Extracting prog: 2m24.837637015s
Minimizing prog: 1h49m2.275009441s
Simplifying prog options: 0s
Extracting C: 1m10.901836315s
Simplifying C: 10m44.75898611s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$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")
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r2 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000})
r4 = fcntl$dupfd(r3, 0x0, r2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

program crashed: BUG: workqueue lockup
single: successfully extracted reproducer
found reproducer with 9 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$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")
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r1 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000})
fcntl$dupfd(r2, 0x0, r1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$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")
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r2 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000})
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$eJzs3M1PXFUbAPBnZhha2vLCW+tHsVW0GokfUOiHXbiwRhMXmpjoosYVAm2w02IKJrYhii5waZq4Ny5N/AvcWDdGXZm41b0xIYaN1dWYO3MvjDADDAxM7fx+ySXnzDnknOfee2bOnHvvBNCxBpM/uYhDEfFLRPRVs6uer1ZK6t1enp/4a3l+Ihfl8ut/5Cr1/lyen8iqZv93sJoplzdod/GtiPFSaepamh+Zu/LuyOz1G89MXxm/NHVp6urYuXOnTx3vPjt2piVx9iZ9Hfhg5tjRl9+8+erEhZtv//BV0t9DaXltHK0yWN27dT3e6sbarLcmnetqY0doSiEiksNVrIz/vihEz0pZX7z0cVs7B+yqcjlf3te4eKEM3MWSiTrQibIP+uT7b7bt0dTjjrB0PlbWMW6nW7WkK/JpnWL6HWk3DEbEhYW/P0+22KV1CACAWrfOR8TT9eZ/+bivpt7/0mtD/RHx/4g4HBH3RMSRiLg3olL3/oh4oMn2114hWT//KfdtK7AtSuZ/z6XXtv49/8tmf9FfSHO9lfiLuYvTpamT6T4ZiuK+JD+6QRvfvvjzp43Kaud/yZa0n80F03783rVmgW5yfG58JzHXWvooYqCrXvy5lTlvMj8+GhED22xj+skvjzUq2zz+DbRgUl7+IuKJ6vFfiDXxZ3INr0+OPnt27MzI/ihNnRzJzor1fvxp8bVG7e8o/hZYulWOA3XP/5X4+3P7I2av37hcuV4723wbi79+0vA7zXbP/+7cG5V0d/ra++Nzc9dGI7pzr6x/fWz1f7N8Vj85/4dO1B//h2N1TzwYEclJfDwiHoqIh9O+PxIRj0bEiQ3i//6Fx95pPv4NVuVbKIl/crPjH7XHv/lE4fJ3XzcffyY5/qcrqaH0la28/221gzvZdwAAAPBfka/cA5/LD6+k8/nh4eo9/EfiQL40Mzv31MWZ965OVu+V749iPlvp6qtZDx1N14az/Nia/Kl03fizQk8lPzwxU5psd/DQ4Q42GP+J3wrt7h2w6zyvBZ3L+IfOZfxD5zL+oXMZ/9C56o3/D9vQD2DvbfL537NX/QD2nvk/dC7jHzqX8Q8dqeGz8fkdPfIv0abEN907+62GrScif4eEfNckilG3qGvLP2axzcS+ukXtfmcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABojX8CAAD//xL+4zQ=")
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r1 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$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")
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r2 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r2, 0xffff)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000})
r4 = fcntl$dupfd(r3, 0x0, r2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$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")
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r2 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000})
r4 = fcntl$dupfd(r3, 0x0, r2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$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")
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
ftruncate(0xffffffffffffffff, 0xffff)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000})
