Extracting prog: 19m13.714629647s
Minimizing prog: 1h40m28.116012011s
Simplifying prog options: 8m55.667411298s
Extracting C: 6m5.701510252s
Simplifying C: 0s


extracting reproducer from 84 programs
testing a last program of every proc
single: executing 34 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rdma_cm-openat$ttyS3-ioctl$TCSETSW2-prctl$PR_SET_MM_MAP-sendmsg$NFT_BATCH-io_uring_setup-bpf$MAP_CREATE-io_uring_enter
detailed listing:
executing program 0:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
ioctl$TCSETSW2(r0, 0x5453, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf0000000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0xf00)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-getpgrp-prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-getpid-sched_setscheduler-mmap-syz_clone-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-syz_open_dev$sndpcmp-openat$ttyprintk-sendmsg$AUDIT_SET-sendmsg$IPSET_CMD_CREATE
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sndpcmp(0x0, 0x0, 0x62302)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x10f000, 0x0)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, 0x3e9, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x3, 0x1, r2, 0x800000, 0x2, 0x0, 0x55, 0x0, 0x9, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000890}, 0x80)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-prlimit64-sched_setscheduler-getpid-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r5 = dup2(r4, r4)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: INFO: task hung in corrupted
single: successfully extracted reproducer
found reproducer with 16 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-prlimit64-sched_setscheduler-getpid-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-mknod$loop-creat-dup2
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
dup2(r4, r4)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-prlimit64-sched_setscheduler-getpid-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-mknod$loop-creat-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-prlimit64-sched_setscheduler-getpid-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-mknod$loop-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-prlimit64-sched_setscheduler-getpid-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r5 = dup2(r4, r4)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-prlimit64-sched_setscheduler-getpid-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: INFO: task hung in corrupted
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-prlimit64-sched_setscheduler-getpid-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: INFO: task hung in relay_open
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-prlimit64-sched_setscheduler-getpid-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: INFO: task hung in relay_open
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-prlimit64-sched_setscheduler-getpid-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: INFO: task hung in relay_open
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-prlimit64-sched_setscheduler-getpid-sched_setscheduler-socketpair$unix-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: INFO: task hung in corrupted
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-prlimit64-sched_setscheduler-getpid-sched_setscheduler-socketpair$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = dup2(r1, r1)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-prlimit64-sched_setscheduler-getpid-sched_setscheduler-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = dup2(r1, r1)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: SYZFAIL: failed to recv rpc
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-prlimit64-sched_setscheduler-getpid-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: INFO: task hung in corrupted
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-prlimit64-sched_setscheduler-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: INFO: task hung in relay_open
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-prlimit64-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: SYZFAIL: failed to recv rpc
suppressed program crash: SYZFAIL: failed to recv rpc
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-sched_setscheduler-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: INFO: task hung in relay_open
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: SYZFAIL: failed to recv rpc
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: SYZFAIL: failed to recv rpc
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: SYZFAIL: failed to recv rpc
suppressed program crash: SYZFAIL: failed to recv rpc
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(0x0, 0x6001, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = creat(0x0, 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
validation run: crashed=false
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: SYZFAIL: failed to recv rpc
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: INFO: task hung in relay_open
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-mknod$loop-creat-dup2-ioctl$BLKTRACESETUP
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2e, 0x43f19, 0x3c49, 0x40000000, 0x10})

program crashed: INFO: task hung in relay_open
validation run: crashed=true
reproducing took 2h33m3.888670863s
repro crashed as (corrupted=false):
INFO: task syz.2.19:6056 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.19        state:D stack:25248 pid:6056  tgid:6055  ppid:5947   task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x14bc/0x5000 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 relay_open+0x3b8/0x920 kernel/relay.c:517
 blk_trace_setup_prepare+0x425/0x5a0 kernel/trace/blktrace.c:716
 blk_trace_setup+0x244/0x3d0 kernel/trace/blktrace.c:789
 blk_trace_ioctl+0x2f9/0x6e0 kernel/trace/blktrace.c:935
 blkdev_ioctl+0x4a2/0x710 block/ioctl.c:780
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fea2af8f749
RSP: 002b:00007fea2bf0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fea2b1e5fa0 RCX: 00007fea2af8f749
RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000003
RBP: 00007fea2b013f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fea2b1e6038 R14: 00007fea2b1e5fa0 R15: 00007ffde1a3bc48
 </TASK>
INFO: task syz.4.21:6058 blocked for more than 145 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.21        state:D stack:26184 pid:6058  tgid:6057  ppid:5957   task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x14bc/0x5000 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 relay_open+0x3b8/0x920 kernel/relay.c:517
 blk_trace_setup_prepare+0x425/0x5a0 kernel/trace/blktrace.c:716
 blk_trace_setup+0x244/0x3d0 kernel/trace/blktrace.c:789
 blk_trace_ioctl+0x2f9/0x6e0 kernel/trace/blktrace.c:935
 blkdev_ioctl+0x4a2/0x710 block/ioctl.c:780
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f046d78f749
RSP: 002b:00007f046e673038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f046d9e5fa0 RCX: 00007f046d78f749
RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000003
RBP: 00007f046d813f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f046d9e6038 R14: 00007f046d9e5fa0 R15: 00007fffac8419a8
 </TASK>
INFO: task syz.3.20:6060 blocked for more than 146 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.20        state:D stack:26776 pid:6060  tgid:6059  ppid:5954   task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x14bc/0x5000 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 relay_open+0x3b8/0x920 kernel/relay.c:517
 blk_trace_setup_prepare+0x425/0x5a0 kernel/trace/blktrace.c:716
 blk_trace_setup+0x244/0x3d0 kernel/trace/blktrace.c:789
 blk_trace_ioctl+0x2f9/0x6e0 kernel/trace/blktrace.c:935
 blkdev_ioctl+0x4a2/0x710 block/ioctl.c:780
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f92ec78f749
RSP: 002b:00007f92ed544038 EFLAGS: 00000246
 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f92ec9e5fa0 RCX: 00007f92ec78f749
RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000003
RBP: 00007f92ec813f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f92ec9e6038 R14: 00007f92ec9e5fa0 R15: 00007fffaeee7358
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/31:
 #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline]
 #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775
3 locks held by kworker/u8:7/1150:
 #0: ffff88814c8c7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0 kernel/workqueue.c:3236
 #1: ffffc90003ddfb80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0 kernel/workqueue.c:3237
 #2: ffffffff8f310348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #2: ffffffff8f310348 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 net/ipv6/addrconf.c:4194
2 locks held by klogd/5190:
3 locks held by udevd/5201:
2 locks held by dhcpcd/5495:
2 locks held by getty/5585:
 #0: ffff88814c2ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 drivers/tty/n_tty.c:2211
3 locks held by syz-execprog/5825:
 #0: 
ffff88807d8b9bc0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_trylock include/linux/mmap_lock.h:410 [inline]
ffff88807d8b9bc0 (&mm->mmap_lock){++++}-{4:4}, at: get_mmap_lock_carefully mm/mmap_lock.c:390 [inline]
ffff88807d8b9bc0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x32/0x300 mm/mmap_lock.c:450
 #1: ffff88807ec85280 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
 #1: ffff88807ec85280 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x8ff/0x1290 mm/filemap.c:3556
 #2: ffffffff8e04f820 (fs_reclaim){+.+.}-{0:0}, at: __perform_reclaim mm/page_alloc.c:4374 [inline]
 #2: ffffffff8e04f820 (fs_reclaim){+.+.}-{0:0}, at: __alloc_pages_direct_reclaim+0xb8/0x300 mm/page_alloc.c:4399
6 locks held by syz-execprog/5826:
1 lock held by syz-execprog/5827:
 #0: ffff88807ec85280 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
 #0: ffff88807ec85280 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x8ff/0x1290 mm/filemap.c:3556
2 locks held by syz-executor/5834:
3 locks held by syz.1.18/6054:
2 locks held by syz.2.19/6056:
 #0: ffff88814173d520 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
2 locks held by syz.4.21/6058:
 #0: ffff888140b91bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
2 locks held by syz.3.20/6060:
 #0: ffff888140b908e0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
2 locks held by syz.6.23/6210:
 #0: ffff888140b94210 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
2 locks held by syz.5.22/6211:
 #0: ffff888140b92f00
 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: 
ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
2 locks held by syz.9.26/6214:
 #0: ffff888140b97b40 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
2 locks held by syz.7.24/6216:
 #0: ffff888140b95520 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
2 locks held by syz.8.25/6218:
 #0: ffff888140b96830 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
2 locks held by syz.0.27/6323:
 #0: ffff88814173af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
1 lock held by syz.2.29/6335:
 #0: ffff88814173d520 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
1 lock held by syz.1.28/6340:
 #0: ffff88814173c210 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
1 lock held by syz.3.30/6342:
 #0: ffff888140b908e0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
1 lock held by syz.4.31/6344:
 #0: ffff888140b91bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
1 lock held by syz.6.32/6466:
 #0: ffff888140b94210 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
1 lock held by syz.9.34/6490:
 #0: ffff888140b97b40 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
1 lock held by syz.5.33/6494:
 #0: ffff888140b92f00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788

final repro crashed as (corrupted=false):
INFO: task syz.2.19:6056 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.19        state:D stack:25248 pid:6056  tgid:6055  ppid:5947   task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x14bc/0x5000 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 relay_open+0x3b8/0x920 kernel/relay.c:517
 blk_trace_setup_prepare+0x425/0x5a0 kernel/trace/blktrace.c:716
