041][ C0] [ 497.379384][ C0] ============================================= [ 497.379384][ C0] [ 498.477418][ C0] DEBUG: waiting rtnl_mutex for 6737 jiffies. [ 498.483507][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 498.493670][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 498.499662][ C0] Call Trace: [ 498.502926][ C0] [ 498.505840][ C0] __schedule+0x17e8/0x4a20 [ 498.510390][ C0] ? __pfx___schedule+0x10/0x10 [ 498.515252][ C0] ? __pfx_lock_release+0x10/0x10 [ 498.520283][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 498.525730][ C0] ? kthread_data+0x52/0xd0 [ 498.530236][ C0] ? schedule+0x90/0x320 [ 498.534462][ C0] ? wq_worker_sleeping+0x66/0x240 [ 498.539572][ C0] ? schedule+0x90/0x320 [ 498.543797][ C0] schedule+0x14b/0x320 [ 498.547955][ C0] schedule_preempt_disabled+0x13/0x30 [ 498.553396][ C0] __mutex_lock+0x6a4/0xd70 [ 498.557896][ C0] ? mark_lock+0x9a/0x360 [ 498.562223][ C0] ? __mutex_lock+0x527/0xd70 [ 498.566882][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 498.572004][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 498.577018][ C0] ? rtnl_lock+0xe7/0x130 [ 498.581345][ C0] addrconf_dad_work+0xd0/0x16f0 [ 498.586275][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 498.591733][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 498.598071][ C0] ? process_scheduled_works+0x945/0x1830 [ 498.603772][ C0] process_scheduled_works+0xa2c/0x1830 [ 498.609330][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 498.615305][ C0] ? assign_work+0x364/0x3d0 [ 498.619909][ C0] worker_thread+0x86d/0xd50 [ 498.624490][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 498.630388][ C0] ? __kthread_parkme+0x169/0x1d0 [ 498.635398][ C0] ? __pfx_worker_thread+0x10/0x10 [ 498.640510][ C0] kthread+0x2f0/0x390 [ 498.644562][ C0] ? __pfx_worker_thread+0x10/0x10 [ 498.649672][ C0] ? __pfx_kthread+0x10/0x10 [ 498.654246][ C0] ret_from_fork+0x4b/0x80 [ 498.658719][ C0] ? __pfx_kthread+0x10/0x10 [ 498.663292][ C0] ret_from_fork_asm+0x1a/0x30 [ 498.668065][ C0] [ 498.671070][ C0] [ 498.671070][ C0] Showing all locks held in the system: [ 498.678804][ C0] 3 locks held by kworker/u8:7/2427: [ 498.684067][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 498.695639][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 498.708424][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 498.717835][ C0] 2 locks held by getty/4852: [ 498.722491][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 498.732237][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 498.742331][ C0] 2 locks held by kworker/u8:9/5323: [ 498.747609][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 498.759261][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 498.771352][ C0] 1 lock held by syz-executor.4/7574: [ 498.776706][ C0] 8 locks held by syz-executor.1/9587: [ 498.782157][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 498.791036][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 498.800778][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 498.810787][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 498.821148][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 498.830373][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 498.840382][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 498.850385][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 498.861262][ C0] 1 lock held by syz-executor.0/9670: [ 498.866611][ C0] 3 locks held by syz-executor.2/9673: [ 498.872060][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 498.882152][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 498.891904][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 498.901735][ C0] 2 locks held by modprobe/9672: [ 498.906651][ C0] [ 498.908972][ C0] ============================================= [ 498.908972][ C0] [ 499.987456][ C0] DEBUG: waiting rtnl_mutex for 6888 jiffies. [ 499.993542][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 500.003754][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 500.009808][ C0] Call Trace: [ 500.013073][ C0] [ 500.015989][ C0] __schedule+0x17e8/0x4a20 [ 500.020508][ C0] ? __pfx___schedule+0x10/0x10 [ 500.025343][ C0] ? __pfx_lock_release+0x10/0x10 [ 500.030372][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 500.035822][ C0] ? kthread_data+0x52/0xd0 [ 500.040369][ C0] ? schedule+0x90/0x320 [ 500.044699][ C0] ? wq_worker_sleeping+0x66/0x240 [ 500.049868][ C0] ? schedule+0x90/0x320 [ 500.054108][ C0] schedule+0x14b/0x320 [ 500.058274][ C0] schedule_preempt_disabled+0x13/0x30 [ 500.063739][ C0] __mutex_lock+0x6a4/0xd70 [ 500.068272][ C0] ? mark_lock+0x9a/0x360 [ 500.072604][ C0] ? __mutex_lock+0x527/0xd70 [ 500.077275][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 500.082407][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 500.087464][ C0] ? rtnl_lock+0xe7/0x130 [ 500.091788][ C0] addrconf_dad_work+0xd0/0x16f0 [ 500.096728][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 500.102202][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 500.108542][ C0] ? process_scheduled_works+0x945/0x1830 [ 500.114246][ C0] process_scheduled_works+0xa2c/0x1830 [ 500.119812][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 500.125799][ C0] ? assign_work+0x364/0x3d0 [ 500.130398][ C0] worker_thread+0x86d/0xd50 [ 500.134976][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 500.140878][ C0] ? __kthread_parkme+0x169/0x1d0 [ 500.145891][ C0] ? __pfx_worker_thread+0x10/0x10 [ 500.151039][ C0] kthread+0x2f0/0x390 [ 500.155102][ C0] ? __pfx_worker_thread+0x10/0x10 [ 500.160227][ C0] ? __pfx_kthread+0x10/0x10 [ 500.164812][ C0] ret_from_fork+0x4b/0x80 [ 500.169232][ C0] ? __pfx_kthread+0x10/0x10 [ 500.173827][ C0] ret_from_fork_asm+0x1a/0x30 [ 500.178628][ C0] [ 500.181642][ C0] [ 500.181642][ C0] Showing all locks held in the system: [ 500.189390][ C0] 3 locks held by kworker/u8:7/2427: [ 500.194668][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 500.206253][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 500.219047][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 500.228465][ C0] 2 locks held by getty/4852: [ 500.233121][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 500.242878][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 500.252989][ C0] 2 locks held by kworker/u8:9/5323: [ 500.258540][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 500.270204][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 500.282300][ C0] 1 lock held by syz-executor.4/7574: [ 500.287675][ C0] 8 locks held by syz-executor.1/9587: [ 500.293110][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 500.301994][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 500.311747][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 500.321764][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 500.332145][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 500.341372][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 500.351384][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 500.361402][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 500.372292][ C0] 1 lock held by syz-executor.0/9670: [ 500.377663][ C0] 3 locks held by syz-executor.2/9673: [ 500.383101][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 500.393199][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 500.402949][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 500.412788][ C0] 2 locks held by modprobe/9672: [ 500.417723][ C0] [ 500.420029][ C0] ============================================= [ 500.420029][ C0] [ 501.517406][ C0] DEBUG: waiting rtnl_mutex for 7041 jiffies. [ 501.523509][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 501.533716][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 501.539717][ C0] Call Trace: [ 501.542982][ C0] [ 501.545904][ C0] __schedule+0x17e8/0x4a20 [ 501.550428][ C0] ? __pfx___schedule+0x10/0x10 [ 501.555270][ C0] ? __pfx_lock_release+0x10/0x10 [ 501.560299][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 501.565749][ C0] ? kthread_data+0x52/0xd0 [ 501.570253][ C0] ? schedule+0x90/0x320 [ 501.574479][ C0] ? wq_worker_sleeping+0x66/0x240 [ 501.579592][ C0] ? schedule+0x90/0x320 [ 501.583837][ C0] schedule+0x14b/0x320 [ 501.588005][ C0] schedule_preempt_disabled+0x13/0x30 [ 501.593449][ C0] __mutex_lock+0x6a4/0xd70 [ 501.597958][ C0] ? mark_lock+0x9a/0x360 [ 501.602280][ C0] ? __mutex_lock+0x527/0xd70 [ 501.606943][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 501.612062][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 501.617082][ C0] ? rtnl_lock+0xe7/0x130 [ 501.621417][ C0] addrconf_dad_work+0xd0/0x16f0 [ 501.626353][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 501.631815][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 501.638153][ C0] ? process_scheduled_works+0x945/0x1830 [ 501.643857][ C0] process_scheduled_works+0xa2c/0x1830 [ 501.649418][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 501.655390][ C0] ? assign_work+0x364/0x3d0 [ 501.659984][ C0] worker_thread+0x86d/0xd50 [ 501.664564][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 501.670466][ C0] ? __kthread_parkme+0x169/0x1d0 [ 501.675506][ C0] ? __pfx_worker_thread+0x10/0x10 [ 501.680619][ C0] kthread+0x2f0/0x390 [ 501.684691][ C0] ? __pfx_worker_thread+0x10/0x10 [ 501.689831][ C0] ? __pfx_kthread+0x10/0x10 [ 501.694412][ C0] ret_from_fork+0x4b/0x80 [ 501.698836][ C0] ? __pfx_kthread+0x10/0x10 [ 501.703413][ C0] ret_from_fork_asm+0x1a/0x30 [ 501.708187][ C0] [ 501.711193][ C0] [ 501.711193][ C0] Showing all locks held in the system: [ 501.718928][ C0] 3 locks held by kworker/u8:7/2427: [ 501.724194][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 501.735768][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 501.748554][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 501.758136][ C0] 2 locks held by getty/4852: [ 501.762789][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 501.772541][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 501.782643][ C0] 2 locks held by kworker/u8:9/5323: [ 501.787933][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 501.799602][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 501.811705][ C0] 1 lock held by syz-executor.4/7574: [ 501.817059][ C0] 8 locks held by syz-executor.1/9587: [ 501.822511][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 501.831406][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 501.841161][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 501.851175][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 501.861535][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 501.870762][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 501.880773][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 501.890792][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 501.901682][ C0] 1 lock held by syz-executor.0/9670: [ 501.907034][ C0] 3 locks held by syz-executor.2/9673: [ 501.912490][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 501.922597][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 501.932355][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 501.942190][ C0] 2 locks held by modprobe/9672: [ 501.947136][ C0] [ 501.949463][ C0] ============================================= [ 501.949463][ C0] [ 503.037398][ C0] DEBUG: waiting rtnl_mutex for 7193 jiffies. [ 503.043503][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 503.053708][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 503.059713][ C0] Call Trace: [ 503.063006][ C0] [ 503.065929][ C0] __schedule+0x17e8/0x4a20 [ 503.070456][ C0] ? __pfx___schedule+0x10/0x10 [ 503.075295][ C0] ? __pfx_lock_release+0x10/0x10 [ 503.080328][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 503.085777][ C0] ? kthread_data+0x52/0xd0 [ 503.090282][ C0] ? schedule+0x90/0x320 [ 503.094508][ C0] ? wq_worker_sleeping+0x66/0x240 [ 503.099628][ C0] ? schedule+0x90/0x320 [ 503.103853][ C0] schedule+0x14b/0x320 [ 503.108013][ C0] schedule_preempt_disabled+0x13/0x30 [ 503.113457][ C0] __mutex_lock+0x6a4/0xd70 [ 503.118001][ C0] ? mark_lock+0x9a/0x360 [ 503.122342][ C0] ? __mutex_lock+0x527/0xd70 [ 503.127014][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 503.132139][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 503.137174][ C0] ? rtnl_lock+0xe7/0x130 [ 503.141531][ C0] addrconf_dad_work+0xd0/0x16f0 [ 503.146469][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 503.151934][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 503.158276][ C0] ? process_scheduled_works+0x945/0x1830 [ 503.163985][ C0] process_scheduled_works+0xa2c/0x1830 [ 503.169558][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 503.175531][ C0] ? assign_work+0x364/0x3d0 [ 503.180156][ C0] worker_thread+0x86d/0xd50 [ 503.184748][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 503.190653][ C0] ? __kthread_parkme+0x169/0x1d0 [ 503.195669][ C0] ? __pfx_worker_thread+0x10/0x10 [ 503.200784][ C0] kthread+0x2f0/0x390 [ 503.204841][ C0] ? __pfx_worker_thread+0x10/0x10 [ 503.209961][ C0] ? __pfx_kthread+0x10/0x10 [ 503.214544][ C0] ret_from_fork+0x4b/0x80 [ 503.218966][ C0] ? __pfx_kthread+0x10/0x10 [ 503.223554][ C0] ret_from_fork_asm+0x1a/0x30 [ 503.228342][ C0] [ 503.231354][ C0] [ 503.231354][ C0] Showing all locks held in the system: [ 503.239093][ C0] 3 locks held by kworker/u8:7/2427: [ 503.244358][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 503.255950][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 503.268744][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 503.278156][ C0] 2 locks held by getty/4852: [ 503.282814][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 503.292564][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 503.302665][ C0] 2 locks held by kworker/u8:9/5323: [ 503.307947][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 503.319606][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 503.331707][ C0] 1 lock held by syz-executor.4/7574: [ 503.337065][ C0] 8 locks held by syz-executor.1/9587: [ 503.342521][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 503.351445][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 503.361216][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 503.371232][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 503.381592][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 503.390828][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 503.400962][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 503.410988][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 503.421882][ C0] 1 lock held by syz-executor.0/9670: [ 503.427240][ C0] 3 locks held by syz-executor.2/9673: [ 503.432700][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 503.442802][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 503.452556][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 503.462392][ C0] 2 locks held by modprobe/9672: [ 503.467311][ C0] [ 503.469635][ C0] ============================================= [ 503.469635][ C0] [ 504.557411][ C0] DEBUG: waiting rtnl_mutex for 7345 jiffies. [ 504.563518][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 504.573709][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 504.579795][ C0] Call Trace: [ 504.583061][ C0] [ 504.585982][ C0] __schedule+0x17e8/0x4a20 [ 504.590501][ C0] ? __pfx___schedule+0x10/0x10 [ 504.595347][ C0] ? __pfx_lock_release+0x10/0x10 [ 504.600379][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 504.605827][ C0] ? kthread_data+0x52/0xd0 [ 504.610337][ C0] ? schedule+0x90/0x320 [ 504.614570][ C0] ? wq_worker_sleeping+0x66/0x240 [ 504.619687][ C0] ? schedule+0x90/0x320 [ 504.623916][ C0] schedule+0x14b/0x320 [ 504.628076][ C0] schedule_preempt_disabled+0x13/0x30 [ 504.633521][ C0] __mutex_lock+0x6a4/0xd70 [ 504.638026][ C0] ? mark_lock+0x9a/0x360 [ 504.642345][ C0] ? __mutex_lock+0x527/0xd70 [ 504.647007][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 504.652121][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 504.657155][ C0] ? rtnl_lock+0xe7/0x130 [ 504.661494][ C0] addrconf_dad_work+0xd0/0x16f0 [ 504.666423][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 