Extracting prog: 31m48.66716936s
Minimizing prog: 2h35m43.780192986s
Simplifying prog options: 17m34.918362493s
Extracting C: 5m13.030018088s
Simplifying C: 0s


extracting reproducer from 45 programs
testing a last program of every proc
single: executing 10 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_kernfs_file_fops_kernfs_internal-mmap$auto-close_range$auto-socket$nl_generic-socket-socket-sendto$auto-prctl$auto-write$auto-openat$auto_mousedev_fops_mousedev-mmap$auto-openat$auto_dvb_demux_fops_dmxdev-ioctl$auto_dvb_demux_fops_dmxdev-ioctl$auto_dvb_demux_fops_dmxdev-openat$auto_snd_pcm_oss_f_reg_pcm_oss-ioctl$auto_SNDCTL_DSP_GETIPTR-io_uring_setup$auto-openat$auto_vhci_fops_hci_vhci-read$auto_vhci_fops_hci_vhci-openat$auto_snapshot_fops_user-mmap$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-select$auto-openat$auto_kernfs_file_fops_kernfs_internal-socket-openat$auto_uinput_fops_uinput-openat$auto_kernfs_file_fops_kernfs_internal-write$auto
detailed listing:
executing program 0:
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x1, 0x0)
socket(0x11, 0x80003, 0x300)
sendto$auto(0x3, 0x0, 0xfdef, 0x7, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x20)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0)
mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x140146f2c, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp1\x00', 0x8001, 0x0)
ioctl$auto_SNDCTL_DSP_GETIPTR(r1, 0x800c5011, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x0, 0xffffffffffffffff, [], {0x9, 0x6, 0x8c48, 0x29b, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x4, 0x1a7b870a, 0x76c5, 0x5, 0x500000000}})
r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x4b8646a2b72b4648, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0xfffffffffffeffff, 0xd, 0x1, 0x948d, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0)
socket(0x2c, 0x3, 0x0)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x610841, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:01.3/rescan\x00', 0x1a1181, 0x0)
write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-prctl$auto-sendmsg$auto_NL80211_CMD_GET_REG-close_range$auto-socket$nl_generic-socket-socket-get_robust_list$auto-setsockopt$auto-syz_genetlink_get_family_id$auto_tipcv2-sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP-setsockopt$auto-recvmmsg$auto-sendmmsg$auto-sendmmsg$auto-sendmmsg$auto-prctl$auto-bpf$auto_BPF_PROG_LOAD-syz_genetlink_get_family_id$auto_nl80211-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-mmap$auto-io_uring_setup$auto-madvise$auto-openat$auto_iommufd_fops_main-ioctl$auto_VFIO_IOMMU_MAP_DMA
detailed listing:
executing program 0:
mmap$auto(0x401000000000, 0x40000004020009, 0xc, 0x15, 0xffffffffffffffff, 0x7ffe)
r0 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14)
r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r2)
sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x1d90, r5, 0xa08, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x309, 0x9, 0x0, 0x1, [@nested={0xc, 0xe7, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @generic="0602bf60393b8e8c11f6cd9517d218fb1332b73000bf0615509cbcfe065420c5a8267e38c3168162b01da5b94d7ecf0e134186aff62b953239185b0eaa5deac2d64935195b895c1a9410cd67f6b3e723b4eda49c1f83d8ad650ffaecdc3f8d2085c1f4a44f5c7f3110806bc714133668fc964068183d21c40b", @nested={0xfd, 0x7b, 0x0, 0x1, [@typed={0x14, 0x9, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xb7, 0x0, 0x0, @fd=r2}, @generic="5707be7cd8848e7744de2fb3b8bd1dfbcab32ed5616e3e0b305ea367d9c1a760158c9e347046ff09af0a5f8bdb4724075cf1d6f3b30fceabe162bf7d38c2346cdc953da7703957c1acfd0b58c9848d992fd8d3d4ec08", @nested={0x4, 0x9}, @typed={0x8, 0x3c, 0x0, 0x0, @fd=r1}, @generic="7178669e76246d2ec3144878e993b15b24a61a6ce71dc43fc7bc4df85b46f4b8ba3240ea8cda08d05aa5a711f537e936ecf7e5589e21e8bc861a0e1658c42a0cedb0c864c8d5b28ab645ddc35c64d6df7202fa74528f9f42d53ede867696940ae69232", @nested={0x4, 0x141}, @typed={0x8, 0x27, 0x0, 0x0, @pid}, @nested={0x4, 0x9b}, @typed={0x8, 0x34, 0x0, 0x0, @ipv4=@empty}]}, @nested={0xab, 0x86, 0x0, 0x1, [@nested={0x4, 0x3}, @generic="8352f74ae947fb23c79111bc17b6bf8c6c3d619fc962743d7d", @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x11e}, @generic="27a418ee81d8d4625e800957f968a786b97aee04fe05f579d40c5406fd0d5ef0103e622a30d7ae796f01424e1cee1b2f82b798bd87ce1151af749262a081ccbf323c40080d96e502fc77c2b2b0fd240a6602b1352d77649318b9f91026a21728eb7be75449a5e5d620d983c79b7dc4e8e542"]}, @generic="729c70094e951838c6c10d02f507d846b1b09fe0b19842d0f79322ee4d223f6dc68534052022adf30b8b217a692b6e184d0912bbb191ec1ddff9644dcd5c67984d729df9c870a12cd2d0562e8ceae6f8eeda8d3416a8c1f094839f061a4add8fa9044cedd640a014fd2752c2ca03ae256937be3e449f21cfea42723a8109f039b474e345a11a7aabaced775bbeb653270c8e20853679dd1a8f236fcc1c563943a06ab168fb6141682e19907ba333753b79debc5f", @nested={0x1f, 0x3d, 0x0, 0x1, [@generic="e2a50e9926de63ef942dfb2e3f4ba87020906ef84b514ccb6c18dc"]}]}, @TIPC_NLA_MEDIA={0xfe, 0x5, 0x0, 0x1, [@typed={0x8, 0xc4, 0x0, 