 blk_trace_setup+0x244/0x3d0 kernel/trace/blktrace.c:789
 blk_trace_ioctl+0x2f9/0x6e0 kernel/trace/blktrace.c:935
 blkdev_ioctl+0x4a2/0x710 block/ioctl.c:780
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fea2af8f749
RSP: 002b:00007fea2bf0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fea2b1e5fa0 RCX: 00007fea2af8f749
RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000003
RBP: 00007fea2b013f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fea2b1e6038 R14: 00007fea2b1e5fa0 R15: 00007ffde1a3bc48
 </TASK>
INFO: task syz.4.21:6058 blocked for more than 145 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.21        state:D stack:26184 pid:6058  tgid:6057  ppid:5957   task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x14bc/0x5000 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 relay_open+0x3b8/0x920 kernel/relay.c:517
 blk_trace_setup_prepare+0x425/0x5a0 kernel/trace/blktrace.c:716
 blk_trace_setup+0x244/0x3d0 kernel/trace/blktrace.c:789
 blk_trace_ioctl+0x2f9/0x6e0 kernel/trace/blktrace.c:935
 blkdev_ioctl+0x4a2/0x710 block/ioctl.c:780
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f046d78f749
RSP: 002b:00007f046e673038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f046d9e5fa0 RCX: 00007f046d78f749
RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000003
RBP: 00007f046d813f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f046d9e6038 R14: 00007f046d9e5fa0 R15: 00007fffac8419a8
 </TASK>
INFO: task syz.3.20:6060 blocked for more than 146 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.20        state:D stack:26776 pid:6060  tgid:6059  ppid:5954   task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x14bc/0x5000 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 relay_open+0x3b8/0x920 kernel/relay.c:517
 blk_trace_setup_prepare+0x425/0x5a0 kernel/trace/blktrace.c:716
 blk_trace_setup+0x244/0x3d0 kernel/trace/blktrace.c:789
 blk_trace_ioctl+0x2f9/0x6e0 kernel/trace/blktrace.c:935
 blkdev_ioctl+0x4a2/0x710 block/ioctl.c:780
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f92ec78f749
RSP: 002b:00007f92ed544038 EFLAGS: 00000246
 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f92ec9e5fa0 RCX: 00007f92ec78f749
RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000003
RBP: 00007f92ec813f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f92ec9e6038 R14: 00007f92ec9e5fa0 R15: 00007fffaeee7358
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/31:
 #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline]
 #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775
3 locks held by kworker/u8:7/1150:
 #0: ffff88814c8c7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0 kernel/workqueue.c:3236
 #1: ffffc90003ddfb80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0 kernel/workqueue.c:3237
 #2: ffffffff8f310348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #2: ffffffff8f310348 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 net/ipv6/addrconf.c:4194
2 locks held by klogd/5190:
3 locks held by udevd/5201:
2 locks held by dhcpcd/5495:
2 locks held by getty/5585:
 #0: ffff88814c2ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 drivers/tty/n_tty.c:2211
3 locks held by syz-execprog/5825:
 #0: 
ffff88807d8b9bc0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_trylock include/linux/mmap_lock.h:410 [inline]
ffff88807d8b9bc0 (&mm->mmap_lock){++++}-{4:4}, at: get_mmap_lock_carefully mm/mmap_lock.c:390 [inline]
ffff88807d8b9bc0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x32/0x300 mm/mmap_lock.c:450
 #1: ffff88807ec85280 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
 #1: ffff88807ec85280 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x8ff/0x1290 mm/filemap.c:3556
 #2: ffffffff8e04f820 (fs_reclaim){+.+.}-{0:0}, at: __perform_reclaim mm/page_alloc.c:4374 [inline]
 #2: ffffffff8e04f820 (fs_reclaim){+.+.}-{0:0}, at: __alloc_pages_direct_reclaim+0xb8/0x300 mm/page_alloc.c:4399
6 locks held by syz-execprog/5826:
1 lock held by syz-execprog/5827:
 #0: ffff88807ec85280 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1092 [inline]
 #0: ffff88807ec85280 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x8ff/0x1290 mm/filemap.c:3556
2 locks held by syz-executor/5834:
3 locks held by syz.1.18/6054:
2 locks held by syz.2.19/6056:
 #0: ffff88814173d520 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
2 locks held by syz.4.21/6058:
 #0: ffff888140b91bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
2 locks held by syz.3.20/6060:
 #0: ffff888140b908e0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
2 locks held by syz.6.23/6210:
 #0: ffff888140b94210 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
2 locks held by syz.5.22/6211:
 #0: ffff888140b92f00
 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: 
ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
2 locks held by syz.9.26/6214:
 #0: ffff888140b97b40 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
2 locks held by syz.7.24/6216:
 #0: ffff888140b95520 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
2 locks held by syz.8.25/6218:
 #0: ffff888140b96830 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
2 locks held by syz.0.27/6323:
 #0: ffff88814173af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
 #1: ffffffff8df98a48 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517
1 lock held by syz.2.29/6335:
 #0: ffff88814173d520 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
1 lock held by syz.1.28/6340:
 #0: ffff88814173c210 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
1 lock held by syz.3.30/6342:
 #0: ffff888140b908e0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
1 lock held by syz.4.31/6344:
 #0: ffff888140b91bf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
1 lock held by syz.6.32/6466:
 #0: ffff888140b94210 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
1 lock held by syz.9.34/6490:
 #0: ffff888140b97b40 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788
1 lock held by syz.5.33/6494:
 #0: ffff888140b92f00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788