Extracting prog: 22m59.778524609s Minimizing prog: 1h53m17.011262855s Simplifying prog options: 16m58.530163937s Extracting C: 6m19.286213332s Simplifying C: 0s extracting reproducer from 39 programs testing a last program of every proc single: executing 9 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): request_key-prctl$PR_SCHED_CORE-prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-mprotect-socket$inet6_udp-ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL-ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL-fsopen-prctl$PR_SET_MM_MAP-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_SAVE-bpf$BPF_GET_MAP_INFO-io_uring_setup-bpf$PROG_LOAD-mkdirat-mount-openat-write-openat-close-mmap-syz_emit_ethernet-madvise detailed listing: executing program 0: request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) fsopen(&(0x7f00000001c0)='bdev\x00', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) sendmsg$IPSET_CMD_SAVE(r2, 0x0, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) close(r4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmmsg$alg-recvmmsg$unix detailed listing: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b1375", 0x7e}], 0x3}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x12141, 0x0) program crashed: lost connection to test machine program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic-syz_genetlink_get_family_id$devlink-write$UHID_INPUT-sendmsg$DEVLINK_CMD_RATE_NEW-syz_open_dev$video-ioctl$VIDIOC_ENUM_FREQ_BANDS detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) write$UHID_INPUT(r0, &(0x7f0000000340)={0x8, {"3309d24d228c955ee85331fb02597b4431f533146389e317a8503124bb52124d4844488e9c3577675aed78c252fc43ff594be564240fff22cbf352d0042bedfb02ba773b3acd6613aa98c96b7d293261751641b1467190e748e5925e92550184a072f60dbac36572c9e3f18c893945b6e24cdeda6d798059a299b92c68d683d91e56dfeedb073bf1f5d5deb8cf83c0287e9482d8cbae0ed49efd0aa69df7d98710b11746339612496e0341e4c1eaab063ff65c41052f55ed484e457b0e9779c4a4a51dc0e3c1e267f11cd8bc3663e21c1828b2ae57adfbf7a59100fd6dd3958090999238129e1f5d50167e9392708a7c742f14a429041ed3b5d3e24a9d3e22a09a7d0dda34c7110fa95a4381dbef7a3fa7a47a74737986fb97585cccc127644c2f511e9b647169efed177227b7b289671494fcd6df554ab002118ba28e028300b5e4c96ffbce7a8ea415576a4633709f1ba17aa502524d29f211f49ead70903ad2215d3269931b60c1cd6cefb94bc3c00dbc055256abec8f231a7b6dcaad3b5bee4749fdf128ac5135caaf71e2688ef3084c8930dbf8c099a988be8de0fea1ded27a12464687062d833497ea0704c0140f9e076ddf596761e34e769d7b4d3b42229e1011352bcad3b5e8058325c46f975434bdfbc85d486edf0d6fdc977614fc519d4e174fad8b925bfedb386e05f880791dafaa0b506872641ef87048b8c1bd6aef02e33c58a59f82a47d520f4bba5ba59a71342764ad074c6c46e329c5d8a702a7e4fe75b67f97aaf6a0b5e53b13a9eb7de618eb1989f242486b8aebdd11392aa82bef43a4e41a3c8c068962c2ce857d9579fccc99970f35ef4b08556920a3a9edef9d3298b1357c230df6f828b5c1300636c1bb4daac3b0f2f22742cb980b04554ba188ce12467c9cdcce6a0ead94a7d4ab6e0cf14b7745879ab49ccf6491ae7f88c4fd410c6a3272f33cb6125f17f5132b58b7d76e4e1215922a400889618706acc23144cb3145d4dbffd6c1041d8f00787d8ab5856c6c6e156e59a89e8ded34229902044f3e43bec63e60589f9291d4761ac65e82299065a5782f478d09329163e2411e9ad775a502ba5af4be01b3c73008139146edeec81f8ce9880f5f00c25b55f509cb9f2325287c470ce1f0cfb5563bac71ad2428aaf40e897bbca3437db6f8b60a76d909c1dbfdfb765a86683f4c55f4617899ed1fd7a3c8846269028b6faec3dea94169787127f7d0a9c84823616216b893488dd9f0ce1e5c75e4134ea19a33243d98db231aaadacc32ad9f002b2af7d37e1558083e6bd0ed0f63797143a73d867fef8d9df1e0e70d6f7f3229248a164b6bfe7c2610a1ad464d3238534595ecd337301c7f054c7503c8961d8c58036d1ed4ef4cc042a5ad121df364d9fe6aa63607ba371ce0f7d7e89ca6da7765fd91c29df8c6024ba63c0136710da31abda1cc8c055d2750ac7df05b9ca739ff423ba9807d26ec437e089637e09fc3d96633dd65fbd6f44b4551591f6493bebe24b23e77abac9302c0f35b09338e1ecca5e93703092304e3621382fb35c0f328c2491f7ddbf7013124b5bc33c4766a2289ad9a01fa3d6b72e6ee83df080374bf961371e5f6adaf5b9beccf77ab6f2c22d71896503e3f2e8fd50931066062f9678db3bc167fe146ad0587ec055d55cbf06fcfdcedbba25e92a02d9e738cf8f36d0f40d496b4dfd8a