Extracting prog: 1h2m9.172892882s
Minimizing prog: 1h47m15.478768617s
Simplifying prog options: 19m56.707535973s
Extracting C: 5m12.308427566s
Simplifying C: 0s


extracting reproducer from 58 programs
testing a last program of every proc
single: executing 13 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmsg$nl_route-ioctl$sock_inet6_tcp_SIOCINQ-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD
detailed listing:
executing program 0:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40004010)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112da000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$inet_tcp-accept-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS-setsockopt$inet_mreq-socket$inet_sctp-bind$inet-sendto$inet-socket$netlink-socket$netlink-getsockopt$sock_cred-sendmsg$netlink-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r2 = accept(r0, &(0x7f0000000040)=@in={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x80)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4800) (async, rerun: 32)
setsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x5d) (async, rerun: 32)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r4, 0x0, 0x0) (async)
sendto$inet(r4, &(0x7f00000002c0)='\x00', 0x1, 0x20048851, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, <r7=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800ff03000000000000000000002300000000005850f5600383984736301628dcf98ad986172b7390493636076704820758bae456cfa7cb586dd63c347043f5217cbfc4c482265a00ec965515da1e5f11a1bf6e1871213ba7f4c9100b2f7c939a844e69b04f46d11ee9873220b99e47b04a0bffa17a54a47b8b078e86c550bfb43840a990c2a7efdd69605c9fcc17b1e7f45f", @ANYRES16=r0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRESOCT=r4, @ANYBLOB="0000000000000001a2bdf8aed6b5b348fd5e9b337864f4bd4aa4666685b29314f7a07e1e669e8ebfa81c8a4c63452571980e4a3474030dfd602341848d7a465aa1690946c3c373159316d11e9e659559bcb65a2cc4bc2b17872699c34301250cc8ac9f47453e679e973b860bde3190dd65e2"], 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x0) (rerun: 32)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-ioctl$ifreq_SIOCGIFINDEX_vcan-syz_emit_ethernet-socket$nl_generic-socket$inet_udplite-ioctl$sock_inet_SIOCDARP-socket-socketpair$unix-openat$cgroup_pressure-sendmsg$unix-setsockopt-close-syz_genetlink_get_family_id$tipc2-sendmsg$TIPC_NL_MON_PEER_GET-unshare-unshare
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x805, 0xffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00'})
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x1, 0x2}]}}}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000004c0)={{0x2, 0x0, @empty}, {0x0, @local}, 0x2c, {0x2, 0x0, @empty}})
r2 = socket(0x11, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0)
sendmsg$unix(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@abs={0x1, 0x2f, 0x2e}, 0x6e, 0x0}, 0x0)
setsockopt(r2, 0x107, 0x1, &(0x7f00000001c0)="010000000200060000071a80010061cc", 0x10)
close(r2)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xf0, r4, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2bb7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7eb9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000844}, 0x4804)
unshare(0xa000200)
unshare(0x20000400)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket$can_raw-socket-socket$nl_generic-sendmsg$nl_generic-sendmsg$nl_route-setsockopt$CAN_RAW_FILTER-bind$can_raw-close-socket$nl_route-sendto$inet6-ioctl$sock_SIOCGIFINDEX-socket$packet-ioctl$sock_SIOCGIFINDEX_80211-socket$phonet_pipe-ioctl$sock_proto_private-ioctl$F2FS_IOC_RESIZE_FS-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1) (async)
r2 = socket(0x10, 0x3, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc33000046000701feffffff00000000017c000008000180040006004d23c78008001f00e00000028710278004004d8004006680080040000400000004105600aab194f43a5b5ba6a91d029d6dbc1662e9cfab4339701856c4ba46b92a051eb3210b4a78ee75d401d54a0a8e9c711db4142415b7e0c3559e68332145fd0c53524607a1288233662d278d1efba2ff0efed6aa81ca5d2f87232923194e699e56e77b5f22ffd5e16cdd9df171cfea1297833af370d56bf8cfce50f804cfede439b9295fa8512045d368811008c34653d391202070dff86508464744ef489643d6dbd5942180994c53e0edc9503d47b313b1ef8dc6b6afef2661aa6b19845961ee850ab490693293963a069b8f90587a387721468ba74fc8e5ceb69536608623d9d037eb63731405cb6c7eec07d8f73cc598bc31d60cf2c4363fa067ca1f1d6558e248cd1d1db6f2d3cddfb6c09641a4185fefad55167d08ecc1b56fbd5a87af0c50efc31598118a371ac3162875e91d743f82579ebc804dde12e13a2e0ba31b1c80d86654ad58a91dec1675e1f101a772706c00cf5ec6fa16a31acb20edbfd36411329f410b6e113e249b89169762cbda8ef64ee1bc5053b7696bb12c442b29088277f5d8858485f2545e67f993ba0d640263e1c175e04da1842bc9c16851a3a08d2d3709531ddf8c2f705df9a6dde660f214b6189579cd18cee716a139996447f60606f511e0fe5ad1862e0c717e4cd158ce68d8a03b80f1b46c12585764574c0768fa80a23bafe48c3f4ece287cec335d94b90a33c69d20a12455cbe9745cd875b560d170da9705ecd8b23f2cf37f9e1b49cb9aaad3ee18e9be0037ce556efa42c97e0e5d3ba53fdedad5a38e03dff100000000c214dca98ed3c6a467a6da6af8dc898f8446b6a26e431fb22e8dc98e7ddea62d9f5edd983ce8b33ecc5e6cf51d2200f50ab922a1c0c11c698da9d6364ee1dde37a7b876703dee143409d817efc9a41c7cf3225558cb47540c9b649de1da68dadb848d9245b877facf69f0d60aa09050943a9477ac9114ac463675fa17737af016782a403b6538aab624434cddb5136b6ee76e5abb6bf59e58b4b30e881e977dc600aafcdaaca8bfef956b805fab777b9f8e50fe973c475d69faa37e96c28d9d9790744f62bd02e96646b53c808f2b539a37f197e0d6a7593139c880ec7027c17816000f9af57f236988ee105a9d0da34cc3d69291f854