Extracting prog: 46m37.316846896s
Minimizing prog: 2h18m18.972222248s
Simplifying prog options: 16m35.641297833s
Extracting C: 6m11.991289329s
Simplifying C: 0s


extracting reproducer from 58 programs
testing a last program of every proc
single: executing 13 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-socket$alg-add_key$keyring-keyctl$KEYCTL_MOVE-keyctl$join-prctl$PR_SCHED_CORE-prlimit64-sched_setscheduler-sched_setaffinity-syz_open_dev$MSR-add_key$keyring-add_key$user-read$msr-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-mkdir-rmdir-close_range-openat$sndseq-ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE-socket$packet-bind$alg-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x3, r2, r2, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000002180)={'syz', 0x1})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000400)="717bceae04005aff4ea7d7f2062ee74fc481c19afd7c8a83148a8594447cfe10981d818b569ec302644989af796522ecd73c7d00b75af55afc12a02766b17fa0ee2ea45658c2b2df493aa7749b3f5d93e0964689b1799de48fa09ffb8ec849bd9263f30270ceda33f13f705b2a194fe5d92ba4bf828612685dae6d1ddf50696707556234c5adbf1aac1f69c032424546fd9bdd1d5b811dafb972f148e32d4c3a3674d04fef06a57b1294043eab6bd8", 0xaf, r4)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
socket$packet(0x11, 0x2, 0x300)
bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)={0x3, 0x0, [{0x100000, 0xf5, &(0x7f00000004c0)=""/245}, {0x1000, 0xa2, &(0x7f0000000340)=""/162}, {0xc000, 0x1000, &(0x7f00000005c0)=""/4096}]})
r6 = eventfd2(0x2, 0x800)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r6})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r6})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0xfffffffe)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socketpair$unix-socket$alg-bind$alg-accept4-socket-socket$inet_tcp-socket$inet_tcp-socket$netlink-socket$nl_route-memfd_create-creat-pipe2$9p-pipe2$9p-socket-write$P9_RLERRORu-mount$9p_fd-socket-socket-socket$nl_route-socket$nl_generic-socket$nl_generic-socket$inet6-socket$alg-socket$alg-socket$inet6_sctp-socket$inet6_sctp-socket$nl_xfrm-socket$nl_xfrm-socket$nl_xfrm-socket$nl_xfrm-socket$nl_xfrm-socket$nl_netfilter-socket$nl_netfilter-openat$cgroup_ro-syz_init_net_socket$bt_rfcomm-syz_init_net_socket$bt_rfcomm-socket$nl_generic-socket$nl_generic-socket$kcm
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
socket(0x40000000002, 0x3, 0x80000000002)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
memfd_create(&(0x7f0000001a40)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7\x06\x00\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x82h\xb2\xba0x|Zs\xfcN\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xfbo\xb8\x8f]\x14\x1d\xe3B\x14\xb8\xe1\xdaTF\x9cb\xeb\xfc8\xebc(\x8a\xef\xfa\xec\x82\xf2\xce\xb1\xb2\x05\xf1\xef\xa9(\xd2Y\x06\xb3\x95\x14\x1a\xcb\x19\x96p\x94@G\xa2\xd0\xa1m\x9a', 0x6)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}})
socket(0x1, 0x5, 0x0) (async)
socket(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
socket$alg(0x26, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x11, 0x2, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$uac1-syz_usb_connect$cdc_ncm-ioctl$TIOCSETD-socket$inet-semtimedop-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-setsockopt$inet_sctp6_SCTP_ADD_STREAMS-sendmsg$DEVLINK_CMD_RATE_GET-kexec_load
detailed listing:
executing program 0:
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="d917500051a80dac52e6631d6ee1d0296234ebdf02352c738d4e39af11dcc3a9dc84ab97594b8e6291789875b152fedf0000000000000000a41c6c3c75a67bdce35b76c28f07aafdd710000000000000"], 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$inet(0x2b, 0x801, 0x0)
semtimedop(0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0)
kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0), 0x0, 0x0, 0x1000}], 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$uac1-syz_usb_connect$cdc_ncm-ioctl$TIOCSETD-socket$inet-semtimedop-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-setsockopt$inet_sctp6_SCTP_ADD_STREAMS-sendmsg$DEVLINK_CMD_RATE_GET-kexec_load
detailed listing:
executing program 0:
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="d917500051a80dac52e6631d6ee1d0296234ebdf02352c738d4e39af11dcc3a9dc84ab97594b8e6291789875b152fedf0000000000000000a41c6c3c75a67bdce35b76c28f07aafdd710000000000000"], 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$inet(0x2b, 0x801, 0x0)
semtimedop(0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0)
kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0), 0x0, 0x0, 0x1000}], 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-sched_setaffinity-getpid-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-bpf$BPF_RAW_TRACEPOINT_OPEN-socket$nl_netfilter-io_setup-io_submit-socket$nl_netfilter-connect$unix-getpid-ioctl$sock_ifreq-socket$inet6_udp-ioctl$sock_proto_private-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-socketpair$nbd-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
io_setup(0xa, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000180))
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
getpid()
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_proto_private(r3, 0x8b24, &(0x7f0000000080))
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='rpcgss_upcall_result\x00', 0xffffffffffffffff, 0x0, 0xb2}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mkdirat-openat$loop_ctrl-prlimit64-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-sendmmsg$unix-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-sync-socket-bind$packet-bpf$PROG_LOAD-bpf$PROG_LOAD-sendmsg$ETHTOOL_MSG_EEE_SET-setsockopt$inet6_mreq-socket$nl_generic-sendmsg$nl_generic-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD_XDP-bpf$BPF_RAW_TRACEPOINT_OPEN-socketpair$nbd-ioctl$SIOCSIFHWADDR-sendto$packet
detailed listing:
executing program 0:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x17, 0x0, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sync()
r2 = socket(0x11, 0x3, 0x0)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000008900)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006e80)={0x0}, 0x1, 0x0, 0x0, 0x88c0}, 0x40000)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000240)={@local}, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, 0x3d, 0x9, 0x80000, 0x800, {0x1}, [@nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"})
sendto$packet(r2, &(0x7f00000002c0)="fb5797bac8000000000000000000", 0xe, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mkdirat-openat$loop_ctrl-prlimit64-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-sendmmsg$unix-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-sync-socket-bind$packet-bpf$PROG_LOAD-bpf$PROG_LOAD-sendmsg$ETHTOOL_MSG_EEE_SET-setsockopt$inet6_mreq-socket$nl_generic-sendmsg$nl_generic-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD_XDP-bpf$BPF_RAW_TRACEPOINT_OPEN-socketpair$nbd-ioctl$SIOCSIFHWADDR-sendto$packet
detailed listing:
executing program 0:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x17, 0x0, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sync()
r2 = socket(0x11, 0x3, 0x0)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000008900)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006e80)={0x0}, 0x1, 0x0, 0x0, 0x88c0}, 0x40000)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000240)={@local}, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x3d, 0x9, 0x80000, 0x800, {0x1}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"})
sendto$packet(r2, &(0x7f00000002c0)="fb5797bac8000000000000000000", 0xe, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$vim2m_VIDIOC_ENUM_FMT-ioctl$NBD_DO_IT-syz_open_procfs-ioctl$NBD_SET_SIZE_BLOCKS-ioctl$NBD_CLEAR_SOCK-openat$vga_arbiter-write$vga_arbiter-openat$cgroup_ro-openat$cgroup_ro-write$binfmt_script-mmap-bpf$PROG_LOAD-socket$inet6-bind$inet6-listen
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
listen(r4, 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641})
ioctl$NBD_DO_IT(r2, 0xab03)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)
ioctl$NBD_CLEAR_SOCK(r1, 0x125f)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, &(0x7f00000004c0), &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r7, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @local, 0x7ff}, 0x1c)
listen(r7, 0x5)