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$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")
r1 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000})
r3 = fcntl$dupfd(r2, 0x0, r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r2 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000})
r4 = fcntl$dupfd(r3, 0x0, r2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$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")
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r1 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000})
r3 = fcntl$dupfd(r2, 0x0, r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESOCT])

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$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")
r1 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
r2 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000})
r4 = fcntl$dupfd(r3, 0x0, r2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$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")
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r2 = memfd_create(0x0, 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000})
r4 = fcntl$dupfd(r3, 0x0, r2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$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")
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r2 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$eJzs3M1PXFUbAPBnZhha2vLCW+tHsVW0GokfUOiHXbiwRhMXmpjoosYVAm2w02IKJrYhii5waZq4Ny5N/AvcWDdGXZm41b0xIYaN1dWYO3MvjDADDAxM7fx+ySXnzDnknOfee2bOnHvvBNCxBpM/uYhDEfFLRPRVs6uer1ZK6t1enp/4a3l+Ihfl8ut/5Cr1/lyen8iqZv93sJoplzdod/GtiPFSaepamh+Zu/LuyOz1G89MXxm/NHVp6urYuXOnTx3vPjt2piVx9iZ9Hfhg5tjRl9+8+erEhZtv//BV0t9DaXltHK0yWN27dT3e6sbarLcmnetqY0doSiEiksNVrIz/vihEz0pZX7z0cVs7B+yqcjlf3te4eKEM3MWSiTrQibIP+uT7b7bt0dTjjrB0PlbWMW6nW7WkK/JpnWL6HWk3DEbEhYW/P0+22KV1CACAWrfOR8TT9eZ/+bivpt7/0mtD/RHx/4g4HBH3RMSRiLg3olL3/oh4oMn2114hWT//KfdtK7AtSuZ/z6XXtv49/8tmf9FfSHO9lfiLuYvTpamT6T4ZiuK+JD+6QRvfvvjzp43Kaud/yZa0n80F03783rVmgW5yfG58JzHXWvooYqCrXvy5lTlvMj8+GhED22xj+skvjzUq2zz+DbRgUl7+IuKJ6vFfiDXxZ3INr0+OPnt27MzI/ihNnRzJzor1fvxp8bVG7e8o/hZYulWOA3XP/5X4+3P7I2av37hcuV4723wbi79+0vA7zXbP/+7cG5V0d/ra++Nzc9dGI7pzr6x/fWz1f7N8Vj85/4dO1B//h2N1TzwYEclJfDwiHoqIh9O+PxIRj0bEiQ3i//6Fx95pPv4NVuVbKIl/crPjH7XHv/lE4fJ3XzcffyY5/qcrqaH0la28/221gzvZdwAAAPBfka/cA5/LD6+k8/nh4eo9/EfiQL40Mzv31MWZ965OVu+V749iPlvp6qtZDx1N14az/Nia/Kl03fizQk8lPzwxU5psd/DQ4Q42GP+J3wrt7h2w6zyvBZ3L+IfOZfxD5zL+oXMZ/9C56o3/D9vQD2DvbfL537NX/QD2nvk/dC7jHzqX8Q8dqeGz8fkdPfIv0abEN907+62GrScif4eEfNckilG3qGvLP2axzcS+ukXtfmcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABojX8CAAD//xL+4zQ=")
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r2 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000})
r4 = fcntl$dupfd(r3, 0x0, r2)
mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$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")
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r2 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000})