0x0, @fd=r0}, @nested={0x18, 0x69, 0x0, 0x1, [@typed={0x14, 0x66, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x26}}]}, @nested={0x20, 0x135, 0x0, 0x1, [@nested={0x4, 0x7d}, @typed={0x8, 0x12f, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x795}, @typed={0x6, 0x8d, 0x0, 0x0, @str='{\x00'}]}, @nested={0x20, 0xdb, 0x0, 0x1, [@nested={0x4, 0x11b}, @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0xd0}]}, @typed={0x4, 0xca}, @nested={0x4, 0xf3}, @generic="b1ac8cc2f2532445cf4f070f70d7db4240319ce22baa1cf45c6edb6123a7506113f7079cc5befdb7efcda99dac56274f77e6b4ca6b73f565baeef0b044e16f50868aedae53adacfda229944027b08ed35e913361503c477b8a27a558d116498ae75b105aef6daa44b7122d40822b426b7c575fbd2a8c94408c1d9b433df908c397a18891960715dcd269", @nested={0x8, 0x107, 0x0, 0x1, [@nested={0x4, 0x11a}]}]}, @TIPC_NLA_LINK={0x583, 0x4, 0x0, 0x1, [@generic="74f21ce5a5e37b59bba86390d6a50f13a4e57d6930a27e61bdefaba25562857af34f54bbbf8dea09e7a686e70c823e96714d85668df3e2e9e7f9f4ca706ffd6459535b4d95db88cac6366775fe26b4bbabcdf79f129d7a62a73aa01b0ba3f0841be3c22f5235d97787ed", @typed={0x4, 0x67}, @generic="ec8e2fde77cc9bd71b33a7b512814872ac7413ad83", @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x85, 0xfa, 0x0, 0x0, @binary="c73c78455c0a7ca08f4b32c31a1d076653e2cf8b4c301619322c2ff6f53738535c3f71b2416c8b2b9c62fbea50ab0e7758015868ff1d31842799499e6d7cc3a5a4406b1c1686ca977cc478d2f25cc58157dc2f243c84004c1095aa042ddf3b1c22441999a56ee9bebe99594a2702bb9059b51571dfe10e6b159308cd4990becdf2"}, @generic="147ef978ae28b1ef61321c766aa0a3016c8bc6596d6f3c6a9e9446250e8b86a258e6499b151e464b780fd59260cf4ce97e92aad0cb7a986f7e97491d9969dccae556fc5e507aee23f40c83991fe894a004094302893261344a2d78852392bf3585a819f96cfe3ed7a5fecb572454a7c0b2e676dab4d8d7b2357897fd1777ee5c816efdcd4444df833cc7978c7f54cde157e3cf7ccfa646c7235ab050abed6fd8677a46243793bbf5360b4b0d1a50eec2b37b1349afb4bb1e04dd13ef491943ffa0d4ae24374dc12a6fa247", @typed={0xc, 0xba, 0x0, 0x0, @str='nl80211\x00'}, @generic="04d47c0d9b4ad7f8f1ba5e1d4ce660da5746da27992b293af0b807528f50d0e6d2b0b41dda172fac34905fdf98d3a9c40763a69180fb674c8ba86a92a8d5c3ac005422a41b56f551334db5df652458ffba182a702b85d440044379ae1df187237977de397d8bfcf368bf761ceed204113d6ced259b58d060e305d661fba532a3f5e7a54f2194e6f22bfb7dfdd1a44892d2d87ee055110e72df2fd4743cfd5aba77251cf3b95e2c491d1454f3e35526fdb2e0daa740925be684ba711ccffeb3d031df3589a7eff265544c8d585cb4b2898ec8788846f49a21fb36b8db2da2ab1ef9", @nested={0x2a5, 0x58, 0x0, 0x1, [@typed={0xc5, 0xf2, 0x0, 0x0, @binary="8c2f10666443f1ac1a8cc60ad8ddc6a49e9e70c93aa8ecefcc6d50059327ce7606eee6f19670a825d18c98b36652368e2425406316cae751284ed1cee6a102b1784aa20c22843d1414e11dea7129fcc0e01e7d043014ffb1f2d13dd923f12beca055612cf1fb886971986086142fea1f2d8a2c46343e77a69c945859eda4921e04c1b15035eae070bd6fb6c8b83a1951480e0cb6c6c32ec2a90d958ba7bbad5a3f609a38e89b66ea6ea05d5e20383b5aa988fe761fec4bd3ec1b467105714c08fd"}, @nested={0x4, 0xa9}, @generic="36ffa99410db814df01973d68db033f4ee87aec2a3892d37ad2087ad0def0d948efa748f812c6d02424d38d8c88e1dd5049980f3ce2f4b66266222d08e96478ed174efeaa00b88389ae193eb30c196206d44b7915e039d40785ac0ddfaa1149b3d82a2e7cd7cf432ecdd877519ce49d7d4d9fc821ba8fb40726714cd8775b0d5af9863379226847e153d5a22ca94d7168c52c09d3e11e1b6c74d4b756dc823dd5ab47f79d75b62c0b872872040582510e6927fd5850e5d784d", @nested={0x4, 0x12b}, @generic="21164748b4a166dcf1799e5f9b86dac3fe303aa6feb1fe8e8d167a9e0cf465a586cbce8aa60d7b5fec02ac9310746e4c64fa7fef906e4071bd8ab49b95768cdcb0844158fd5df872be0d60a53a437f76359568956a73a35ef06c847f66eb1b00102b01ddbe1b62edc3626eb08ddce6e4285e41f236f4d73b", @generic="6349f52cfe47010a6362ea7dcc494290bee854dbb918d06a3ada2227eb6dfb9d1346108d2b08f0e207d195c30fd1f65ecf89789aedc304f22e1d151e0b801572b23685b7e575e6743c184802e0e616fca6283f4011441f1638e96e337587558d698a2edd4e06cde17243e4cf12c44c4bf021fc2dee596bd8da56ce7c4a514aa94abdd637ab491b301736b54c", @typed={0x14, 0x93, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, @TIPC_NLA_MON={0x23, 0x9, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @uid}, @generic="b71002a5bde72381af72", @generic="c09e7c0534fc92793d7b724ea6"]}, @TIPC_NLA_PUBL={0x10c3, 0x3, 0x0, 0x1, [@typed={0x1004, 0x51, 0x0, 0x0, @binary="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"}, @generic="c496924b57196c2fe559efc5592abb34a84423975e67a3a28d351f164ac302aaef0f47394268a1556aeefd908bb041f89b00d82b668d4f806ec736469a605c258ce645c6d07773a00fe2910903c56582f2aaef17c0ca4d31a0b62bbd8fd21cff46eee9afb1a7f30854d24c78ba522b0a0634017ea3b9c3001d72f42e2b4201a5b678a4c5e5a882e75e9ea0b0acc895457eb3896b572a653eabbe390725af6050656c846c74029e9609c61a98fc1dad5ebf01c6cca5235711d08329"]}, @TIPC_NLA_LINK={0xba, 0x4, 0x0, 0x1, [@generic="87838d0e87af029ef2ecc2691d4dc00829ea618bb4b8c5cd2434676749271a4ffe26f6b1662a7c5c02f4c598bd1f7fa03c5bbeae561f92e033dc40a21956cb5ffc4a7b9c9d514ef22056a719020842366f3e37036b8bcef77c9b2326b624c5447f4da527311c1c8e46c0818ab8dc695d1285b35d7c2c33d9bcea46d80387", @nested={0x38, 0x9, 0x0, 0x1, [@typed={0x14, 