5474a08b0196d21c75722c881e822891d08ca62077d396f1400e29696e8230fa647170e0fcdeb682ee1d18064518b298facb45aa7c5c710470a5bf1ae4d42d1d07dc73b794b25623b633f9d2dd06bb93e01b99c182c8538fcd294101b9e1bf05291b40651e3a254fc308707dac55201eb1a3f0cb4c6e11841631cb94ad26aeb63a4edefe60c99b657c028027cba6972d2621892ee9a07043992046b60946fc97c12aaa18b2ec724d569e1e4f7f380f9bb8c1973bee78ca673361bf388f0c35df75b6efee2e0cb5fc9b49fde10091bd62ca2a8cdbf4760c568cf48c6ba79e9333d1851c5d449de18f21e982a951f41bd43a97be2736e9ca220e5d04775dbdb79025a259008751767a131ede916002d50009c17f4d0f83dcf84dd10b6110fc112573b653f461bccda094724202f720c3dba81134abcafce179325b45095bd59c9945f9ac3bd20360ab78491dbe13bea34b2b88a37bbac744aed52aeaa9caaf67b5beb4706ce517fcacee8a5cc40381e213cc8947d9d6f6ffa57694f5cf6268695a6992c5c00199fdf82e79a237481ee4be33a8d8a95c184feb4e883c6fb42bcb4190f634f03fb3e21c1da5f9071bebcc075fa02063d3368c767111261621ddfc477c32350545daa650da61480ee5ee50fa248b58d62769e89837cf2178abd9c1e971ffeb1004e662d6b52074cd0de7dcc95519b4cfb953d06da3b3d15058d2173e2f865afa6e9d8bf2bce80d242b3464d5ff0dd05980bead6feb5a2d3e0c3af89ebec6c8f9f40255fa69d7360f4503d51e8616c6ca0a8143368bd043b9f10b8ba43426d19a7127bbf866201a10c381beb6ac2fe0d50b514a31af8592890c0148f7cfdc03b5028cd3ba2101a3092bf341384254d4f8407c093cbb07e3cb56347c46953d6a44a88d79edc29e9b4ad814f15425bf3d321c829e7eaddd94971b653bec8ab7606d5bb24bf61f486b19666fcfbb6d2ab7b7b88343af456ea7a2f8dae0e512a0153e9df8764f8ee19ed27b41ecbdeb7d0d8173575ecc8295f5f52594948b490389b9afc2cf64aab7e6ed1f3306e80b0b1ec4c07529fc070be68e03fa7fade3ff2267bc3ba1270bb1f35088687dcfffb6c239632904cf547c108c305103ea9cdeec0e5636bb38b9e93b3ddfb9adc2b94b92cd700068e2fef642edade847b6a392641b67fc1065201e8995ae0cdfc63be24e18743b49ca557a9777ce7b11d468f530683671db6d408e26f28bd11142c93f190348df75219b2c62b3f54d28c4eea65946a50e2c9dbf0d1aeaec1a101467c9e9253199f6ac490797f71074be475dc1eb1f458d3e16c7cb9bb845beb057653e231b24a061111109f225b8ce157e6fdd879cdfb53022299232bb24daeebd6e6a89ec359dadfcd474b0f14ae4ac5640b13d1f1b715f8d4634dd3e040a42d83411acd5d1efbe1dfcd7179b18ea8497de300b5e88a2914791f012f269c001df5e1452f5ae38a2124831d8152e84bffa0234cc08141979df20ac7b066a814b3875e5b513684edee2f7db51d70791931fb2a45ba7a3d2d71e0363b340d57aa1acc058622d7f3859c428f17ed277b53b0f5c96ecbca6003e06a2529eb2bc334110e2495ec126d3e1c6b77dbc233d846fd00992391d059ed9ef08d13bb7c7da5bbedbb56063d7e844b87df2b70be667ce443b49645a4ced826cdc53286b88cf3b6a773ea6e6708fbedd9c5a4497b99ea6703378f32598086a8222c4031e290a0667c344c5c818d8e1eb3a1d6d88ffa12173fad8af3279af7b608b7fbf89164c48c2057de35991b9effd5adacbe8a34ff6dd8fa47f08981de5dd5657f07dfad895e1c295f7b3e1cc51e6b649930bcd5ab5248f6352f0ee14782103d70453670b329b671fb63f6f72d60c652691a09b0f1c943bffaf64e637a3799aeec8711a0e89ae1ad1792c2cdddede29e9f1c74b452895abe2c02e59105f65762c42074ae5853ab61ec04fd5bacf9272b2dedf13c02dedffde47a4f7d21c9bafe2ab9beceb47291bac5fb91d6e71c8d54bced9900f80ff514fc0c85fe85d64c6f7986518c62dfa368951d89596a7d7d763dae6d69aa3946fa7a6dd684bed0f5bb35cd068dae17fbf4c7c3c051d39f5ae8578086b41cef50e1c9b7ad63566a0e844f849a30fb5894dd3fde0cc605bb4682376c00dd4939693f09d38d6cfc0a7c8f693119753a76c0ba2bfa3a8f93f06d7488db94c104705cf5a32c76911ee7b88e8f4c7e6bc08238f094f888e9c115c95b4d85f381361735ca43ed1a0bef02c414264a5aaedd750a5e8d571549445a050b279e15baea667de262ff1dece1570ce3cec5b974d2476aa0ee86e56fb22a7975e41708bfadf977f8226e4595f99f03efdc939506ef893c3b4f1aff3d6b5047701c9a32d8ffb09dd7744039be48c853c988c944441ac4157b36d4ff0a9ac866635da002a53c57a81133607e8c3ad5a2a7626872a27bb95edbe68cdb14a12948d17d69a54d8aafb01e85981dadefc32d6da4d3fd2c6f0aaaa6e7063631afdd493af50eeb16153f0c2a22e4ace5edd3817808eff9f393f0ad54ae70db895ad5d020d8e4cb04dc3dad4fed857ac037b51caea66a6b352881a4a95224b905b0d1898e671e469082ff2fc3e3bb937f9fc9ccc454dee9b70e566f14ffdc08b90bc5b071d2b17e5a1bb56f524e16d8f3a61abf8413074b9e190790dd5da01be20a4cbca6148b9b65c61a3d9fcffd682df2c267eabb1b88bce9646b725b186673f6bff26d09e54387cf324936319d7e7a7405fe34f72e3b1b72e15db46a370d16ac2a67f2e6fd7d96cd7483417d1c650500f22a2b83d14f5af9e8b9951630bb2a866100d09453a474805