r4 = fcntl$dupfd(r3, 0x0, r2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$eJzs3M1PXFUbAPBnZhha2vLCW+tHsVW0GokfUOiHXbiwRhMXmpjoosYVAm2w02IKJrYhii5waZq4Ny5N/AvcWDdGXZm41b0xIYaN1dWYO3MvjDADDAxM7fx+ySXnzDnknOfee2bOnHvvBNCxBpM/uYhDEfFLRPRVs6uer1ZK6t1enp/4a3l+Ihfl8ut/5Cr1/lyen8iqZv93sJoplzdod/GtiPFSaepamh+Zu/LuyOz1G89MXxm/NHVp6urYuXOnTx3vPjt2piVx9iZ9Hfhg5tjRl9+8+erEhZtv//BV0t9DaXltHK0yWN27dT3e6sbarLcmnetqY0doSiEiksNVrIz/vihEz0pZX7z0cVs7B+yqcjlf3te4eKEM3MWSiTrQibIP+uT7b7bt0dTjjrB0PlbWMW6nW7WkK/JpnWL6HWk3DEbEhYW/P0+22KV1CACAWrfOR8TT9eZ/+bivpt7/0mtD/RHx/4g4HBH3RMSRiLg3olL3/oh4oMn2114hWT//KfdtK7AtSuZ/z6XXtv49/8tmf9FfSHO9lfiLuYvTpamT6T4ZiuK+JD+6QRvfvvjzp43Kaud/yZa0n80F03783rVmgW5yfG58JzHXWvooYqCrXvy5lTlvMj8+GhED22xj+skvjzUq2zz+DbRgUl7+IuKJ6vFfiDXxZ3INr0+OPnt27MzI/ihNnRzJzor1fvxp8bVG7e8o/hZYulWOA3XP/5X4+3P7I2av37hcuV4723wbi79+0vA7zXbP/+7cG5V0d/ra++Nzc9dGI7pzr6x/fWz1f7N8Vj85/4dO1B//h2N1TzwYEclJfDwiHoqIh9O+PxIRj0bEiQ3i//6Fx95pPv4NVuVbKIl/crPjH7XHv/lE4fJ3XzcffyY5/qcrqaH0la28/221gzvZdwAAAPBfka/cA5/LD6+k8/nh4eo9/EfiQL40Mzv31MWZ965OVu+V749iPlvp6qtZDx1N14az/Nia/Kl03fizQk8lPzwxU5psd/DQ4Q42GP+J3wrt7h2w6zyvBZ3L+IfOZfxD5zL+oXMZ/9C56o3/D9vQD2DvbfL537NX/QD2nvk/dC7jHzqX8Q8dqeGz8fkdPfIv0abEN907+62GrScif4eEfNckilG3qGvLP2axzcS+ukXtfmcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABojX8CAAD//xL+4zQ=")
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r1 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000})
fcntl$dupfd(r2, 0x0, r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$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")
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r1 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000})
fcntl$dupfd(r2, 0x0, r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[])

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$eJzs3M1PXFUbAPBnZhha2vLCW+tHsVW0GokfUOiHXbiwRhMXmpjoosYVAm2w02IKJrYhii5waZq4Ny5N/AvcWDdGXZm41b0xIYaN1dWYO3MvjDADDAxM7fx+ySXnzDnknOfee2bOnHvvBNCxBpM/uYhDEfFLRPRVs6uer1ZK6t1enp/4a3l+Ihfl8ut/5Cr1/lyen8iqZv93sJoplzdod/GtiPFSaepamh+Zu/LuyOz1G89MXxm/NHVp6urYuXOnTx3vPjt2piVx9iZ9Hfhg5tjRl9+8+erEhZtv//BV0t9DaXltHK0yWN27dT3e6sbarLcmnetqY0doSiEiksNVrIz/vihEz0pZX7z0cVs7B+yqcjlf3te4eKEM3MWSiTrQibIP+uT7b7bt0dTjjrB0PlbWMW6nW7WkK/JpnWL6HWk3DEbEhYW/P0+22KV1CACAWrfOR8TT9eZ/+bivpt7/0mtD/RHx/4g4HBH3RMSRiLg3olL3/oh4oMn2114hWT//KfdtK7AtSuZ/z6XXtv49/8tmf9FfSHO9lfiLuYvTpamT6T4ZiuK+JD+6QRvfvvjzp43Kaud/yZa0n80F03783rVmgW5yfG58JzHXWvooYqCrXvy5lTlvMj8+GhED22xj+skvjzUq2zz+DbRgUl7+IuKJ6vFfiDXxZ3INr0+OPnt27MzI/ihNnRzJzor1fvxp8bVG7e8o/hZYulWOA3XP/5X4+3P7I2av37hcuV4723wbi79+0vA7zXbP/+7cG5V0d/ra++Nzc9dGI7pzr6x/fWz1f7N8Vj85/4dO1B//h2N1TzwYEclJfDwiHoqIh9O+PxIRj0bEiQ3i//6Fx95pPv4NVuVbKIl/crPjH7XHv/lE4fJ3XzcffyY5/qcrqaH0la28/221gzvZdwAAAPBfka/cA5/LD6+k8/nh4eo9/EfiQL40Mzv31MWZ965OVu+V749iPlvp6qtZDx1N14az/Nia/Kl03fizQk8lPzwxU5psd/DQ4Q42GP+J3wrt7h2w6zyvBZ3L+IfOZfxD5zL+oXMZ/9C56o3/D9vQD2DvbfL537NX/QD2nvk/dC7jHzqX8Q8dqeGz8fkdPfIv0abEN907+62GrScif4eEfNckilG3qGvLP2axzcS+ukXtfmcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABojX8CAAD//xL+4zQ=")
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r2 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000})
r4 = fcntl$dupfd(r3, 0x0, r2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB, @ANYRESOCT=r0])