0x19, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x42, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0xa6, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0x75}]}]}, @TIPC_NLA_SOCK={0x207, 0x2, 0x0, 0x1, [@nested={0xfd, 0xf9, 0x0, 0x1, [@generic="bd303502d572a153126393fcf955a7f3fc4b6effc2938fe89d05c24c13d274de030f62905fda4401fb967408b20b56ddfe2af28a54701b98c669538caf8ea9a9eaf01ab6307a64d7a290268db39ea238256f7e41647035a93ed2b9015bf9febc51c74c9999d055496f461b108e1aab72c2d16af33fb964f55013a250db66c4facb472b056ae66fcadf553973fccc6f067d6b154f45854261a02b42e7371279410e98ba9d5a6fc4b1cde86d2dd4d69fe37565011087d55a49d5f7a44ea78a4e53d4145f77770e4c9aad0775257175e58480ba8552a812154698ad8e85ff0ac2b04c", @typed={0x8, 0x40, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x12, 0x0, 0x0, @fd=r1}, @typed={0x8, 0xfc, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @typed={0xb, 0xa6, 0x0, 0x0, @str='-$)@@(\x00'}, @generic="3d8dd36080fa7aa05b59b135f2b57c9eda9e52eab69a4c50d5abb614cc556824f73f6691cbca4326fd9b905235abff3f077b5f11cff5ab049e5e24b30acf407b963665f8323be4eecd9e9d9ca15b7561c456b6a8d7b1b6583d8db1671a7cbf986c606cd23097e42e53606aad329982da6d0a14de4362e141689da6e56898d4eecc97defd881a7d2ce5b8a87074f131688557b7a1d8638c0c67e386abf5d922cb90fb9a9ec5715ff287c2ca99a601a00f0146d433caf1aff5bf13395c86eee32620637a3ab607522b6ae1221bb9eac7b3712479e2f8c4a0f821386c3e17ba37e6b1c5df07d6129a6d2353e4d399e55c9fcefe2f2c7ad83c"]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_UNSPEC={0x3a, 0x0, "b0030dea85a2ec43a7936b290b90f49ac78d7bce4ff8f9834e3e1bc51e40efe34a1ce6e0042d61d6c303f58a859d26ccb207e4dd2dd7"}]}, 0x1d90}, 0x1, 0x0, 0x0, 0x80}, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
recvmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230)
r6 = prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007)
bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000300)=@bpf_attr_0={0x9a, 0x2, 0x5, 0x8, 0x7eb, r2, 0x5, "e03f43200a26d5ea743998fb7500", 0x0, <r7=>r6, 0x9, 0x1, 0x4, 0x7, r3, r3}, 0x7ff)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x4e8c, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
r9 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_VFIO_IOMMU_MAP_DMA(r9, 0x3b71, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-capset$auto-mmap$auto-open-landlock_create_ruleset$auto-landlock_restrict_self$auto-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-prctl$auto-write$auto-openat$auto_kvm_chardev_ops_kvm_main-mmap$auto-statx$auto-madvise$auto-mlock$auto-mlockall$auto-madvise$auto-link$auto-mmap$auto-fallocate$auto-lseek$auto-openat$auto_vhost_net_fops_net-ioctl$auto_VHOST_SET_OWNER-read$auto_proc_pid_smaps_operations_internal-ioctl$auto-openat$auto_tty_fops_tty_io
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
capset$auto(&(0x7f0000000100)={0x20080522}, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2)
r0 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x4, 0x8000000000001, 0xffff}, 0x9, 0x0)
landlock_restrict_self$auto(r0, 0x7)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x109103, 0x0)
mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
statx$auto(r1, 0x0, 0x6d7, 0x80000008, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mlock$auto(0x112, 0x80006)
mlockall$auto(0x800000000000005)
madvise$auto(0x0, 0x200007, 0x19)
link$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
lseek$auto(0x3, 0x8, 0x3)
r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5)
read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000)
ioctl$auto(r2, 0x4004af07, 0xffffffffffffffff)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-capset$auto-mmap$auto-open-landlock_create_ruleset$auto-landlock_restrict_self$auto-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-prctl$auto-write$auto-socket-openat$auto_kvm_chardev_ops_kvm_main-mmap$auto-statx$auto-madvise$auto-mlock$auto-mlockall$auto-madvise$auto-link$auto-lseek$auto-openat$auto_vhost_net_fops_net-ioctl$auto_VHOST_SET_OWNER-read$auto_proc_pid_smaps_operations_internal-ioctl$auto-openat$auto_tty_fops_tty_io
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
capset$auto(&(0x7f0000000100)={0x20080522}, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2)
r0 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x4, 0x8000000000001, 0xffff}, 0x9, 0x0)
landlock_restrict_self$auto(r0, 0x7)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x109103, 0x0)
mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
statx$auto(r2, 0x0, 0x6d7, 0x80000008, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mlock$auto(0x112, 0x80006)
mlockall$auto(0x800000000000005)
madvise$auto(0x0, 0x200007, 0x19)
link$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
lseek$auto(0x3, 0x8, 0x3)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5)
read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000)