program crashed: INFO: task hung in bdev_open
single: successfully extracted reproducer
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$vim2m_VIDIOC_ENUM_FMT-ioctl$NBD_DO_IT-syz_open_procfs-ioctl$NBD_SET_SIZE_BLOCKS-ioctl$NBD_CLEAR_SOCK-openat$vga_arbiter-write$vga_arbiter-openat$cgroup_ro-openat$cgroup_ro-write$binfmt_script-mmap-bpf$PROG_LOAD-socket$inet6-bind$inet6
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
listen(r4, 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641})
ioctl$NBD_DO_IT(r2, 0xab03)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)
ioctl$NBD_CLEAR_SOCK(r1, 0x125f)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, &(0x7f00000004c0), &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r7, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @local, 0x7ff}, 0x1c)

program crashed: INFO: task hung in bdev_open
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$vim2m_VIDIOC_ENUM_FMT-ioctl$NBD_DO_IT-syz_open_procfs-ioctl$NBD_SET_SIZE_BLOCKS-ioctl$NBD_CLEAR_SOCK-openat$vga_arbiter-write$vga_arbiter-openat$cgroup_ro-openat$cgroup_ro-write$binfmt_script-mmap-bpf$PROG_LOAD-socket$inet6
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
listen(r4, 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641})
ioctl$NBD_DO_IT(r2, 0xab03)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)
ioctl$NBD_CLEAR_SOCK(r1, 0x125f)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, &(0x7f00000004c0), &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x6, 0x0)