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$eJzs3M1PXFUbAPBnZhha2vLCW+tHsVW0GokfUOiHXbiwRhMXmpjoosYVAm2w02IKJrYhii5waZq4Ny5N/AvcWDdGXZm41b0xIYaN1dWYO3MvjDADDAxM7fx+ySXnzDnknOfee2bOnHvvBNCxBpM/uYhDEfFLRPRVs6uer1ZK6t1enp/4a3l+Ihfl8ut/5Cr1/lyen8iqZv93sJoplzdod/GtiPFSaepamh+Zu/LuyOz1G89MXxm/NHVp6urYuXOnTx3vPjt2piVx9iZ9Hfhg5tjRl9+8+erEhZtv//BV0t9DaXltHK0yWN27dT3e6sbarLcmnetqY0doSiEiksNVrIz/vihEz0pZX7z0cVs7B+yqcjlf3te4eKEM3MWSiTrQibIP+uT7b7bt0dTjjrB0PlbWMW6nW7WkK/JpnWL6HWk3DEbEhYW/P0+22KV1CACAWrfOR8TT9eZ/+bivpt7/0mtD/RHx/4g4HBH3RMSRiLg3olL3/oh4oMn2114hWT//KfdtK7AtSuZ/z6XXtv49/8tmf9FfSHO9lfiLuYvTpamT6T4ZiuK+JD+6QRvfvvjzp43Kaud/yZa0n80F03783rVmgW5yfG58JzHXWvooYqCrXvy5lTlvMj8+GhED22xj+skvjzUq2zz+DbRgUl7+IuKJ6vFfiDXxZ3INr0+OPnt27MzI/ihNnRzJzor1fvxp8bVG7e8o/hZYulWOA3XP/5X4+3P7I2av37hcuV4723wbi79+0vA7zXbP/+7cG5V0d/ra++Nzc9dGI7pzr6x/fWz1f7N8Vj85/4dO1B//h2N1TzwYEclJfDwiHoqIh9O+PxIRj0bEiQ3i//6Fx95pPv4NVuVbKIl/crPjH7XHv/lE4fJ3XzcffyY5/qcrqaH0la28/221gzvZdwAAAPBfka/cA5/LD6+k8/nh4eo9/EfiQL40Mzv31MWZ965OVu+V749iPlvp6qtZDx1N14az/Nia/Kl03fizQk8lPzwxU5psd/DQ4Q42GP+J3wrt7h2w6zyvBZ3L+IfOZfxD5zL+oXMZ/9C56o3/D9vQD2DvbfL537NX/QD2nvk/dC7jHzqX8Q8dqeGz8fkdPfIv0abEN907+62GrScif4eEfNckilG3qGvLP2axzcS+ukXtfmcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABojX8CAAD//xL+4zQ=")
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r2 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000})
r4 = fcntl$dupfd(r3, 0x0, r2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
program crashed: BUG: workqueue lockup
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
program crashed: BUG: workqueue lockup
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
program crashed: BUG: workqueue lockup
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
program crashed: BUG: workqueue lockup
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
program crashed: BUG: workqueue lockup
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
program crashed: BUG: workqueue lockup
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
program crashed: BUG: workqueue lockup
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
program crashed: BUG: workqueue lockup
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$eJzs3M1PXFUbAPBnZhha2vLCW+tHsVW0GokfUOiHXbiwRhMXmpjoosYVAm2w02IKJrYhii5waZq4Ny5N/AvcWDdGXZm41b0xIYaN1dWYO3MvjDADDAxM7fx+ySXnzDnknOfee2bOnHvvBNCxBpM/uYhDEfFLRPRVs6uer1ZK6t1enp/4a3l+Ihfl8ut/5Cr1/lyen8iqZv93sJoplzdod/GtiPFSaepamh+Zu/LuyOz1G89MXxm/NHVp6urYuXOnTx3vPjt2piVx9iZ9Hfhg5tjRl9+8+erEhZtv//BV0t9DaXltHK0yWN27dT3e6sbarLcmnetqY0doSiEiksNVrIz/vihEz0pZX7z0cVs7B+yqcjlf3te4eKEM3MWSiTrQibIP+uT7b7bt0dTjjrB0PlbWMW6nW7WkK/JpnWL6HWk3DEbEhYW/P0+22KV1CACAWrfOR8TT9eZ/+bivpt7/0mtD/RHx/4g4HBH3RMSRiLg3olL3/oh4oMn2114hWT//KfdtK7AtSuZ/z6XXtv49/8tmf9FfSHO9lfiLuYvTpamT6T4ZiuK+JD+6QRvfvvjzp43Kaud/yZa0n80F03783rVmgW5yfG58JzHXWvooYqCrXvy5lTlvMj8+GhED22xj+skvjzUq2zz+DbRgUl7+IuKJ6vFfiDXxZ3INr0+OPnt27MzI/ihNnRzJzor1fvxp8bVG7e8o/hZYulWOA3XP/5X4+3P7I2av37hcuV4723wbi79+0vA7zXbP/+7cG5V0d/ra++Nzc9dGI7pzr6x/fWz1f7N8Vj85/4dO1B//h2N1TzwYEclJfDwiHoqIh9O+PxIRj0bEiQ3i//6Fx95pPv4NVuVbKIl/crPjH7XHv/lE4fJ3XzcffyY5/qcrqaH0la28/221gzvZdwAAAPBfka/cA5/LD6+k8/nh4eo9/EfiQL40Mzv31MWZ965OVu+V749iPlvp6qtZDx1N14az/Nia/Kl03fizQk8lPzwxU5psd/DQ4Q42GP+J3wrt7h2w6zyvBZ3L+IfOZfxD5zL+oXMZ/9C56o3/D9vQD2DvbfL537NX/QD2nvk/dC7jHzqX8Q8dqeGz8fkdPfIv0abEN907+62GrScif4eEfNckilG3qGvLP2axzcS+ukXtfmcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABojX8CAAD//xL+4zQ=")