ioctl$auto(r3, 0x4004af07, 0xffffffffffffffff)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-getdents$auto-bpf$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-recvmmsg$auto-sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-prlimit64$auto-openat$auto_nsim_dev_health_break_fops_health-openat$auto_proc_sys_file_operations_proc_sysctl-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getdents$auto(r5, &(0x7f0000000480)={0x9, 0x7, 0x5, "70eae80d943949c1a72b82fe820399f2a7d1bdec7b8bf7187bfdc8da8e98b6c158cbaa5e883b77023039d34ab6d5ec894c2f25983136cb5e32377af3157d30c1aa0d7b84a1dcb32db220e5aa81087e449f66e3f98f8e456dc4a4de68dd788b8209f58a863a92c0ef9bfcc8dc6ccbcdb0be5c7ea1"}, 0x2)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
r8 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x40000)
recvmmsg$auto(r8, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0xa, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="100c2cbd7000ffdbdf252700000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
prlimit64$auto(0x0, 0x7, 0x0, &(0x7f00000001c0)={0x6, 0x4})
r9 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/sit0/arp_evict_nocarrier\x00', 0x6a0002, 0x0)
write$auto(r9, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
single: successfully extracted reproducer
found reproducer with 29 syscalls
minimizing guilty program
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-getdents$auto-bpf$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-recvmmsg$auto-sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-prlimit64$auto-openat$auto_nsim_dev_health_break_fops_health-openat$auto_proc_sys_file_operations_proc_sysctl
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getdents$auto(r5, &(0x7f0000000480)={0x9, 0x7, 0x5, "70eae80d943949c1a72b82fe820399f2a7d1bdec7b8bf7187bfdc8da8e98b6c158cbaa5e883b77023039d34ab6d5ec894c2f25983136cb5e32377af3157d30c1aa0d7b84a1dcb32db220e5aa81087e449f66e3f98f8e456dc4a4de68dd788b8209f58a863a92c0ef9bfcc8dc6ccbcdb0be5c7ea1"}, 0x2)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
r8 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x40000)
recvmmsg$auto(r8, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0xa, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="100c2cbd7000ffdbdf252700000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
prlimit64$auto(0x0, 0x7, 0x0, &(0x7f00000001c0)={0x6, 0x4})
openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/sit0/arp_evict_nocarrier\x00', 0x6a0002, 0x0)

program did not crash
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-getdents$auto-bpf$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-recvmmsg$auto-sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-prlimit64$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getdents$auto(r5, &(0x7f0000000480)={0x9, 0x7, 0x5, "70eae80d943949c1a72b82fe820399f2a7d1bdec7b8bf7187bfdc8da8e98b6c158cbaa5e883b77023039d34ab6d5ec894c2f25983136cb5e32377af3157d30c1aa0d7b84a1dcb32db220e5aa81087e449f66e3f98f8e456dc4a4de68dd788b8209f58a863a92c0ef9bfcc8dc6ccbcdb0be5c7ea1"}, 0x2)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
r8 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x40000)
recvmmsg$auto(r8, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0xa, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="100c2cbd7000ffdbdf252700000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
prlimit64$auto(0x0, 0x7, 0x0, &(0x7f00000001c0)={0x6, 0x4})
r9 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r9, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-getdents$auto-bpf$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-recvmmsg$auto-sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-prlimit64$auto-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getdents$auto(r5, &(0x7f0000000480)={0x9, 0x7, 0x5, "70eae80d943949c1a72b82fe820399f2a7d1bdec7b8bf7187bfdc8da8e98b6c158cbaa5e883b77023039d34ab6d5ec894c2f25983136cb5e32377af3157d30c1aa0d7b84a1dcb32db220e5aa81087e449f66e3f98f8e456dc4a4de68dd788b8209f58a863a92c0ef9bfcc8dc6ccbcdb0be5c7ea1"}, 0x2)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
r8 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x40000)
recvmmsg$auto(r8, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0xa, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="100c2cbd7000ffdbdf252700000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
prlimit64$auto(0x0, 0x7, 0x0, &(0x7f00000001c0)={0x6, 0x4})
write$auto(0xffffffffffffffff, &(0x7f0000005900)='\x00', 0x6)

program did not crash
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-getdents$auto-bpf$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-recvmmsg$auto-sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getdents$auto(r5, &(0x7f0000000480)={0x9, 0x7, 0x5, "70eae80d943949c1a72b82fe820399f2a7d1bdec7b8bf7187bfdc8da8e98b6c158cbaa5e883b77023039d34ab6d5ec894c2f25983136cb5e32377af3157d30c1aa0d7b84a1dcb32db220e5aa81087e449f66e3f98f8e456dc4a4de68dd788b8209f58a863a92c0ef9bfcc8dc6ccbcdb0be5c7ea1"}, 0x2)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
r8 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x40000)
