Extracting prog: 19m48.710004511s Minimizing prog: 3h4m30.056674079s Simplifying prog options: 10m4.607737111s Extracting C: 5m36.668875816s Simplifying C: 0s extracting reproducer from 26 programs testing a last program of every proc single: executing 6 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-unshare$auto-shmget$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-mmap$auto-sendmsg$auto_SMC_NETLINK_REMOVE_UEID-socket-connect$auto-prctl$auto-mmap$auto-sendfile$auto-recvmmsg$auto-sendmmsg$auto-prctl$auto-socket$nl_generic-openat$auto_snd_pcm_oss_f_reg_pcm_oss-ioctl$auto_SNDCTL_DSP_GETODELAY-io_uring_setup$auto-mmap$auto-sendmsg$auto_NBD_CMD_DISCONNECT-kexec_load$auto-socket$nl_generic-openat$auto_force_wakeup_fops_hci_vhci-ioctl$auto_BLKTRACESETUP2-mmap$auto-socketpair$auto-close_range$auto-socket-ioctl$auto-madvise$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) shmget$auto(0x0, 0x200000005, 0x7d) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000c00)) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x100000000004, 0x2, &(0x7f0000000040)={@buf=&(0x7f0000000140)="5983e6b0f6610cce5e2dc25a9a6cf7841a14344ea866ac0203c831ed3a71910db0a01c8ee00c2140397ac458beed6ec7564e7669d5b311f9198c568e9533dbc3eeb1044a17c3d1fa4b00ec6ef135d0ce6eab02cc0f5ab9b9fc0f1183a963e4d68be6fcb3dd3aa5f2f0473a0609359a31cabda76119e9273f5d2945f75e6a4c877fcd3244f1e78e84176942845917947f5edd33717ee2e0e42c359bff05c89c5e0288cd6ae780f68293ee6b1dad4bb0234d476eb0c3b9eb097c581b15ed9b1900c093c942db51656949b50a945c1de67ff9ba310bd8ab22e519e790b20e8a3d7e2eef60ec88d648025552ecfa11b8", 0x800c000, 0x4800c000, 0x4}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci1/force_wakeup\x00', 0x101200, 0x0) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1f, 0x4, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x2) socket(0x80000000000000a, 0x2, 0x0) ioctl$auto(0x3, 0x89e0, r2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_single_file_operations_base-semctl$auto_IPC_INFO-readv$auto-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-sendmsg$auto_GTP_CMD_NEWPDP-msgctl$auto-lstat$auto-socket$nl_generic-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_GTP_CMD_NEWPDP-lstat$auto-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-ioctl$sock_SIOCGIFINDEX detailed listing: executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) semctl$auto_IPC_INFO(0x2, 0x8, 0x3, 0x3) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x9}, 0x7) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) msgctl$auto(0x2, 0xec, &(0x7f00000000c0)={{0x1, 0xee00, 0xffffffffffffffff, 0x7ff, 0x0, 0x7ff, 0xff00}, &(0x7f0000000000)=0x80, &(0x7f0000000080)=0x1, 0x0, 0x3, 0x7f, 0x1, 0x1, 0xb33f, 0x7, 0x1, @raw=0x81, @inferred=0xffffffffffffffff}) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xb, 0x9, 0x63, r1, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0x80000000000080a, 0x0, 0x13, 0x9, 0xffffffff80000000, 0x20000000007, 0x6, 0x400002}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14006004}, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x2, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-sendmsg$auto_NFC_CMD_DISABLE_SE-openat$auto_kernfs_file_fops_kernfs_internal-write$auto_ocfs2_control_fops_stack_user-ioctl$auto_IOCTL_GET_NUM_DEVICES-write$auto-socket-mmap$auto-close_range$auto-socket-socket-io_uring_setup$auto-setsockopt$auto-openat$auto_proc_sys_file_operations_proc_sysctl-ioctl$auto_SW_SYNC_IOC_CREATE_FENCE-sendfile$auto-openat$auto_proc_fail_nth_operations_base-writev$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf4, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x2c, 0x1f, "bc3119b084f1f219d9a4f1f7cd4d24e0828875ed443f7073ce9c3f68dfc307bc7f81e74e267181e8"}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, 'A'}, @NFC_ATTR_SE_APDU={0x5f, 0x19, "6fff1da94f71fec767ecef8debd30abbcdb4b5b3ef0be6c8849585736ab3007ae9dfe13a4ed4713a559b4f47c7b881e3c88a9fd09906bd0b222066d3d57ababa45747decac069ea48f1814b6d6569092d742e12d3f56f64f73e6b9"}, @NFC_ATTR_VENDOR_DATA={0x45, 0x1f, "71e96124ef3ea0aa0835779883eafd97762d774d9758d10f9c44b298d637a2c630baf52dd0860b5b68f1b42b0f782e811d11e5946880c9ed5f70ae62f646565e0b"}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x400) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) ioctl$auto_IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000340)=0x6) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) r6 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) setsockopt$auto(r6, 0x10000000084, 0x7f, 0x0, 0xad4) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) r8 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r7}) sendfile$auto(r8, r7, 0x0, 0x7fffe002) r9 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r9, &(0x7f0000000240)={0x0, 0x7}, 0x3) program crashed: INFO: task hung in remove_one single: successfully extracted reproducer found reproducer with 29 syscalls minimizing guilty program testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-sendmsg$auto_NFC_CMD_DISABLE_SE-openat$auto_kernfs_file_fops_kernfs_internal-write$auto_ocfs2_control_fops_stack_user-ioctl$auto_IOCTL_GET_NUM_DEVICES-write$auto-socket-mmap$auto-close_range$auto-socket-socket-io_uring_setup$auto-setsockopt$auto-openat$auto_proc_sys_file_operations_proc_sysctl-ioctl$auto_SW_SYNC_IOC_CREATE_FENCE-sendfile$auto-openat$auto_proc_fail_nth_operations_base detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf4, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x2c, 0x1f, "bc3119b084f1f219d9a4f1f7cd4d24e0828875ed443f7073ce9c3f68dfc307bc7f81e74e267181e8"}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, 'A'}, @NFC_ATTR_SE_APDU={0x5f, 0x19, "6fff1da94f71fec767ecef8debd30abbcdb4b5b3ef0be6c8849585736ab3007ae9dfe13a4ed4713a559b4f47c7b881e3c88a9fd09906bd0b222066d3d57ababa45747decac069ea48f1814b6d6569092d742e12d3f56f64f73e6b9"}, @NFC_ATTR_VENDOR_DATA={0x45, 0x1f, "71e96124ef3ea0aa0835779883eafd97762d774d9758d10f9c44b298d637a2c630baf52dd0860b5b68f1b42b0f782e811d11e5946880c9ed5f70ae62f646565e0b"}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x400) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) ioctl$auto_IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000340)=0x6) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) r6 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) setsockopt$auto(r6, 0x10000000084, 0x7f, 0x0, 0xad4) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) r8 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r7}) sendfile$auto(r8, r7, 0x0, 0x7fffe002) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) program crashed: INFO: task hung in devlink_health_report testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-sendmsg$auto_NFC_CMD_DISABLE_SE-openat$auto_kernfs_file_fops_kernfs_internal-write$auto_ocfs2_control_fops_stack_user-ioctl$auto_IOCTL_GET_NUM_DEVICES-write$auto-socket-mmap$auto-close_range$auto-socket-socket-io_uring_setup$auto-setsockopt$auto-openat$auto_proc_sys_file_operations_proc_sysctl-ioctl$auto_SW_SYNC_IOC_CREATE_FENCE-sendfile$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf4, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x2c, 