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r2 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000})
r4 = fcntl$dupfd(r3, 0x0, r2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

program crashed: BUG: workqueue lockup
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$eJzs3M1PXFUbAPBnZhha2vLCW+tHsVW0GokfUOiHXbiwRhMXmpjoosYVAm2w02IKJrYhii5waZq4Ny5N/AvcWDdGXZm41b0xIYaN1dWYO3MvjDADDAxM7fx+ySXnzDnknOfee2bOnHvvBNCxBpM/uYhDEfFLRPRVs6uer1ZK6t1enp/4a3l+Ihfl8ut/5Cr1/lyen8iqZv93sJoplzdod/GtiPFSaepamh+Zu/LuyOz1G89MXxm/NHVp6urYuXOnTx3vPjt2piVx9iZ9Hfhg5tjRl9+8+erEhZtv//BV0t9DaXltHK0yWN27dT3e6sbarLcmnetqY0doSiEiksNVrIz/vihEz0pZX7z0cVs7B+yqcjlf3te4eKEM3MWSiTrQibIP+uT7b7bt0dTjjrB0PlbWMW6nW7WkK/JpnWL6HWk3DEbEhYW/P0+22KV1CACAWrfOR8TT9eZ/+bivpt7/0mtD/RHx/4g4HBH3RMSRiLg3olL3/oh4oMn2114hWT//KfdtK7AtSuZ/z6XXtv49/8tmf9FfSHO9lfiLuYvTpamT6T4ZiuK+JD+6QRvfvvjzp43Kaud/yZa0n80F03783rVmgW5yfG58JzHXWvooYqCrXvy5lTlvMj8+GhED22xj+skvjzUq2zz+DbRgUl7+IuKJ6vFfiDXxZ3INr0+OPnt27MzI/ihNnRzJzor1fvxp8bVG7e8o/hZYulWOA3XP/5X4+3P7I2av37hcuV4723wbi79+0vA7zXbP/+7cG5V0d/ra++Nzc9dGI7pzr6x/fWz1f7N8Vj85/4dO1B//h2N1TzwYEclJfDwiHoqIh9O+PxIRj0bEiQ3i//6Fx95pPv4NVuVbKIl/crPjH7XHv/lE4fJ3XzcffyY5/qcrqaH0la28/221gzvZdwAAAPBfka/cA5/LD6+k8/nh4eo9/EfiQL40Mzv31MWZ965OVu+V749iPlvp6qtZDx1N14az/Nia/Kl03fizQk8lPzwxU5psd/DQ4Q42GP+J3wrt7h2w6zyvBZ3L+IfOZfxD5zL+oXMZ/9C56o3/D9vQD2DvbfL537NX/QD2nvk/dC7jHzqX8Q8dqeGz8fkdPfIv0abEN907+62GrScif4eEfNckilG3qGvLP2axzcS+ukXtfmcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABojX8CAAD//xL+4zQ=")
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r2 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000})
r4 = fcntl$dupfd(r3, 0x0, r2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

program crashed: BUG: workqueue lockup
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_mount_image$ext4-openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-fcntl$dupfd-mount$9p_fd
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x100009a, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noinit_itable, 0x22}, {@dioread_lock}, {@data_journal}, {@nouid32}, {@usrjquota, 0x22}, {@grpjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpquota}], [{@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt}, {@uid_eq}, {@hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@measure}]}, 0xfe, 0x44f, &(0x7f0000000900)="$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")
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r2 = memfd_create(&(0x7f0000000d80)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\xe7\xd7>\n\x84\x8cT\xe35k\xe9\x90\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14\x01\x00\x00\x00\x00\x00\x00\x00\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\xb0\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000})
r4 = fcntl$dupfd(r3, 0x0, r2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

program crashed: BUG: workqueue lockup
validation run: crashed=true
reproducing took 2h10m14.1541702s
repro crashed as (corrupted=false):
BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 58s!