program crashed: INFO: task hung in bdev_open
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$vim2m_VIDIOC_ENUM_FMT-ioctl$NBD_DO_IT-syz_open_procfs-ioctl$NBD_SET_SIZE_BLOCKS-ioctl$NBD_CLEAR_SOCK-openat$vga_arbiter-write$vga_arbiter-openat$cgroup_ro-openat$cgroup_ro-write$binfmt_script-mmap-bpf$PROG_LOAD
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
listen(r4, 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641})
ioctl$NBD_DO_IT(r2, 0xab03)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)
ioctl$NBD_CLEAR_SOCK(r1, 0x125f)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, &(0x7f00000004c0), &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

program crashed: INFO: task hung in bdev_open
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$vim2m_VIDIOC_ENUM_FMT-ioctl$NBD_DO_IT-syz_open_procfs-ioctl$NBD_SET_SIZE_BLOCKS-ioctl$NBD_CLEAR_SOCK-openat$vga_arbiter-write$vga_arbiter-openat$cgroup_ro-openat$cgroup_ro-write$binfmt_script-mmap
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
listen(r4, 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641})
ioctl$NBD_DO_IT(r2, 0xab03)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)
ioctl$NBD_CLEAR_SOCK(r1, 0x125f)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)

program crashed: INFO: task hung in bdev_open
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$vim2m_VIDIOC_ENUM_FMT-ioctl$NBD_DO_IT-syz_open_procfs-ioctl$NBD_SET_SIZE_BLOCKS-ioctl$NBD_CLEAR_SOCK-openat$vga_arbiter-write$vga_arbiter-openat$cgroup_ro-openat$cgroup_ro-write$binfmt_script
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
listen(r4, 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641})
ioctl$NBD_DO_IT(r2, 0xab03)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)
ioctl$NBD_CLEAR_SOCK(r1, 0x125f)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfecc)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$vim2m_VIDIOC_ENUM_FMT-ioctl$NBD_DO_IT-syz_open_procfs-ioctl$NBD_SET_SIZE_BLOCKS-ioctl$NBD_CLEAR_SOCK-openat$vga_arbiter-write$vga_arbiter-openat$cgroup_ro-openat$cgroup_ro
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
listen(r4, 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641})
ioctl$NBD_DO_IT(r2, 0xab03)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)
ioctl$NBD_CLEAR_SOCK(r1, 0x125f)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)

program crashed: INFO: task hung in bdev_open
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$vim2m_VIDIOC_ENUM_FMT-ioctl$NBD_DO_IT-syz_open_procfs-ioctl$NBD_SET_SIZE_BLOCKS-ioctl$NBD_CLEAR_SOCK-openat$vga_arbiter-write$vga_arbiter-openat$cgroup_ro
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
listen(r4, 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641})
ioctl$NBD_DO_IT(r2, 0xab03)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)
ioctl$NBD_CLEAR_SOCK(r1, 0x125f)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$vim2m_VIDIOC_ENUM_FMT-ioctl$NBD_DO_IT-syz_open_procfs-ioctl$NBD_SET_SIZE_BLOCKS-ioctl$NBD_CLEAR_SOCK-openat$vga_arbiter-write$vga_arbiter
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
listen(r4, 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641})
ioctl$NBD_DO_IT(r2, 0xab03)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)
ioctl$NBD_CLEAR_SOCK(r1, 0x125f)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r5, 0x0, 0x0)