e918f488ee61c8854265e252174f67310362ab1ddaf29a7d7b3adc8df48287adb9e9ba36c72272ab29682497cf642d50e3fcf93e5acd74afcc3e39132aa78f2a8497f7177cbe5ca77177313a6e456307f77f03db6272511f675f504b3a22a1a07562d5e12c0005338fd481d103837c6e281e3e5d2c9b783fb3a056166c63ad06970ae9e117eccabd963cf3dc0eb949532388437cc71d31679ba7079c1c89e4069210d2e1fc2c32a32f206422d4f1767ec9d11b554b36076c1fc60e6fc042b12c41eb807bbba69db79ed9a458794153c85dd27424bc416a3312cf65893736789cad5744acb45dcbf0a4ab37197e865230baf2c78e47e14cef88ef77fbbd27fde6464b5e45f39d412a87a704d2f1d9531dea6f5e795954f1609f7620e0aadb3444138b216e53a44e2b10a7a4ae8806d7e46c513f77ce12887fb2370194e68cff4143b324f3201f5a2e5a697d2aa1c68782a769fee6bb99563d9d553185384be2cd40e7bcf2f719b65aab98ad1ad4176f0be6efd07c90b9d8ae3bd43ffbf7f7c5679100eac7350a75db09a99e2faa2aeed0e36cf1a942ea1cda0e41df1de80acb1fec0e15a6d1a53b0faf436f8e0c5a77f83aabf8eac1b5d05f102252c97ba038ca7b5545a93715aed2479443a0b578babbebabdc66865c46fe5bc96e1c051a55f01e94587e3c3fcc6a599af9b5b4ac7f1342d1aa818a7971375f9c0981c4da7be0997fb5d6165678cab5998a64c659d0adc5ebb6dea5af14bcba15f8036a2e10a087d502cd001bd29f082ffa604367ee2dba6a406deed2df91c548994c9f6ebe21159619c0644e4a49f7c837113fec0c12badc91454dbd2cfd6b1e400fbc9a1b70ab9bf2ed58742e98a38fb748c49f7cf62febf587f5819731957816919d6bb518f5912697af03550206506c0f501548a9548a4f4584b9aa421942ccc8d729557378ea746e679f918e413f7c4d535b12c28effe9881922c4926eff8e99a0bdfaed6b009d14fad6f95023a1f3565ce81e50e8b9a27244bf5552829dbab004528f51c6d59cf4435119dd3b4fa56cc54e6d897852112f9b7da758016137064fa8a3013425b396bdbd1c9057c3beee833b5935c1b4c4f10c1dc28890c4094ab787761289566762854366a3866e7e7144bdf67e830bf9cf1e7a5ef56e7db931a6cbf48b84ff06f4cbbac3844cfc5217c2e1af7913dd1461a1a13dc3296fc3e4492dc2525e191294e28ed7a4947ff131e91fb805dffa154c4259e4be0ec470522408e39081514a493c33bca7d93a26aea87540116a2518e4ba2783173917f5529c5f669c5c897d6f64eed804ab966d6e8f6ebbfced77d12007bddd3ee372c4a489461853aa3be2e0a1cf8d603b0c0a62a11fb9d1cd3b8d2dcec3752534639deb4e125faf61c380e77cca8a6f0c20cd54daf33372beb87eefde602b182f0a6d9d77906e59979e08e2d4c67d469b60ef3350b790ddbd2d10755c8e1c3cc2aa8d3a9ebc05d49b076e0c16aaf00a2cd464bec3624361ce65bcedcecc31b27cf47a738baabe0512eb8a35fedad4b89068337dde15df375d2f80816e3ce21310568e26f24ec248e8c9a32ab82a7be36ca3d49a4e19db983e14f7c844074b91ba9c735b5009b03fdae2c7156814f8fcee0934c3ba02369dfac1bf392c0bd571f07276b61d66a655b783f57d32f4617aef7029253ea8722168fddecb1c81dc4322fb962a08aadf5798d06539a4265680ce9acb9944063c383fafc3e872390122d851ada7ce6628af62f3d33c2123c58b85a072fe0096bbb429a1190591170ca3a1d8f9948e3066bc6d2326e67f7fee7c579b47c0e88a62fd49811612159968ec3629fa9fe14b950bee4a420b5c45ee4fdeb600ea22ad1cee9e3d79a2bb7c0d82a7d794790152c40a476b5a004ed8a96d0212614fc1f9243667340b15a3a632e619c77e73167127136d10b63e4e8add39d6cf4501625b8493fdbdcabf488aa30ca765fe8c21c43c64ee95777d0baaaac200290db8194678334bd4a1d58fc71a677aa73aeb8fae9dbb9d01b68ae3ef80226e529a4997bcdfca32dbe5972e60c79adab364725300fad03a8b82b149f43660b3142d8f39b0a0af51ae2ca79398e455453eecef922796bd9979f8f02c2ed0da5d0f00461d1e8792d47be88d53b44b0e938af30f4d6723183da7007de4692bb83a0f4779033a3d44244e533e945caed1ff1c4fd106f0ee0d393c61c7e1a2f993e8309cabafab2d62377b6810ded17b12b36ca14efc725c7eb21f14e67d45db09b3653c6f6c34c572c2c64b386069f0c8776fafe8d02042cbc46016dfdc20ecce47090acf2ab74ed4307d8612cc5ac79fe46409d3bd78201f9b5bb9e15a4884dfe11c14b1fe6535facaab8336393d6d27c67a9c9962c75b9b2ec60aa0a0647fbacfae2508f16ee5fadb2d8324b7c6029088fc798c8869f5c893e5f6adb19a44243eaf4da29c2e9928e52243d6b89595e10d367f8d88e9f08b8218b384bc9c95d26e89f2a6f1d8c5817f58a314fc01a0d15cd3b51dacc3643f26c9f91b71c53f2a7ecca031a7cf989c060c622d0fc0bc4ea3d0294023d281c62489880754eadd7d6cbaa583d733391dbcfd24d3f0e2c5d1f585d86b11d85a80660aa79934a45cf0b3265aa1d5b826862fdb24b60d79e97ce2ad09baafc2e132a5e9accaa85ee64863cf309863331d9c4cea723c79451d12f841a8fc1acfb33d2e8288e258baaa9655f54e2c80ca66be5d150e656d57db3ca775852614b26f7d6624bbc21ed2aa7f4a27ba6e9286fdb2cf29dbbe46d34a99723e114b7a2872430b915bd1bf950fe96fcdfdebe80cfde3766e954f2864a6fb9a2d2b6f76c89387ce6c9f4f816357961a1afe88d4012d3c5033fe434bd6f40089996572458f94528335d397048c241f23e71d5cca8c8d970b1c61177c495009edd33f0332a29fc31798cdac2136317f52d15f6300d471d37441211b90494022ac59aa47ab7de0c297a5ed4102d1cd22e0f5dbf579997b3f0c4e980b5d8fa2e08bb635a81908c0642d3059192f2922238c2a260ce4dd171570f91841175720e564a3a03789414056c8aea263ef72e8f54384fd58974821faa8969367b3d3dd5e02f7344a9eed4918dd61fb7bab38618e91e3e4f16ada352233a15d1c3c0fab11eefa009a8ed552c212e609b7ef33a191a27d0d3c02b8fcb2c091b4283c7734e44d69a1ab54082c994f204fef97bd348807aeef29c4acc36e334192d87cee8b2e10b6a451502fac4bf26ae4aeb7cb81b3aeae9256d12b8a7f80166a9b5d172cad0bad73a5c6b045117d01ba22b1c06d9eb93b85cb31dbdb84f55b6f7631c7273ea5c25ee85d015003fc37c5eda8262baeacaef09c2070ff601b4acae942a3a31a06a60388b8ddd89209056a09d08cba11ad2bf7ed67a194c6708f5d58d9db67d603b57a49df76933baef8f07d2bf4c49da01a27776ac26efd43ed82a346a554de8b2be00f30f1d88805403fd80c10d480746d9919f2c56368e3f22808f594b5443bab9e84c45c0cdb1be06c057b12480ee11f8273ddac719fbc952282fcfc46a9e35b79280bb5e62b3549841cd2d71d8ae99b963275bac679ae4d85ad4762e9ebfd9cd4f3dc341a2982ef13a1bb276dd545db1536e85de26b75de192b81f264f3f1bffa0c7f537e8600ebf81a205cf08c7af9895bb2b4a3cb800250e28758bc07cbe49afc83c56399e1949ae0e9995d3149944b22e97a3da037ea8b11b49c26a5380221462bb4c38295fed1df7576c2d70123f2de053674e3ae6a1cd653309697f4dc3f3a800774bc6f4e3b8e8f0b4abaa763187b1e515a177cd01490c67c2770e74a51d2e55b84f6a3313e857503d835d4671159a8ac20