ab642563609fcde5b28728a3c375ac01c69761a176e05ca7d17e95b3ed3f53b641ea7b36d05bb08fb4dc3c0469a4ef6b9a7a148ab3e17626a49bf277658a42dd9eb27c184f59a5a509105eddf72791bd8327513add64d60919e732f2d1e882478636d600088106fbf55d912024f42e916dc6fa1f082993ae64c033054bb32f1789579e78d4904c3875419a2eb27b8d1dc709a4c88a56ce3148e475fa7c8500e75fc3309d43239cac2db4bf292f65be7ff0bd29857e62942bb1eb46fae9cbed41e2eae6076245675bbd419b7639421fcda90d68d47e6c2d47a1126d20ce92682f0c3bfb38723ef6db80e35b89f7150de381471c8638c182f7a680f428c91fd5471e0dc045bc6b4ca8a50dc632a5994fdbc95055d5574754c25cc450dbd14370a5df4deb653d5b7cd1e46a0b2a082eeba50e0557bb3779f846f5eaa64c2ecd6a59ecbda02c63878ec0511ab279a18d35d8bb5d2b39d9996c4a2220f6e932cfd29ccf7b70d305bc6118dff42472c598e92cf1f4b74963237eeb9f94ae7fd186581f641ff534ed56f6cbc5f54f22a484f239ecc43e9c316a3da93a82dfe6ef004f67e2c5d20c748dd2200c235b2cbdcf0d2b31e4f58c3dae30b5450436a3823785b16c2ef8e2bd686f30f7f72935966ab1443322e8b682f2f1b252ca6ca36beafd76b2cdfed663b8cdd94fe242d1eab022d12cd2160ce6a2d3c2a5f22c05304386b1bd8e36e30907edb9764232acb487b62c0e43cf56acfbd74bcf759c2a7b129c747f3c7a2dbd0e87b4b59c37448d9861867115e15c46981e234112c9e303750623d925e72e1b87892ae9ae27cb41de6be5f33e10bbdf1bedaedd5a5ffcc0e982e14ce0b09bd9977f2ed14ad4ba6eded19934211ce7c35264328765a801b2294f2b176d3b879523a333b7cba91824c0f1e299889ab926538dab57b87ca4bce75290fc68dc8df5d70f36b99960c70e80cdc28f43f0bf615a96ec073f162d053016935207f4fe1d44aa2602d6345ba7a0c8f388564df10c4116d3f13b0c74f8c5823aabd1abbd46df3b7703ecf92f1ef8f8c4706796793d31fa06bdb5eccf66fb9772a45d7f6930735f0177551b4b7afeb3876ed703a555ad339f94cd4d2c7891c99906e44b219c0447848d5afbd56c9ae03581d810e899ea4638d712bd05d6f5b76dc27c4e639b3d73af06ac9cc0f80158877af5ac1fef9e8f3fbbedd6e0db172579f3b373dd272bb", 0x1000}}, 0x1006) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x2000000, 0x2}) program crashed: INFO: task hung in remove_one single: successfully extracted reproducer found reproducer with 10 syscalls minimizing guilty program testing program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic-syz_genetlink_get_family_id$devlink-write$UHID_INPUT-sendmsg$DEVLINK_CMD_RATE_NEW-syz_open_dev$video detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) write$UHID_INPUT(r0, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) program crashed: INFO: task hung in remove_one testing program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic-syz_genetlink_get_family_id$devlink-write$UHID_INPUT-sendmsg$DEVLINK_CMD_RATE_NEW detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) write$UHID_INPUT(r0, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}}, 0x0) program crashed: INFO: task hung in remove_one testing program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic-syz_genetlink_get_family_id$devlink-write$UHID_INPUT detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) write$UHID_INPUT(r0, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) program crashed: INFO: task hung in remove_one testing program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic-syz_genetlink_get_family_id$devlink detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) program crashed: INFO: task hung in nsim_bus_dev_max_vfs_write testing program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in remove_one testing program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-socket$nl_generic detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-write-socket$nl_generic detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat-write-socket$nl_generic detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying program did not crash testing program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-write-socket$nl_generic detailed listing: executing program 0: mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in remove_one testing program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180), 0x0) socket$nl_generic(0x10, 0x3, 0x10) program did not crash extracting C reproducer testing compiled C program (duration=6m8.518163551s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=6m8.518163551s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in remove_one extracting C reproducer testing compiled C program (duration=6m8.518163551s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=6m8.518163551s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m8.518163551s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in nsim_bus_dev_max_vfs_write validation run: crashed=true testing program (duration=6m8.518163551s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in remove_one validation run: crashed=true testing program (duration=6m8.518163551s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$nl_generic detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in remove_one validation run: crashed=true reproducing took 2h54m24.138203522s repro crashed as (corrupted=false): INFO: task syz-executor:9360 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:22344 pid:9360 ppid:1 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_timeout+0xc1/0x2d0 kernel/time/timer.c:2144 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common kernel/sched/completion.c:127 [inline] wait_for_completion+0x2c6/0x5a0 kernel/sched/completion.c:148 __debugfs_file_removed fs/debugfs/inode.c:748 [inline] remove_one+0xe8/0x130 fs/debugfs/inode.c:754 simple_recursive_removal+0x613/0x7e0 fs/libfs.c:633 debugfs_remove+0x56/0x70 fs/debugfs/inode.c:777 nsim_dev_debugfs_exit drivers/net/netdevsim/dev.c:367 [inline] nsim_drv_remove+0xc0/0x170 drivers/net/netdevsim/dev.c:1680 device_remove drivers/base/dd.c:626 [inline] __device_release_driver drivers/base/dd.c:1351 [inline] device_release_driver_internal+0x408/0x6f0 drivers/base/dd.c:1374 bus_remove_device+0x43b/0x520 drivers/base/bus.c:624 device_del+0x51f/0x910 drivers/base/core.c:3889 device_unregister+0x20/0xc0 drivers/base/core.c:3930 nsim_bus_dev_del drivers/net/netdevsim/bus.c:310 [inline] del_device_store+0x2b6/0x370 drivers/net/netdevsim/bus.c:219 kernfs_fop_write_iter+0x3a4/0x520 fs/kernfs/file.c:352 call_write_iter include/linux/fs.h:2018 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x474/0x9a0 fs/read_write.c:584 ksys_write+0x151/0x260 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7fe10f95e84e RSP: 002b:00007fff8a1719e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 000055556f326500 RCX: 00007fe10f95e84e RDX: 0000000000000001 RSI: 00007fff8a171a70 RDI: 0000000000000005 RBP: 00007fe10fa3588f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fff8a171a70 R14: 00007fe110754620 R15: 0000000000000003 INFO: task syz.1.3288:9445 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.3288 state:D stack:27560 pid:9445 ppid:8314 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6834 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0x673/0xc80 kernel/locking/mutex.c:747 nsim_bus_dev_max_vfs_write+0x214/0x380 drivers/net/netdevsim/dev.c:275 full_proxy_write+0x110/0x1c0 fs/debugfs/file.c:244 vfs_write+0x299/0x9a0 fs/read_write.c:582 ksys_write+0x151/0x260 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f82b419e019 RSP: 002b:00007ffd664bb418 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f82b4425fa0 RCX: 00007f82b419e019 RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 RBP: 00007f82b423500c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f82b4425fac R14: 00007f82b4425fa0 R15: 00007f82b4425fa0 INFO: task syz.3.3289:9446 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.3289 state:D stack:27560 pid:9446 ppid:5904 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6834 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0x673/0xc80 kernel/locking/mutex.c:747 nsim_bus_dev_max_vfs_write+0x214/0x380 drivers/net/netdevsim/dev.c:275 full_proxy_write+0x110/0x1c0 fs/debugfs/file.c:244 vfs_write+0x299/0x9a0 fs/read_write.c:582 ksys_write+0x151/0x260 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f736239e019 RSP: 002b:00007ffc5847d798 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f7362625fa0 RCX: 