program crashed: INFO: task hung in bdev_open
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$vim2m_VIDIOC_ENUM_FMT-ioctl$NBD_DO_IT-syz_open_procfs-ioctl$NBD_SET_SIZE_BLOCKS-ioctl$NBD_CLEAR_SOCK-openat$vga_arbiter
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
listen(r4, 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641})
ioctl$NBD_DO_IT(r2, 0xab03)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)
ioctl$NBD_CLEAR_SOCK(r1, 0x125f)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$vim2m_VIDIOC_ENUM_FMT-ioctl$NBD_DO_IT-syz_open_procfs-ioctl$NBD_SET_SIZE_BLOCKS-ioctl$NBD_CLEAR_SOCK
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
listen(r4, 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641})
ioctl$NBD_DO_IT(r2, 0xab03)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)
ioctl$NBD_CLEAR_SOCK(r1, 0x125f)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$vim2m_VIDIOC_ENUM_FMT-ioctl$NBD_DO_IT-syz_open_procfs-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
listen(r4, 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641})
ioctl$NBD_DO_IT(r2, 0xab03)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$vim2m_VIDIOC_ENUM_FMT-ioctl$NBD_DO_IT-syz_open_procfs
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
listen(r4, 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641})
ioctl$NBD_DO_IT(r2, 0xab03)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$vim2m_VIDIOC_ENUM_FMT-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
listen(r4, 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641})
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$vim2m_VIDIOC_ENUM_FMT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
r3 = socket(0x23, 0x80805, 0x0)
listen(r3, 0x4000000)
sendmmsg$sock(r3, 0x0, 0x0, 0x800)
listen(r3, 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641})
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
listen(r4, 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x3)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
listen(r4, 0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-listen-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
listen(r4, 0x7)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-sendmmsg$sock-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
sendmmsg$sock(r4, 0x0, 0x0, 0x800)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-listen-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x4000000)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-socket-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
socket(0x23, 0x80805, 0x0)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socket-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
socket(0x21, 0x5, 0xfffffffc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-mknod$loop-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x5899, 0x1)
r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-fchdir-syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
fchdir(r0)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r3)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_procfs-syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x1)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48)
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x1)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x1)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
r0 = syz_open_dev$ndb(0x0, 0x0, 0x100000)
r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
r1 = syz_open_dev$ndb(0x0, 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x1)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000)
r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x1)

program crashed: INFO: task hung in bdev_release
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
reproducing took 3h27m28.220292813s
repro crashed as (corrupted=false):
INFO: task syz.0.16:6026 blocked for more than 143 seconds.
      Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16        state:D stack:26048 pid:6026  tgid:6026  ppid:5933   task_flags:0x400040 flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0xf43/0x5890 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x6bd/0xb10 kernel/locking/mutex.c:730
 bdev_release+0x15a/0x6d0 block/bdev.c:1086
 blkdev_release+0x15/0x20 block/fops.c:660
 __fput+0x3ff/0xb70 fs/file_table.c:464
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x27b/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc75d38d169
RSP: 002b:00007ffe0db8ef38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007fc75d5a7ba0 RCX: 00007fc75d38d169
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007fc75d5a7ba0 R08: 0000000000000000 R09: 000000060db8f22f
R10: 00007fc75d5a7ac0 R11: 0000000000000246 R12: 000000000000e9bf
R13: 00007fc75d5a6080 R14: ffffffffffffffff R15: 00007ffe0db8f050
 </TASK>
INFO: task syz.0.16:6027 blocked for more than 143 seconds.
      Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16        state:D stack:27120 pid:6027  tgid:6026  ppid:5933   task_flags:0x400140 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0xf43/0x5890 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x6bd/0xb10 kernel/locking/mutex.c:730
 bdev_release+0x15a/0x6d0 block/bdev.c:1086
 blkdev_release+0x15/0x20 block/fops.c:660
 __fput+0x3ff/0xb70 fs/file_table.c:464
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x27b/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc75d38d169
RSP: 002b:00007fc75e238038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: 0000000000000000 RBX: 00007fc75d5a5fa0 RCX: 00007fc75d38d169
RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004
RBP: 00007fc75d40e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fc75d5a5fa0 R15: 00007ffe0db8edd8
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/31:
 #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6746
2 locks held by klogd/5183:
 #0: ffff8880b873ec18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:598
 #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:598
2 locks held by getty/5573:
 #0: ffff8880320250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211
1 lock held by udevd/5829:
 #0: ffff888025c8b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by udevd/5830:
 #0: ffff888025b774c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by udevd/5941:
 #0: ffff888025cd34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by udevd/5942:
 #0: ffff888025cd74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.0.16/6026:
 #0: ffff888025b774c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.0.16/6027:
 #0: ffff888025b774c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.1.17/6047:
 #0: ffff888025cd34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.1.17/6048:
 #0: ffff888025cd34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.2.18/6068:
 #0: ffff888025c8b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.2.18/6069:
 #0: ffff888025c8b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.3.19/6087:
 #0: ffff888025cd74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.3.19/6088:
 #0: ffff888025cd74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6090:
 #0: ffff888025cf34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.4.20/6111:
 #0: ffff888025cf34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.4.20/6112:
 #0: ffff888025cf34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6117:
 #0: ffff888025c8f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.5.21/6135:
 #0: ffff888025c8f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.5.21/6136:
 #0: ffff888025c8f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6141:
 #0: ffff888025cf74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.6.22/6159:
 #0: ffff888025cf74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.6.22/6160:
 #0: ffff888025cf74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6166:
 #0: ffff888025e234c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.7.23/6185:
 #0: ffff888025e234c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.7.23/6186:
 #0: ffff888025e234c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6188:
 #0: ffff888025f4b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by udevd/6192:
 #0: ffff888025f4c4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.8.24/6211:
 #0: ffff888025f4b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.8.24/6212:
 #0: ffff888025f4b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.9.25/6234:
 #0: ffff888025f4c4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.9.25/6235:
 #0: ffff888025f4c4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:236 [inline]
 watchdog+0xf62/0x12b0 kernel/hung_task.c:399
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline]
NMI backtrace for cpu 0 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:106 [inline]
NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 drivers/acpi/processor_idle.c:111