0x1f, "bc3119b084f1f219d9a4f1f7cd4d24e0828875ed443f7073ce9c3f68dfc307bc7f81e74e267181e8"}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, 'A'}, @NFC_ATTR_SE_APDU={0x5f, 0x19, "6fff1da94f71fec767ecef8debd30abbcdb4b5b3ef0be6c8849585736ab3007ae9dfe13a4ed4713a559b4f47c7b881e3c88a9fd09906bd0b222066d3d57ababa45747decac069ea48f1814b6d6569092d742e12d3f56f64f73e6b9"}, @NFC_ATTR_VENDOR_DATA={0x45, 0x1f, "71e96124ef3ea0aa0835779883eafd97762d774d9758d10f9c44b298d637a2c630baf52dd0860b5b68f1b42b0f782e811d11e5946880c9ed5f70ae62f646565e0b"}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x400) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) ioctl$auto_IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000340)=0x6) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) r6 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) setsockopt$auto(r6, 0x10000000084, 0x7f, 0x0, 0xad4) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) r8 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r7}) sendfile$auto(r8, r7, 0x0, 0x7fffe002) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-sendmsg$auto_NFC_CMD_DISABLE_SE-openat$auto_kernfs_file_fops_kernfs_internal-write$auto_ocfs2_control_fops_stack_user-ioctl$auto_IOCTL_GET_NUM_DEVICES-write$auto-socket-mmap$auto-close_range$auto-socket-socket-io_uring_setup$auto-setsockopt$auto-openat$auto_proc_sys_file_operations_proc_sysctl-ioctl$auto_SW_SYNC_IOC_CREATE_FENCE detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf4, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x2c, 0x1f, "bc3119b084f1f219d9a4f1f7cd4d24e0828875ed443f7073ce9c3f68dfc307bc7f81e74e267181e8"}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, 'A'}, @NFC_ATTR_SE_APDU={0x5f, 0x19, "6fff1da94f71fec767ecef8debd30abbcdb4b5b3ef0be6c8849585736ab3007ae9dfe13a4ed4713a559b4f47c7b881e3c88a9fd09906bd0b222066d3d57ababa45747decac069ea48f1814b6d6569092d742e12d3f56f64f73e6b9"}, @NFC_ATTR_VENDOR_DATA={0x45, 0x1f, "71e96124ef3ea0aa0835779883eafd97762d774d9758d10f9c44b298d637a2c630baf52dd0860b5b68f1b42b0f782e811d11e5946880c9ed5f70ae62f646565e0b"}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x400) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) ioctl$auto_IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000340)=0x6) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) r6 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) setsockopt$auto(r6, 0x10000000084, 0x7f, 0x0, 0xad4) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r7}) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-sendmsg$auto_NFC_CMD_DISABLE_SE-openat$auto_kernfs_file_fops_kernfs_internal-write$auto_ocfs2_control_fops_stack_user-ioctl$auto_IOCTL_GET_NUM_DEVICES-write$auto-socket-mmap$auto-close_range$auto-socket-socket-io_uring_setup$auto-setsockopt$auto-openat$auto_proc_sys_file_operations_proc_sysctl detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf4, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x2c, 0x1f, "bc3119b084f1f219d9a4f1f7cd4d24e0828875ed443f7073ce9c3f68dfc307bc7f81e74e267181e8"}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, 'A'}, @NFC_ATTR_SE_APDU={0x5f, 0x19, "6fff1da94f71fec767ecef8debd30abbcdb4b5b3ef0be6c8849585736ab3007ae9dfe13a4ed4713a559b4f47c7b881e3c88a9fd09906bd0b222066d3d57ababa45747decac069ea48f1814b6d6569092d742e12d3f56f64f73e6b9"}, @NFC_ATTR_VENDOR_DATA={0x45, 0x1f, "71e96124ef3ea0aa0835779883eafd97762d774d9758d10f9c44b298d637a2c630baf52dd0860b5b68f1b42b0f782e811d11e5946880c9ed5f70ae62f646565e0b"}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x400) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) ioctl$auto_IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000340)=0x6) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) r6 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) setsockopt$auto(r6, 0x10000000084, 0x7f, 0x0, 0xad4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-sendmsg$auto_NFC_CMD_DISABLE_SE-openat$auto_kernfs_file_fops_kernfs_internal-write$auto_ocfs2_control_fops_stack_user-ioctl$auto_IOCTL_GET_NUM_DEVICES-write$auto-socket-mmap$auto-close_range$auto-socket-socket-io_uring_setup$auto-setsockopt$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf4, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x2c, 0x1f, "bc3119b084f1f219d9a4f1f7cd4d24e0828875ed443f7073ce9c3f68dfc307bc7f81e74e267181e8"}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, 'A'}, @NFC_ATTR_SE_APDU={0x5f, 0x19, "6fff1da94f71fec767ecef8debd30abbcdb4b5b3ef0be6c8849585736ab3007ae9dfe13a4ed4713a559b4f47c7b881e3c88a9fd09906bd0b222066d3d57ababa45747decac069ea48f1814b6d6569092d742e12d3f56f64f73e6b9"}, @NFC_ATTR_VENDOR_DATA={0x45, 0x1f, "71e96124ef3ea0aa0835779883eafd97762d774d9758d10f9c44b298d637a2c630baf52dd0860b5b68f1b42b0f782e811d11e5946880c9ed5f70ae62f646565e0b"}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x400) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) ioctl$auto_IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000340)=0x6) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) r6 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) setsockopt$auto(r6, 0x10000000084, 0x7f, 0x0, 0xad4) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-sendmsg$auto_NFC_CMD_DISABLE_SE-openat$auto_kernfs_file_fops_kernfs_internal-write$auto_ocfs2_control_fops_stack_user-ioctl$auto_IOCTL_GET_NUM_DEVICES-write$auto-socket-mmap$auto-close_range$auto-socket-socket-io_uring_setup$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf4, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x2c, 0x1f, "bc3119b084f1f219d9a4f1f7cd4d24e0828875ed443f7073ce9c3f68dfc307bc7f81e74e267181e8"}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, 'A'}, @NFC_ATTR_SE_APDU={0x5f, 0x19, "6fff1da94f71fec767ecef8debd30abbcdb4b5b3ef0be6c8849585736ab3007ae9dfe13a4ed4713a559b4f47c7b881e3c88a9fd09906bd0b222066d3d57ababa45747decac069ea48f1814b6d6569092d742e12d3f56f64f73e6b9"}, @NFC_ATTR_VENDOR_DATA={0x45, 0x1f, "71e96124ef3ea0aa0835779883eafd97762d774d9758d10f9c44b298d637a2c630baf52dd0860b5b68f1b42b0f782e811d11e5946880c9ed5f70ae62f646565e0b"}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x400) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) ioctl$auto_IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000340)=0x6) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-sendmsg$auto_NFC_CMD_DISABLE_SE-openat$auto_kernfs_file_fops_kernfs_internal-write$auto_ocfs2_control_fops_stack_user-ioctl$auto_IOCTL_GET_NUM_DEVICES-write$auto-socket-mmap$auto-close_range$auto-socket-socket detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf4, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x2c, 0x1f, "bc3119b084f1f219d9a4f1f7cd4d24e0828875ed443f7073ce9c3f68dfc307bc7f81e74e267181e8"}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, 'A'}, @NFC_ATTR_SE_APDU={0x5f, 0x19, "6fff1da94f71fec767ecef8debd30abbcdb4b5b3ef0be6c8849585736ab3007ae9dfe13a4ed4713a559b4f47c7b881e3c88a9fd09906bd0b222066d3d57ababa45747decac069ea48f1814b6d6569092d742e12d3f56f64f73e6b9"}, @NFC_ATTR_VENDOR_DATA={0x45, 