00007f736239e019 RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 RBP: 00007f736243500c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f7362625fac R14: 00007f7362625fa0 R15: 00007f7362625fa0 INFO: task syz.2.3290:9447 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.3290 state:D stack:27560 pid:9447 ppid:8827 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6834 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0x673/0xc80 kernel/locking/mutex.c:747 nsim_bus_dev_max_vfs_write+0x214/0x380 drivers/net/netdevsim/dev.c:275 full_proxy_write+0x110/0x1c0 fs/debugfs/file.c:244 vfs_write+0x299/0x9a0 fs/read_write.c:582 ksys_write+0x151/0x260 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f2580b9e019 RSP: 002b:00007ffcf3d9f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f2580e25fa0 RCX: 00007f2580b9e019 RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 RBP: 00007f2580c3500c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f2580e25fac R14: 00007f2580e25fa0 R15: 00007f2580e25fa0 Showing all locks held in the system: 1 lock held by khungtaskd/29: #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:334 [inline] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:786 [inline] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 kernel/locking/lockdep.c:6633 3 locks held by kworker/u4:7/2935: 1 lock held by syslogd/5120: #0: ffff8880b8e3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:559 2 locks held by getty/5532: #0: ffff88814c6020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 drivers/tty/n_tty.c:2217 7 locks held by syz-executor/9360: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff888023d92c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 #4: ffff88814666f130 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1094 [inline] #4: ffff88814666f130 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1174 [inline] #4: ffff88814666f130 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 drivers/base/dd.c:1371 #5: ffff88814666b250 (&devlink->lock_key#4){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x170 drivers/net/netdevsim/dev.c:1676 #6: ffff88805d533400 (&sb->s_type->i_mutex_key#3/2){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:839 [inline] #6: ffff88805d533400 (&sb->s_type->i_mutex_key#3/2){+.+.}-{3:3}, at: simple_recursive_removal+0x319/0x7e0 fs/libfs.c:625 2 locks held by syz.1.3288/9445: #0: ffff888142274418 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff88814666b250 (&devlink->lock_key#4){+.+.}-{3:3}, at: nsim_bus_dev_max_vfs_write+0x214/0x380 drivers/net/netdevsim/dev.c:275 2 locks held by syz.3.3289/9446: #0: ffff888142274418 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff88814666b250 (&devlink->lock_key#4){+.+.}-{3:3}, at: nsim_bus_dev_max_vfs_write+0x214/0x380 drivers/net/netdevsim/dev.c:275 2 locks held by syz.2.3290/9447: #0: ffff888142274418 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff88814666b250 (&devlink->lock_key#4){+.+.}-{3:3}, at: nsim_bus_dev_max_vfs_write+0x214/0x380 drivers/net/netdevsim/dev.c:275 4 locks held by syz-executor/9468: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff888141e43488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9470: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff888144edec88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9473: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff8880302a9088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9496: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff88805cc6b488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9513: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff88802c9be888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9517: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff88805f5a1888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9518: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff8880302c6088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9545: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff88805d204088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9564: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff888056f10888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9567: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff888056f02888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9569: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff88805becf888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0x18c/0x250 