d4d69d5b8d57aef15046aa15b222b33980993d0b473217c8317e51a88351db618dd43421836cac07aca281471bc51df34a4e5f0901f5d5f19a2ee0a400602db09eb1d8a137e0a03520721dd6351fced393eba9c930e5a8f18bcfd29e3fde01665dcae00b4fb156394ccf4675941c3b1005518f86085f23940770fefbfcc57c063f27c504249155414df61ca4dd63df5de2ebdff1e89fcbe0c3b6bb0e6f99572396eb847d17df74b77de7fdf5ab5285c6300b1c8932ed365fd553da690271a62453a8f08a2ee69213ce7484c9c99e5a57f1f5689cdea6b0cf4fc37aa761065b9c7a07ceb47d45a639e08cf64b657c6e55564f42bdbcc6e22ac42fd7e68243e4bba0316e2a7139282ddedbe7efca37813e29ea30a72c0a11c0ae8c3e878d53c789ba0ff695d51299fdcbe6e89b8809f5171086d4b15d783139a7b6da08b1de241b3727c1024fa75ab47cb61effd4f238b5b5eee1b0ad48b530a99e1b37c90a7337c79603b2bec59afd2d276e67528beadc823e36f58661f9552a6c41ca43408ddadc9a741282f4a5cd8752ea26f7a2bba73b78abd1e70baee02ad99c4f2a983a48fc30718d395b89b7ee508bbedaa3b370a685ff36283f3d4a0d58fd24ddf934f14c0e24481b35423a51954dd6e855e02c353f911aba7bd71e8ec7fde07c7e3215d7f4464b243762b89b246e672b2679f57e0ea2bfae16a2e78384d82934efba1e9d30ca647258fd8762d6411e02471777519f033d9fe7fbff3ef2deb5f500ac64ec940706fa5c90a0400c8800400ef807c99fb210e218bcee1d531abe78665687538f8088d3c7689871231d8c533a6f185c4a158753a3dd6a8c43f3d104914ae4d68ddc6b7ecff1b93dfd68b0b66fba522269a607abb35d8f5133c8193ba3760868f63ffc6806f0c0020005e2e5c25232a7b0004004980000800d200", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="00000000008f1003"], 0x33fc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100005ff28bd7000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c0422a000000000014001280090001007665746800000000040002800800200001000000"], 0x3c}}, 0x0) (async)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x10) (async)
bind$can_raw(r1, &(0x7f0000000040), 0x9)
close(r1) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be", 0x13, 0x0, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gre0\x00'}) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_proto_private(r4, 0x8b20, &(0x7f0000000080)) (async)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x100) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x48, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket$kcm-bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-sendmsg$kcm-socket$nl_route-bpf$BPF_PROG_WITH_BTFID_LOAD-sendmsg$nl_route-socket$inet6_tcp-setsockopt$inet6_tcp_int-syz_init_net_socket$nl_generic-sendmmsg$alg-syz_genetlink_get_family_id$netlbl_cipso-socket-getsockname$llc-ioctl$IMGETDEVINFO-sendmsg$NLBL_CIPSOV4_C_ADD-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$IP_VS_SO_SET_ADD
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001f00)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="0e88b0f268d62719098e6e4d2c2a25caa59ff64a1ab65e3dec51c4fd9a9d1b2372d6feda5a49e4a8aee084d87d862033ef4d5410850310db7f10afddafe38eeb5bc36dcd02527324d28a037fc17f6b266ea2f3b68741c35fda21362558d0bd77f88ec39cd2fa0d8a86ceb337debcb8d98ba2740799cef7be68ef3f60323191028316bc4d83d0101e9a3a830559b1c1780198833783a84f74f223c2781be78cb26d8bec4e3fd39dc5f23bce7f13b0b20131ccb422a6747632ee1cbad2de02ae2afbcd52b9f003f00712e2b5879d8786025e374a0f9eb8e9bb56da88e773ab21c6755cc0db13b2a47fa39c", 0xea}, {&(0x7f0000000100)="4b1c6d9b71b41bbd965ad67ea6db7a69bb89f530d5c343ec0baf47d4e0f1f409783ded5f5b34b9a301544e810ffd6ff4d4", 0x31}, {&(0x7f0000000380)="d434af85a807a8ad046bb613f8ce9c106b7553b348a293409757544d246d", 0x1e}, {&(0x7f00000003c0)="e9bcf26d40682513b2daec08528a37325fe42e0db8bf42168cfed8bea037ff2872c8d2f4c27d649d7307e7f0fa3db67db50ad062e563662b921816430fd149f2035c615c63e478d273769650d4ffa9358ef5ecf6821a577e821d72731fcb28980e7ed38b812381fb17550af7b68a8ac8d84bf2c1ee306ca813f4", 0x7a}, {&(0x7f0000000440)="79a6e7af4d874613afbd21bb6ba0e03cfca2cd4b3a0567b3a4594c72c5769db5bf0b8d8646565aa81a14939c2427ec10e910d4a039d77934e5e5f31a96b78e973f28e8ba9da3369b671fbab13cca89c10c40ac43acd0e641fa4e5715789f26bd0b8ede9e1cae55ae9fc0029c34d190c4036db83394e770cee818", 0x7a}, {&(0x7f00000004c0)="d2acda3c760becc8fac3cb889e56077dd2886d1ecc9a9de940bf2d8569372745329cf26012e825c8bb5626c14db163b928fe8946d6f6738d7f3132aece299a0ea502136d13b4571053b40a9343ea03109e3677ff1f9e0388607138e3f527af2359253b30c316039048601a54a55bfd439cde998e6d1b4e95c096ea5b45b7217026c76eaf194d64aa45ff4c74ff1fe0f1b16bdb051c1aee491c7f057c9ffc82ed9d31e3bf135f1bce0a16854edfdd51cb773815b6588ec40aefa5ce9b", 0xbc}], 0x6, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0xff}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0xd}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0xa8, 0x117, 0x2, 0x8d, "8f3f78b3bcda926633afc1ee53dc04dfb2ff25291c42d9ee3cd49710047a48ea0fe0f2573a5f2d9447478cef718440212b08ef1a75ad2a26aa5f549a4a2f7ad071395b7e9ef490de89f4ef0701655b2c31bd708a52bc47a2c8ca10a5a8d04a20588d5238a71b0ba6f83686d9dfb23adfad06749f24d988080b58f6484b2a9b3f51340c8fc479095bf5f5a1da5d"}, @assoc={0x18, 0x117, 0x4, 0xe}, @op={0x18, 0x117, 0x3, 0x1}], 0x150, 0x408c0}, {0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000780)="f8b9be08602104242cce57340d2b62b29f9238f635c13c24f81f774fa57f647d4f1373183e72318cf5a25507c48d30ddcc61fac33e96033e4e660d989571c95096552c16b0c33e28454d4814a1faa5", 0x4f}, {&(0x7f0000000800)="a8252fc0e435b0ba2a92a725c826ac3f442d707b75558a25cd6b9b6366489f4eca564fb5e535a9c92044977db22598166c12fbf0dc", 0x35}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="2017b0f14294558b3e08009d7b47cf79155f89ece1d83037bbfd0958d33b866e43bb0cd0756e5e4efa5d96c058b2c52a7020f05b7ee2df4de44e8be0b63831aeb6f6056d186fe4f1dd49b602b8cbfeceb687170189d2bfd2a1bdbb1788d1955a00439effd38765fffaf93e35d235bc38b754bdea1ea9ba612e0f174ecc2c9889e0278141b3debade9060df0c6076ec67094a221399b7e999061a184f03", 