0x1f, "71e96124ef3ea0aa0835779883eafd97762d774d9758d10f9c44b298d637a2c630baf52dd0860b5b68f1b42b0f782e811d11e5946880c9ed5f70ae62f646565e0b"}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x400) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) ioctl$auto_IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000340)=0x6) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-sendmsg$auto_NFC_CMD_DISABLE_SE-openat$auto_kernfs_file_fops_kernfs_internal-write$auto_ocfs2_control_fops_stack_user-ioctl$auto_IOCTL_GET_NUM_DEVICES-write$auto-socket-mmap$auto-close_range$auto-socket detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf4, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x2c, 0x1f, "bc3119b084f1f219d9a4f1f7cd4d24e0828875ed443f7073ce9c3f68dfc307bc7f81e74e267181e8"}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, 'A'}, @NFC_ATTR_SE_APDU={0x5f, 0x19, "6fff1da94f71fec767ecef8debd30abbcdb4b5b3ef0be6c8849585736ab3007ae9dfe13a4ed4713a559b4f47c7b881e3c88a9fd09906bd0b222066d3d57ababa45747decac069ea48f1814b6d6569092d742e12d3f56f64f73e6b9"}, @NFC_ATTR_VENDOR_DATA={0x45, 0x1f, "71e96124ef3ea0aa0835779883eafd97762d774d9758d10f9c44b298d637a2c630baf52dd0860b5b68f1b42b0f782e811d11e5946880c9ed5f70ae62f646565e0b"}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x400) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) ioctl$auto_IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000340)=0x6) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-sendmsg$auto_NFC_CMD_DISABLE_SE-openat$auto_kernfs_file_fops_kernfs_internal-write$auto_ocfs2_control_fops_stack_user-ioctl$auto_IOCTL_GET_NUM_DEVICES-write$auto-socket-mmap$auto-close_range$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf4, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x2c, 0x1f, "bc3119b084f1f219d9a4f1f7cd4d24e0828875ed443f7073ce9c3f68dfc307bc7f81e74e267181e8"}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, 'A'}, @NFC_ATTR_SE_APDU={0x5f, 0x19, "6fff1da94f71fec767ecef8debd30abbcdb4b5b3ef0be6c8849585736ab3007ae9dfe13a4ed4713a559b4f47c7b881e3c88a9fd09906bd0b222066d3d57ababa45747decac069ea48f1814b6d6569092d742e12d3f56f64f73e6b9"}, @NFC_ATTR_VENDOR_DATA={0x45, 0x1f, "71e96124ef3ea0aa0835779883eafd97762d774d9758d10f9c44b298d637a2c630baf52dd0860b5b68f1b42b0f782e811d11e5946880c9ed5f70ae62f646565e0b"}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x400) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) ioctl$auto_IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000340)=0x6) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-sendmsg$auto_NFC_CMD_DISABLE_SE-openat$auto_kernfs_file_fops_kernfs_internal-write$auto_ocfs2_control_fops_stack_user-ioctl$auto_IOCTL_GET_NUM_DEVICES-write$auto-socket-mmap$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf4, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x2c, 0x1f, "bc3119b084f1f219d9a4f1f7cd4d24e0828875ed443f7073ce9c3f68dfc307bc7f81e74e267181e8"}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, 'A'}, @NFC_ATTR_SE_APDU={0x5f, 0x19, "6fff1da94f71fec767ecef8debd30abbcdb4b5b3ef0be6c8849585736ab3007ae9dfe13a4ed4713a559b4f47c7b881e3c88a9fd09906bd0b222066d3d57ababa45747decac069ea48f1814b6d6569092d742e12d3f56f64f73e6b9"}, @NFC_ATTR_VENDOR_DATA={0x45, 0x1f, "71e96124ef3ea0aa0835779883eafd97762d774d9758d10f9c44b298d637a2c630baf52dd0860b5b68f1b42b0f782e811d11e5946880c9ed5f70ae62f646565e0b"}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x400) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) ioctl$auto_IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000340)=0x6) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-sendmsg$auto_NFC_CMD_DISABLE_SE-openat$auto_kernfs_file_fops_kernfs_internal-write$auto_ocfs2_control_fops_stack_user-ioctl$auto_IOCTL_GET_NUM_DEVICES-write$auto-socket detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf4, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x2c, 0x1f, "bc3119b084f1f219d9a4f1f7cd4d24e0828875ed443f7073ce9c3f68dfc307bc7f81e74e267181e8"}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, 'A'}, @NFC_ATTR_SE_APDU={0x5f, 0x19, "6fff1da94f71fec767ecef8debd30abbcdb4b5b3ef0be6c8849585736ab3007ae9dfe13a4ed4713a559b4f47c7b881e3c88a9fd09906bd0b222066d3d57ababa45747decac069ea48f1814b6d6569092d742e12d3f56f64f73e6b9"}, @NFC_ATTR_VENDOR_DATA={0x45, 0x1f, "71e96124ef3ea0aa0835779883eafd97762d774d9758d10f9c44b298d637a2c630baf52dd0860b5b68f1b42b0f782e811d11e5946880c9ed5f70ae62f646565e0b"}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x400) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) ioctl$auto_IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000340)=0x6) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) socket(0xa, 0x1, 0x84) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-sendmsg$auto_NFC_CMD_DISABLE_SE-openat$auto_kernfs_file_fops_kernfs_internal-write$auto_ocfs2_control_fops_stack_user-ioctl$auto_IOCTL_GET_NUM_DEVICES-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf4, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x2c, 0x1f, "bc3119b084f1f219d9a4f1f7cd4d24e0828875ed443f7073ce9c3f68dfc307bc7f81e74e267181e8"}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, 'A'}, @NFC_ATTR_SE_APDU={0x5f, 0x19, "6fff1da94f71fec767ecef8debd30abbcdb4b5b3ef0be6c8849585736ab3007ae9dfe13a4ed4713a559b4f47c7b881e3c88a9fd09906bd0b222066d3d57ababa45747decac069ea48f1814b6d6569092d742e12d3f56f64f73e6b9"}, @NFC_ATTR_VENDOR_DATA={0x45, 0x1f, "71e96124ef3ea0aa0835779883eafd97762d774d9758d10f9c44b298d637a2c630baf52dd0860b5b68f1b42b0f782e811d11e5946880c9ed5f70ae62f646565e0b"}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x400) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) ioctl$auto_IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000340)=0x6) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-sendmsg$auto_NFC_CMD_DISABLE_SE-openat$auto_kernfs_file_fops_kernfs_internal-write$auto_ocfs2_control_fops_stack_user-ioctl$auto_IOCTL_GET_NUM_DEVICES detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf4, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x2c, 0x1f, "bc3119b084f1f219d9a4f1f7cd4d24e0828875ed443f7073ce9c3f68dfc307bc7f81e74e267181e8"}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, 'A'}, @NFC_ATTR_SE_APDU={0x5f, 0x19, "6fff1da94f71fec767ecef8debd30abbcdb4b5b3ef0be6c8849585736ab3007ae9dfe13a4ed4713a559b4f47c7b881e3c88a9fd09906bd0b222066d3d57ababa45747decac069ea48f1814b6d6569092d742e12d3f56f64f73e6b9"}, @NFC_ATTR_VENDOR_DATA={0x45, 0x1f, "71e96124ef3ea0aa0835779883eafd97762d774d9758d10f9c44b298d637a2c630baf52dd0860b5b68f1b42b0f782e811d11e5946880c9ed5f70ae62f646565e0b"}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x400) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) ioctl$auto_IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000340)=0x6) program did not crash testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-sendmsg$auto_NFC_CMD_DISABLE_SE-openat$auto_kernfs_file_fops_kernfs_internal-write$auto_ocfs2_control_fops_stack_user-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf4, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x2c, 0x1f, "bc3119b084f1f219d9a4f1f7cd4d24e0828875ed443f7073ce9c3f68dfc307bc7f81e74e267181e8"}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, 'A'}, @NFC_ATTR_SE_APDU={0x5f, 0x19, "6fff1da94f71fec767ecef8debd30abbcdb4b5b3ef0be6c8849585736ab3007ae9dfe13a4ed4713a559b4f47c7b881e3c88a9fd09906bd0b222066d3d57ababa45747decac069ea48f1814b6d6569092d742e12d3f56f64f73e6b9"}, @NFC_ATTR_VENDOR_DATA={0x45, 0x1f, "71e96124ef3ea0aa0835779883eafd97762d774d9758d10f9c44b298d637a2c630baf52dd0860b5b68f1b42b0f782e811d11e5946880c9ed5f70ae62f646565e0b"}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x400) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-sendmsg$auto_NFC_CMD_DISABLE_SE-openat$auto_kernfs_file_fops_kernfs_internal-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf4, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x2c, 0x1f, "bc3119b084f1f219d9a4f1f7cd4d24e0828875ed443f7073ce9c3f68dfc307bc7f81e74e267181e8"}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, 'A'}, @NFC_ATTR_SE_APDU={0x5f, 0x19, "6fff1da94f71fec767ecef8debd30abbcdb4b5b3ef0be6c8849585736ab3007ae9dfe13a4ed4713a559b4f47c7b881e3c88a9fd09906bd0b222066d3d57ababa45747decac069ea48f1814b6d6569092d742e12d3f56f64f73e6b9"}, @NFC_ATTR_VENDOR_DATA={0x45, 0x1f, "71e96124ef3ea0aa0835779883eafd97762d774d9758d10f9c44b298d637a2c630baf52dd0860b5b68f1b42b0f782e811d11e5946880c9ed5f70ae62f646565e0b"}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x400) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-sendmsg$auto_NFC_CMD_DISABLE_SE-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf4, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x2c, 0x1f, "bc3119b084f1f219d9a4f1f7cd4d24e0828875ed443f7073ce9c3f68dfc307bc7f81e74e267181e8"}, @NFC_ATTR_VENDOR_DATA={0x5, 0x1f, 'A'}, @NFC_ATTR_SE_APDU={0x5f, 0x19, "6fff1da94f71fec767ecef8debd30abbcdb4b5b3ef0be6c8849585736ab3007ae9dfe13a4ed4713a559b4f47c7b881e3c88a9fd09906bd0b222066d3d57ababa45747decac069ea48f1814b6d6569092d742e12d3f56f64f73e6b9"}, @NFC_ATTR_VENDOR_DATA={0x45, 0x1f, "71e96124ef3ea0aa0835779883eafd97762d774d9758d10f9c44b298d637a2c630baf52dd0860b5b68f1b42b0f782e811d11e5946880c9ed5f70ae62f646565e0b"}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x400) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-syz_genetlink_get_family_id$auto_nfc-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-socket$nl_generic-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-bind$auto-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) write$auto(0xffffffffffffffff, &(0x7f0000000080)=')@-!\x00', 0x1e1) program did not crash testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-madvise$auto_MADV_GUARD_INSTALL-openat$auto_nsim_dev_health_break_fops_health-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-mbind$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-socket$nl_generic-openat$auto_nsim_dev_health_break_fops_health-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-read$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_oom_adj_operations_base-openat$auto_nsim_dev_health_break_fops_health-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto detailed listing: executing program 0: r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto detailed listing: executing program 0: r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x48081, 0x0) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) program did not crash program did not crash testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto detailed listing: executing program 0: r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r0, 0x0, 0x1e1) program did not crash extracting C reproducer testing compiled C program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=7m41.511942474s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto detailed listing: executing program 0: r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: lost connection to test machine a never seen crash title: lost connection to test machine, ignore testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto detailed listing: executing program 0: r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) program did not crash testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto detailed listing: executing program 0: r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one validation run: crashed=true testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto detailed listing: executing program 0: r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one validation run: crashed=true testing program (duration=7m41.511942474s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto detailed listing: executing program 0: r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) program crashed: INFO: task hung in remove_one validation run: crashed=true reproducing took 3h54m32.566676104s repro crashed as (corrupted=false): INFO: task kworker/u8:3:38 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:3 state:D stack:25624 pid:38 tgid:38 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: netns cleanup_net Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:100 [inline] __wait_for_common+0x2fc/0x4e0 kernel/sched/completion.c:121 __debugfs_file_removed fs/debugfs/inode.c:751 [inline] remove_one+0x312/0x420 fs/debugfs/inode.c:758 __simple_recursive_removal+0x15b/0x610 fs/libfs.c:631 debugfs_remove+0x5d/0x80 fs/debugfs/inode.c:781 nsim_dev_health_exit+0x3b/0xe0 drivers/net/netdevsim/health.c:227 nsim_dev_reload_destroy+0x144/0x4d0 drivers/net/netdevsim/dev.c:1766 nsim_dev_reload_down+0x66/0xd0 drivers/net/netdevsim/dev.c:1038 devlink_reload+0x1a1/0x7c0 net/devlink/dev.c:461 devlink_pernet_pre_exit+0x1a0/0x2b0 net/devlink/core.c:509 ops_pre_exit_list net/core/net_namespace.c:161 [inline] ops_undo_list+0x187/0xab0 net/core/net_namespace.c:234 cleanup_net+0x41b/0x830 net/core/net_namespace.c:696 process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 INFO: task syz-executor:10844 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:23912 pid:10844 tgid:10844 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776 device_lock include/linux/device.h:895 [inline] device_del+0xa0/0x9f0 drivers/base/core.c:3840 device_unregister+0x1d/0xe0 drivers/base/core.c:3919 nsim_bus_dev_del drivers/net/netdevsim/bus.c:483 [inline] del_device_store+0x355/0x4a0 drivers/net/netdevsim/bus.c:244 bus_attr_store+0x74/0xb0 drivers/base/bus.c:172 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142 kernfs_fop_write_iter+0x3af/0x570 fs/kernfs/file.c:352 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x7d3/0x11d0 fs/read_write.c:686 ksys_write+0x12a/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff6b2f8e27f RSP: 002b:00007ffc8e42e570 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007ff6b2f8e27f RDX: 0000000000000001 RSI: 00007ffc8e42e5c0 RDI: 0000000000000005 RBP: 00007ff6b30152cb R08: 0000000000000000 