504.671889][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 504.678228][ C0] ? process_scheduled_works+0x945/0x1830 [ 504.683930][ C0] process_scheduled_works+0xa2c/0x1830 [ 504.689493][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 504.695465][ C0] ? assign_work+0x364/0x3d0 [ 504.700059][ C0] worker_thread+0x86d/0xd50 [ 504.704638][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 504.710557][ C0] ? __kthread_parkme+0x169/0x1d0 [ 504.715573][ C0] ? __pfx_worker_thread+0x10/0x10 [ 504.720691][ C0] kthread+0x2f0/0x390 [ 504.724750][ C0] ? __pfx_worker_thread+0x10/0x10 [ 504.729866][ C0] ? __pfx_kthread+0x10/0x10 [ 504.734447][ C0] ret_from_fork+0x4b/0x80 [ 504.738868][ C0] ? __pfx_kthread+0x10/0x10 [ 504.743448][ C0] ret_from_fork_asm+0x1a/0x30 [ 504.748222][ C0] [ 504.751227][ C0] [ 504.751227][ C0] Showing all locks held in the system: [ 504.758980][ C0] 3 locks held by kworker/u8:7/2427: [ 504.764248][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 504.775827][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 504.788614][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 504.798025][ C0] 2 locks held by getty/4852: [ 504.802680][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 504.812443][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 504.822543][ C0] 2 locks held by kworker/u8:9/5323: [ 504.827826][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 504.839481][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 504.851574][ C0] 1 lock held by syz-executor.4/7574: [ 504.856927][ C0] 8 locks held by syz-executor.1/9587: [ 504.862386][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 504.871279][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 504.881030][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 504.891044][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 504.901408][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 504.910639][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 504.920649][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 504.930658][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 504.941545][ C0] 1 lock held by syz-executor.0/9670: [ 504.946895][ C0] 3 locks held by syz-executor.2/9673: [ 504.952367][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 504.962830][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 504.972660][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 504.982503][ C0] 2 locks held by modprobe/9672: [ 504.987451][ C0] [ 504.989760][ C0] ============================================= [ 504.989760][ C0] [ 506.077403][ C0] DEBUG: waiting rtnl_mutex for 7497 jiffies. [ 506.083503][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 506.093724][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 506.099734][ C0] Call Trace: [ 506.103000][ C0] [ 506.105923][ C0] __schedule+0x17e8/0x4a20 [ 506.110453][ C0] ? __pfx___schedule+0x10/0x10 [ 506.115294][ C0] ? __pfx_lock_release+0x10/0x10 [ 506.120354][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 506.125816][ C0] ? kthread_data+0x52/0xd0 [ 506.130321][ C0] ? schedule+0x90/0x320 [ 506.134550][ C0] ? wq_worker_sleeping+0x66/0x240 [ 506.139683][ C0] ? schedule+0x90/0x320 [ 506.143908][ C0] schedule+0x14b/0x320 [ 506.148172][ C0] schedule_preempt_disabled+0x13/0x30 [ 506.153625][ C0] __mutex_lock+0x6a4/0xd70 [ 506.158132][ C0] ? mark_lock+0x9a/0x360 [ 506.162449][ C0] ? __mutex_lock+0x527/0xd70 [ 506.167112][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 506.172235][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 506.177252][ C0] ? rtnl_lock+0xe7/0x130 [ 506.181583][ C0] addrconf_dad_work+0xd0/0x16f0 [ 506.186514][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 506.191996][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 506.198361][ C0] ? process_scheduled_works+0x945/0x1830 [ 506.204078][ C0] process_scheduled_works+0xa2c/0x1830 [ 506.209653][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 506.215627][ C0] ? assign_work+0x364/0x3d0 [ 506.220232][ C0] worker_thread+0x86d/0xd50 [ 506.224818][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 506.230719][ C0] ? __kthread_parkme+0x169/0x1d0 [ 506.235731][ C0] ? __pfx_worker_thread+0x10/0x10 [ 506.240842][ C0] kthread+0x2f0/0x390 [ 506.244898][ C0] ? __pfx_worker_thread+0x10/0x10 [ 506.250011][ C0] ? __pfx_kthread+0x10/0x10 [ 506.254587][ C0] ret_from_fork+0x4b/0x80 [ 506.259009][ C0] ? __pfx_kthread+0x10/0x10 [ 506.263583][ C0] ret_from_fork_asm+0x1a/0x30 [ 506.268359][ C0] [ 506.271363][ C0] [ 506.271363][ C0] Showing all locks held in the system: [ 506.279097][ C0] 3 locks held by kworker/u8:7/2427: [ 506.284452][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 506.296035][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 506.308852][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 506.318289][ C0] 2 locks held by getty/4852: [ 506.322942][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 506.332687][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 506.342787][ C0] 2 locks held by kworker/u8:9/5323: [ 506.348071][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 506.359727][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 506.371831][ C0] 1 lock held by syz-executor.4/7574: [ 506.377186][ C0] 8 locks held by syz-executor.1/9587: [ 506.382641][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 506.391532][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 506.401313][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 506.411330][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 506.421685][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 506.430909][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 506.440920][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 506.450942][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 506.461818][ C0] 1 lock held by syz-executor.0/9670: [ 506.467167][ C0] 3 locks held by syz-executor.2/9673: [ 506.472616][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 506.482709][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 506.492460][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 506.502324][ C0] 2 locks held by modprobe/9672: [ 506.507239][ C0] [ 506.509562][ C0] ============================================= [ 506.509562][ C0] [ 507.597387][ C0] DEBUG: waiting rtnl_mutex for 7649 jiffies. [ 507.603490][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 507.613775][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 507.619772][ C0] Call Trace: [ 507.623047][ C0] [ 507.625981][ C0] __schedule+0x17e8/0x4a20 [ 507.630509][ C0] ? __pfx___schedule+0x10/0x10 [ 507.635348][ C0] ? __pfx_lock_release+0x10/0x10 [ 507.640378][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 507.645824][ C0] ? kthread_data+0x52/0xd0 [ 507.650328][ C0] ? schedule+0x90/0x320 [ 507.654568][ C0] ? wq_worker_sleeping+0x66/0x240 [ 507.659682][ C0] ? schedule+0x90/0x320 [ 507.663932][ C0] schedule+0x14b/0x320 [ 507.668119][ C0] schedule_preempt_disabled+0x13/0x30 [ 507.673579][ C0] __mutex_lock+0x6a4/0xd70 [ 507.678093][ C0] ? mark_lock+0x9a/0x360 [ 507.682416][ C0] ? __mutex_lock+0x527/0xd70 [ 507.687078][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 507.692199][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 507.697217][ C0] ? rtnl_lock+0xe7/0x130 [ 507.701570][ C0] addrconf_dad_work+0xd0/0x16f0 [ 507.706499][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 507.711961][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 507.718298][ C0] ? process_scheduled_works+0x945/0x1830 [ 507.723999][ C0] process_scheduled_works+0xa2c/0x1830 [ 507.729571][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 507.735541][ C0] ? assign_work+0x364/0x3d0 [ 507.740140][ C0] worker_thread+0x86d/0xd50 [ 507.744721][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 507.750616][ C0] ? __kthread_parkme+0x169/0x1d0 [ 507.755647][ C0] ? __pfx_worker_thread+0x10/0x10 [ 507.760760][ C0] kthread+0x2f0/0x390 [ 507.764815][ C0] ? __pfx_worker_thread+0x10/0x10 [ 507.769929][ C0] ? __pfx_kthread+0x10/0x10 [ 507.774502][ C0] ret_from_fork+0x4b/0x80 [ 507.778917][ C0] ? __pfx_kthread+0x10/0x10 [ 507.783495][ C0] ret_from_fork_asm+0x1a/0x30 [ 507.788269][ C0] [ 507.791273][ C0] [ 507.791273][ C0] Showing all locks held in the system: [ 507.799009][ C0] 3 locks held by kworker/u8:7/2427: [ 507.804273][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 507.815845][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 507.828658][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 507.838123][ C0] 2 locks held by getty/4852: [ 507.842780][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 507.852529][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 507.862627][ C0] 2 locks held by kworker/u8:9/5323: [ 507.867905][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 507.879580][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 507.891674][ C0] 1 lock held by syz-executor.4/7574: [ 507.897029][ C0] 8 locks held by syz-executor.1/9587: [ 507.902479][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 507.911379][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 507.921125][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 507.931153][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 507.941565][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 507.950795][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 507.960805][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 507.970809][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 507.981688][ C0] 1 lock held by syz-executor.0/9670: [ 507.987037][ C0] 3 locks held by syz-executor.2/9673: [ 507.992485][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 508.002581][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 508.012331][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 508.022162][ C0] 2 locks held by modprobe/9672: [ 508.027073][ C0] [ 508.029397][ C0] ============================================= [ 508.029397][ C0] [ 509.107425][ C0] DEBUG: waiting rtnl_mutex for 7800 jiffies. [ 509.113515][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 509.123710][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 509.129735][ C0] Call Trace: [ 509.132998][ C0] [ 509.135937][ C0] __schedule+0x17e8/0x4a20 [ 509.140487][ C0] ? __pfx___schedule+0x10/0x10 [ 509.145337][ C0] ? __pfx_lock_release+0x10/0x10 [ 509.150376][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 509.155827][ C0] ? kthread_data+0x52/0xd0 [ 509.160445][ C0] ? schedule+0x90/0x320 [ 509.164699][ C0] ? wq_worker_sleeping+0x66/0x240 [ 509.169823][ C0] ? schedule+0x90/0x320 [ 509.174051][ C0] schedule+0x14b/0x320 [ 509.178211][ C0] schedule_preempt_disabled+0x13/0x30 [ 509.183656][ C0] __mutex_lock+0x6a4/0xd70 [ 509.188165][ C0] ? mark_lock+0x9a/0x360 [ 509.192481][ C0] ? __mutex_lock+0x527/0xd70 [ 509.197158][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 509.202293][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 509.207318][ C0] ? rtnl_lock+0xe7/0x130 [ 509.211660][ C0] addrconf_dad_work+0xd0/0x16f0 [ 509.216595][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 509.222060][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 509.228399][ C0] ? process_scheduled_works+0x945/0x1830 [ 509.234102][ C0] process_scheduled_works+0xa2c/0x1830 [ 509.239667][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 509.245634][ C0] ? assign_work+0x364/0x3d0 [ 509.250227][ C0] worker_thread+0x86d/0xd50 [ 509.254805][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 509.260700][ C0] ? __kthread_parkme+0x169/0x1d0 [ 509.265720][ C0] ? __pfx_worker_thread+0x10/0x10 [ 509.270837][ C0] kthread+0x2f0/0x390 [ 509.274892][ C0] ? __pfx_worker_thread+0x10/0x10 [ 509.280017][ C0] ? __pfx_kthread+0x10/0x10 [ 509.284612][ C0] ret_from_fork+0x4b/0x80 [ 509.289032][ C0] ? __pfx_kthread+0x10/0x10 [ 509.293606][ C0] ret_from_fork_asm+0x1a/0x30 [ 509.298378][ C0] [ 509.301381][ C0] [ 509.301381][ C0] Showing all locks held in the system: [ 509.309112][ C0] 3 locks held by kworker/u8:7/2427: [ 509.314379][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 509.325950][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 509.338741][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 509.348151][ C0] 2 locks held by getty/4852: [ 509.352806][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 509.362550][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 509.372655][ C0] 2 locks held by kworker/u8:9/5323: [ 509.377938][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 509.389600][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 509.401691][ C0] 1 lock held by syz-executor.4/7574: [ 509.407044][ C0] 8 locks held by syz-executor.1/9587: [ 509.412494][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 509.421376][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 509.431125][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 509.441151][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 509.451506][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 509.460729][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 509.470740][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 509.480755][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 509.491639][ C0] 1 lock held by syz-executor.0/9670: [ 509.496990][ C0] 3 locks held by syz-executor.2/9673: [ 509.502438][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 509.512534][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 509.522283][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 509.532115][ C0] 2 locks held by modprobe/9672: [ 509.537034][ C0] [ 509.539360][ C0] ============================================= [ 509.539360][ C0] [ 510.637402][ C0] DEBUG: waiting rtnl_mutex for 7953 jiffies. [ 510.643504][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 510.653712][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 510.659707][ C0] Call Trace: [ 510.662969][ C0] [ 510.665884][ C0] __schedule+0x17e8/0x4a20 [ 510.670416][ C0] ? __pfx___schedule+0x10/0x10 [ 510.675254][ C0] ? __pfx_lock_release+0x10/0x10 [ 510.680286][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 510.685732][ C0] ? kthread_data+0x52/0xd0 [ 510.690235][ C0] ? schedule+0x90/0x320 [ 510.694550][ C0] ? wq_worker_sleeping+0x66/0x240 [ 510.699693][ C0] ? schedule+0x90/0x320 [ 510.703929][ C0] schedule+0x14b/0x320 [ 510.708114][ C0] schedule_preempt_disabled+0x13/0x30 [ 510.713567][ C0] __mutex_lock+0x6a4/0xd70 [ 510.718082][ C0] ? mark_lock+0x9a/0x360 [ 510.722433][ C0] ? __mutex_lock+0x527/0xd70 [ 510.727106][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 510.732236][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 510.737261][ C0] ? rtnl_lock+0xe7/0x130 [ 510.741607][ C0] addrconf_dad_work+0xd0/0x16f0 [ 510.746544][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 510.752008][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 510.758345][ C0] ? process_scheduled_works+0x945/0x1830 [ 510.764047][ C0] process_scheduled_works+0xa2c/0x1830 [ 510.769607][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 510.775575][ C0] ? assign_work+0x364/0x3d0 [ 510.780166][ C0] worker_thread+0x86d/0xd50 [ 510.784742][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 510.790636][ C0] ? __kthread_parkme+0x169/0x1d0 [ 510.795667][ C0] ? __pfx_worker_thread+0x10/0x10 [ 510.800790][ C0] kthread+0x2f0/0x390 [ 510.804857][ C0] ? __pfx_worker_thread+0x10/0x10 [ 510.809972][ C0] ? __pfx_kthread+0x10/0x10 [ 510.814549][ C0] ret_from_fork+0x4b/0x80 [ 510.818982][ C0] ? __pfx_kthread+0x10/0x10 [ 510.823557][ C0] ret_from_fork_asm+0x1a/0x30 [ 510.828332][ C0] [ 510.831334][ C0] [ 510.831334][ C0] Showing all locks held in the system: [ 510.839069][ C0] 3 locks held by kworker/u8:7/2427: [ 510.844330][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 510.855902][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 510.868684][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 510.878089][ C0] 2 locks held by getty/4852: [ 