0x9d}, {&(0x7f0000001900)="ffc04b77d14bee0bcb928450d2b88cd194f01bf12614b489e21d173bfaad02d5e64b54565b8e033dc11d7a86bba897457c1e4d89a45843ca02a17af6ebaf716926787ab8f4a5b3", 0x47}], 0x5, &(0x7f0000001a00)=[@assoc={0x18}], 0x18, 0x8000}, {0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001a40)="7afa09f07d8998e151aea2f35ae1e9d76136c6f83d83e106bd0d80cc5c8ce8710f94b1634f2f71c9550182aca6d3b0f41c9cbd48ed15d3b60821b8b8ff7d2c92d580c213056e2b6cc7c1ec4d359be1d445e5d39c06ea4eded41267844a02b15e291a9d078b12b0f9cb1029582867f01376e7d6588b3551b31449f6e52fc5c56d24976562ec2de1ade983fe88f31c73767f95ab95db6ba7db9895898e5d94eb9ac4dc11b079dec3da6297be4ca29b723d17bff9b344be8eb6271811728949f2c5bfa67860faba4f3d62093a59b8afdb8b920587", 0xd3}, {&(0x7f0000001b40)="08fb6c50b7b3a1ef3c3b046652832fef017e85d81881779b6112fa19aa7d3df40a1d4f77a1ba4f6b58895ddc2d16708df18a63123ab9bfe81f8c27788357e42fb877a4c8ab1f011e2002815f60290626b7149975e5d3fad3ae119b092bc439", 0x5f}, {&(0x7f0000001bc0)="bdabe9e64458cb4e523f1349d8a1a69d4d7d96b5bdb98f31fd6b4f92ece6738440e3ed6ed6c824618d0bff363a2602fecf17a6bd0f890ab2fba4616c80a0723a", 0x40}], 0x3, &(0x7f0000001c40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x98, 0x117, 0x2, 0x7d, "492b8d5d4dd1096866ddd5d76aff5735cddd439161ad49b0056e7f3adea19c7da8107f2f66dbdbec697d1e43582e54a0918e0e45012cb5faa07672844330fa92db3599b20f0d2880b2f4bae6bff2da5f322049cc868a3c1f2e729232501b4865dc3eeb383923911e90021b7eb67a62fe68acc53db5569421c38fc61bfd"}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x98, 0x117, 0x2, 0x7d, "0d7c8926ee43a20536c82226862dcb7a0ccd0057ae5cc23b9b893d08f76f8344049d3dcd299dfc74290887b89c2d60dabdf8b1509ce3e3f4dd41d2213674cb59ae79b041ea139a8d092b075ccd1c84c7c532e2d6474fc09f859754043cba1b2dbf0b50e40349f8fb1946ad07b19bf26ac73b69598e2d40d88196299311"}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0xd0, 0x117, 0x2, 0xb7, "d160bcf8dbf1904e99b8c91592f6b69b79b6abb0e42bd2d4c7927036c0b1344f70319907bb39843322302931eb054591e50f57cf162af91cc35ff81576abe0cf3c38f168c860f5c8627a60f9902609a5102e5d3e8885f40e8bf1a81f1fc6ae8c077dcd15f75915561dae139cbb4f6a329d8ebbce3a5bb1ad6a53f3dd6fa6944dd8b8e0bd8352918f753842e016b6e3de9e1e2e983c50e312e535c6e75d85b3f99e98fe3f01dbc037e77001c9ddb6bf45c5ff0f6f42b305"}], 0x290, 0x40040}], 0x3, 0x40854)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r5)
r7 = socket(0x15, 0x5, 0x0)
getsockname$llc(r7, 0x0, &(0x7f00000002c0))
ioctl$IMGETDEVINFO(r7, 0x80044944, &(0x7f0000001fc0)={0x2})
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x12, 0x4000ffc, 0x54}, 0x2c)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$inet6_tcp-unshare-mmap-socket$nl_route-syz_init_net_socket$bt_hci-listen-socket$nl_generic-syz_genetlink_get_family_id$gtp-sendmsg$GTP_CMD_NEWPDP-getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
listen(r1, 0xfffffffd)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x3c, r3, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8}]}, 0x3c}}, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x40)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$inet6_tcp-unshare-mmap-socket$nl_route-syz_init_net_socket$bt_hci-listen-socket$nl_generic-syz_genetlink_get_family_id$gtp-sendmsg$GTP_CMD_NEWPDP-getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
listen(r1, 0xfffffffd)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x3c, r3, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8}]}, 0x3c}}, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x40)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-socket-socket$nl_route-sendmsg$nl_route-setsockopt$llc_int-getsockname$l2tp6-socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_DELLINK
detailed listing:
executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r1 = socket(0x23, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x0)
setsockopt$llc_int(r1, 0x10c, 0xe, 0x0, 0x0)
getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x20)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x38, 0x1404, 0x1, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000c018)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-socket-socket$nl_route-sendmsg$nl_route-setsockopt$llc_int-getsockname$l2tp6-socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_DELLINK
detailed listing:
executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749da00000097f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff472558014391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d74e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00000000000000000000000000c8b8b5b137dcb7a7949e12307d1fce56fe5b76d2f3f5a7692379542e3fd9a5a7dc57e1dec0bdce65b5db59a0733c9b9da612adb91948ecbfaff8fc206b8350fe268b98aaa2e288be77aedddcc7fb7d631e69b176e2e6678fe1237cb2"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r1 = socket(0x23, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x0)
setsockopt$llc_int(r1, 0x10c, 0xe, 0x0, 0x0)
getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x20)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x38, 0x1404, 0x1, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000c018)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-sendmsg$nl_route-socket$inet6_udp-getsockopt$IP6T_SO_GET_INFO
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0x1ff, 0x0, 0x6, 0x1ff, 0x4]}, &(0x7f0000000080)=0x54)