recvmmsg$auto(r8, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0xa, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="100c2cbd7000ffdbdf252700000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
r9 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r9, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-getdents$auto-bpf$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-recvmmsg$auto-sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG-sysfs$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getdents$auto(r5, &(0x7f0000000480)={0x9, 0x7, 0x5, "70eae80d943949c1a72b82fe820399f2a7d1bdec7b8bf7187bfdc8da8e98b6c158cbaa5e883b77023039d34ab6d5ec894c2f25983136cb5e32377af3157d30c1aa0d7b84a1dcb32db220e5aa81087e449f66e3f98f8e456dc4a4de68dd788b8209f58a863a92c0ef9bfcc8dc6ccbcdb0be5c7ea1"}, 0x2)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
r8 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x40000)
recvmmsg$auto(r8, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0xa, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="100c2cbd7000ffdbdf252700000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sysfs$auto(0x2, 0x11, 0x0)
r9 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r9, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-getdents$auto-bpf$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-recvmmsg$auto-sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getdents$auto(r5, &(0x7f0000000480)={0x9, 0x7, 0x5, "70eae80d943949c1a72b82fe820399f2a7d1bdec7b8bf7187bfdc8da8e98b6c158cbaa5e883b77023039d34ab6d5ec894c2f25983136cb5e32377af3157d30c1aa0d7b84a1dcb32db220e5aa81087e449f66e3f98f8e456dc4a4de68dd788b8209f58a863a92c0ef9bfcc8dc6ccbcdb0be5c7ea1"}, 0x2)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
r8 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x40000)
recvmmsg$auto(r8, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0xa, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="100c2cbd7000ffdbdf252700000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r9 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r9, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-getdents$auto-bpf$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-recvmmsg$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getdents$auto(r5, &(0x7f0000000480)={0x9, 0x7, 0x5, "70eae80d943949c1a72b82fe820399f2a7d1bdec7b8bf7187bfdc8da8e98b6c158cbaa5e883b77023039d34ab6d5ec894c2f25983136cb5e32377af3157d30c1aa0d7b84a1dcb32db220e5aa81087e449f66e3f98f8e456dc4a4de68dd788b8209f58a863a92c0ef9bfcc8dc6ccbcdb0be5c7ea1"}, 0x2)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
r8 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x40000)
recvmmsg$auto(r8, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0xa, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
r9 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r9, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-getdents$auto-bpf$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getdents$auto(r5, &(0x7f0000000480)={0x9, 0x7, 0x5, "70eae80d943949c1a72b82fe820399f2a7d1bdec7b8bf7187bfdc8da8e98b6c158cbaa5e883b77023039d34ab6d5ec894c2f25983136cb5e32377af3157d30c1aa0d7b84a1dcb32db220e5aa81087e449f66e3f98f8e456dc4a4de68dd788b8209f58a863a92c0ef9bfcc8dc6ccbcdb0be5c7ea1"}, 0x2)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
r8 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x40000)
r9 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r9, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-getdents$auto-bpf$auto-socket-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getdents$auto(r5, &(0x7f0000000480)={0x9, 0x7, 0x5, "70eae80d943949c1a72b82fe820399f2a7d1bdec7b8bf7187bfdc8da8e98b6c158cbaa5e883b77023039d34ab6d5ec894c2f25983136cb5e32377af3157d30c1aa0d7b84a1dcb32db220e5aa81087e449f66e3f98f8e456dc4a4de68dd788b8209f58a863a92c0ef9bfcc8dc6ccbcdb0be5c7ea1"}, 0x2)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
socket(0x10, 0x2, 0x0)
r8 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r8, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-getdents$auto-bpf$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getdents$auto(r5, &(0x7f0000000480)={0x9, 0x7, 0x5, "70eae80d943949c1a72b82fe820399f2a7d1bdec7b8bf7187bfdc8da8e98b6c158cbaa5e883b77023039d34ab6d5ec894c2f25983136cb5e32377af3157d30c1aa0d7b84a1dcb32db220e5aa81087e449f66e3f98f8e456dc4a4de68dd788b8209f58a863a92c0ef9bfcc8dc6ccbcdb0be5c7ea1"}, 0x2)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
r8 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r8, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-getdents$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
getdents$auto(r5, &(0x7f0000000480)={0x9, 0x7, 0x5, "70eae80d943949c1a72b82fe820399f2a7d1bdec7b8bf7187bfdc8da8e98b6c158cbaa5e883b77023039d34ab6d5ec894c2f25983136cb5e32377af3157d30c1aa0d7b84a1dcb32db220e5aa81087e449f66e3f98f8e456dc4a4de68dd788b8209f58a863a92c0ef9bfcc8dc6ccbcdb0be5c7ea1"}, 0x2)