R09: 00007ffc8e42e3c7 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 R13: 00007ffc8e42e5c0 R14: 00007ff6b3d14620 R15: 0000000000000003 INFO: task syz.0.2421:10875 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.2421 state:D stack:28808 pid:10875 tgid:10874 ppid:5948 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776 devlink_health_report+0x6b4/0xaa0 net/devlink/health.c:680 nsim_dev_health_break_write+0x166/0x210 drivers/net/netdevsim/health.c:162 full_proxy_write+0x131/0x1a0 fs/debugfs/file.c:388 vfs_write+0x2a0/0x11d0 fs/read_write.c:684 ksys_write+0x12a/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa825b8f7c9 RSP: 002b:00007fa826ada038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fa825de5fa0 RCX: 00007fa825b8f7c9 RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000003 RBP: 00007fa825c13f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa825de6038 R14: 00007fa825de5fa0 R15: 00007ffc43334aa8 INFO: task syz.1.2446:10925 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.2446 state:D stack:29064 pid:10925 tgid:10924 ppid:5952 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 rwsem_down_read_slowpath+0x64b/0xbf0 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1261 [inline] __down_read kernel/locking/rwsem.c:1274 [inline] down_read+0xef/0x460 kernel/locking/rwsem.c:1539 inode_lock_shared include/linux/fs.h:1042 [inline] open_last_lookups fs/namei.c:4539 [inline] path_openat+0x1248/0x3140 fs/namei.c:4784 do_filp_open+0x20b/0x470 fs/namei.c:4814 do_sys_openat2+0x11f/0x280 fs/open.c:1430 do_sys_open fs/open.c:1436 [inline] __do_sys_openat fs/open.c:1452 [inline] __se_sys_openat fs/open.c:1447 [inline] __x64_sys_openat+0x174/0x210 fs/open.c:1447 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f746658f7c9 RSP: 002b:00007f7467358038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f74667e5fa0 RCX: 00007f746658f7c9 RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c RBP: 00007f7466613f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f74667e6038 R14: 00007f74667e5fa0 R15: 00007ffd00a67e78 INFO: task syz.3.2445:10928 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.2445 state:D stack:29064 pid:10928 tgid:10926 ppid:5954 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 rwsem_down_read_slowpath+0x64b/0xbf0 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1261 [inline] __down_read kernel/locking/rwsem.c:1274 [inline] down_read+0xef/0x460 kernel/locking/rwsem.c:1539 inode_lock_shared include/linux/fs.h:1042 [inline] open_last_lookups fs/namei.c:4539 [inline] path_openat+0x1248/0x3140 fs/namei.c:4784 do_filp_open+0x20b/0x470 fs/namei.c:4814 do_sys_openat2+0x11f/0x280 fs/open.c:1430 do_sys_open fs/open.c:1436 [inline] __do_sys_openat fs/open.c:1452 [inline] __se_sys_openat fs/open.c:1447 [inline] __x64_sys_openat+0x174/0x210 fs/open.c:1447 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff65ff8f7c9 RSP: 002b:00007ff660d4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007ff6601e5fa0 RCX: 00007ff65ff8f7c9 RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c RBP: 00007ff660013f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ff6601e6038 R14: 00007ff6601e5fa0 R15: 00007fff4d427be8 INFO: task syz-executor:10940 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:24504 pid:10940 tgid:10940 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776 del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 bus_attr_store+0x74/0xb0 drivers/base/bus.c:172 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142 kernfs_fop_write_iter+0x3af/0x570 fs/kernfs/file.c:352 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x7d3/0x11d0 fs/read_write.c:686 ksys_write+0x12a/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4b1378e27f RSP: 002b:00007fff6bc1e380 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4b1378e27f RDX: 0000000000000001 RSI: 00007fff6bc1e3d0 RDI: 0000000000000005 RBP: 00007f4b138152cb R08: 0000000000000000 R09: 00007fff6bc1e1d7 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 R13: 00007fff6bc1e3d0 R14: 00007f4b14514620 R15: 0000000000000003 INFO: task syz-executor:10942 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:24472 pid:10942 tgid:10942 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776 del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 bus_attr_store+0x74/0xb0 drivers/base/bus.c:172 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142 kernfs_fop_write_iter+0x3af/0x570 fs/kernfs/file.c:352 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x7d3/0x11d0 fs/read_write.c:686 ksys_write+0x12a/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f037dd8e27f RSP: 002b:00007fff74e1c210 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f037dd8e27f RDX: 0000000000000001 RSI: 00007fff74e1c260 RDI: 0000000000000005 RBP: 00007f037de152cb R08: 0000000000000000 R09: 00007fff74e1c067 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 R13: 00007fff74e1c260 R14: 00007f037eb14620 R15: 0000000000000003 INFO: task syz-executor:10944 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:24360 pid:10944 tgid:10944 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776 del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 bus_attr_store+0x74/0xb0 drivers/base/bus.c:172 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142 kernfs_fop_write_iter+0x3af/0x570 fs/kernfs/file.c:352 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x7d3/0x11d0 fs/read_write.c:686 ksys_write+0x12a/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f583e58e27f RSP: 002b:00007ffc19e819a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f583e58e27f RDX: 0000000000000001 RSI: 00007ffc19e819f0 RDI: 0000000000000005 RBP: 00007f583e6152cb R08: 0000000000000000 R09: 00007ffc19e817f7 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 R13: 00007ffc19e819f0 R14: 00007f583f314620 R15: 0000000000000003 Showing all locks held in the system: 1 lock held by rcu_exp_gp_kthr/18: #0: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:639 1 lock held by khungtaskd/31: #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline] #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6775 6 locks held by kworker/u8:3/38: #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232 #1: ffffc90000ae7c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233 #2: ffffffff9012b750 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 net/core/net_namespace.c:670 #3: ffff888030d4d0e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline] #3: ffff888030d4d0e8 (&dev->mutex){....}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:108 [inline] #3: ffff888030d4d0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12c/0x2b0 net/devlink/core.c:506 #4: ffff888030d4e250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devl_lock net/devlink/core.c:276 [inline] #4: ffff888030d4e250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:109 [inline] #4: ffff888030d4e250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x136/0x2b0 net/devlink/core.c:506 #5: ffff888058d95f78 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1072 [inline] #5: ffff888058d95f78 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x354/0x610 fs/libfs.c:627 4 locks held by kworker/u8:9/1330: #0: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:639 #1: ffff8880b8424608 (psi_seq){-.