program crashed: INFO: task hung in switchdev_deferred_process_work
single: successfully extracted reproducer
found reproducer with 5 syscalls
minimizing guilty program
testing program (duration=9m2.655317854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-sendmsg$nl_route-socket$inet6_udp
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

program crashed: INFO: task hung in addrconf_dad_work
testing program (duration=9m2.655317854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)

program crashed: INFO: task hung in linkwatch_event
testing program (duration=9m2.655317854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0) (async)

program did not crash
testing program (duration=9m2.655317854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)

program did not crash
testing program (duration=9m2.655317854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)

program did not crash
testing program (duration=9m2.655317854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)

program crashed: INFO: task hung in addrconf_dad_work
testing program (duration=9m2.655317854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)

program did not crash
testing program (duration=9m2.655317854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)

program did not crash
testing program (duration=9m2.655317854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)

program did not crash
testing program (duration=9m2.655317854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

program did not crash
testing program (duration=9m2.655317854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=9m2.655317854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=9m2.655317854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-sendmsg$nl_route
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=9m2.655317854s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)

program crashed: INFO: task hung in linkwatch_event
extracting C reproducer
testing compiled C program (duration=9m2.655317854s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-sendmsg$nl_route
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing program (duration=9m2.655317854s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)

program did not crash
testing program (duration=9m2.655317854s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)

program crashed: INFO: task hung in rtnl_dumpit
validation run: crashed=true
testing program (duration=9m2.655317854s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)

program crashed: INFO: task hung in switchdev_deferred_process_work
validation run: crashed=true
testing program (duration=9m2.655317854s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0)