r7 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r7, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r7, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r7, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
r7 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r7, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
r6 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r6, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r6 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r6, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r6, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r4, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '${,\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r3, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r3, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in devlink_health_report
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r3, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r2, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r2, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0)
r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r1, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program did not crash
testing program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, 0x0, 0x6)

program did not crash
extracting C reproducer
testing compiled C program (duration=7m41.705781381s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=7m41.705781381s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in devlink_health_report
extracting C reproducer
testing compiled C program (duration=7m41.705781381s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing program (duration=7m41.705781381s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program did not crash
testing program (duration=7m41.705781381s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
validation run: crashed=true
testing program (duration=7m41.705781381s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
validation run: crashed=true
testing program (duration=7m41.705781381s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
validation run: crashed=true
reproducing took 3h43m5.74352124s
repro crashed as (corrupted=false):
INFO: task kworker/u8:3:51 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:3    state:D stack:23688 pid:51    tgid:51    ppid:2      task_flags:0x4208160 flags:0x00080000
Workqueue: netns cleanup_net
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5325 [inline]
 __schedule+0x1190/0x5de0 kernel/sched/core.c:6929
 __schedule_loop kernel/sched/core.c:7011 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:7026
 schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75
 do_wait_for_common kernel/sched/completion.c:100 [inline]
 __wait_for_common+0x2fc/0x4e0 kernel/sched/completion.c:121
 __debugfs_file_removed fs/debugfs/inode.c:770 [inline]
 remove_one+0x312/0x420 fs/debugfs/inode.c:777
 __simple_recursive_removal+0x15b/0x610 fs/libfs.c:631
 debugfs_remove+0x5d/0x80 fs/debugfs/inode.c:800
 nsim_dev_health_exit+0x3b/0xe0 drivers/net/netdevsim/health.c:227
 nsim_dev_reload_destroy+0x144/0x4d0 drivers/net/netdevsim/dev.c:1710
 nsim_dev_reload_down+0x6e/0xd0 drivers/net/netdevsim/dev.c:983
 devlink_reload+0x1a1/0x7c0 net/devlink/dev.c:461
 devlink_pernet_pre_exit+0x1a0/0x2b0 net/devlink/core.c:509
 ops_pre_exit_list net/core/net_namespace.c:161 [inline]
 ops_undo_list+0x187/0xab0 net/core/net_namespace.c:234
 cleanup_net+0x41b/0x8b0 net/core/net_namespace.c:695
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: task syz-executor:9072 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:24424 pid:9072  tgid:9072  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5325 [inline]
 __schedule+0x1190/0x5de0 kernel/sched/core.c:6929
 __schedule_loop kernel/sched/core.c:7011 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:7026
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083
 __mutex_lock_common kernel/locking/mutex.c:676 [inline]
 __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760
 device_lock include/linux/device.h:914 [inline]
 device_del+0xa0/0x9f0 drivers/base/core.c:3840
 device_unregister+0x1d/0xc0 drivers/base/core.c:3919
 nsim_bus_dev_del drivers/net/netdevsim/bus.c:483 [inline]
 del_device_store+0x355/0x4a0 drivers/net/netdevsim/bus.c:244
 bus_attr_store+0x74/0xb0 drivers/base/bus.c:172
 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142
 kernfs_fop_write_iter+0x3af/0x570 fs/kernfs/file.c:352
 new_sync_write fs/read_write.c:593 [inline]
 vfs_write+0x7d3/0x11d0 fs/read_write.c:686
 ksys_write+0x12a/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8e6738e27f
RSP: 002b:00007fffe2d64590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f8e6738e27f
RDX: 0000000000000001 RSI: 00007fffe2d645e0 RDI: 0000000000000005
RBP: 00007f8e674152cb R08: 0000000000000000 R09: 00007fffe2d643e7
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
R13: 00007fffe2d645e0 R14: 00007f8e68114620 R15: 0000000000000003
 </TASK>