-.}-{0:0}, at: psi_sched_switch kernel/sched/stats.h:225 [inline] #1: ffff8880b8424608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x19b1/0x6150 kernel/sched/core.c:6857 #2: ffff888078f78788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6363 [inline] #2: ffff888078f78788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x99/0x560 net/wireless/core.c:424 #3: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #3: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline] #3: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xdc/0x420 net/mac80211/ibss.c:635 2 locks held by getty/5592: #0: ffff88814d7910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 drivers/tty/n_tty.c:2211 5 locks held by syz-executor/10844: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff888032b96088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 #4: ffff888030d4d0e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline] #4: ffff888030d4d0e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9f0 drivers/base/core.c:3840 3 locks held by syz.0.2421/10875: #0: ffff8880289fd978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 fs/file.c:1255 #1: ffff888141ed0420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #2: ffff888030d4e250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_health_report+0x6b4/0xaa0 net/devlink/health.c:680 2 locks held by syz.1.2446/10925: #0: ffff888141ed0420 (sb_writers#8){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:4529 [inline] #0: ffff888141ed0420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x183a/0x3140 fs/namei.c:4784 #1: ffff888058d95f78 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1042 [inline] #1: ffff888058d95f78 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: open_last_lookups fs/namei.c:4539 [inline] #1: ffff888058d95f78 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0x1248/0x3140 fs/namei.c:4784 2 locks held by syz.3.2445/10928: #0: ffff888141ed0420 (sb_writers#8){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:4529 [inline] #0: ffff888141ed0420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x183a/0x3140 fs/namei.c:4784 #1: ffff888058d95f78 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1042 [inline] #1: ffff888058d95f78 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: open_last_lookups fs/namei.c:4539 [inline] #1: ffff888058d95f78 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0x1248/0x3140 fs/namei.c:4784 4 locks held by syz-executor/10940: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff88805c982488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/10942: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff8880319f3488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/10944: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff88807dfca088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/10975: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff88806aa14088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/10989: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff88807dfc5c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/10991: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff888022346c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/10994: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff88805a480c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/11022: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff88807cd9f488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/11036: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff88807e817488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/11039: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff888029967488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/11040: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff88805b31e088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x133/0x180 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xe66/0x1180 kernel/hung_task.c:515 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet RIP: 0010:hlock_class kernel/locking/lockdep.c:234 [inline] RIP: 0010:check_wait_context kernel/locking/lockdep.c:4855 [inline] RIP: 0010:__lock_acquire+0x23d/0x2890 kernel/locking/lockdep.c:5187 Code: 8d 04 80 48 8d 04 80 48 8d 04 c5 60 9a b8 95 0f b6 98 c4 00 00 00 41 0f b7 46 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 b3 52 1f 14 <0f> 83 95 05 00 00 48 8d 04 80 48 8d 04 80 48 8d 04 c5 60 9a b8 95 RSP: 0018:ffffc9000211f8f8 EFLAGS: 00000003 RAX: 0000000000000007 RBX: 0000000000000003 RCX: 0000000000020000 RDX: 0000000000000007 RSI: 0000000000000000 RDI: ffffffff8e3c94a0 RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000007 R10: 0000000000000400 R11: ffff888022eee6b0 R12: ffff888022eedb80 R13: ffffffff8e3c94a0 R14: ffff888022eee728 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888124a04000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005639fd054660 CR3: 000000000e184000 CR4: 00000000003526f0 Call Trace: lock_acquire kernel/locking/lockdep.c:5868 [inline] lock_acquire+0x179/0x330 kernel/locking/lockdep.c:5825 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:867 [inline] batadv_iv_ogm_slide_own_bcast_window net/batman-adv/bat_iv_ogm.c:761 [inline] batadv_iv_ogm_schedule_buff+0x5d0/0x14c0 net/batman-adv/bat_iv_ogm.c:833 batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:873 [inline] batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:866 [inline] batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920 net/batman-adv/bat_iv_ogm.c:1709 process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 final repro crashed as (corrupted=false): INFO: task kworker/u8:3:38 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:3 state:D stack:25624 pid:38 tgid:38 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: netns cleanup_net Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:100 [inline] __wait_for_common+0x2fc/0x4e0 kernel/sched/completion.c:121 __debugfs_file_removed fs/debugfs/inode.c:751 [inline] remove_one+0x312/0x420 fs/debugfs/inode.c:758 __simple_recursive_removal+0x15b/0x610 fs/libfs.c:631 debugfs_remove+0x5d/0x80 fs/debugfs/inode.c:781 nsim_dev_health_exit+0x3b/0xe0 drivers/net/netdevsim/health.c:227 nsim_dev_reload_destroy+0x144/0x4d0 drivers/net/netdevsim/dev.c:1766 nsim_dev_reload_down+0x66/0xd0 drivers/net/netdevsim/dev.c:1038 devlink_reload+0x1a1/0x7c0 net/devlink/dev.c:461 devlink_pernet_pre_exit+0x1a0/0x2b0 net/devlink/core.c:509 ops_pre_exit_list net/core/net_namespace.c:161 [inline] ops_undo_list+0x187/0xab0 net/core/net_namespace.c:234 cleanup_net+0x41b/0x830 net/core/net_namespace.c:696 process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 INFO: task syz-executor:10844 