510.882742][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 510.892591][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 510.902697][ C0] 2 locks held by kworker/u8:9/5323: [ 510.907980][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 510.919639][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 510.931742][ C0] 1 lock held by syz-executor.4/7574: [ 510.937110][ C0] 8 locks held by syz-executor.1/9587: [ 510.942561][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 510.951444][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 510.961201][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 510.971251][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 510.981623][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 510.990874][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 511.000897][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 511.010942][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 511.021835][ C0] 1 lock held by syz-executor.0/9670: [ 511.027190][ C0] 3 locks held by syz-executor.2/9673: [ 511.032641][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 511.042739][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 511.052495][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 511.062334][ C0] 2 locks held by modprobe/9672: [ 511.067249][ C0] [ 511.069571][ C0] ============================================= [ 511.069571][ C0] [ 512.157397][ C0] DEBUG: waiting rtnl_mutex for 8105 jiffies. [ 512.163506][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 512.173704][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 512.179702][ C0] Call Trace: [ 512.182964][ C0] [ 512.185882][ C0] __schedule+0x17e8/0x4a20 [ 512.190402][ C0] ? __pfx___schedule+0x10/0x10 [ 512.195238][ C0] ? __pfx_lock_release+0x10/0x10 [ 512.200269][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 512.205735][ C0] ? kthread_data+0x52/0xd0 [ 512.210271][ C0] ? schedule+0x90/0x320 [ 512.214509][ C0] ? wq_worker_sleeping+0x66/0x240 [ 512.219631][ C0] ? schedule+0x90/0x320 [ 512.223861][ C0] schedule+0x14b/0x320 [ 512.228027][ C0] schedule_preempt_disabled+0x13/0x30 [ 512.233491][ C0] __mutex_lock+0x6a4/0xd70 [ 512.238013][ C0] ? mark_lock+0x9a/0x360 [ 512.242333][ C0] ? __mutex_lock+0x527/0xd70 [ 512.247004][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 512.252127][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 512.257148][ C0] ? rtnl_lock+0xe7/0x130 [ 512.261483][ C0] addrconf_dad_work+0xd0/0x16f0 [ 512.266415][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 512.271882][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 512.278221][ C0] ? process_scheduled_works+0x945/0x1830 [ 512.283923][ C0] process_scheduled_works+0xa2c/0x1830 [ 512.289487][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 512.295454][ C0] ? assign_work+0x364/0x3d0 [ 512.300047][ C0] worker_thread+0x86d/0xd50 [ 512.304627][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 512.310526][ C0] ? __kthread_parkme+0x169/0x1d0 [ 512.315537][ C0] ? __pfx_worker_thread+0x10/0x10 [ 512.320648][ C0] kthread+0x2f0/0x390 [ 512.324703][ C0] ? __pfx_worker_thread+0x10/0x10 [ 512.329815][ C0] ? __pfx_kthread+0x10/0x10 [ 512.334402][ C0] ret_from_fork+0x4b/0x80 [ 512.338853][ C0] ? __pfx_kthread+0x10/0x10 [ 512.343432][ C0] ret_from_fork_asm+0x1a/0x30 [ 512.348208][ C0] [ 512.351214][ C0] [ 512.351214][ C0] Showing all locks held in the system: [ 512.358956][ C0] 3 locks held by kworker/u8:7/2427: [ 512.364222][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 512.375791][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 512.388573][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 512.397983][ C0] 2 locks held by getty/4852: [ 512.402636][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 512.412382][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 512.422480][ C0] 2 locks held by kworker/u8:9/5323: [ 512.427762][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 512.439423][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 512.451536][ C0] 1 lock held by syz-executor.4/7574: [ 512.456892][ C0] 8 locks held by syz-executor.1/9587: [ 512.462343][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 512.471227][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 512.480976][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 512.490986][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 512.501340][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 512.510564][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 512.520570][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 512.530574][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 512.541459][ C0] 1 lock held by syz-executor.0/9670: [ 512.546808][ C0] 3 locks held by syz-executor.2/9673: [ 512.552286][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 512.562383][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 512.572133][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 512.581966][ C0] 2 locks held by modprobe/9672: [ 512.586881][ C0] [ 512.589207][ C0] ============================================= [ 512.589207][ C0] [ 513.677420][ C0] DEBUG: waiting rtnl_mutex for 8257 jiffies. [ 513.683514][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 513.693705][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 513.699699][ C0] Call Trace: [ 513.702980][ C0] [ 513.705899][ C0] __schedule+0x17e8/0x4a20 [ 513.710415][ C0] ? __pfx___schedule+0x10/0x10 [ 513.715253][ C0] ? __pfx_lock_release+0x10/0x10 [ 513.720301][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 513.725752][ C0] ? kthread_data+0x52/0xd0 [ 513.730255][ C0] ? schedule+0x90/0x320 [ 513.734483][ C0] ? wq_worker_sleeping+0x66/0x240 [ 513.739595][ C0] ? schedule+0x90/0x320 [ 513.743820][ C0] schedule+0x14b/0x320 [ 513.747998][ C0] schedule_preempt_disabled+0x13/0x30 [ 513.753454][ C0] __mutex_lock+0x6a4/0xd70 [ 513.757961][ C0] ? mark_lock+0x9a/0x360 [ 513.762276][ C0] ? __mutex_lock+0x527/0xd70 [ 513.766935][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 513.772061][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 513.777079][ C0] ? rtnl_lock+0xe7/0x130 [ 513.781413][ C0] addrconf_dad_work+0xd0/0x16f0 [ 513.786343][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 513.791805][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 513.798142][ C0] ? process_scheduled_works+0x945/0x1830 [ 513.803842][ C0] process_scheduled_works+0xa2c/0x1830 [ 513.809400][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 513.815368][ C0] ? assign_work+0x364/0x3d0 [ 513.819960][ C0] worker_thread+0x86d/0xd50 [ 513.824550][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 513.830443][ C0] ? __kthread_parkme+0x169/0x1d0 [ 513.835475][ C0] ? __pfx_worker_thread+0x10/0x10 [ 513.840586][ C0] kthread+0x2f0/0x390 [ 513.844640][ C0] ? __pfx_worker_thread+0x10/0x10 [ 513.849751][ C0] ? __pfx_kthread+0x10/0x10 [ 513.854324][ C0] ret_from_fork+0x4b/0x80 [ 513.858851][ C0] ? __pfx_kthread+0x10/0x10 [ 513.863430][ C0] ret_from_fork_asm+0x1a/0x30 [ 513.868205][ C0] [ 513.871228][ C0] [ 513.871228][ C0] Showing all locks held in the system: [ 513.878980][ C0] 3 locks held by kworker/u8:7/2427: [ 513.884247][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 513.895820][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 513.908615][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 513.918024][ C0] 2 locks held by getty/4852: [ 513.922678][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 513.932426][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 513.942524][ C0] 2 locks held by kworker/u8:9/5323: [ 513.947804][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 513.959463][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 513.971553][ C0] 1 lock held by syz-executor.4/7574: [ 513.976912][ C0] 8 locks held by syz-executor.1/9587: [ 513.982372][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 513.991257][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 514.001021][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 514.011061][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 514.021428][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 514.030664][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 514.040678][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 514.050689][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 514.061579][ C0] 1 lock held by syz-executor.0/9670: [ 514.066937][ C0] 3 locks held by syz-executor.2/9673: [ 514.072393][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 514.082504][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 514.092284][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 514.102123][ C0] 2 locks held by modprobe/9672: [ 514.107056][ C0] [ 514.109380][ C0] ============================================= [ 514.109380][ C0] [ 515.197411][ C0] DEBUG: waiting rtnl_mutex for 8409 jiffies. [ 515.203516][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 515.213759][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 515.219785][ C0] Call Trace: [ 515.223053][ C0] [ 515.225975][ C0] __schedule+0x17e8/0x4a20 [ 515.230499][ C0] ? __pfx___schedule+0x10/0x10 [ 515.235342][ C0] ? __pfx_lock_release+0x10/0x10 [ 515.240373][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 515.245824][ C0] ? kthread_data+0x52/0xd0 [ 515.250330][ C0] ? schedule+0x90/0x320 [ 515.254556][ C0] ? wq_worker_sleeping+0x66/0x240 [ 515.259677][ C0] ? schedule+0x90/0x320 [ 515.263905][ C0] schedule+0x14b/0x320 [ 515.268062][ C0] schedule_preempt_disabled+0x13/0x30 [ 515.273505][ C0] __mutex_lock+0x6a4/0xd70 [ 515.278010][ C0] ? mark_lock+0x9a/0x360 [ 515.282327][ C0] ? __mutex_lock+0x527/0xd70 [ 515.286990][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 515.292109][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 515.297128][ C0] ? rtnl_lock+0xe7/0x130 [ 515.301462][ C0] addrconf_dad_work+0xd0/0x16f0 [ 515.306400][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 515.311876][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 515.318213][ C0] ? process_scheduled_works+0x945/0x1830 [ 515.323913][ C0] process_scheduled_works+0xa2c/0x1830 [ 515.329474][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 515.335440][ C0] ? assign_work+0x364/0x3d0 [ 515.340032][ C0] worker_thread+0x86d/0xd50 [ 515.344615][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 515.350509][ C0] ? __kthread_parkme+0x169/0x1d0 [ 515.355518][ C0] ? __pfx_worker_thread+0x10/0x10 [ 515.360628][ C0] kthread+0x2f0/0x390 [ 515.364680][ C0] ? __pfx_worker_thread+0x10/0x10 [ 515.369793][ C0] ? __pfx_kthread+0x10/0x10 [ 515.374368][ C0] ret_from_fork+0x4b/0x80 [ 515.378785][ C0] ? __pfx_kthread+0x10/0x10 [ 515.383359][ C0] ret_from_fork_asm+0x1a/0x30 [ 515.388156][ C0] [ 515.391179][ C0] [ 515.391179][ C0] Showing all locks held in the system: [ 515.398915][ C0] 3 locks held by kworker/u8:7/2427: [ 515.404180][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 515.415759][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 515.428546][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 515.437954][ C0] 2 locks held by getty/4852: [ 515.442610][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 515.452355][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 515.462476][ C0] 2 locks held by kworker/u8:9/5323: [ 515.467757][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 515.479418][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 515.491508][ C0] 1 lock held by syz-executor.4/7574: [ 515.496862][ C0] 8 locks held by syz-executor.1/9587: [ 515.502314][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 515.511206][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 515.520954][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 515.530965][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 515.541321][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 515.550552][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 515.560561][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 515.570619][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 515.581515][ C0] 1 lock held by syz-executor.0/9670: [ 515.586872][ C0] 3 locks held by syz-executor.2/9673: [ 515.592346][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 515.602455][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 515.612231][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 515.622079][ C0] 2 locks held by modprobe/9672: [ 515.626996][ C0] [ 515.629323][ C0] ============================================= [ 515.629323][ C0] [ 516.717385][ C0] DEBUG: waiting rtnl_mutex for 8561 jiffies. [ 516.723488][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 516.733699][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 516.739700][ C0] Call Trace: [ 516.742964][ C0] [ 516.745878][ C0] __schedule+0x17e8/0x4a20 [ 516.750397][ C0] ? __pfx___schedule+0x10/0x10 [ 516.755231][ C0] ? __pfx_lock_release+0x10/0x10 [ 516.760259][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 516.765710][ C0] ? kthread_data+0x52/0xd0 [ 516.770212][ C0] ? schedule+0x90/0x320 [ 516.774441][ C0] ? wq_worker_sleeping+0x66/0x240 [ 516.779553][ C0] ? schedule+0x90/0x320 [ 516.783777][ C0] schedule+0x14b/0x320 [ 516.787954][ C0] schedule_preempt_disabled+0x13/0x30 [ 516.793394][ C0] __mutex_lock+0x6a4/0xd70 [ 516.797896][ C0] ? mark_lock+0x9a/0x360 [ 516.802210][ C0] ? __mutex_lock+0x527/0xd70 [ 516.806870][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 516.811984][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 516.817020][ C0] ? rtnl_lock+0xe7/0x130 [ 516.821366][ C0] addrconf_dad_work+0xd0/0x16f0 [ 516.826298][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 516.831758][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 516.838096][ C0] ? process_scheduled_works+0x945/0x1830 [ 516.843808][ C0] process_scheduled_works+0xa2c/0x1830 [ 516.849374][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 516.855342][ C0] ? assign_work+0x364/0x3d0 [ 516.859935][ C0] worker_thread+0x86d/0xd50 [ 516.864532][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 516.870427][ C0] ? __kthread_parkme+0x169/0x1d0 [ 516.875438][ C0] ? __pfx_worker_thread+0x10/0x10 [ 516.880549][ C0] kthread+0x2f0/0x390 [ 516.884606][ C0] ? __pfx_worker_thread+0x10/0x10 [ 516.889715][ C0] ? __pfx_kthread+0x10/0x10 [ 516.894290][ C0] ret_from_fork+0x4b/0x80 [ 516.898706][ C0] ? __pfx_kthread+0x10/0x10 [ 516.903283][ C0] ret_from_fork_asm+0x1a/0x30 [ 516.908057][ C0] [ 516.911061][ C0] [ 516.911061][ C0] Showing all locks held in the system: [ 516.918797][ C0] 3 locks held by kworker/u8:7/2427: [ 516.924060][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 516.935629][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 516.948421][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 516.957837][ C0] 2 locks held by getty/4852: [ 516.962577][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 516.972322][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 516.982421][ C0] 2 locks held by kworker/u8:9/5323: [ 516.987734][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 516.999390][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 517.011480][ C0] 1 lock held by syz-executor.4/7574: [ 517.016833][ C0] 8 locks held by syz-executor.1/9587: [ 517.022283][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 517.031164][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 517.040907][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 517.050923][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 517.061281][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 517.070508][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 517.080623][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 517.090630][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 517.101510][ C0] 1 lock held by syz-executor.0/9670: [ 517.106859][ C0] 3 locks held by syz-executor.2/9673: [ 517.112308][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 517.122400][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 