INFO: task syz.0.2965:9090 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.2965      state:D stack:28824 pid:9090  tgid:9090  ppid:5965   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5325 [inline]
 __schedule+0x1190/0x5de0 kernel/sched/core.c:6929
 __schedule_loop kernel/sched/core.c:7011 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:7026
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083
 __mutex_lock_common kernel/locking/mutex.c:676 [inline]
 __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760
 devlink_health_report+0x6b4/0xb00 net/devlink/health.c:680
 nsim_dev_health_break_write+0x166/0x210 drivers/net/netdevsim/health.c:162
 full_proxy_write+0x131/0x1a0 fs/debugfs/file.c:388
 vfs_write+0x2a0/0x11d0 fs/read_write.c:684
 ksys_write+0x12a/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fbc5178f7c9
RSP: 002b:00007ffcfef8f528 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fbc519e5fa0 RCX: 00007fbc5178f7c9
RDX: 0000000000000006 RSI: 0000200000005900 RDI: 0000000000000003
RBP: 00007fbc51813f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fbc519e5fa0 R14: 00007fbc519e5fa0 R15: 0000000000000003
 </TASK>
INFO: task syz.1.2995:9125 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.2995      state:D stack:28824 pid:9125  tgid:9125  ppid:5969   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5325 [inline]
 __schedule+0x1190/0x5de0 kernel/sched/core.c:6929
 __schedule_loop kernel/sched/core.c:7011 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:7026
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083
 rwsem_down_read_slowpath+0x64b/0xbf0 kernel/locking/rwsem.c:1086
 __down_read_common kernel/locking/rwsem.c:1261 [inline]
 __down_read kernel/locking/rwsem.c:1274 [inline]
 down_read+0xef/0x480 kernel/locking/rwsem.c:1539
 inode_lock_shared include/linux/fs.h:995 [inline]
 open_last_lookups fs/namei.c:3894 [inline]
 path_openat+0x818/0x2cb0 fs/namei.c:4131
 do_filp_open+0x20b/0x470 fs/namei.c:4161
 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437
 do_sys_open fs/open.c:1452 [inline]
 __do_sys_openat fs/open.c:1468 [inline]
 __se_sys_openat fs/open.c:1463 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1463
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8b6d58f7c9
RSP: 002b:00007ffecdb33218 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f8b6d7e5fa0 RCX: 00007f8b6d58f7c9
RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c
RBP: 00007f8b6d613f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f8b6d7e5fa0 R14: 00007f8b6d7e5fa0 R15: 0000000000000004
 </TASK>
INFO: task syz.3.2996:9126 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.2996      state:D stack:28072 pid:9126  tgid:9126  ppid:8508   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5325 [inline]
 __schedule+0x1190/0x5de0 kernel/sched/core.c:6929
 __schedule_loop kernel/sched/core.c:7011 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:7026
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083
 rwsem_down_read_slowpath+0x64b/0xbf0 kernel/locking/rwsem.c:1086
 __down_read_common kernel/locking/rwsem.c:1261 [inline]
 __down_read kernel/locking/rwsem.c:1274 [inline]
 down_read+0xef/0x480 kernel/locking/rwsem.c:1539
 inode_lock_shared include/linux/fs.h:995 [inline]
 open_last_lookups fs/namei.c:3894 [inline]
 path_openat+0x818/0x2cb0 fs/namei.c:4131
 do_filp_open+0x20b/0x470 fs/namei.c:4161
 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437
 do_sys_open fs/open.c:1452 [inline]
 __do_sys_openat fs/open.c:1468 [inline]
 __se_sys_openat fs/open.c:1463 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1463
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1eedd8f7c9
RSP: 002b:00007ffc117bd278 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f1eedfe5fa0 RCX: 00007f1eedd8f7c9
RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c
RBP: 00007f1eede13f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f1eedfe5fa0 R14: 00007f1eedfe5fa0 R15: 0000000000000004
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/31:
 #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline]
 #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6775
6 locks held by kworker/u8:3/51:
 #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3238
 #1: ffffc90000bc7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3239
 #2: ffffffff900d4ed0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 net/core/net_namespace.c:669
 #3: ffff888031e700e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:914 [inline]
 #3: ffff888031e700e8 (&dev->mutex){....}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:108 [inline]
 #3: ffff888031e700e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12c/0x2b0 net/devlink/core.c:506
 #4: ffff888031e71250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devl_lock net/devlink/core.c:276 [inline]
 #4: ffff888031e71250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:109 [inline]