lib/dump_stack.c:106 nmi_cpu_backtrace+0x3a6/0x3e0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x2f0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline] watchdog+0xf59/0xfa0 kernel/hung_task.c:379 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: bat_events batadv_nc_worker RIP: 0010:mark_lock+0xdd/0x320 kernel/locking/lockdep.c:4656 Code: 2f 97 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 06 02 00 00 83 3d 33 e0 c5 15 00 74 36 45 31 ff 49 83 c7 60 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 04 a8 76 00 b8 01 00 00 00 45 85 RSP: 0018:ffffc90000117940 EFLAGS: 00000802 RAX: 1ffffffff2176352 RBX: ffff88801be55a00 RCX: ffffffff81694414 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911eb5e8 RBP: 0000000000000006 R08: ffffffff911eb5ef R09: 1ffffffff223d6bd R10: dffffc0000000000 R11: fffffbfff223d6be R12: 0000000000000040 R13: dffffc0000000000 R14: ffff88801be564e0 R15: ffffffff90bb1a90 FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000564c499a0a38 CR3: 000000000cf32000 CR4: 00000000003506e0 Call Trace: mark_held_locks kernel/locking/lockdep.c:4274 [inline] __trace_hardirqs_on_caller kernel/locking/lockdep.c:4300 [inline] lockdep_hardirqs_on_prepare+0x384/0x7d0 kernel/locking/lockdep.c:4359 trace_hardirqs_on+0x28/0x40 kernel/trace/trace_preemptirq.c:61 __local_bh_enable_ip+0x13a/0x1c0 kernel/softirq.c:411 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_nc_purge_paths+0x300/0x3a0 net/batman-adv/network-coding.c:471 batadv_nc_worker+0x363/0x600 net/batman-adv/network-coding.c:722 process_one_work kernel/workqueue.c:2653 [inline] process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2730 worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2811 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 final repro crashed as (corrupted=false): INFO: task syz-executor:9360 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:22344 pid:9360 ppid:1 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_timeout+0xc1/0x2d0 kernel/time/timer.c:2144 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common kernel/sched/completion.c:127 [inline] wait_for_completion+0x2c6/0x5a0 kernel/sched/completion.c:148 __debugfs_file_removed fs/debugfs/inode.c:748 [inline] remove_one+0xe8/0x130 fs/debugfs/inode.c:754 simple_recursive_removal+0x613/0x7e0 fs/libfs.c:633 debugfs_remove+0x56/0x70 fs/debugfs/inode.c:777 nsim_dev_debugfs_exit drivers/net/netdevsim/dev.c:367 [inline] nsim_drv_remove+0xc0/0x170 drivers/net/netdevsim/dev.c:1680 device_remove drivers/base/dd.c:626 [inline] __device_release_driver drivers/base/dd.c:1351 [inline] device_release_driver_internal+0x408/0x6f0 drivers/base/dd.c:1374 bus_remove_device+0x43b/0x520 drivers/base/bus.c:624 device_del+0x51f/0x910 drivers/base/core.c:3889 device_unregister+0x20/0xc0 drivers/base/core.c:3930 nsim_bus_dev_del drivers/net/netdevsim/bus.c:310 [inline] del_device_store+0x2b6/0x370 drivers/net/netdevsim/bus.c:219 kernfs_fop_write_iter+0x3a4/0x520 fs/kernfs/file.c:352 call_write_iter include/linux/fs.h:2018 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x474/0x9a0 fs/read_write.c:584 ksys_write+0x151/0x260 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7fe10f95e84e RSP: 002b:00007fff8a1719e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 000055556f326500 RCX: 00007fe10f95e84e RDX: 0000000000000001 RSI: 00007fff8a171a70 RDI: 0000000000000005 RBP: 00007fe10fa3588f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fff8a171a70 R14: 00007fe110754620 R15: 0000000000000003 INFO: task syz.1.3288:9445 