517.132148][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 517.141980][ C0] 2 locks held by modprobe/9672: [ 517.146894][ C0] [ 517.149220][ C0] ============================================= [ 517.149220][ C0] [ 518.237423][ C0] DEBUG: waiting rtnl_mutex for 8713 jiffies. [ 518.243517][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 518.253725][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 518.259724][ C0] Call Trace: [ 518.262987][ C0] [ 518.265903][ C0] __schedule+0x17e8/0x4a20 [ 518.270425][ C0] ? __pfx___schedule+0x10/0x10 [ 518.275276][ C0] ? __pfx_lock_release+0x10/0x10 [ 518.280311][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 518.285781][ C0] ? kthread_data+0x52/0xd0 [ 518.290288][ C0] ? schedule+0x90/0x320 [ 518.294515][ C0] ? wq_worker_sleeping+0x66/0x240 [ 518.299630][ C0] ? schedule+0x90/0x320 [ 518.303856][ C0] schedule+0x14b/0x320 [ 518.308015][ C0] schedule_preempt_disabled+0x13/0x30 [ 518.313457][ C0] __mutex_lock+0x6a4/0xd70 [ 518.317961][ C0] ? mark_lock+0x9a/0x360 [ 518.322280][ C0] ? __mutex_lock+0x527/0xd70 [ 518.326940][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 518.332052][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 518.337090][ C0] ? rtnl_lock+0xe7/0x130 [ 518.341422][ C0] addrconf_dad_work+0xd0/0x16f0 [ 518.346360][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 518.351819][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 518.358153][ C0] ? process_scheduled_works+0x945/0x1830 [ 518.363865][ C0] process_scheduled_works+0xa2c/0x1830 [ 518.369429][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 518.375397][ C0] ? assign_work+0x364/0x3d0 [ 518.379997][ C0] worker_thread+0x86d/0xd50 [ 518.384581][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 518.390477][ C0] ? __kthread_parkme+0x169/0x1d0 [ 518.395489][ C0] ? __pfx_worker_thread+0x10/0x10 [ 518.400601][ C0] kthread+0x2f0/0x390 [ 518.404656][ C0] ? __pfx_worker_thread+0x10/0x10 [ 518.409768][ C0] ? __pfx_kthread+0x10/0x10 [ 518.414342][ C0] ret_from_fork+0x4b/0x80 [ 518.418761][ C0] ? __pfx_kthread+0x10/0x10 [ 518.423334][ C0] ret_from_fork_asm+0x1a/0x30 [ 518.428107][ C0] [ 518.431112][ C0] [ 518.431112][ C0] Showing all locks held in the system: [ 518.438844][ C0] 3 locks held by kworker/u8:7/2427: [ 518.444111][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 518.455699][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 518.468506][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 518.477919][ C0] 2 locks held by getty/4852: [ 518.482616][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 518.492420][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 518.502542][ C0] 2 locks held by kworker/u8:9/5323: [ 518.507831][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 518.519498][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 518.531594][ C0] 1 lock held by syz-executor.4/7574: [ 518.536947][ C0] 8 locks held by syz-executor.1/9587: [ 518.542398][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 518.551283][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 518.561029][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 518.571038][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 518.581431][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 518.590731][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 518.600752][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 518.610787][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 518.621697][ C0] 1 lock held by syz-executor.0/9670: [ 518.627048][ C0] 4 locks held by syz-executor.2/9673: [ 518.632505][ C0] #0: ffff8880236b4d98 (&mm->mmap_lock){++++}-{3:3}, at: __might_fault+0xaa/0x120 [ 518.641823][ C0] #1: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 518.651923][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 518.661675][ C0] #3: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 518.671513][ C0] 2 locks held by modprobe/9672: [ 518.676431][ C0] [ 518.678758][ C0] ============================================= [ 518.678758][ C0] [ 519.757395][ C0] DEBUG: waiting rtnl_mutex for 8865 jiffies. [ 519.763574][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 519.773820][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 519.779817][ C0] Call Trace: [ 519.783079][ C0] [ 519.785995][ C0] __schedule+0x17e8/0x4a20 [ 519.790519][ C0] ? __pfx___schedule+0x10/0x10 [ 519.795354][ C0] ? __pfx_lock_release+0x10/0x10 [ 519.800380][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 519.805827][ C0] ? kthread_data+0x52/0xd0 [ 519.810356][ C0] ? schedule+0x90/0x320 [ 519.814608][ C0] ? wq_worker_sleeping+0x66/0x240 [ 519.819727][ C0] ? schedule+0x90/0x320 [ 519.823973][ C0] schedule+0x14b/0x320 [ 519.828148][ C0] schedule_preempt_disabled+0x13/0x30 [ 519.833590][ C0] __mutex_lock+0x6a4/0xd70 [ 519.838095][ C0] ? mark_lock+0x9a/0x360 [ 519.842410][ C0] ? __mutex_lock+0x527/0xd70 [ 519.847069][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 519.852182][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 519.857196][ C0] ? rtnl_lock+0xe7/0x130 [ 519.861523][ C0] addrconf_dad_work+0xd0/0x16f0 [ 519.866453][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 519.871910][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 519.878269][ C0] ? process_scheduled_works+0x945/0x1830 [ 519.883971][ C0] process_scheduled_works+0xa2c/0x1830 [ 519.889543][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 519.895511][ C0] ? assign_work+0x364/0x3d0 [ 519.900108][ C0] worker_thread+0x86d/0xd50 [ 519.904688][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 519.910581][ C0] ? __kthread_parkme+0x169/0x1d0 [ 519.915598][ C0] ? __pfx_worker_thread+0x10/0x10 [ 519.920714][ C0] kthread+0x2f0/0x390 [ 519.924767][ C0] ? __pfx_worker_thread+0x10/0x10 [ 519.929882][ C0] ? __pfx_kthread+0x10/0x10 [ 519.934457][ C0] ret_from_fork+0x4b/0x80 [ 519.938873][ C0] ? __pfx_kthread+0x10/0x10 [ 519.943447][ C0] ret_from_fork_asm+0x1a/0x30 [ 519.948221][ C0] [ 519.951234][ C0] [ 519.951234][ C0] Showing all locks held in the system: [ 519.958963][ C0] 3 locks held by kworker/u8:7/2427: [ 519.964231][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 519.975804][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 519.988591][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 519.998008][ C0] 2 locks held by getty/4852: [ 520.002659][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 520.012407][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 520.022530][ C0] 2 locks held by kworker/u8:9/5323: [ 520.027818][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 520.039491][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 520.051593][ C0] 1 lock held by syz-executor.4/7574: [ 520.056974][ C0] 8 locks held by syz-executor.1/9587: [ 520.062430][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 520.071326][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 520.081091][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 520.091113][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 520.101475][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 520.110707][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 520.120726][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 520.130742][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 520.141638][ C0] 1 lock held by syz-executor.0/9670: [ 520.146989][ C0] 3 locks held by syz-executor.2/9673: [ 520.152442][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 520.162540][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 520.172289][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 520.182124][ C0] 2 locks held by modprobe/9672: [ 520.187039][ C0] [ 520.189361][ C0] ============================================= [ 520.189361][ C0] [ 521.277401][ C0] DEBUG: waiting rtnl_mutex for 9017 jiffies. [ 521.283499][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 521.293698][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 521.299694][ C0] Call Trace: [ 521.303070][ C0] [ 521.305991][ C0] __schedule+0x17e8/0x4a20 [ 521.310528][ C0] ? __pfx___schedule+0x10/0x10 [ 521.315364][ C0] ? __pfx_lock_release+0x10/0x10 [ 521.320391][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 521.325840][ C0] ? kthread_data+0x52/0xd0 [ 521.330344][ C0] ? schedule+0x90/0x320 [ 521.334573][ C0] ? wq_worker_sleeping+0x66/0x240 [ 521.339686][ C0] ? schedule+0x90/0x320 [ 521.343912][ C0] schedule+0x14b/0x320 [ 521.348079][ C0] schedule_preempt_disabled+0x13/0x30 [ 521.353524][ C0] __mutex_lock+0x6a4/0xd70 [ 521.358029][ C0] ? mark_lock+0x9a/0x360 [ 521.362344][ C0] ? __mutex_lock+0x527/0xd70 [ 521.367005][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 521.372122][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 521.377135][ C0] ? rtnl_lock+0xe7/0x130 [ 521.381469][ C0] addrconf_dad_work+0xd0/0x16f0 [ 521.386400][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 521.391860][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 521.398201][ C0] ? process_scheduled_works+0x945/0x1830 [ 521.403901][ C0] process_scheduled_works+0xa2c/0x1830 [ 521.409462][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 521.415429][ C0] ? assign_work+0x364/0x3d0 [ 521.420021][ C0] worker_thread+0x86d/0xd50 [ 521.424599][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 521.430494][ C0] ? __kthread_parkme+0x169/0x1d0 [ 521.435507][ C0] ? __pfx_worker_thread+0x10/0x10 [ 521.440617][ C0] kthread+0x2f0/0x390 [ 521.444672][ C0] ? __pfx_worker_thread+0x10/0x10 [ 521.449791][ C0] ? __pfx_kthread+0x10/0x10 [ 521.454370][ C0] ret_from_fork+0x4b/0x80 [ 521.458791][ C0] ? __pfx_kthread+0x10/0x10 [ 521.463367][ C0] ret_from_fork_asm+0x1a/0x30 [ 521.468232][ C0] [ 521.471235][ C0] [ 521.471235][ C0] Showing all locks held in the system: [ 521.478975][ C0] 3 locks held by kworker/u8:7/2427: [ 521.484239][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 521.495811][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 521.508593][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 521.518001][ C0] 2 locks held by getty/4852: [ 521.522655][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 521.532413][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 521.542513][ C0] 2 locks held by kworker/u8:9/5323: [ 521.547792][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 521.559456][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 521.571551][ C0] 1 lock held by syz-executor.4/7574: [ 521.576903][ C0] 8 locks held by syz-executor.1/9587: [ 521.582361][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 521.591245][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 521.600993][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 521.611001][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 521.621357][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 521.630581][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 521.640676][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 521.650680][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 521.661565][ C0] 1 lock held by syz-executor.0/9670: [ 521.666915][ C0] 4 locks held by syz-executor.2/9673: [ 521.672367][ C0] #0: ffff8880236b4d98 (&mm->mmap_lock){++++}-{3:3}, at: __might_fault+0xaa/0x120 [ 521.681682][ C0] #1: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 521.691796][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 521.701545][ C0] #3: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 521.711379][ C0] 2 locks held by modprobe/9672: [ 521.716296][ C0] [ 521.718619][ C0] ============================================= [ 521.718619][ C0] [ 522.797393][ C0] DEBUG: waiting rtnl_mutex for 9169 jiffies. [ 522.803494][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 522.813684][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 522.819680][ C0] Call Trace: [ 522.822945][ C0] [ 522.825861][ C0] __schedule+0x17e8/0x4a20 [ 522.830378][ C0] ? __pfx___schedule+0x10/0x10 [ 522.835234][ C0] ? __pfx_lock_release+0x10/0x10 [ 522.840260][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 522.845707][ C0] ? kthread_data+0x52/0xd0 [ 522.850211][ C0] ? schedule+0x90/0x320 [ 522.854438][ C0] ? wq_worker_sleeping+0x66/0x240 [ 522.859552][ C0] ? schedule+0x90/0x320 [ 522.863784][ C0] schedule+0x14b/0x320 [ 522.867942][ C0] schedule_preempt_disabled+0x13/0x30 [ 522.873383][ C0] __mutex_lock+0x6a4/0xd70 [ 522.877890][ C0] ? mark_lock+0x9a/0x360 [ 522.882233][ C0] ? __mutex_lock+0x527/0xd70 [ 522.886924][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 522.892046][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 522.897062][ C0] ? rtnl_lock+0xe7/0x130 [ 522.901394][ C0] addrconf_dad_work+0xd0/0x16f0 [ 522.906323][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 522.911787][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 522.918122][ C0] ? process_scheduled_works+0x945/0x1830 [ 522.923824][ C0] process_scheduled_works+0xa2c/0x1830 [ 522.929383][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 522.935370][ C0] ? assign_work+0x364/0x3d0 [ 522.939963][ C0] worker_thread+0x86d/0xd50 [ 522.944542][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 522.950440][ C0] ? __kthread_parkme+0x169/0x1d0 [ 522.955450][ C0] ? __pfx_worker_thread+0x10/0x10 [ 522.960561][ C0] kthread+0x2f0/0x390 [ 522.964615][ C0] ? __pfx_worker_thread+0x10/0x10 [ 522.969726][ C0] ? __pfx_kthread+0x10/0x10 [ 522.974305][ C0] ret_from_fork+0x4b/0x80 [ 522.978722][ C0] ? __pfx_kthread+0x10/0x10 [ 522.983299][ C0] ret_from_fork_asm+0x1a/0x30 [ 522.988081][ C0] [ 522.991085][ C0] [ 522.991085][ C0] Showing all locks held in the system: [ 522.998820][ C0] 3 locks held by kworker/u8:7/2427: [ 523.004083][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 523.015656][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 523.028443][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 523.037851][ C0] 2 locks held by getty/4852: [ 523.042505][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 523.052254][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 523.062351][ C0] 2 locks held by kworker/u8:9/5323: [ 523.067636][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 523.079311][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 523.091431][ C0] 1 lock held by syz-executor.4/7574: [ 523.096791][ C0] 8 locks held by syz-executor.1/9587: [ 523.102254][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 523.111163][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 523.120925][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 523.130941][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 523.141324][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 523.150559][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 523.160597][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 523.170605][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 523.181491][ C0] 1 lock held by syz-executor.0/9670: [ 523.186842][ C0] 3 locks held by syz-executor.2/9673: [ 523.192308][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 523.202412][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 523.212215][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 523.222078][ C0] 2 locks held by modprobe/9672: [ 523.226998][ C0] [ 523.229327][ C0] ============================================= [ 523.229327][ C0] [ 524.317401][ C0] DEBUG: waiting rtnl_mutex for 9321 jiffies. [ 524.323516][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 524.333802][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 524.339800][ C0] Call Trace: [ 524.343060][ C0] [ 524.345973][ C0] __schedule+0x17e8/0x4a20 [ 524.350493][ C0] ? __pfx___schedule+0x10/0x10 [ 524.355333][ C0] ? __pfx_lock_release+0x10/0x10 [ 524.360376][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 524.365822][ C0] ? kthread_data+0x52/0xd0 [ 524.370326][ C0] ? schedule+0x90/0x320 [ 524.374553][ C0] ? wq_worker_sleeping+0x66/0x240 [ 524.379665][ C0] ? schedule+0x90/0x320 [ 524.383891][ C0] schedule+0x14b/0x320 [ 524.388050][ C0] schedule_preempt_disabled+0x13/0x30 [ 524.393491][ C0] __mutex_lock+0x6a4/0xd70 [ 524.397996][ C0] ? mark_lock+0x9a/0x360 [ 524.402313][ C0] ? __mutex_lock+0x527/0xd70 [ 524.406977][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 524.412093][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 524.417126][ C0] ? rtnl_lock+0xe7/0x130 [ 524.421485][ C0] addrconf_dad_work+0xd0/0x16f0 [ 524.426418][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 524.431883][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 524.438219][ C0] ? process_scheduled_works+0x945/0x1830 [ 524.443922][ C0] process_scheduled_works+0xa2c/0x1830 [ 524.449480][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 524.455446][ C0] ? assign_work+0x364/0x3d0 [ 524.460039][ C0] worker_thread+0x86d/0xd50 [ 524.464620][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 524.470518][ C0] ? __kthread_parkme+0x169/0x1d0 [ 524.475526][ C0] ? __pfx_worker_thread+0x10/0x10 [ 524.480636][ C0] kthread+0x2f0/0x390 [ 524.484691][ C0] ? __pfx_worker_thread+0x10/0x10 [ 524.489805][ C0] ? __pfx_kthread+0x10/0x10 [ 524.494378][ C0] ret_from_fork+0x4b/0x80 [ 524.498795][ C0] ? __pfx_kthread+0x10/0x10 [ 524.503384][ C0] ret_from_fork_asm+0x1a/0x30 [ 524.508158][ C0] [ 524.511162][ C0] [ 524.511162][ C0] Showing all locks held in the system: [ 524.518893][ C0] 3 locks held by kworker/u8:7/2427: [ 524.524162][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 524.535750][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 524.548536][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 524.557946][ C0] 2 locks held by getty/4852: [ 524.562604][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 524.572351][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 524.582448][ C0] 2 locks held by kworker/u8:9/5323: [ 524.587728][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 524.599389][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 524.611485][ C0] 1 lock held by syz-executor.4/7574: [ 524.616839][ C0] 8 locks held by syz-executor.1/9587: [ 524.622305][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 524.631250][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 524.641002][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 524.651012][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 524.661368][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 524.670599][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 524.680616][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 524.690622][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 524.701630][ C0] 1 lock held by syz-executor.0/9670: [ 524.706978][ C0] 3 locks held by syz-executor.2/9673: [ 524.712426][ C0] #0: ffffc90000007ca0 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 524.722519][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 524.732365][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 524.742205][ C0] 2 locks held by modprobe/9672: [ 524.747118][ C0] [ 524.749441][ C0] ============================================= [ 524.749441][ C0] [ 525.837378][ C0] DEBUG: waiting rtnl_mutex for 9473 jiffies. [ 525.843511][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 525.853708][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 525.859897][ C0] Call Trace: [ 525.863160][ C0] [ 525.866079][ C0] __schedule+0x17e8/0x4a20 [ 525.870597][ C0] ? __pfx___schedule+0x10/0x10 [ 525.875435][ C0] ? __pfx_lock_release+0x10/0x10 [ 525.880461][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 525.885910][ C0] ? kthread_data+0x52/0xd0 [ 525.890412][ C0] ? schedule+0x90/0x320 [ 525.894636][ C0] ? wq_worker_sleeping+0x66/0x240 [ 525.899750][ C0] ? schedule+0x90/0x320 [ 525.903991][ C0] schedule+0x14b/0x320 [ 525.908150][ C0] schedule_preempt_disabled+0x13/0x30 [ 525.913591][ C0] __mutex_lock+0x6a4/0xd70 [ 525.918099][ C0] ? mark_lock+0x9a/0x360 [ 525.922415][ C0] ? __mutex_lock+0x527/0xd70 [ 525.927075][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 525.932191][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 525.937203][ C0] ? rtnl_lock+0xe7/0x130 [ 525.941533][ C0] addrconf_dad_work+0xd0/0x16f0 [ 525.946462][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 525.951924][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 525.958267][ C0] ? process_scheduled_works+0x945/0x1830 [ 525.964058][ C0] process_scheduled_works+0xa2c/0x1830 [ 525.969618][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 525.975588][ C0] ? assign_work+0x364/0x3d0 [ 525.980177][ C0] worker_thread+0x86d/0xd50 [ 525.984757][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 525.990651][ C0] ? __kthread_parkme+0x169/0x1d0 [ 525.995660][ C0] ? __pfx_worker_thread+0x10/0x10 [ 526.000770][ C0] kthread+0x2f0/0x390 [ 526.004842][ C0] ? __pfx_worker_thread+0x10/0x10 [ 526.009951][ C0] ? __pfx_kthread+0x10/0x10 [ 526.014527][ C0] ret_from_fork+0x4b/0x80 [ 526.018942][ C0] ? __pfx_kthread+0x10/0x10 [ 526.023516][ C0] ret_from_fork_asm+0x1a/0x30 [ 526.028308][ C0] [ 526.031318][ C0] [ 526.031318][ C0] Showing all locks held in the system: [ 526.039060][ C0] 3 locks held by kworker/u8:7/2427: [ 526.044326][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 526.055912][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 526.068765][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 526.078188][ C0] 2 locks held by getty/4852: [ 526.082845][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 526.092616][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 526.102732][ C0] 2 locks held by kworker/u8:9/5323: [ 526.108019][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 526.119680][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 526.131776][ C0] 1 lock held by syz-executor.4/7574: [ 526.137130][ C0] 8 locks held by syz-executor.1/9587: [ 526.142581][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 526.151475][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 526.161316][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 526.171330][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 526.181687][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 526.190911][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 526.200937][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 526.210950][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 526.221831][ C0] 1 lock held by syz-executor.0/9670: [ 526.227180][ C0] 4 locks held by syz-executor.2/9673: [ 526.232631][ C0] #0: ffff8880236b4d98 (&mm->mmap_lock){++++}-{3:3}, at: __might_fault+0xaa/0x120 [ 526.241947][ C0] #1: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 526.252041][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 526.262148][ C0] #3: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 526.271992][ C0] 2 locks held by modprobe/9672: [ 526.276907][ C0] [ 526.279232][ C0] ============================================= [ 526.279232][ C0] [ 527.357396][ C0] DEBUG: waiting rtnl_mutex for 9625 jiffies. [ 527.363493][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 527.373662][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 527.379687][ C0] Call Trace: [ 527.382949][ C0] [ 527.385866][ C0] __schedule+0x17e8/0x4a20 [ 527.390389][ C0] ? __pfx___schedule+0x10/0x10 [ 527.395228][ C0] ? __pfx_lock_release+0x10/0x10 [ 527.400264][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 527.405712][ C0] ? kthread_data+0x52/0xd0 [ 527.410218][ C0] ? schedule+0x90/0x320 [ 527.414444][ C0] ? wq_worker_sleeping+0x66/0x240 [ 527.419558][ C0] ? schedule+0x90/0x320 [ 527.423784][ C0] schedule+0x14b/0x320 [ 527.427969][ C0] schedule_preempt_disabled+0x13/0x30 [ 527.433450][ C0] __mutex_lock+0x6a4/0xd70 [ 527.437965][ C0] ? mark_lock+0x9a/0x360 [ 527.442281][ C0] ? __mutex_lock+0x527/0xd70 [ 527.446941][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 527.452058][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 527.457072][ C0] ? rtnl_lock+0xe7/0x130 [ 527.461401][ C0] addrconf_dad_work+0xd0/0x16f0 [ 527.466333][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 527.471794][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 527.478131][ C0] ? process_scheduled_works+0x945/0x1830 [ 527.483833][ C0] process_scheduled_works+0xa2c/0x1830 [ 527.489392][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 527.495375][ C0] ? assign_work+0x364/0x3d0 [ 527.499975][ C0] worker_thread+0x86d/0xd50 [ 527.504556][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 527.510451][ C0] ? __kthread_parkme+0x169/0x1d0 [ 527.515461][ C0] ? __pfx_worker_thread+0x10/0x10 [ 527.520595][ C0] kthread+0x2f0/0x390 [ 527.524655][ C0] ? __pfx_worker_thread+0x10/0x10 [ 527.529766][ C0] ? __pfx_kthread+0x10/0x10 [ 527.534341][ C0] ret_from_fork+0x4b/0x80 [ 527.538759][ C0] ? __pfx_kthread+0x10/0x10 [ 527.543345][ C0] ret_from_fork_asm+0x1a/0x30 [ 527.548121][ C0] [ 527.551125][ C0] [ 527.551125][ C0] Showing all locks held in the system: [ 527.558861][ C0] 3 locks held by kworker/u8:7/2427: [ 527.564129][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 527.575702][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 527.588510][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 527.597931][ C0] 2 locks held by getty/4852: [ 527.602587][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 527.612340][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 527.622439][ C0] 2 locks held by kworker/u8:9/5323: [ 527.627722][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 527.639384][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 527.651472][ C0] 1 lock held by syz-executor.4/7574: [ 527.656823][ C0] 8 locks held by syz-executor.1/9587: [ 527.662274][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 527.671165][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 527.680929][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 527.690939][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 527.701311][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 527.710541][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 527.720550][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 527.730557][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 527.741438][ C0] 1 lock held by syz-executor.0/9670: [ 527.746788][ C0] 3 locks held by syz-executor.2/9673: [ 527.752236][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 527.762334][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 527.772083][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 527.781917][ C0] 2 locks held by modprobe/9672: [ 527.786836][ C0] [ 527.789158][ C0] ============================================= [ 527.789158][ C0] [ 528.877395][ C0] DEBUG: waiting rtnl_mutex for 9777 jiffies. [ 528.883499][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 528.893721][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 528.899738][ C0] Call Trace: [ 528.903002][ C0] [ 528.905923][ C0] __schedule+0x17e8/0x4a20 [ 528.910530][ C0] ? __pfx___schedule+0x10/0x10 [ 528.915368][ C0] ? __pfx_lock_release+0x10/0x10 [ 528.920401][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 528.925863][ C0] ? kthread_data+0x52/0xd0 [ 528.930488][ C0] ? schedule+0x90/0x320 [ 528.934720][ C0] ? wq_worker_sleeping+0x66/0x240 [ 528.939837][ C0] ? schedule+0x90/0x320 [ 528.944064][ C0] schedule+0x14b/0x320 [ 528.948243][ C0] schedule_preempt_disabled+0x13/0x30 [ 528.953687][ C0] __mutex_lock+0x6a4/0xd70 [ 528.958195][ C0] ? mark_lock+0x9a/0x360 [ 528.962511][ C0] ? __mutex_lock+0x527/0xd70 [ 528.967170][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 528.972290][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 528.977303][ C0] ? rtnl_lock+0xe7/0x130 [ 528.981630][ C0] addrconf_dad_work+0xd0/0x16f0 [ 528.986558][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 528.992015][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 528.998349][ C0] ? process_scheduled_works+0x945/0x1830 [ 529.004050][ C0] process_scheduled_works+0xa2c/0x1830 [ 529.009607][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 529.015575][ C0] ? assign_work+0x364/0x3d0 [ 529.020170][ C0] worker_thread+0x86d/0xd50 [ 529.024752][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 529.030654][ C0] ? __kthread_parkme+0x169/0x1d0 [ 529.035686][ C0] ? __pfx_worker_thread+0x10/0x10 [ 529.040848][ C0] kthread+0x2f0/0x390 [ 529.044916][ C0] ? __pfx_worker_thread+0x10/0x10 [ 529.050038][ C0] ? __pfx_kthread+0x10/0x10 [ 529.054619][ C0] ret_from_fork+0x4b/0x80 [ 529.059043][ C0] ? __pfx_kthread+0x10/0x10 [ 529.063624][ C0] ret_from_fork_asm+0x1a/0x30 [ 529.068404][ C0] [ 529.071414][ C0] [ 529.071414][ C0] Showing all locks held in the system: [ 529.079173][ C0] 3 locks held by kworker/u8:7/2427: [ 529.084444][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 529.096049][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 529.108841][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 529.118256][ C0] 2 locks held by getty/4852: [ 529.122910][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 529.132667][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 529.142769][ C0] 2 locks held by kworker/u8:9/5323: [ 529.148050][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 529.159709][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 529.171803][ C0] 1 lock held by syz-executor.4/7574: [ 529.177161][ C0] 8 locks held by syz-executor.1/9587: [ 529.182611][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 529.191496][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 529.201244][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 529.211362][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 529.221736][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 529.230997][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 529.241076][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 529.251122][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 529.262029][ C0] 1 lock held by syz-executor.0/9670: [ 529.267417][ C0] 3 locks held by syz-executor.2/9673: [ 529.272870][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 529.282972][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 529.292726][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 529.302562][ C0] 2 locks held by modprobe/9672: [ 529.307496][ C0] [ 529.309804][ C0] ============================================= [ 529.309804][ C0] [ 530.397370][ C0] DEBUG: waiting rtnl_mutex for 9928 jiffies. [ 530.403484][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 530.413679][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 530.419677][ C0] Call Trace: [ 530.422941][ C0] [ 530.425857][ C0] __schedule+0x17e8/0x4a20 [ 530.430377][ C0] ? __pfx___schedule+0x10/0x10 [ 530.435213][ C0] ? __pfx_lock_release+0x10/0x10 [ 530.440244][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 530.445690][ C0] ? kthread_data+0x52/0xd0 [ 530.450196][ C0] ? schedule+0x90/0x320 [ 530.454444][ C0] ? wq_worker_sleeping+0x66/0x240 [ 530.459585][ C0] ? schedule+0x90/0x320 [ 530.463840][ C0] schedule+0x14b/0x320 [ 530.468008][ C0] schedule_preempt_disabled+0x13/0x30 [ 530.473453][ C0] __mutex_lock+0x6a4/0xd70 [ 530.477959][ C0] ? mark_lock+0x9a/0x360 [ 530.482279][ C0] ? __mutex_lock+0x527/0xd70 [ 530.486942][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 530.492058][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 530.497084][ C0] ? rtnl_lock+0xe7/0x130 [ 530.501418][ C0] addrconf_dad_work+0xd0/0x16f0 [ 530.506348][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 530.511809][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 530.518170][ C0] ? process_scheduled_works+0x945/0x1830 [ 530.523873][ C0] process_scheduled_works+0xa2c/0x1830 [ 530.529433][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 530.535401][ C0] ? assign_work+0x364/0x3d0 [ 530.539989][ C0] worker_thread+0x86d/0xd50 [ 530.544583][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 530.550476][ C0] ? __kthread_parkme+0x169/0x1d0 [ 530.555484][ C0] ? __pfx_worker_thread+0x10/0x10 [ 530.560592][ C0] kthread+0x2f0/0x390 [ 530.564655][ C0] ? __pfx_worker_thread+0x10/0x10 [ 530.569775][ C0] ? __pfx_kthread+0x10/0x10 [ 530.574352][ C0] ret_from_fork+0x4b/0x80 [ 530.578772][ C0] ? __pfx_kthread+0x10/0x10 [ 530.583346][ C0] ret_from_fork_asm+0x1a/0x30 [ 530.588120][ C0] [ 530.591123][ C0] [ 530.591123][ C0] Showing all locks held in the system: [ 530.598857][ C0] 3 locks held by kworker/u8:7/2427: [ 530.604121][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 530.615697][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 530.628481][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 530.637887][ C0] 2 locks held by getty/4852: [ 530.642538][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 530.652282][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 530.662379][ C0] 2 locks held by kworker/u8:9/5323: [ 530.667669][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 530.679328][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 530.691432][ C0] 1 lock held by syz-executor.4/7574: [ 530.696784][ C0] 8 locks held by syz-executor.1/9587: [ 530.702235][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 530.711118][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 530.720862][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 530.730871][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 530.741224][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 530.750447][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 530.760455][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 530.770471][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 530.781356][ C0] 1 lock held by syz-executor.0/9670: [ 530.786705][ C0] 3 locks held by syz-executor.2/9673: [ 530.792157][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 530.802252][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 530.812000][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 530.821858][ C0] 2 locks held by modprobe/9672: [ 530.826772][ C0] [ 530.829095][ C0] ============================================= [ 530.829095][ C0] [ 531.917395][ C0] DEBUG: waiting rtnl_mutex for 10081 jiffies. [ 531.923585][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 531.933775][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 531.939795][ C0] Call Trace: [ 531.943056][ C0] [ 531.945991][ C0] __schedule+0x17e8/0x4a20 [ 531.950508][ C0] ? __pfx___schedule+0x10/0x10 [ 531.955343][ C0] ? __pfx_lock_release+0x10/0x10 [ 531.960368][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 531.965812][ C0] ? kthread_data+0x52/0xd0 [ 531.970319][ C0] ? schedule+0x90/0x320 [ 531.974544][ C0] ? wq_worker_sleeping+0x66/0x240 [ 531.979693][ C0] ? schedule+0x90/0x320 [ 531.983933][ C0] schedule+0x14b/0x320 [ 531.988103][ C0] schedule_preempt_disabled+0x13/0x30 [ 531.993557][ C0] __mutex_lock+0x6a4/0xd70 [ 531.998092][ C0] ? mark_lock+0x9a/0x360 [ 532.002434][ C0] ? __mutex_lock+0x527/0xd70 [ 532.007107][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 532.012235][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 532.017253][ C0] ? rtnl_lock+0xe7/0x130 [ 532.021591][ C0] addrconf_dad_work+0xd0/0x16f0 [ 532.026525][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 532.032019][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 532.038362][ C0] ? process_scheduled_works+0x945/0x1830 [ 532.044086][ C0] process_scheduled_works+0xa2c/0x1830 [ 532.049651][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 532.055624][ C0] ? assign_work+0x364/0x3d0 [ 532.060218][ C0] worker_thread+0x86d/0xd50 [ 532.064799][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 532.070699][ C0] ? __kthread_parkme+0x169/0x1d0 [ 532.075710][ C0] ? __pfx_worker_thread+0x10/0x10 [ 532.080838][ C0] kthread+0x2f0/0x390 [ 532.084892][ C0] ? __pfx_worker_thread+0x10/0x10 [ 532.090006][ C0] ? __pfx_kthread+0x10/0x10 [ 532.094581][ C0] ret_from_fork+0x4b/0x80 [ 532.099013][ C0] ? __pfx_kthread+0x10/0x10 [ 532.103594][ C0] ret_from_fork_asm+0x1a/0x30 [ 532.108373][ C0] [ 532.111378][ C0] [ 532.111378][ C0] Showing all locks held in the system: [ 532.119116][ C0] 3 locks held by kworker/u8:7/2427: [ 532.124383][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 532.135957][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 532.148745][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 532.158152][ C0] 2 locks held by getty/4852: [ 532.162806][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 532.172591][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 532.182706][ C0] 2 locks held by kworker/u8:9/5323: [ 532.187990][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 532.199650][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 532.211752][ C0] 1 lock held by syz-executor.4/7574: [ 532.217108][ C0] 8 locks held by syz-executor.1/9587: [ 532.222559][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 532.231449][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 532.241215][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 532.251241][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 532.261608][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 532.270840][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 532.280861][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 532.290888][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 532.301771][ C0] 1 lock held by syz-executor.0/9670: [ 532.307128][ C0] 3 locks held by syz-executor.2/9673: [ 532.312609][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 532.322713][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 532.332470][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 532.342309][ C0] 2 locks held by modprobe/9672: [ 532.347244][ C0] [ 532.349570][ C0] ============================================= [ 532.349570][ C0] [ 533.427410][ C0] DEBUG: waiting rtnl_mutex for 10232 jiffies. [ 533.433618][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 533.443841][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 533.449839][ C0] Call Trace: [ 533.453103][ C0] [ 533.456019][ C0] __schedule+0x17e8/0x4a20 [ 533.460537][ C0] ? __pfx___schedule+0x10/0x10 [ 533.465390][ C0] ? __pfx_lock_release+0x10/0x10 [ 533.470435][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 533.475881][ C0] ? kthread_data+0x52/0xd0 [ 533.480383][ C0] ? schedule+0x90/0x320 [ 533.484610][ C0] ? wq_worker_sleeping+0x66/0x240 [ 533.489724][ C0] ? schedule+0x90/0x320 [ 533.493950][ C0] schedule+0x14b/0x320 [ 533.498110][ C0] schedule_preempt_disabled+0x13/0x30 [ 533.503559][ C0] __mutex_lock+0x6a4/0xd70 [ 533.508066][ C0] ? mark_lock+0x9a/0x360 [ 533.512386][ C0] ? __mutex_lock+0x527/0xd70 [ 533.517043][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 533.522158][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 533.527173][ C0] ? rtnl_lock+0xe7/0x130 [ 533.531529][ C0] addrconf_dad_work+0xd0/0x16f0 [ 533.536489][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 533.541972][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 533.548326][ C0] ? process_scheduled_works+0x945/0x1830 [ 533.554029][ C0] process_scheduled_works+0xa2c/0x1830 [ 533.559597][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 533.565567][ C0] ? assign_work+0x364/0x3d0 [ 533.570175][ C0] worker_thread+0x86d/0xd50 [ 533.574757][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 533.580658][ C0] ? __kthread_parkme+0x169/0x1d0 [ 533.585670][ C0] ? __pfx_worker_thread+0x10/0x10 [ 533.590783][ C0] kthread+0x2f0/0x390 [ 533.594845][ C0] ? __pfx_worker_thread+0x10/0x10 [ 533.599960][ C0] ? __pfx_kthread+0x10/0x10 [ 533.604536][ C0] ret_from_fork+0x4b/0x80 [ 533.608954][ C0] ? __pfx_kthread+0x10/0x10 [ 533.613529][ C0] ret_from_fork_asm+0x1a/0x30 [ 533.618303][ C0] [ 533.621312][ C0] [ 533.621312][ C0] Showing all locks held in the system: [ 533.629049][ C0] 3 locks held by kworker/u8:7/2427: [ 533.634333][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 533.645985][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 533.658802][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 533.668213][ C0] 2 locks held by getty/4852: [ 533.672867][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 533.682612][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 533.692709][ C0] 2 locks held by kworker/u8:9/5323: [ 533.697991][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 533.709647][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 533.721764][ C0] 1 lock held by syz-executor.4/7574: [ 533.727118][ C0] 8 locks held by syz-executor.1/9587: [ 533.732569][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 533.741458][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 533.751208][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 533.761217][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 533.771571][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 533.780795][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 533.790803][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 533.800808][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 533.811686][ C0] 1 lock held by syz-executor.0/9670: [ 533.817036][ C0] 3 locks held by syz-executor.2/9673: [ 533.822486][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 533.832579][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 533.842493][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 533.852331][ C0] 2 locks held by modprobe/9672: [ 533.857246][ C0] [ 533.859569][ C0] ============================================= [ 533.859569][ C0] [ 534.947385][ C0] DEBUG: waiting rtnl_mutex for 10384 jiffies. [ 534.953580][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 534.963777][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 534.969783][ C0] Call Trace: [ 534.973068][ C0] [ 534.975986][ C0] __schedule+0x17e8/0x4a20 [ 534.980507][ C0] ? __pfx___schedule+0x10/0x10 [ 534.985351][ C0] ? __pfx_lock_release+0x10/0x10 [ 534.990381][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 534.995832][ C0] ? kthread_data+0x52/0xd0 [ 535.000340][ C0] ? schedule+0x90/0x320 [ 535.004568][ C0] ? wq_worker_sleeping+0x66/0x240 [ 535.009682][ C0] ? schedule+0x90/0x320 [ 535.013906][ C0] schedule+0x14b/0x320 [ 535.018063][ C0] schedule_preempt_disabled+0x13/0x30 [ 535.023504][ C0] __mutex_lock+0x6a4/0xd70 [ 535.028007][ C0] ? mark_lock+0x9a/0x360 [ 535.032319][ C0] ? __mutex_lock+0x527/0xd70 [ 535.036981][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 535.042102][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 535.047145][ C0] ? rtnl_lock+0xe7/0x130 [ 535.051486][ C0] addrconf_dad_work+0xd0/0x16f0 [ 535.056416][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 535.061899][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 535.068240][ C0] ? process_scheduled_works+0x945/0x1830 [ 535.073943][ C0] process_scheduled_works+0xa2c/0x1830 [ 535.079554][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 535.085541][ C0] ? assign_work+0x364/0x3d0 [ 535.090145][ C0] worker_thread+0x86d/0xd50 [ 535.094737][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 535.100640][ C0] ? __kthread_parkme+0x169/0x1d0 [ 535.105654][ C0] ? __pfx_worker_thread+0x10/0x10 [ 535.110770][ C0] kthread+0x2f0/0x390 [ 535.114844][ C0] ? __pfx_worker_thread+0x10/0x10 [ 535.119958][ C0] ? __pfx_kthread+0x10/0x10 [ 535.124535][ C0] ret_from_fork+0x4b/0x80 [ 535.128955][ C0] ? __pfx_kthread+0x10/0x10 [ 535.133533][ C0] ret_from_fork_asm+0x1a/0x30 [ 535.138329][ C0] [ 535.141334][ C0] [ 535.141334][ C0] Showing all locks held in the system: [ 535.149069][ C0] 3 locks held by kworker/u8:7/2427: [ 535.154333][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 535.165906][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 535.178711][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 535.188138][ C0] 2 locks held by getty/4852: [ 535.192799][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 535.202561][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 535.212683][ C0] 2 locks held by kworker/u8:9/5323: [ 535.217966][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 535.229644][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 535.241737][ C0] 1 lock held by syz-executor.4/7574: [ 535.247094][ C0] 8 locks held by syz-executor.1/9587: [ 535.252547][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 535.261429][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 535.271178][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 535.281199][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 535.291585][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 535.300814][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 535.310830][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 535.320844][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 535.331731][ C0] 1 lock held by syz-executor.0/9670: [ 535.337080][ C0] 3 locks held by syz-executor.2/9673: [ 535.342531][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 535.352640][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 535.362391][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 535.372225][ C0] 2 locks held by modprobe/9672: [ 535.377148][ C0] [ 535.379476][ C0] ============================================= [ 535.379476][ C0] [ 536.137395][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 536.137416][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7574/1:b..l P9672/1:b..l [ 536.137462][ C1] rcu: (detected by 1, t=10502 jiffies, g=60725, q=466 ncpus=2) [ 536.137482][ C1] task:modprobe state:R running task stack:23680 pid:9672 tgid:9672 ppid:5323 flags:0x00000000 [ 536.137521][ C1] Call Trace: [ 536.137530][ C1] [ 536.137542][ C1] __schedule+0x17e8/0x4a20 [ 536.137591][ C1] ? __pfx___schedule+0x10/0x10 [ 536.137618][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 536.137650][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 536.137675][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 536.137697][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 536.137732][ C1] irqentry_exit+0x5e/0x90 [ 536.137756][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.137788][ C1] RIP: 0010:mas_next_node+0x48/0xe00 [ 536.137811][ C1] Code: 00 00 fc ff df e8 48 f9 10 f6 48 89 6c 24 18 4c 8d 65 28 4c 89 e5 48 c1 ed 03 42 80 7c 35 00 00 74 08 4c 89 e7 e8 f8 07 77 f6 <4d> 8b 2c 24 4c 89 ef 48 89 de e8 79 fb 10 f6 49 39 dd 0f 83 3b 03 [ 536.137826][ C1] RSP: 0018:ffffc9000410f658 EFLAGS: 00000246 [ 536.137843][ C1] RAX: ffffffff8b824ea8 RBX: ffffffffffffffff RCX: ffff88805ef05a00 [ 536.137858][ C1] RDX: 0000000000000000 RSI: ffff88802a875600 RDI: ffffc9000410f7e0 [ 536.137871][ C1] RBP: 1ffff92000821f01 R08: ffffffff8b80949f R09: ffffffff8b809335 [ 536.137885][ C1] R10: 0000000000000003 R11: ffff88805ef05a00 R12: ffffc9000410f808 [ 536.137899][ C1] R13: ffff88802a875600 R14: dffffc0000000000 R15: 000000000000000e [ 536.137918][ C1] ? mt_validate+0x4375/0x4aa0 [ 536.137934][ C1] ? mt_validate+0x44df/0x4aa0 [ 536.137950][ C1] ? mas_next_node+0x28/0xe00 [ 536.137975][ C1] ? mas_next_node+0x28/0xe00 [ 536.138008][ C1] mt_validate+0x44ff/0x4aa0 [ 536.138041][ C1] ? __lock_acquire+0x1359/0x2000 [ 536.138060][ C1] ? mt_validate+0x1a1/0x4aa0 [ 536.138078][ C1] ? __pfx_mt_validate+0x10/0x10 [ 536.138111][ C1] ? __pfx_lock_release+0x10/0x10 [ 536.138138][ C1] validate_mm+0xe7/0x530 [ 536.138165][ C1] ? vma_set_page_prot+0x1d7/0x530 [ 536.138188][ C1] ? __pfx_validate_mm+0x10/0x10 [ 536.138225][ C1] mmap_region+0x1a61/0x2090 [ 536.138267][ C1] ? __pfx_mmap_region+0x10/0x10 [ 536.138293][ C1] ? thp_get_unmapped_area_vmflags+0x269/0x380 [ 536.138312][ C1] ? cap_mmap_addr+0x163/0x2c0 [ 536.138339][ C1] ? __get_unmapped_area+0x2f0/0x360 [ 536.138366][ C1] do_mmap+0x8ad/0xfa0 [ 536.138398][ C1] ? __pfx_do_mmap+0x10/0x10 [ 536.138420][ C1] ? __pfx_ima_file_mmap+0x10/0x10 [ 536.138447][ C1] vm_mmap_pgoff+0x1dd/0x3d0 [ 536.138478][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 536.138499][ C1] ? __fget_files+0x29/0x470 [ 536.138520][ C1] ? __fget_files+0x3f6/0x470 [ 536.138546][ C1] ksys_mmap_pgoff+0x4f1/0x720 [ 536.138568][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 536.138594][ C1] do_syscall_64+0xf3/0x230 [ 536.138613][ C1] ? clear_bhb_loop+0x35/0x90 [ 536.138635][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.138655][ C1] RIP: 