final repro crashed as (corrupted=false):
INFO: task syz.0.16:6026 blocked for more than 143 seconds.
      Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16        state:D stack:26048 pid:6026  tgid:6026  ppid:5933   task_flags:0x400040 flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0xf43/0x5890 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x6bd/0xb10 kernel/locking/mutex.c:730
 bdev_release+0x15a/0x6d0 block/bdev.c:1086
 blkdev_release+0x15/0x20 block/fops.c:660
 __fput+0x3ff/0xb70 fs/file_table.c:464
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x27b/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc75d38d169
RSP: 002b:00007ffe0db8ef38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007fc75d5a7ba0 RCX: 00007fc75d38d169
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007fc75d5a7ba0 R08: 0000000000000000 R09: 000000060db8f22f
R10: 00007fc75d5a7ac0 R11: 0000000000000246 R12: 000000000000e9bf
R13: 00007fc75d5a6080 R14: ffffffffffffffff R15: 00007ffe0db8f050
 </TASK>
INFO: task syz.0.16:6027 blocked for more than 143 seconds.
      Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16        state:D stack:27120 pid:6027  tgid:6026  ppid:5933   task_flags:0x400140 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0xf43/0x5890 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x6bd/0xb10 kernel/locking/mutex.c:730
 bdev_release+0x15a/0x6d0 block/bdev.c:1086
 blkdev_release+0x15/0x20 block/fops.c:660
 __fput+0x3ff/0xb70 fs/file_table.c:464
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x27b/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc75d38d169
RSP: 002b:00007fc75e238038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: 0000000000000000 RBX: 00007fc75d5a5fa0 RCX: 00007fc75d38d169
RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004
RBP: 00007fc75d40e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fc75d5a5fa0 R15: 00007ffe0db8edd8
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/31:
 #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6746
2 locks held by klogd/5183:
 #0: ffff8880b873ec18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:598
 #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:598
2 locks held by getty/5573:
 #0: ffff8880320250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211
1 lock held by udevd/5829:
 #0: ffff888025c8b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by udevd/5830:
 #0: ffff888025b774c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by udevd/5941:
 #0: ffff888025cd34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by udevd/5942:
 #0: ffff888025cd74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.0.16/6026:
 #0: ffff888025b774c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.0.16/6027:
 #0: ffff888025b774c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.1.17/6047:
 #0: ffff888025cd34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.1.17/6048:
 #0: ffff888025cd34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.2.18/6068:
 #0: ffff888025c8b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.2.18/6069:
 #0: ffff888025c8b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.3.19/6087:
 #0: ffff888025cd74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.3.19/6088:
 #0: ffff888025cd74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6090:
 #0: ffff888025cf34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.4.20/6111:
 #0: ffff888025cf34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.4.20/6112:
 #0: ffff888025cf34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6117:
 #0: ffff888025c8f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.5.21/6135:
 #0: ffff888025c8f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.5.21/6136:
 #0: ffff888025c8f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6141:
 #0: ffff888025cf74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.6.22/6159:
 #0: ffff888025cf74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.6.22/6160:
 #0: ffff888025cf74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6166:
 #0: ffff888025e234c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.7.23/6185:
 #0: ffff888025e234c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.7.23/6186:
 #0: ffff888025e234c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6188:
 #0: ffff888025f4b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by udevd/6192:
 #0: ffff888025f4c4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.8.24/6211:
 #0: ffff888025f4b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.8.24/6212:
 #0: ffff888025f4b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.9.25/6234:
 #0: ffff888025f4c4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.9.25/6235:
 #0: ffff888025f4c4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:236 [inline]
 watchdog+0xf62/0x12b0 kernel/hung_task.c:399
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline]
NMI backtrace for cpu 0 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:106 [inline]
NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 drivers/acpi/processor_idle.c:111