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:23912 pid:10844 tgid:10844 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776 device_lock include/linux/device.h:895 [inline] device_del+0xa0/0x9f0 drivers/base/core.c:3840 device_unregister+0x1d/0xe0 drivers/base/core.c:3919 nsim_bus_dev_del drivers/net/netdevsim/bus.c:483 [inline] del_device_store+0x355/0x4a0 drivers/net/netdevsim/bus.c:244 bus_attr_store+0x74/0xb0 drivers/base/bus.c:172 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142 kernfs_fop_write_iter+0x3af/0x570 fs/kernfs/file.c:352 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x7d3/0x11d0 fs/read_write.c:686 ksys_write+0x12a/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff6b2f8e27f RSP: 002b:00007ffc8e42e570 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007ff6b2f8e27f RDX: 0000000000000001 RSI: 00007ffc8e42e5c0 RDI: 0000000000000005 RBP: 00007ff6b30152cb R08: 0000000000000000 R09: 00007ffc8e42e3c7 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 R13: 00007ffc8e42e5c0 R14: 00007ff6b3d14620 R15: 0000000000000003 INFO: task syz.0.2421:10875 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.2421 state:D stack:28808 pid:10875 tgid:10874 ppid:5948 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776 devlink_health_report+0x6b4/0xaa0 net/devlink/health.c:680 nsim_dev_health_break_write+0x166/0x210 drivers/net/netdevsim/health.c:162 full_proxy_write+0x131/0x1a0 fs/debugfs/file.c:388 vfs_write+0x2a0/0x11d0 fs/read_write.c:684 ksys_write+0x12a/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa825b8f7c9 RSP: 002b:00007fa826ada038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fa825de5fa0 RCX: 00007fa825b8f7c9 RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000003 RBP: 00007fa825c13f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa825de6038 R14: 00007fa825de5fa0 R15: 00007ffc43334aa8 INFO: task syz.1.2446:10925 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.2446 state:D stack:29064 pid:10925 tgid:10924 ppid:5952 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 rwsem_down_read_slowpath+0x64b/0xbf0 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1261 [inline] __down_read kernel/locking/rwsem.c:1274 [inline] down_read+0xef/0x460 kernel/locking/rwsem.c:1539 inode_lock_shared include/linux/fs.h:1042 [inline] open_last_lookups fs/namei.c:4539 [inline] path_openat+0x1248/0x3140 fs/namei.c:4784 do_filp_open+0x20b/0x470 fs/namei.c:4814 do_sys_openat2+0x11f/0x280 fs/open.c:1430 do_sys_open fs/open.c:1436 [inline] __do_sys_openat fs/open.c:1452 [inline] __se_sys_openat fs/open.c:1447 [inline] __x64_sys_openat+0x174/0x210 fs/open.c:1447 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f746658f7c9 RSP: 002b:00007f7467358038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f74667e5fa0 RCX: 00007f746658f7c9 RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c RBP: 00007f7466613f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f74667e6038 R14: 00007f74667e5fa0 R15: 00007ffd00a67e78 INFO: task syz.3.2445:10928 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.2445 state:D stack:29064 pid:10928 tgid:10926 ppid:5954 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 rwsem_down_read_slowpath+0x64b/0xbf0 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1261 [inline] __down_read kernel/locking/rwsem.c:1274 [inline] down_read+0xef/0x460 kernel/locking/rwsem.c:1539 inode_lock_shared include/linux/fs.h:1042 [inline] open_last_lookups fs/namei.c:4539 [inline] path_openat+0x1248/0x3140 fs/namei.c:4784 do_filp_open+0x20b/0x470 fs/namei.c:4814 do_sys_openat2+0x11f/0x280 fs/open.c:1430 do_sys_open fs/open.c:1436 [inline] __do_sys_openat fs/open.c:1452 [inline] __se_sys_openat fs/open.c:1447 [inline] __x64_sys_openat+0x174/0x210 fs/open.c:1447 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff65ff8f7c9 RSP: 002b:00007ff660d4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007ff6601e5fa0 RCX: 00007ff65ff8f7c9 RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c RBP: 00007ff660013f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ff6601e6038 R14: 00007ff6601e5fa0 R15: 00007fff4d427be8 INFO: task syz-executor:10940 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:24504 pid:10940 tgid:10940 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776 del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 bus_attr_store+0x74/0xb0 drivers/base/bus.c:172 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142 kernfs_fop_write_iter+0x3af/0x570 fs/kernfs/file.c:352 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x7d3/0x11d0 fs/read_write.c:686 ksys_write+0x12a/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4b1378e27f RSP: 002b:00007fff6bc1e380 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4b1378e27f RDX: 0000000000000001 RSI: 00007fff6bc1e3d0 RDI: 0000000000000005 RBP: 00007f4b138152cb R08: 0000000000000000 R09: 00007fff6bc1e1d7 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 R13: 00007fff6bc1e3d0 R14: 00007f4b14514620 R15: 0000000000000003 INFO: task syz-executor:10942 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:24472 pid:10942 tgid:10942 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776 del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 bus_attr_store+0x74/0xb0 drivers/base/bus.c:172 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142 kernfs_fop_write_iter+0x3af/0x570 fs/kernfs/file.c:352 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x7d3/0x11d0 fs/read_write.c:686 ksys_write+0x12a/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f037dd8e27f RSP: 002b:00007fff74e1c210 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f037dd8e27f RDX: 0000000000000001 RSI: 00007fff74e1c260 RDI: 0000000000000005 RBP: 00007f037de152cb R08: 0000000000000000 R09: 00007fff74e1c067 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 R13: 00007fff74e1c260 R14: 00007f037eb14620 R15: 0000000000000003 INFO: task syz-executor:10944 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:24360 pid:10944 tgid:10944 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776 del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 bus_attr_store+0x74/0xb0 drivers/base/bus.c:172 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142 kernfs_fop_write_iter+0x3af/0x570 fs/kernfs/file.c:352 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x7d3/0x11d0 fs/read_write.c:686 ksys_write+0x12a/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f583e58e27f RSP: 002b:00007ffc19e819a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f583e58e27f RDX: 0000000000000001 RSI: 00007ffc19e819f0 RDI: 0000000000000005 RBP: 00007f583e6152cb R08: 0000000000000000 R09: 00007ffc19e817f7 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 R13: 00007ffc19e819f0 R14: 00007f583f314620 R15: 0000000000000003 Showing all locks held in the system: 1 lock held by rcu_exp_gp_kthr/18: #0: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:639 1 lock held by khungtaskd/31: #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline] #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6775 6 locks held by kworker/u8:3/38: #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232 #1: ffffc90000ae7c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233 #2: ffffffff9012b750 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 net/core/net_namespace.c:670 #3: ffff888030d4d0e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline] #3: ffff888030d4d0e8 (&dev->mutex){....