Extracting prog: 2m20.381783313s
Minimizing prog: 7m5.152116755s
Simplifying prog options: 0s
Extracting C: 1m6.770400156s
Simplifying C: 21m19.227637252s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
detailed listing:
executing program 0:
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/ports/0/pp_hold\x00', 0x881, 0x0)
write$auto_nsim_pp_hold_fops_netdev(r0, &(0x7f0000000140)="4633da79ddc0a6150e0233604f77d1212e1094bea3c3623d99297d55f1e98becfaca61d4dc78b25af47222060fce9beb7420377fc5c87e37281f3c43cfb4b7534187c5cf9915620c66b7289e493b894bde6e2da80b3cbe3b40bc1fece1e6164c96cbd58210b1d2928ad49a1cda65f4", 0x6f)

program crashed: WARNING: lock held when returning to user space in nsim_pp_hold_write
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=52.353419776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev
detailed listing:
executing program 0:
openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/ports/0/pp_hold\x00', 0x881, 0x0)

program did not crash
testing program (duration=52.353419776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): write$auto_nsim_pp_hold_fops_netdev
detailed listing:
executing program 0:
write$auto_nsim_pp_hold_fops_netdev(0xffffffffffffffff, &(0x7f0000000140)="4633da79ddc0a6150e0233604f77d1212e1094bea3c3623d99297d55f1e98becfaca61d4dc78b25af47222060fce9beb7420377fc5c87e37281f3c43cfb4b7534187c5cf9915620c66b7289e493b894bde6e2da80b3cbe3b40bc1fece1e6164c96cbd58210b1d2928ad49a1cda65f4", 0x6f)

program did not crash
testing program (duration=52.353419776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
detailed listing:
executing program 0:
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, 0x0, 0x881, 0x0)
write$auto_nsim_pp_hold_fops_netdev(r0, &(0x7f0000000140)="4633da79ddc0a6150e0233604f77d1212e1094bea3c3623d99297d55f1e98becfaca61d4dc78b25af47222060fce9beb7420377fc5c87e37281f3c43cfb4b7534187c5cf9915620c66b7289e493b894bde6e2da80b3cbe3b40bc1fece1e6164c96cbd58210b1d2928ad49a1cda65f4", 0x6f)

program did not crash
testing program (duration=52.353419776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
detailed listing:
executing program 0:
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/ports/0/pp_hold\x00', 0x881, 0x0)
write$auto_nsim_pp_hold_fops_netdev(r0, 0x0, 0x0)

program did not crash
testing program (duration=52.353419776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
detailed listing:
executing program 0:
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/ports/0/pp_hold\x00', 0x881, 0x0)
write$auto_nsim_pp_hold_fops_netdev(r0, &(0x7f0000000140), 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=52.353419776s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program crashed: WARNING: lock held when returning to user space in nsim_pp_hold_write
simplifying C reproducer
testing compiled C program (duration=52.353419776s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program crashed: WARNING: lock held when returning to user space in nsim_pp_hold_write
testing compiled C program (duration=52.353419776s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program did not crash
testing compiled C program (duration=52.353419776s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program did not crash
testing compiled C program (duration=52.353419776s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program did not crash
testing compiled C program (duration=52.353419776s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program crashed: WARNING: lock held when returning to user space in nsim_pp_hold_write
testing compiled C program (duration=52.353419776s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program did not crash
testing compiled C program (duration=52.353419776s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program crashed: WARNING: lock held when returning to user space in nsim_pp_hold_write
testing compiled C program (duration=52.353419776s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program crashed: WARNING: lock held when returning to user space in nsim_pp_hold_write
testing compiled C program (duration=52.353419776s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program crashed: WARNING: lock held when returning to user space in nsim_pp_hold_write
testing compiled C program (duration=52.353419776s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program crashed: WARNING: lock held when returning to user space in nsim_pp_hold_write
testing compiled C program (duration=52.353419776s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program crashed: WARNING: lock held when returning to user space in nsim_pp_hold_write
testing compiled C program (duration=52.353419776s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program crashed: WARNING: lock held when returning to user space in nsim_pp_hold_write
testing compiled C program (duration=52.353419776s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program crashed: WARNING: lock held when returning to user space in nsim_pp_hold_write
testing compiled C program (duration=52.353419776s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program crashed: WARNING: lock held when returning to user space in nsim_pp_hold_write
testing compiled C program (duration=52.353419776s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program crashed: WARNING: lock held when returning to user space in nsim_pp_hold_write
testing compiled C program (duration=52.353419776s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program crashed: WARNING: lock held when returning to user space in nsim_pp_hold_write
testing compiled C program (duration=52.353419776s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_pp_hold_fops_netdev-write$auto_nsim_pp_hold_fops_netdev
program crashed: WARNING: lock held when returning to user space in nsim_pp_hold_write
reproducing took 31m51.531961751s
repro crashed as (corrupted=false):
================================================
WARNING: lock held when returning to user space!
6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 Not tainted
------------------------------------------------
syz-executor197/5860 is leaving the kernel with locks still held!
1 lock held by syz-executor197/5860:
 #0: ffffffff8fabfb08 (rtnl_mutex){+.+.}-{4:4}, at: nsim_pp_hold_write+0x105/0x4d0 drivers/net/netdevsim/netdev.c:623

final repro crashed as (corrupted=false):
================================================
WARNING: lock held when returning to user space!
6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 Not tainted
------------------------------------------------
syz-executor197/5860 is leaving the kernel with locks still held!
1 lock held by syz-executor197/5860:
 #0: ffffffff8fabfb08 (rtnl_mutex){+.+.}-{4:4}, at: nsim_pp_hold_write+0x105/0x4d0 drivers/net/netdevsim/netdev.c:623