program crashed: INFO: task hung in devinet_ioctl
validation run: crashed=true
reproducing took 3h32m47.26804065s
repro crashed as (corrupted=false):
INFO: task dhcpcd:5495 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:dhcpcd          state:D stack:21240 pid:5495  tgid:5495  ppid:5494   task_flags:0x400140 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 devinet_ioctl+0x323/0x1b20 net/ipv4/devinet.c:1120
 inet_ioctl+0x3c0/0x4c0 net/ipv4/af_inet.c:1009
 sock_do_ioctl+0xdc/0x300 net/socket.c:1254
 sock_ioctl+0x576/0x790 net/socket.c:1375
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2541d5a378
RSP: 002b:00007ffed284ad78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 00007f2541d5a378
RDX: 00007ffed285af70 RSI: 0000000000008914 RDI: 0000000000000016
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed286b110
R13: 00007f2541c5a6c8 R14: 0000000000000028 R15: 0000000000008914
 </TASK>
INFO: task kworker/1:6:6119 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:6     state:D stack:25176 pid:6119  tgid:6119  ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: events switchdev_deferred_process_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104
 process_one_work kernel/workqueue.c:3257 [inline]
 process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
INFO: task kworker/u8:9:6210 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:9    state:D stack:24568 pid:6210  tgid:6210  ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: events_unbound linkwatch_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 linkwatch_event+0xe/0x60 net/core/link_watch.c:303
 process_one_work kernel/workqueue.c:3257 [inline]
 process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
INFO: task kworker/u8:15:6320 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:15   state:D stack:23224 pid:6320  tgid:6320  ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 addrconf_dad_work+0x112/0x14b0 net/ipv6/addrconf.c:4194
 process_one_work kernel/workqueue.c:3257 [inline]
 process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
INFO: task syz-executor:9113 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:22392 pid:9113  tgid:9113  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
 rtnetlink_rcv_msg+0x7cf/0xb70 net/core/rtnetlink.c:6958
 netlink_rcv_skb+0x208/0x470 net/netlink/af_netlink.c:2550
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x82f/0x9e0 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1894
 sock_sendmsg_nosec net/socket.c:727 [inline]
 __sock_sendmsg+0x21c/0x270 net/socket.c:742
 __sys_sendto+0x3bd/0x520 net/socket.c:2206
 __do_sys_sendto net/socket.c:2213 [inline]
 __se_sys_sendto net/socket.c:2209 [inline]
 __x64_sys_sendto+0xde/0x100 net/socket.c:2209
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f21fe9915dc
RSP: 002b:00007ffeecd4d940 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f21ff714620 RCX: 00007f21fe9915dc
RDX: 0000000000000028 RSI: 00007f21ff714670 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007ffeecd4d994 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f21ff714670 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:9117 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:22136 pid:9117  tgid:9117  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 rtnl_lock net/core/rtnetlink.c:80 [inline]
 rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 rtnl_newlink+0x8ec/0x1c90 net/core/rtnetlink.c:4071
 rtnetlink_rcv_msg+0x7cf/0xb70 net/core/rtnetlink.c:6958
 netlink_rcv_skb+0x208/0x470 net/netlink/af_netlink.c:2550
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x82f/0x9e0 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1894
 sock_sendmsg_nosec net/socket.c:727 [inline]
 __sock_sendmsg+0x21c/0x270 net/socket.c:742
 __sys_sendto+0x3bd/0x520 net/socket.c:2206
 __do_sys_sendto net/socket.c:2213 [inline]
 __se_sys_sendto net/socket.c:2209 [inline]
 __x64_sys_sendto+0xde/0x100 net/socket.c:2209
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff712f915dc
RSP: 002b:00007fffcdc90230 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007ff713d135c0 RCX: 00007ff712f915dc
RDX: 0000000000000030 RSI: 00007ff713d13610 RDI: 0000000000000006
RBP: 0000000000000000 R08: 00007fffcdc90284 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
R13: 0000000000000000 R14: 00007ff713d13610 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:9118 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:22232 pid:9118  tgid:9118  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 rtnl_lock net/core/rtnetlink.c:80 [inline]
 rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 rtnl_newlink+0x8ec/0x1c90 net/core/rtnetlink.c:4071
 rtnetlink_rcv_msg+0x7cf/0xb70 net/core/rtnetlink.c:6958
 netlink_rcv_skb+0x208/0x470 net/netlink/af_netlink.c:2550
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x82f/0x9e0 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1894
 sock_sendmsg_nosec net/socket.c:727 [inline]
 __sock_sendmsg+0x21c/0x270 net/socket.c:742
 __sys_sendto+0x3bd/0x520 net/socket.c:2206
 __do_sys_sendto net/socket.c:2213 [inline]
 __se_sys_sendto net/socket.c:2209 [inline]
 __x64_sys_sendto+0xde/0x100 net/socket.c:2209
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd1c13915dc
RSP: 002b:00007ffdad1d2230 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fd1c2114620 RCX: 00007fd1c13915dc
RDX: 000000000000002c RSI: 00007fd1c2114670 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007ffdad1d2284 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 0000000000000000 R14: 00007fd1c2114670 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:9119 blocked for more than 145 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:21720 pid:9119  tgid:9119  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 rtnl_lock net/core/rtnetlink.c:80 [inline]
 rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 rtnl_newlink+0x8ec/0x1c90 net/core/rtnetlink.c:4071
 rtnetlink_rcv_msg+0x7cf/0xb70 net/core/rtnetlink.c:6958
 netlink_rcv_skb+0x208/0x470 net/netlink/af_netlink.c:2550
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x82f/0x9e0 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1894
 sock_sendmsg_nosec net/socket.c:727 [inline]
 __sock_sendmsg+0x21c/0x270 net/socket.c:742
 __sys_sendto+0x3bd/0x520 net/socket.c:2206
 __do_sys_sendto net/socket.c:2213 [inline]
 __se_sys_sendto net/socket.c:2209 [inline]
 __x64_sys_sendto+0xde/0x100 net/socket.c:2209
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6c77b915dc
RSP: 002b:00007ffd67155990 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f6c78914620 RCX: 00007f6c77b915dc
RDX: 000000000000002c RSI: 00007f6c78914670 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007ffd671559e4 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f6c78914670 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:9159 blocked for more than 145 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:22392 pid:9159  tgid:9159  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 rtnl_net_dev_lock+0x257/0x2f0 net/core/dev.c:2143
 register_netdevice_notifier_dev_net+0x33/0x240 net/core/dev.c:2170
 nsim_init_netdevsim drivers/net/netdevsim/netdev.c:1072 [inline]
 nsim_create+0xc29/0x1050 drivers/net/netdevsim/netdev.c:1143
 __nsim_dev_port_add+0x6a6/0xaf0 drivers/net/netdevsim/dev.c:1493
 nsim_dev_port_add_all+0x37/0xf0 drivers/net/netdevsim/dev.c:1549
 nsim_drv_probe+0x8a5/0xbc0 drivers/net/netdevsim/dev.c:1709
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x26d/0xad0 drivers/base/dd.c:659
 __driver_probe_device+0x18c/0x320 drivers/base/dd.c:801
 driver_probe_device+0x4f/0x240 drivers/base/dd.c:831
 __device_attach_driver+0x279/0x430 drivers/base/dd.c:959
 bus_for_each_drv+0x251/0x2e0 drivers/base/bus.c:500
 __device_attach+0x2b8/0x430 drivers/base/dd.c:1031
 device_initial_probe+0xa1/0xd0 drivers/base/dd.c:1086
 bus_probe_device+0x12a/0x220 drivers/base/bus.c:574
 device_add+0x7b6/0xb80 drivers/base/core.c:3689
 nsim_bus_dev_new drivers/net/netdevsim/bus.c:463 [inline]
 new_device_store+0x36c/0x6f0 drivers/net/netdevsim/bus.c:191
 kernfs_fop_write_iter+0x3af/0x540 fs/kernfs/file.c:352
 new_sync_write fs/read_write.c:593 [inline]
 vfs_write+0x5c9/0xb30 fs/read_write.c:686
 ksys_write+0x145/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7fc258e1ff
RSP: 002b:00007ffe732fbdb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f7fc258e1ff
RDX: 0000000000000003 RSI: 00007ffe732fbe00 RDI: 0000000000000005
RBP: 00007f7fc26152ef R08: 0000000000000000 R09: 00007ffe732fbc07
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 00007ffe732fbe00 R14: 00007f7fc3314620 R15: 0000000000000003
 </TASK>

Showing all locks held in the system:
5 locks held by kworker/u8:0/12:
1 lock held by khungtaskd/31:
 #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline]
 #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775
4 locks held by kworker/u8:4/68:
1 lock held by klogd/5189:
 #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:639
1 lock held by dhcpcd/5495:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b20 net/ipv4/devinet.c:1120
2 locks held by getty/5591:
 #0: ffff88814ec590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 drivers/tty/n_tty.c:2211
3 locks held by kworker/1:6/6119:
 #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3232 [inline]
 #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 kernel/workqueue.c:3340
 #1: ffffc90003157bc0 (deferred_process_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3233 [inline]
 #1: ffffc90003157bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 kernel/workqueue.c:3340
 #2: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104
3 locks held by kworker/u8:9/6210:
 #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3232 [inline]
 #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 kernel/workqueue.c:3340
 #1: ffffc90002f07bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3233 [inline]
 #1: ffffc90002f07bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 kernel/workqueue.c:3340
 #2: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:303
3 locks held by kworker/u8:15/6320:
 #0: ffff88802ee60948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3232 [inline]
 #0: ffff88802ee60948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 kernel/workqueue.c:3340
 #1: ffffc90005087bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3233 [inline]
 #1: ffffc90005087bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 kernel/workqueue.c:3340
 #2: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #2: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 net/ipv6/addrconf.c:4194
1 lock held by syz-executor/9113:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9117:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 net/core/rtnetlink.c:4071
1 lock held by syz-executor/9118:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 net/core/rtnetlink.c:4071
1 lock held by syz-executor/9119:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 net/core/rtnetlink.c:4071
7 locks held by syz-executor/9159:
 #0: ffff8880319e8420 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2681 [inline]
 #0: ffff8880319e8420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 fs/read_write.c:682
 #1: ffff888071de2888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 fs/kernfs/file.c:343
 #2: ffff888026f22b48 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888026f22b48 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 fs/kernfs/file.c:344
 #3: ffffffff8eb9faa8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x12c/0x6f0 drivers/net/netdevsim/bus.c:184
 #4: ffff88803001a0e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline]
 #4: ffff88803001a0e8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 drivers/base/dd.c:1006
 #5: ffff888045d1b250 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_drv_probe+0xc3/0xbc0 drivers/net/netdevsim/dev.c:1637
 #6: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #6: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 net/core/dev.c:2143
1 lock held by syz-executor/9258:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9261:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9266:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9268:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9273:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9279:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9283:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9285:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9289:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9295:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9300:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9306:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9308:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9311:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x135/0x170 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]
 watchdog+0xf95/0xfe0 kernel/hung_task.c:515
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:82
Code: 13 e3 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c2
RAX: 00000000002eb3a1 RBX: ffffffff819713ee RCX: 0000000080000001
RDX: 0000000000000001 RSI: ffffffff8d792055 RDI: ffffffff8bc083e0
RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db
R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822270
R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005628b4482230 CR3: 000000000dd3a000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline]
 default_idle+0x13/0x20 arch/x86/kernel/process.c:767
 default_idle_call+0x73/0xb0 kernel/sched/idle.c:122
 cpuidle_idle_call kernel/sched/idle.c:191 [inline]
 do_idle+0x1be/0x4d0 kernel/sched/idle.c:332
 cpu_startup_entry+0x44/0x60 kernel/sched/idle.c:430
 rest_init+0x2de/0x300 init/main.c:757
 start_kernel+0x381/0x3d0 init/main.c:1206
 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310
 x86_64_start_kernel+0x143/0x1c0 arch/x86/kernel/head64.c:291
 common_startup_64+0x13e/0x147
 </TASK>