}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:108 [inline] #3: ffff888030d4d0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12c/0x2b0 net/devlink/core.c:506 #4: ffff888030d4e250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devl_lock net/devlink/core.c:276 [inline] #4: ffff888030d4e250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:109 [inline] #4: ffff888030d4e250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x136/0x2b0 net/devlink/core.c:506 #5: ffff888058d95f78 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1072 [inline] #5: ffff888058d95f78 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x354/0x610 fs/libfs.c:627 4 locks held by kworker/u8:9/1330: #0: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:639 #1: ffff8880b8424608 (psi_seq){-.-.}-{0:0}, at: psi_sched_switch kernel/sched/stats.h:225 [inline] #1: ffff8880b8424608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x19b1/0x6150 kernel/sched/core.c:6857 #2: ffff888078f78788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6363 [inline] #2: ffff888078f78788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x99/0x560 net/wireless/core.c:424 #3: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #3: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline] #3: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xdc/0x420 net/mac80211/ibss.c:635 2 locks held by getty/5592: #0: ffff88814d7910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 drivers/tty/n_tty.c:2211 5 locks held by syz-executor/10844: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff888032b96088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 #4: ffff888030d4d0e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline] #4: ffff888030d4d0e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9f0 drivers/base/core.c:3840 3 locks held by syz.0.2421/10875: #0: ffff8880289fd978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 fs/file.c:1255 #1: ffff888141ed0420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #2: ffff888030d4e250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_health_report+0x6b4/0xaa0 net/devlink/health.c:680 2 locks held by syz.1.2446/10925: #0: ffff888141ed0420 (sb_writers#8){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:4529 [inline] #0: ffff888141ed0420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x183a/0x3140 fs/namei.c:4784 #1: ffff888058d95f78 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1042 [inline] #1: ffff888058d95f78 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: open_last_lookups fs/namei.c:4539 [inline] #1: ffff888058d95f78 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0x1248/0x3140 fs/namei.c:4784 2 locks held by syz.3.2445/10928: #0: ffff888141ed0420 (sb_writers#8){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:4529 [inline] #0: ffff888141ed0420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x183a/0x3140 fs/namei.c:4784 #1: ffff888058d95f78 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1042 [inline] #1: ffff888058d95f78 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: open_last_lookups fs/namei.c:4539 [inline] #1: ffff888058d95f78 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0x1248/0x3140 fs/namei.c:4784 4 locks held by syz-executor/10940: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff88805c982488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/10942: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff8880319f3488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/10944: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff88807dfca088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/10975: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff88806aa14088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/10989: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff88807dfc5c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/10991: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff888022346c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/10994: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff88805a480c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/11022: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff88807cd9f488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/11036: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff88807e817488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/11039: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff888029967488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/11040: #0: ffff888033442420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738 #1: ffff88805b31e088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343 #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff8880283cd3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344 #3: ffffffff8f6b7fc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x133/0x180 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xe66/0x1180 kernel/hung_task.c:515 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet RIP: 0010:hlock_class kernel/locking/lockdep.c:234 [inline] RIP: 0010:check_wait_context kernel/locking/lockdep.c:4855 [inline] RIP: 0010:__lock_acquire+0x23d/0x2890 kernel/locking/lockdep.c:5187 Code: 8d 04 80 48 8d 04 80 48 8d 04 c5 60 9a b8 95 0f b6 98 c4 00 00 00 41 0f b7 46 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 b3 52 1f 14 <0f> 83 95 05 00 00 48 8d 04 80 48 8d 04 80 48 8d 04 c5 60 9a b8 95 RSP: 0018:ffffc9000211f8f8 EFLAGS: 00000003 RAX: 0000000000000007 RBX: 0000000000000003 RCX: 0000000000020000 RDX: 0000000000000007 RSI: 0000000000000000 RDI: ffffffff8e3c94a0 RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000007 R10: 0000000000000400 R11: ffff888022eee6b0 R12: ffff888022eedb80 R13: ffffffff8e3c94a0 R14: ffff888022eee728 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888124a04000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005639fd054660 CR3: 000000000e184000 CR4: 00000000003526f0 Call Trace: lock_acquire kernel/locking/lockdep.c:5868 [inline] lock_acquire+0x179/0x330 kernel/locking/lockdep.c:5825 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:867 [inline] batadv_iv_ogm_slide_own_bcast_window net/batman-adv/bat_iv_ogm.c:761 [inline] batadv_iv_ogm_schedule_buff+0x5d0/0x14c0 net/batman-adv/bat_iv_ogm.c:833 batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:873 [inline] batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:866 [inline] batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920 net/batman-adv/bat_iv_ogm.c:1709 process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246