0033:0x7f040ba1db74 [ 536.138670][ C1] RSP: 002b:00007ffd46113778 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 536.138687][ C1] RAX: ffffffffffffffda RBX: 00000fffa8c226f0 RCX: 00007f040ba1db74 [ 536.138702][ C1] RDX: 0000000000000001 RSI: 0000000000054188 RDI: 0000000000000000 [ 536.138713][ C1] RBP: 00007ffd46113b10 R08: 0000000000000000 R09: 0000000000000000 [ 536.138725][ C1] R10: 0000000000000802 R11: 0000000000000246 R12: 00007f040b9fb570 [ 536.138737][ C1] R13: 00007ffd46113b98 R14: fffffffffffff000 R15: 0000000000000000 [ 536.138766][ C1] [ 536.490044][ C1] task:syz-executor.4 state:R running task stack:19600 pid:7574 tgid:7574 ppid:7565 flags:0x00004002 [ 536.490089][ C1] Call Trace: [ 536.490098][ C1] [ 536.490111][ C1] __schedule+0x17e8/0x4a20 [ 536.490159][ C1] ? __pfx___schedule+0x10/0x10 [ 536.490186][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 536.490213][ C1] ? __lock_acquire+0x1359/0x2000 [ 536.490237][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 536.490263][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 536.490284][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 536.490320][ C1] irqentry_exit+0x5e/0x90 [ 536.490344][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 536.490364][ C1] RIP: 0010:xas_find+0x4a0/0x960 [ 536.490383][ C1] Code: f6 85 db 0f 84 86 01 00 00 e8 ac 0a 0d f6 44 89 fb 83 e3 03 bf 02 00 00 00 48 89 de e8 79 0f 0d f6 49 81 ff 01 10 00 00 72 52 <83> fb 02 75 4d e8 86 0a 0d f6 49 83 c7 fe 43 80 3c 34 00 74 08 4c [ 536.490399][ C1] RSP: 0018:ffffc90003f67570 EFLAGS: 00000292 [ 536.490415][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888018b7da00 [ 536.490428][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 536.490440][ C1] RBP: 0000000000000001 R08: ffffffff8b863d57 R09: ffffffff8b8639bb [ 536.490453][ C1] R10: 0000000000000002 R11: ffff888018b7da00 R12: 1ffff920007eced3 [ 536.490467][ C1] R13: ffffc90003f67698 R14: dffffc0000000000 R15: ffffea00015a4e80 [ 536.490488][ C1] ? xas_find+0xfb/0x960 [ 536.490502][ C1] ? xas_find+0x497/0x960 [ 536.490535][ C1] find_lock_entries+0x28b/0x1110 [ 536.490560][ C1] ? find_lock_entries+0x1d1/0x1110 [ 536.490591][ C1] ? __pfx_find_lock_entries+0x10/0x10 [ 536.490624][ C1] ? folio_batch_remove_exceptionals+0x18a/0x1f0 [ 536.490653][ C1] shmem_undo_range+0x2d6/0x1df0 [ 536.490695][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 536.490717][ C1] ? stack_trace_save+0x118/0x1d0 [ 536.490795][ C1] ? inode_wait_for_writeback+0x224/0x290 [ 536.490817][ C1] ? __pfx_lock_release+0x10/0x10 [ 536.490836][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 536.490864][ C1] shmem_evict_inode+0x29b/0xa80 [ 536.490891][ C1] ? inode_wait_for_writeback+0x224/0x290 [ 536.490912][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 536.490932][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 536.490955][ C1] ? __pfx_wake_bit_function+0x10/0x10 [ 536.490976][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 536.490999][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 536.491021][ C1] evict+0x2a8/0x630 [ 536.491051][ C1] __dentry_kill+0x20d/0x630 [ 536.491076][ C1] ? dput+0x37/0x2b0 [ 536.491096][ C1] dput+0x19f/0x2b0 [ 536.491117][ C1] __fput+0x68c/0x8b0 [ 536.491151][ C1] task_work_run+0x24f/0x310 [ 536.491181][ C1] ? __pfx_task_work_run+0x10/0x10 [ 536.491208][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 536.491236][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 536.491264][ C1] do_syscall_64+0x100/0x230 [ 536.491283][ C1] ? clear_bhb_loop+0x35/0x90 [ 536.491304][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.491324][ C1] RIP: 0033:0x7f537607cc0b [ 536.491339][ C1] RSP: 002b:00007fff56646320 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.491357][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f537607cc0b [ 536.491369][ C1] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 536.491381][ C1] RBP: 00007fff566463cc R08: 0000000000000000 R09: 00007fff566460c7 [ 536.491393][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 536.491405][ C1] R13: 000000000006920e R14: 0000000000068dd9 R15: 0000000000000017 [ 536.491432][ C1] [ 536.497429][ C0] DEBUG: waiting rtnl_mutex for 10539 jiffies. [ 536.503142][ C1] rcu: rcu_preempt kthread starved for 10538 jiffies! g60725 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 536.503163][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 536.503171][ C1] rcu: RCU grace-period kthread stack dump: [ 536.503177][ C1] task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 536.503213][ C1] Call Trace: [ 536.503219][ C1] [ 536.503229][ C1] __schedule+0x17e8/0x4a20 [ 536.503267][ C1] ? __pfx___schedule+0x10/0x10 [ 536.503289][ C1] ? __pfx_lock_release+0x10/0x10 [ 536.503307][ C1] ? __asan_memset+0x23/0x50 [ 536.503333][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 536.503353][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 536.503374][ C1] ? schedule+0x90/0x320 [ 536.503392][ C1] schedule+0x14b/0x320 [ 536.503413][ C1] schedule_timeout+0x1be/0x310 [ 536.503431][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 536.503449][ C1] ? __pfx_process_timeout+0x10/0x10 [ 536.503476][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 536.503500][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 536.503518][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 536.503542][ C1] ? rcu_gp_init+0x126f/0x1650 [ 536.503566][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 536.503585][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 536.503603][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 536.503627][ C1] ? finish_swait+0xd4/0x1e0 [ 536.503648][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 536.503670][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 536.503688][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 536.503710][ C1] ? __kthread_parkme+0x169/0x1d0 [ 536.503733][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 536.503849][ C1] kthread+0x2f0/0x390 [ 536.503877][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 536.503897][ C1] ? __pfx_kthread+0x10/0x10 [ 536.503917][ C1] ret_from_fork+0x4b/0x80 [ 536.503939][ C1] ? __pfx_kthread+0x10/0x10 [ 536.503959][ C1] ret_from_fork_asm+0x1a/0x30 [ 536.503993][ C1] [ 536.504000][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 536.504028][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.10.0-rc3-next-20240611-syzkaller #0 [ 536.504045][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 536.504056][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 536.504076][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d6 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 85 c1 9e 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 536.504090][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 536.504105][ C1] RAX: ffff888017ae8000 RBX: ffff8880182f7864 RCX: 000000000099d231 [ 536.504118][ C1] RDX: 0000000000000001 RSI: ffff8880182f7800 RDI: ffff8880182f7864 [ 536.504131][ C1] RBP: 000000000003a6b8 R08: ffff8880b9537d0b R09: 1ffff110172a6fa1 [ 536.504143][ C1] R10: dffffc0000000000 R11: ffffffff8b8adbb0 R12: ffff888019f7d000 [ 536.504156][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8ead2820 [ 536.504168][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 536.504182][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.504194][ C1] CR2: 00007f862446dd58 CR3: 0000000061df8000 CR4: 00000000003506f0 [ 536.504209][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 536.504219][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 536.504230][ C1] Call Trace: [ 536.504237][ C1] [ 536.504243][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 536.504268][ C1] ? print_other_cpu_stall+0x147a/0x15b0 [ 536.504300][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 536.504320][ C1] ? __pfx_lock_release+0x10/0x10 [ 536.504348][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 536.504369][ C1] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 536.504397][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 536.504419][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 536.504441][ C1] ? update_process_times+0x1ce/0x230 [ 536.504464][ C1] ? tick_nohz_handler+0x37c/0x500 [ 536.504484][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 536.504503][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 536.504520][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 536.504553][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 536.504572][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 536.504597][ C1] ? hrtimer_interrupt+0x396/0x990 [ 536.504632][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 536.504657][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 536.504677][ C1] [ 536.504683][ C1] [ 536.504690][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.504711][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 536.504733][ C1] ? acpi_safe_halt+0x21/0x30 [ 536.504760][ C1] acpi_idle_enter+0xe4/0x140 [ 536.504780][ C1] cpuidle_enter_state+0x112/0x480 [ 536.504797][ C1] ? __pfx_menu_select+0x10/0x10 [ 536.504820][ C1] cpuidle_enter+0x5d/0xa0 [ 536.504839][ C1] do_idle+0x375/0x5d0 [ 536.504863][ C1] ? __pfx_do_idle+0x10/0x10 [ 536.504893][ C1] cpu_startup_entry+0x42/0x60 [ 536.504909][ C1] start_secondary+0x100/0x100 [ 536.504927][ C1] common_startup_64+0x13e/0x147 [ 536.504957][ C1] [ 537.352868][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 537.363058][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 537.369051][ C0] Call Trace: [ 537.372316][ C0] [ 537.375235][ C0] __schedule+0x17e8/0x4a20 [ 537.379753][ C0] ? __pfx___schedule+0x10/0x10 [ 537.384592][ C0] ? __pfx_lock_release+0x10/0x10 [ 537.389645][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 537.395090][ C0] ? kthread_data+0x52/0xd0 [ 537.399597][ C0] ? schedule+0x90/0x320 [ 537.403844][ C0] ? wq_worker_sleeping+0x66/0x240 [ 537.408975][ C0] ? schedule+0x90/0x320 [ 537.413201][ C0] schedule+0x14b/0x320 [ 537.417365][ C0] schedule_preempt_disabled+0x13/0x30 [ 537.422845][ C0] __mutex_lock+0x6a4/0xd70 [ 537.427402][ C0] ? mark_lock+0x9a/0x360 [ 537.431728][ C0] ? __mutex_lock+0x527/0xd70 [ 537.436388][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 537.441504][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 537.446519][ C0] ? rtnl_lock+0xe7/0x130 [ 537.450851][ C0] addrconf_dad_work+0xd0/0x16f0 [ 537.455780][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 537.461239][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 537.467580][ C0] ? process_scheduled_works+0x945/0x1830 [ 537.473283][ C0] process_scheduled_works+0xa2c/0x1830 [ 537.478848][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 537.484817][ C0] ? assign_work+0x364/0x3d0 [ 537.489411][ C0] worker_thread+0x86d/0xd50 [ 537.493994][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 537.499891][ C0] ? __kthread_parkme+0x169/0x1d0 [ 537.504903][ C0] ? __pfx_worker_thread+0x10/0x10 [ 537.510023][ C0] kthread+0x2f0/0x390 [ 537.514079][ C0] ? __pfx_worker_thread+0x10/0x10 [ 537.519193][ C0] ? __pfx_kthread+0x10/0x10 [ 537.523770][ C0] ret_from_fork+0x4b/0x80 [ 537.528196][ C0] ? __pfx_kthread+0x10/0x10 [ 537.532775][ C0] ret_from_fork_asm+0x1a/0x30 [ 537.537551][ C0] [ 537.540554][ C0] [ 537.540554][ C0] Showing all locks held in the system: [ 537.548291][ C0] 3 locks held by kworker/u8:7/2427: [ 537.553555][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 537.565127][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 537.577921][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 537.587311][ C0] 2 locks held by getty/4852: [ 537.591981][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 537.601819][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 537.611919][ C0] 2 locks held by kworker/u8:9/5323: [ 537.617185][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 537.628851][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 537.641120][ C0] 1 lock held by syz-executor.4/7574: [ 537.646495][ C0] 8 locks held by syz-executor.1/9587: [ 537.651968][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 537.660856][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 537.670637][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 537.680713][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 537.691072][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 537.700300][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 537.710312][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.720319][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 537.731210][ C0] 1 lock held by syz-executor.0/9670: [ 537.736561][ C0] 4 locks held by syz-executor.2/9673: [ 537.742012][ C0] #0: ffff8880236b4d98 (&mm->mmap_lock){++++}-{3:3}, at: __might_fault+0xaa/0x120 [ 537.751328][ C0] #1: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 537.761426][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 537.771202][ C0] #3: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 537.781061][ C0] 2 locks held by modprobe/9672: [ 537.785994][ C0] [ 537.788320][ C0] ============================================= [ 537.788320][ C0] [ 538.877410][ C0] DEBUG: waiting rtnl_mutex for 10777 jiffies. [ 538.883607][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 538.893800][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 538.899799][ C0] Call Trace: [ 538.903063][ C0] [ 538.905978][ C0] __schedule+0x17e8/0x4a20 [ 538.910500][ C0] ? __pfx___schedule+0x10/0x10 [ 538.915338][ C0] ? __pfx_lock_release+0x10/0x10 [ 538.920372][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 538.925817][ C0] ? kthread_data+0x52/0xd0 [ 538.930324][ C0] ? schedule+0x90/0x320 [ 538.934554][ C0] ? wq_worker_sleeping+0x66/0x240 [ 538.939665][ C0] ? schedule+0x90/0x320 [ 538.943912][ C0] schedule+0x14b/0x320 [ 538.948073][ C0] schedule_preempt_disabled+0x13/0x30 [ 538.953525][ C0] __mutex_lock+0x6a4/0xd70 [ 538.958086][ C0] ? mark_lock+0x9a/0x360 [ 538.962432][ C0] ? __mutex_lock+0x527/0xd70 [ 538.967105][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 538.972229][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 538.977303][ C0] ? rtnl_lock+0xe7/0x130 [ 538.981667][ C0] addrconf_dad_work+0xd0/0x16f0 [ 538.986621][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 538.992089][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 538.998432][ C0] ? process_scheduled_works+0x945/0x1830 [ 539.004136][ C0] process_scheduled_works+0xa2c/0x1830 [ 539.009723][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 539.015715][ C0] ? assign_work+0x364/0x3d0 [ 539.020338][ C0] worker_thread+0x86d/0xd50 [ 539.024934][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 539.030842][ C0] ? __kthread_parkme+0x169/0x1d0 [ 539.035859][ C0] ? __pfx_worker_thread+0x10/0x10 [ 539.040977][ C0] kthread+0x2f0/0x390 [ 539.045034][ C0] ? __pfx_worker_thread+0x10/0x10 [ 539.050150][ C0] ? __pfx_kthread+0x10/0x10 [ 539.054750][ C0] ret_from_fork+0x4b/0x80 [ 539.059169][ C0] ? __pfx_kthread+0x10/0x10 [ 539.063755][ C0] ret_from_fork_asm+0x1a/0x30 [ 539.068545][ C0] [ 539.071552][ C0] [ 539.071552][ C0] Showing all locks held in the system: [ 539.079321][ C0] 3 locks held by kworker/u8:7/2427: [ 539.084680][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 539.096258][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 539.109052][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 539.118462][ C0] 2 locks held by getty/4852: [ 539.123118][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 539.132867][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 539.142967][ C0] 2 locks held by kworker/u8:9/5323: [ 539.148250][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 539.159911][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 539.172017][ C0] 1 lock held by syz-executor.4/7574: [ 539.177409][ C0] 8 locks held by syz-executor.1/9587: [ 539.182856][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 539.191741][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 539.201491][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 