final repro crashed as (corrupted=false):
INFO: task dhcpcd:5495 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:dhcpcd          state:D stack:21240 pid:5495  tgid:5495  ppid:5494   task_flags:0x400140 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 devinet_ioctl+0x323/0x1b20 net/ipv4/devinet.c:1120
 inet_ioctl+0x3c0/0x4c0 net/ipv4/af_inet.c:1009
 sock_do_ioctl+0xdc/0x300 net/socket.c:1254
 sock_ioctl+0x576/0x790 net/socket.c:1375
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2541d5a378
RSP: 002b:00007ffed284ad78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 00007f2541d5a378
RDX: 00007ffed285af70 RSI: 0000000000008914 RDI: 0000000000000016
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed286b110
R13: 00007f2541c5a6c8 R14: 0000000000000028 R15: 0000000000008914
 </TASK>
INFO: task kworker/1:6:6119 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:6     state:D stack:25176 pid:6119  tgid:6119  ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: events switchdev_deferred_process_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104
 process_one_work kernel/workqueue.c:3257 [inline]
 process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
INFO: task kworker/u8:9:6210 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:9    state:D stack:24568 pid:6210  tgid:6210  ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: events_unbound linkwatch_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 linkwatch_event+0xe/0x60 net/core/link_watch.c:303
 process_one_work kernel/workqueue.c:3257 [inline]
 process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
INFO: task kworker/u8:15:6320 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:15   state:D stack:23224 pid:6320  tgid:6320  ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 addrconf_dad_work+0x112/0x14b0 net/ipv6/addrconf.c:4194
 process_one_work kernel/workqueue.c:3257 [inline]
 process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
INFO: task syz-executor:9113 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:22392 pid:9113  tgid:9113  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
 rtnetlink_rcv_msg+0x7cf/0xb70 net/core/rtnetlink.c:6958
 netlink_rcv_skb+0x208/0x470 net/netlink/af_netlink.c:2550
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x82f/0x9e0 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1894
 sock_sendmsg_nosec net/socket.c:727 [inline]
 __sock_sendmsg+0x21c/0x270 net/socket.c:742
 __sys_sendto+0x3bd/0x520 net/socket.c:2206
 __do_sys_sendto net/socket.c:2213 [inline]
 __se_sys_sendto net/socket.c:2209 [inline]
 __x64_sys_sendto+0xde/0x100 net/socket.c:2209
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f21fe9915dc
RSP: 002b:00007ffeecd4d940 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f21ff714620 RCX: 00007f21fe9915dc
RDX: 0000000000000028 RSI: 00007f21ff714670 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007ffeecd4d994 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f21ff714670 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:9117 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:22136 pid:9117  tgid:9117  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 rtnl_lock net/core/rtnetlink.c:80 [inline]
 rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 rtnl_newlink+0x8ec/0x1c90 net/core/rtnetlink.c:4071
 rtnetlink_rcv_msg+0x7cf/0xb70 net/core/rtnetlink.c:6958
 netlink_rcv_skb+0x208/0x470 net/netlink/af_netlink.c:2550
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x82f/0x9e0 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1894
 sock_sendmsg_nosec net/socket.c:727 [inline]
 __sock_sendmsg+0x21c/0x270 net/socket.c:742
 __sys_sendto+0x3bd/0x520 net/socket.c:2206
 __do_sys_sendto net/socket.c:2213 [inline]
 __se_sys_sendto net/socket.c:2209 [inline]
 __x64_sys_sendto+0xde/0x100 net/socket.c:2209
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff712f915dc
RSP: 002b:00007fffcdc90230 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007ff713d135c0 RCX: 00007ff712f915dc
RDX: 0000000000000030 RSI: 00007ff713d13610 RDI: 0000000000000006
RBP: 0000000000000000 R08: 00007fffcdc90284 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
R13: 0000000000000000 R14: 00007ff713d13610 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:9118 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:22232 pid:9118  tgid:9118  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 rtnl_lock net/core/rtnetlink.c:80 [inline]
 rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 rtnl_newlink+0x8ec/0x1c90 net/core/rtnetlink.c:4071
 rtnetlink_rcv_msg+0x7cf/0xb70 net/core/rtnetlink.c:6958
 netlink_rcv_skb+0x208/0x470 net/netlink/af_netlink.c:2550
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x82f/0x9e0 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1894
 sock_sendmsg_nosec net/socket.c:727 [inline]
 __sock_sendmsg+0x21c/0x270 net/socket.c:742
 __sys_sendto+0x3bd/0x520 net/socket.c:2206
 __do_sys_sendto net/socket.c:2213 [inline]
 __se_sys_sendto net/socket.c:2209 [inline]
 __x64_sys_sendto+0xde/0x100 net/socket.c:2209
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd1c13915dc
RSP: 002b:00007ffdad1d2230 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fd1c2114620 RCX: 00007fd1c13915dc
RDX: 000000000000002c RSI: 00007fd1c2114670 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007ffdad1d2284 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 0000000000000000 R14: 00007fd1c2114670 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:9119 blocked for more than 145 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:21720 pid:9119  tgid:9119  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 rtnl_lock net/core/rtnetlink.c:80 [inline]
 rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 rtnl_newlink+0x8ec/0x1c90 net/core/rtnetlink.c:4071
 rtnetlink_rcv_msg+0x7cf/0xb70 net/core/rtnetlink.c:6958
 netlink_rcv_skb+0x208/0x470 net/netlink/af_netlink.c:2550
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x82f/0x9e0 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1894
 sock_sendmsg_nosec net/socket.c:727 [inline]
 __sock_sendmsg+0x21c/0x270 net/socket.c:742
 __sys_sendto+0x3bd/0x520 net/socket.c:2206
 __do_sys_sendto net/socket.c:2213 [inline]
 __se_sys_sendto net/socket.c:2209 [inline]
 __x64_sys_sendto+0xde/0x100 net/socket.c:2209
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6c77b915dc
RSP: 002b:00007ffd67155990 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f6c78914620 RCX: 00007f6c77b915dc
RDX: 000000000000002c RSI: 00007f6c78914670 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007ffd671559e4 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f6c78914670 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:9159 blocked for more than 145 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:22392 pid:9159  tgid:9159  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776
 rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 rtnl_net_dev_lock+0x257/0x2f0 net/core/dev.c:2143
 register_netdevice_notifier_dev_net+0x33/0x240 net/core/dev.c:2170
 nsim_init_netdevsim drivers/net/netdevsim/netdev.c:1072 [inline]
 nsim_create+0xc29/0x1050 drivers/net/netdevsim/netdev.c:1143
 __nsim_dev_port_add+0x6a6/0xaf0 drivers/net/netdevsim/dev.c:1493
 nsim_dev_port_add_all+0x37/0xf0 drivers/net/netdevsim/dev.c:1549
 nsim_drv_probe+0x8a5/0xbc0 drivers/net/netdevsim/dev.c:1709
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x26d/0xad0 drivers/base/dd.c:659
 __driver_probe_device+0x18c/0x320 drivers/base/dd.c:801
 driver_probe_device+0x4f/0x240 drivers/base/dd.c:831
 __device_attach_driver+0x279/0x430 drivers/base/dd.c:959
 bus_for_each_drv+0x251/0x2e0 drivers/base/bus.c:500
 __device_attach+0x2b8/0x430 drivers/base/dd.c:1031
 device_initial_probe+0xa1/0xd0 drivers/base/dd.c:1086
 bus_probe_device+0x12a/0x220 drivers/base/bus.c:574
 device_add+0x7b6/0xb80 drivers/base/core.c:3689
 nsim_bus_dev_new drivers/net/netdevsim/bus.c:463 [inline]
 new_device_store+0x36c/0x6f0 drivers/net/netdevsim/bus.c:191
 kernfs_fop_write_iter+0x3af/0x540 fs/kernfs/file.c:352
 new_sync_write fs/read_write.c:593 [inline]
 vfs_write+0x5c9/0xb30 fs/read_write.c:686
 ksys_write+0x145/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7fc258e1ff
RSP: 002b:00007ffe732fbdb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f7fc258e1ff
RDX: 0000000000000003 RSI: 00007ffe732fbe00 RDI: 0000000000000005
RBP: 00007f7fc26152ef R08: 0000000000000000 R09: 00007ffe732fbc07
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 00007ffe732fbe00 R14: 00007f7fc3314620 R15: 0000000000000003
 </TASK>