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.3288 state:D stack:27560 pid:9445 ppid:8314 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6834 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0x673/0xc80 kernel/locking/mutex.c:747 nsim_bus_dev_max_vfs_write+0x214/0x380 drivers/net/netdevsim/dev.c:275 full_proxy_write+0x110/0x1c0 fs/debugfs/file.c:244 vfs_write+0x299/0x9a0 fs/read_write.c:582 ksys_write+0x151/0x260 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f82b419e019 RSP: 002b:00007ffd664bb418 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f82b4425fa0 RCX: 00007f82b419e019 RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 RBP: 00007f82b423500c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f82b4425fac R14: 00007f82b4425fa0 R15: 00007f82b4425fa0 INFO: task syz.3.3289:9446 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.3289 state:D stack:27560 pid:9446 ppid:5904 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6834 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0x673/0xc80 kernel/locking/mutex.c:747 nsim_bus_dev_max_vfs_write+0x214/0x380 drivers/net/netdevsim/dev.c:275 full_proxy_write+0x110/0x1c0 fs/debugfs/file.c:244 vfs_write+0x299/0x9a0 fs/read_write.c:582 ksys_write+0x151/0x260 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f736239e019 RSP: 002b:00007ffc5847d798 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f7362625fa0 RCX: 00007f736239e019 RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 RBP: 00007f736243500c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f7362625fac R14: 00007f7362625fa0 R15: 00007f7362625fa0 INFO: task syz.2.3290:9447 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.3290 state:D stack:27560 pid:9447 ppid:8827 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6834 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0x673/0xc80 kernel/locking/mutex.c:747 nsim_bus_dev_max_vfs_write+0x214/0x380 drivers/net/netdevsim/dev.c:275 full_proxy_write+0x110/0x1c0 fs/debugfs/file.c:244 vfs_write+0x299/0x9a0 fs/read_write.c:582 ksys_write+0x151/0x260 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f2580b9e019 RSP: 002b:00007ffcf3d9f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f2580e25fa0 RCX: 00007f2580b9e019 RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 RBP: 00007f2580c3500c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f2580e25fac R14: 00007f2580e25fa0 R15: 00007f2580e25fa0 Showing all locks held in the system: 1 lock held by khungtaskd/29: #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:334 [inline] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:786 [inline] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 kernel/locking/lockdep.c:6633 3 locks held by kworker/u4:7/2935: 1 lock held by syslogd/5120: #0: ffff8880b8e3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:559 2 locks held by getty/5532: #0: ffff88814c6020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 drivers/tty/n_tty.c:2217 7 locks held by syz-executor/9360: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff888023d92c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 #4: ffff88814666f130 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1094 [inline] #4: ffff88814666f130 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1174 [inline] #4: ffff88814666f130 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 drivers/base/dd.c:1371 #5: ffff88814666b250 (&devlink->lock_key#4){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x170 drivers/net/netdevsim/dev.c:1676 #6: ffff88805d533400 (&sb->s_type->i_mutex_key#3/2){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:839 [inline] #6: ffff88805d533400 (&sb->s_type->i_mutex_key#3/2){+.+.}-{3:3}, at: simple_recursive_removal+0x319/0x7e0 fs/libfs.c:625 2 locks held by syz.1.3288/9445: #0: ffff888142274418 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff88814666b250 (&devlink->lock_key#4){+.+.