539.211541][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 539.221942][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 539.231180][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 539.241198][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 539.251211][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 539.262123][ C0] 1 lock held by syz-executor.0/9670: [ 539.267505][ C0] 3 locks held by syz-executor.2/9673: [ 539.272977][ C0] #0: ffffc900040a7b40 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 539.283102][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 539.292854][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 539.302690][ C0] 2 locks held by modprobe/9672: [ 539.307624][ C0] [ 539.309931][ C0] ============================================= [ 539.309931][ C0] [ 540.397378][ C0] DEBUG: waiting rtnl_mutex for 10929 jiffies. [ 540.403571][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 540.413769][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 540.419765][ C0] Call Trace: [ 540.423031][ C0] [ 540.425947][ C0] __schedule+0x17e8/0x4a20 [ 540.430466][ C0] ? __pfx___schedule+0x10/0x10 [ 540.435301][ C0] ? __pfx_lock_release+0x10/0x10 [ 540.440327][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 540.445772][ C0] ? kthread_data+0x52/0xd0 [ 540.450275][ C0] ? schedule+0x90/0x320 [ 540.454498][ C0] ? wq_worker_sleeping+0x66/0x240 [ 540.459609][ C0] ? schedule+0x90/0x320 [ 540.463836][ C0] schedule+0x14b/0x320 [ 540.467997][ C0] schedule_preempt_disabled+0x13/0x30 [ 540.473438][ C0] __mutex_lock+0x6a4/0xd70 [ 540.477943][ C0] ? mark_lock+0x9a/0x360 [ 540.482258][ C0] ? __mutex_lock+0x527/0xd70 [ 540.486919][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 540.492034][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 540.497063][ C0] ? rtnl_lock+0xe7/0x130 [ 540.501405][ C0] addrconf_dad_work+0xd0/0x16f0 [ 540.506337][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 540.511800][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 540.518140][ C0] ? process_scheduled_works+0x945/0x1830 [ 540.523842][ C0] process_scheduled_works+0xa2c/0x1830 [ 540.529401][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 540.535370][ C0] ? assign_work+0x364/0x3d0 [ 540.539965][ C0] worker_thread+0x86d/0xd50 [ 540.544543][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 540.550437][ C0] ? __kthread_parkme+0x169/0x1d0 [ 540.555449][ C0] ? __pfx_worker_thread+0x10/0x10 [ 540.560559][ C0] kthread+0x2f0/0x390 [ 540.564615][ C0] ? __pfx_worker_thread+0x10/0x10 [ 540.569725][ C0] ? __pfx_kthread+0x10/0x10 [ 540.574303][ C0] ret_from_fork+0x4b/0x80 [ 540.578722][ C0] ? __pfx_kthread+0x10/0x10 [ 540.583299][ C0] ret_from_fork_asm+0x1a/0x30 [ 540.588074][ C0] [ 540.591079][ C0] [ 540.591079][ C0] Showing all locks held in the system: [ 540.598820][ C0] 3 locks held by kworker/u8:7/2427: [ 540.604088][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 540.615687][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 540.628478][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 540.637903][ C0] 2 locks held by getty/4852: [ 540.642565][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 540.652312][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 540.662412][ C0] 2 locks held by kworker/u8:9/5323: [ 540.667694][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 540.679350][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 540.691438][ C0] 1 lock held by syz-executor.4/7574: [ 540.696793][ C0] 8 locks held by syz-executor.1/9587: [ 540.702251][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 540.711142][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 540.720887][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 540.730895][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 540.741251][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 540.750473][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 540.760480][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 540.770486][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 540.781366][ C0] 1 lock held by syz-executor.0/9670: [ 540.786713][ C0] 3 locks held by syz-executor.2/9673: [ 540.792181][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 540.802302][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 540.812107][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 540.821952][ C0] 2 locks held by modprobe/9672: [ 540.826866][ C0] [ 540.829188][ C0] ============================================= [ 540.829188][ C0] [ 541.917368][ C0] DEBUG: waiting rtnl_mutex for 11081 jiffies. [ 541.923557][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 541.933753][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 541.939750][ C0] Call Trace: [ 541.943014][ C0] [ 541.945929][ C0] __schedule+0x17e8/0x4a20 [ 541.950446][ C0] ? __pfx___schedule+0x10/0x10 [ 541.955283][ C0] ? __pfx_lock_release+0x10/0x10 [ 541.960309][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 541.965753][ C0] ? kthread_data+0x52/0xd0 [ 541.970258][ C0] ? schedule+0x90/0x320 [ 541.974482][ C0] ? wq_worker_sleeping+0x66/0x240 [ 541.979591][ C0] ? schedule+0x90/0x320 [ 541.983814][ C0] schedule+0x14b/0x320 [ 541.987970][ C0] schedule_preempt_disabled+0x13/0x30 [ 541.993413][ C0] __mutex_lock+0x6a4/0xd70 [ 541.997916][ C0] ? mark_lock+0x9a/0x360 [ 542.002231][ C0] ? __mutex_lock+0x527/0xd70 [ 542.006890][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 542.012007][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 542.017022][ C0] ? rtnl_lock+0xe7/0x130 [ 542.021351][ C0] addrconf_dad_work+0xd0/0x16f0 [ 542.026281][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 542.031769][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 542.038122][ C0] ? process_scheduled_works+0x945/0x1830 [ 542.043832][ C0] process_scheduled_works+0xa2c/0x1830 [ 542.049401][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 542.055371][ C0] ? assign_work+0x364/0x3d0 [ 542.059968][ C0] worker_thread+0x86d/0xd50 [ 542.064549][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 542.070447][ C0] ? __kthread_parkme+0x169/0x1d0 [ 542.075460][ C0] ? __pfx_worker_thread+0x10/0x10 [ 542.080574][ C0] kthread+0x2f0/0x390 [ 542.084628][ C0] ? __pfx_worker_thread+0x10/0x10 [ 542.089739][ C0] ? __pfx_kthread+0x10/0x10 [ 542.094314][ C0] ret_from_fork+0x4b/0x80 [ 542.098734][ C0] ? __pfx_kthread+0x10/0x10 [ 542.103311][ C0] ret_from_fork_asm+0x1a/0x30 [ 542.108082][ C0] [ 542.111087][ C0] [ 542.111087][ C0] Showing all locks held in the system: [ 542.118822][ C0] 3 locks held by kworker/u8:7/2427: [ 542.124087][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 542.135695][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 542.148487][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 542.157895][ C0] 2 locks held by getty/4852: [ 542.162551][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 542.172297][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 542.182394][ C0] 2 locks held by kworker/u8:9/5323: [ 542.187675][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 542.199330][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 542.211416][ C0] 1 lock held by syz-executor.4/7574: [ 542.216771][ C0] 8 locks held by syz-executor.1/9587: [ 542.222240][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 542.231138][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 542.240902][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 542.250922][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 542.261292][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 542.270523][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 542.280536][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 542.290544][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 542.301426][ C0] 1 lock held by syz-executor.0/9670: [ 542.306775][ C0] 3 locks held by syz-executor.2/9673: [ 542.312226][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 542.322323][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 542.332072][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 542.341917][ C0] 2 locks held by modprobe/9672: [ 542.346833][ C0] [ 542.349156][ C0] ============================================= [ 542.349156][ C0] [ 543.427416][ C0] DEBUG: waiting rtnl_mutex for 11232 jiffies. [ 543.433589][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 543.443781][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 543.449773][ C0] Call Trace: [ 543.453036][ C0] [ 543.455955][ C0] __schedule+0x17e8/0x4a20 [ 543.460472][ C0] ? __pfx___schedule+0x10/0x10 [ 543.465327][ C0] ? __pfx_lock_release+0x10/0x10 [ 543.470362][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 543.475807][ C0] ? kthread_data+0x52/0xd0 [ 543.480309][ C0] ? schedule+0x90/0x320 [ 543.484534][ C0] ? wq_worker_sleeping+0x66/0x240 [ 543.489646][ C0] ? schedule+0x90/0x320 [ 543.493875][ C0] schedule+0x14b/0x320 [ 543.498031][ C0] schedule_preempt_disabled+0x13/0x30 [ 543.503474][ C0] __mutex_lock+0x6a4/0xd70 [ 543.507979][ C0] ? mark_lock+0x9a/0x360 [ 543.512296][ C0] ? __mutex_lock+0x527/0xd70 [ 543.516955][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 543.522071][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 543.527085][ C0] ? rtnl_lock+0xe7/0x130 [ 543.531414][ C0] addrconf_dad_work+0xd0/0x16f0 [ 543.536347][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 543.541839][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 543.548194][ C0] ? process_scheduled_works+0x945/0x1830 [ 543.553895][ C0] process_scheduled_works+0xa2c/0x1830 [ 543.559456][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 543.565423][ C0] ? assign_work+0x364/0x3d0 [ 543.570025][ C0] worker_thread+0x86d/0xd50 [ 543.574605][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 543.580503][ C0] ? __kthread_parkme+0x169/0x1d0 [ 543.585513][ C0] ? __pfx_worker_thread+0x10/0x10 [ 543.590623][ C0] kthread+0x2f0/0x390 [ 543.594679][ C0] ? __pfx_worker_thread+0x10/0x10 [ 543.599788][ C0] ? __pfx_kthread+0x10/0x10 [ 543.604363][ C0] ret_from_fork+0x4b/0x80 [ 543.608781][ C0] ? __pfx_kthread+0x10/0x10 [ 543.613359][ C0] ret_from_fork_asm+0x1a/0x30 [ 543.618136][ C0] [ 543.621139][ C0] [ 543.621139][ C0] Showing all locks held in the system: [ 543.628877][ C0] 3 locks held by kworker/u8:7/2427: [ 543.634143][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 543.645713][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 543.658499][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 543.667905][ C0] 2 locks held by getty/4852: [ 543.672564][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 543.682319][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 543.692417][ C0] 2 locks held by kworker/u8:9/5323: [ 543.697696][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 543.709353][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 543.721443][ C0] 1 lock held by syz-executor.4/7574: [ 543.726796][ C0] 8 locks held by syz-executor.1/9587: [ 543.732246][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 543.741129][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 543.750904][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 543.760919][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 543.771296][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 543.780608][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 543.790621][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 543.800648][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 543.811547][ C0] 1 lock held by syz-executor.0/9670: [ 543.816896][ C0] 3 locks held by syz-executor.2/9673: [ 543.822348][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 543.832462][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 543.842209][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 543.852042][ C0] 2 locks held by modprobe/9672: [ 543.856953][ C0] [ 543.859275][ C0] ============================================= [ 543.859275][ C0] [ 544.957379][ C0] DEBUG: waiting rtnl_mutex for 11385 jiffies. [ 544.963568][ C0] task:kworker/u8:7 state:D stack:21352 pid:2427 tgid:2427 ppid:2 flags:0x00004000 [ 544.973767][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 544.979767][ C0] Call Trace: [ 544.983029][ C0] [ 544.985951][ C0] __schedule+0x17e8/0x4a20 [ 544.990469][ C0] ? __pfx___schedule+0x10/0x10 [ 544.995305][ C0] ? __pfx_lock_release+0x10/0x10 [ 545.000352][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 545.005824][ C0] ? kthread_data+0x52/0xd0 [ 545.010333][ C0] ? schedule+0x90/0x320 [ 545.014584][ C0] ? wq_worker_sleeping+0x66/0x240 [ 545.019707][ C0] ? schedule+0x90/0x320 [ 545.023939][ C0] schedule+0x14b/0x320 [ 545.028098][ C0] schedule_preempt_disabled+0x13/0x30 [ 545.033556][ C0] __mutex_lock+0x6a4/0xd70 [ 545.038059][ C0] ? mark_lock+0x9a/0x360 [ 545.042376][ C0] ? __mutex_lock+0x527/0xd70 [ 545.047034][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 545.052145][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 545.057159][ C0] ? rtnl_lock+0xe7/0x130 [ 545.061487][ C0] addrconf_dad_work+0xd0/0x16f0 [ 545.066416][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 545.071876][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 545.078211][ C0] ? process_scheduled_works+0x945/0x1830 [ 545.083914][ C0] process_scheduled_works+0xa2c/0x1830 [ 545.089473][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 545.095458][ C0] ? assign_work+0x364/0x3d0 [ 545.100052][ C0] worker_thread+0x86d/0xd50 [ 545.104637][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 545.110537][ C0] ? __kthread_parkme+0x169/0x1d0 [ 545.115547][ C0] ? __pfx_worker_thread+0x10/0x10 [ 545.120658][ C0] kthread+0x2f0/0x390 [ 545.124717][ C0] ? __pfx_worker_thread+0x10/0x10 [ 545.129833][ C0] ? __pfx_kthread+0x10/0x10 [ 545.134410][ C0] ret_from_fork+0x4b/0x80 [ 545.138829][ C0] ? __pfx_kthread+0x10/0x10 [ 545.143491][ C0] ret_from_fork_asm+0x1a/0x30 [ 545.148270][ C0] [ 545.151295][ C0] [ 545.151295][ C0] Showing all locks held in the system: [ 545.159032][ C0] 3 locks held by kworker/u8:7/2427: [ 545.164315][ C0] #0: ffff888029e54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 545.175915][ C0] #1: ffffc900094bfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 545.188713][ C0] #2: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 545.198158][ C0] 2 locks held by getty/4852: [ 545.202815][ C0] #0: ffff88802a4920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 545.212574][ C0] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 545.222704][ C0] 2 locks held by kworker/u8:9/5323: [ 545.227989][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 545.239668][ C0] #1: ffffc90004f07d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 545.251772][ C0] 1 lock held by syz-executor.4/7574: [ 545.257126][ C0] 8 locks held by syz-executor.1/9587: [ 545.262578][ C0] #0: ffff8880491a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 545.271463][ C0] #1: ffff888060afa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 545.281208][ C0] #2: ffff8880232043c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 545.291217][ C0] #3: ffffffff8eefc428 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 545.301573][ C0] #4: ffff88801c6d10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 545.310804][ C0] #5: ffff8880601e5250 (&devlink->lock_key#27){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 545.320824][ C0] #6: ffffffff8f5ef4c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 545.330834][ C0] #7: ffffffff8e33a878 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 545.341729][ C0] 1 lock held by syz-executor.0/9670: [ 545.347078][ C0] 3 locks held by syz-executor.2/9673: [ 545.352526][ C0] #0: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 545.362621][ C0] #1: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 545.372372][ C0] #2: ffffffff8e3354a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 545.382225][ C0] 2 locks held by modprobe/9672: [ 545.387141][ C0] [ 545.389461][ C0] ============================================= [ 545.389461][ C0]