Showing all locks held in the system:
5 locks held by kworker/u8:0/12:
1 lock held by khungtaskd/31:
 #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline]
 #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775
4 locks held by kworker/u8:4/68:
1 lock held by klogd/5189:
 #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:639
1 lock held by dhcpcd/5495:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b20 net/ipv4/devinet.c:1120
2 locks held by getty/5591:
 #0: ffff88814ec590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 drivers/tty/n_tty.c:2211
3 locks held by kworker/1:6/6119:
 #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3232 [inline]
 #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 kernel/workqueue.c:3340
 #1: ffffc90003157bc0 (deferred_process_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3233 [inline]
 #1: ffffc90003157bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 kernel/workqueue.c:3340
 #2: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104
3 locks held by kworker/u8:9/6210:
 #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3232 [inline]
 #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 kernel/workqueue.c:3340
 #1: ffffc90002f07bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3233 [inline]
 #1: ffffc90002f07bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 kernel/workqueue.c:3340
 #2: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:303
3 locks held by kworker/u8:15/6320:
 #0: ffff88802ee60948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3232 [inline]
 #0: ffff88802ee60948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 kernel/workqueue.c:3340
 #1: ffffc90005087bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3233 [inline]
 #1: ffffc90005087bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 kernel/workqueue.c:3340
 #2: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #2: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 net/ipv6/addrconf.c:4194
1 lock held by syz-executor/9113:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9117:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 net/core/rtnetlink.c:4071
1 lock held by syz-executor/9118:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 net/core/rtnetlink.c:4071
1 lock held by syz-executor/9119:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 net/core/rtnetlink.c:4071
7 locks held by syz-executor/9159:
 #0: ffff8880319e8420 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2681 [inline]
 #0: ffff8880319e8420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 fs/read_write.c:682
 #1: ffff888071de2888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 fs/kernfs/file.c:343
 #2: ffff888026f22b48 (kn->active#59){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888026f22b48 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 fs/kernfs/file.c:344
 #3: ffffffff8eb9faa8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x12c/0x6f0 drivers/net/netdevsim/bus.c:184
 #4: ffff88803001a0e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline]
 #4: ffff88803001a0e8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 drivers/base/dd.c:1006
 #5: ffff888045d1b250 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_drv_probe+0xc3/0xbc0 drivers/net/netdevsim/dev.c:1637
 #6: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #6: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 net/core/dev.c:2143
1 lock held by syz-executor/9258:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9261:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9266:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9268:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9273:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9279:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9283:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9285:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9289:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9295:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9300:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9306:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9308:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978
1 lock held by syz-executor/9311:
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 net/ipv4/devinet.c:978

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x135/0x170 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]
 watchdog+0xf95/0xfe0 kernel/hung_task.c:515
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:82
Code: 13 e3 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c2
RAX: 00000000002eb3a1 RBX: ffffffff819713ee RCX: 0000000080000001
RDX: 0000000000000001 RSI: ffffffff8d792055 RDI: ffffffff8bc083e0
RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db
R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822270
R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005628b4482230 CR3: 000000000dd3a000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline]
 default_idle+0x13/0x20 arch/x86/kernel/process.c:767
 default_idle_call+0x73/0xb0 kernel/sched/idle.c:122
 cpuidle_idle_call kernel/sched/idle.c:191 [inline]
 do_idle+0x1be/0x4d0 kernel/sched/idle.c:332
 cpu_startup_entry+0x44/0x60 kernel/sched/idle.c:430
 rest_init+0x2de/0x300 init/main.c:757
 start_kernel+0x381/0x3d0 init/main.c:1206
 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310
 x86_64_start_kernel+0x143/0x1c0 arch/x86/kernel/head64.c:291
 common_startup_64+0x13e/0x147
 </TASK>