}-{3:3}, at: nsim_bus_dev_max_vfs_write+0x214/0x380 drivers/net/netdevsim/dev.c:275 2 locks held by syz.3.3289/9446: #0: ffff888142274418 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff88814666b250 (&devlink->lock_key#4){+.+.}-{3:3}, at: nsim_bus_dev_max_vfs_write+0x214/0x380 drivers/net/netdevsim/dev.c:275 2 locks held by syz.2.3290/9447: #0: ffff888142274418 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff88814666b250 (&devlink->lock_key#4){+.+.}-{3:3}, at: nsim_bus_dev_max_vfs_write+0x214/0x380 drivers/net/netdevsim/dev.c:275 4 locks held by syz-executor/9468: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff888141e43488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9470: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff888144edec88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9473: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff8880302a9088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9496: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff88805cc6b488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9513: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff88802c9be888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9517: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff88805f5a1888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9518: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff8880302c6088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9545: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff88805d204088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9564: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff888056f10888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9567: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff888056f02888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 4 locks held by syz-executor/9569: #0: ffff88802d1b8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #1: ffff88805becf888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 fs/kernfs/file.c:343 #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888024bbb4e0 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 fs/kernfs/file.c:344 #3: ffffffff8dcb73a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 drivers/net/netdevsim/bus.c:209 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0x18c/0x250 lib/dump_stack.c:106 nmi_cpu_backtrace+0x3a6/0x3e0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x2f0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline] watchdog+0xf59/0xfa0 kernel/hung_task.c:379 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: bat_events batadv_nc_worker RIP: 0010:mark_lock+0xdd/0x320 kernel/locking/lockdep.c:4656 Code: 2f 97 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 06 02 00 00 83 3d 33 e0 c5 15 00 74 36 45 31 ff 49 83 c7 60 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 04 a8 76 00 b8 01 00 00 00 45 85 RSP: 0018:ffffc90000117940 EFLAGS: 00000802 RAX: 1ffffffff2176352 RBX: ffff88801be55a00 RCX: ffffffff81694414 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911eb5e8 RBP: 0000000000000006 R08: ffffffff911eb5ef R09: 1ffffffff223d6bd R10: dffffc0000000000 R11: fffffbfff223d6be R12: 0000000000000040 R13: dffffc0000000000 R14: ffff88801be564e0 R15: ffffffff90bb1a90 FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000564c499a0a38 CR3: 000000000cf32000 CR4: 00000000003506e0 Call Trace: mark_held_locks kernel/locking/lockdep.c:4274 [inline] __trace_hardirqs_on_caller kernel/locking/lockdep.c:4300 [inline] lockdep_hardirqs_on_prepare+0x384/0x7d0 kernel/locking/lockdep.c:4359 trace_hardirqs_on+0x28/0x40 kernel/trace/trace_preemptirq.c:61 __local_bh_enable_ip+0x13a/0x1c0 kernel/softirq.c:411 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_nc_purge_paths+0x300/0x3a0 net/batman-adv/network-coding.c:471 batadv_nc_worker+0x363/0x600 net/batman-adv/network-coding.c:722 process_one_work kernel/workqueue.c:2653 [inline] process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2730 worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2811 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293