Showing busy workqueues and worker pools:
workqueue events: flags=0x0
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=9/256 refcnt=11
    in-flight: 24:p9_poll_workfn p9_poll_workfn BAR(4534)
    pending: p9_read_work, nsim_dev_hwstats_traffic_work, psi_avgs_work, kfree_rcu_monitor, p9_write_work, p9_read_work, psi_avgs_work
workqueue events_unbound: flags=0x2
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/512 refcnt=6
    in-flight: 4496:fsnotify_mark_destroy_workfn fsnotify_mark_destroy_workfn, 9:fsnotify_connector_destroy_workfn fsnotify_connector_destroy_workfn
workqueue rcu_gp: flags=0x8
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: process_srcu
workqueue mm_percpu_wq: flags=0x8
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=4
    pending: vmstat_update, lru_add_drain_per_cpu BAR(4548)
workqueue mld: flags=0x40008
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=9
    pending: mld_ifc_work
    inactive: mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work
workqueue ipv6_addrconf: flags=0x40008
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=21
    pending: addrconf_dad_work
    inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work
workqueue bat_events: flags=0xe000a
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=11
    pending: batadv_nc_worker
    inactive: batadv_nc_worker, batadv_nc_worker, batadv_nc_worker, batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge
workqueue wg-kex-wg0: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
    pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker
workqueue wg-kex-wg2: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
    pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker
workqueue wg-kex-wg0: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker
workqueue wg-kex-wg1: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker, wg_packet_decrypt_worker
workqueue wg-kex-wg2: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
    pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker
workqueue wg-kex-wg0: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker
workqueue wg-kex-wg1: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker, wg_packet_decrypt_worker
workqueue wg-kex-wg2: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker, wg_packet_decrypt_worker
workqueue wg-kex-wg0: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-kex-wg1: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_tx_worker
workqueue wg-kex-wg2: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=58s workers=4 idle: 4351 4370 22
pool 4: cpus=0-1 flags=0x4 nice=0 hung=0s workers=9 idle: 1611 4495 39 1317 4378 11 4479

final repro crashed as (corrupted=false):
BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 58s!
Showing busy workqueues and worker pools:
workqueue events: flags=0x0
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=9/256 refcnt=11
    in-flight: 24:p9_poll_workfn p9_poll_workfn BAR(4534)
    pending: p9_read_work, nsim_dev_hwstats_traffic_work, psi_avgs_work, kfree_rcu_monitor, p9_write_work, p9_read_work, psi_avgs_work
workqueue events_unbound: flags=0x2
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/512 refcnt=6
    in-flight: 4496:fsnotify_mark_destroy_workfn fsnotify_mark_destroy_workfn, 9:fsnotify_connector_destroy_workfn fsnotify_connector_destroy_workfn
workqueue rcu_gp: flags=0x8
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: process_srcu
workqueue mm_percpu_wq: flags=0x8
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=4
    pending: vmstat_update, lru_add_drain_per_cpu BAR(4548)
workqueue mld: flags=0x40008
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=9
    pending: mld_ifc_work
    inactive: mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work
workqueue ipv6_addrconf: flags=0x40008
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=21
    pending: addrconf_dad_work
    inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work
workqueue bat_events: flags=0xe000a
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=11
    pending: batadv_nc_worker
    inactive: batadv_nc_worker, batadv_nc_worker, batadv_nc_worker, batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge
workqueue wg-kex-wg0: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
    pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker
workqueue wg-kex-wg2: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
    pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker
workqueue wg-kex-wg0: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker
workqueue wg-kex-wg1: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker, wg_packet_decrypt_worker
workqueue wg-kex-wg2: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
    pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker
workqueue wg-kex-wg0: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker
workqueue wg-kex-wg1: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker, wg_packet_decrypt_worker
workqueue wg-kex-wg2: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker, wg_packet_decrypt_worker
workqueue wg-kex-wg0: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-kex-wg1: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_tx_worker
workqueue wg-kex-wg2: flags=0x24
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_handshake_receive_worker
pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=58s workers=4 idle: 4351 4370 22
pool 4: cpus=0-1 flags=0x4 nice=0 hung=0s workers=9 idle: 1611 4495 39 1317 4378 11 4479