 #4: ffff888031e71250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x136/0x2b0 net/devlink/core.c:506
 #5: ffff88805d7c4b58 (&sb->s_type->i_mutex_key#3/2){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1025 [inline]
 #5: ffff88805d7c4b58 (&sb->s_type->i_mutex_key#3/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x354/0x610 fs/libfs.c:627
2 locks held by getty/5589:
 #0: ffff88814dc6d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 drivers/tty/n_tty.c:2222
5 locks held by syz-executor/9072:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88805dd5b488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
 #4: ffff888031e700e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:914 [inline]
 #4: ffff888031e700e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9f0 drivers/base/core.c:3840
2 locks held by syz.0.2965/9090:
 #0: ffff8881416da420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888031e71250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_health_report+0x6b4/0xb00 net/devlink/health.c:680
2 locks held by syz.1.2995/9125:
 #0: ffff8881416da420 (sb_writers#8){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:3884 [inline]
 #0: ffff8881416da420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x1ec8/0x2cb0 fs/namei.c:4131
 #1: ffff88805d7c4b58 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:995 [inline]
 #1: ffff88805d7c4b58 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: open_last_lookups fs/namei.c:3894 [inline]
 #1: ffff88805d7c4b58 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: path_openat+0x818/0x2cb0 fs/namei.c:4131
2 locks held by syz.3.2996/9126:
 #0: ffff8881416da420 (sb_writers#8){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:3884 [inline]
 #0: ffff8881416da420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x1ec8/0x2cb0 fs/namei.c:4131
 #1: ffff88805d7c4b58 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:995 [inline]
 #1: ffff88805d7c4b58 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: open_last_lookups fs/namei.c:3894 [inline]
 #1: ffff88805d7c4b58 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: path_openat+0x818/0x2cb0 fs/namei.c:4131
4 locks held by syz-executor/9139:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88802c64d088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9150:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88806be8d488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9152:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888077680c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9175:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88804af91488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9188:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff8880299ad888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9200:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88806003ac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9202:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88807a0fac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9224:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88805f690088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9235:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888049f5ac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9247:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88805e755488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9248:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff8880296c3c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:332 [inline]
 watchdog+0xf3f/0x1170 kernel/hung_task.c:495
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 1007 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:sched_asym kernel/sched/fair.c:10231 [inline]
RIP: 0010:sched_group_asym kernel/sched/fair.c:10258 [inline]
RIP: 0010:update_sg_lb_stats kernel/sched/fair.c:10419 [inline]
RIP: 0010:update_sd_lb_stats.constprop.0+0x146f/0x2d70 kernel/sched/fair.c:11047
Code: 00 00 00 00 fc ff df 80 3c 06 00 0f 85 f1 16 00 00 48 8b 04 24 44 89 e6 4c 89 44 24 58 48 89 54 24 30 48 8b 38 48 89 4c 24 18 <e8> 5c a9 fc ff 48 8b 4c 24 18 48 8b 54 24 30 84 c0 4c 8b 44 24 58
RSP: 0018:ffffc90003e0f228 EFLAGS: 00000046
RAX: ffffc90003e0f6c8 RBX: ffff88801da9bd80 RCX: ffffc90003e0f6f4
RDX: ffffc90003e0f374 RSI: 0000000000000001 RDI: ffff88801be96400
RBP: dffffc0000000000 R08: ffffc90003e0f368 R09: 0000000000000000
R10: ffff88801da9be80 R11: ffffffff93a2d4c0 R12: 0000000000000001
R13: ffffc90003e0f340 R14: ffffc90003e0f350 R15: ffffc90003e0f450
FS:  0000000000000000(0000) GS:ffff888124b0d000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000559e1219a168 CR3: 000000000e182000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 sched_balance_find_src_group+0x92/0xc90 kernel/sched/fair.c:11306
 sched_balance_rq+0x851/0x3110 kernel/sched/fair.c:11768
 sched_balance_newidle+0x726/0x1470 kernel/sched/fair.c:12855
 pick_next_task_fair+0x54/0x1040 kernel/sched/fair.c:8931
 __pick_next_task+0xf1/0x6c0 kernel/sched/core.c:5969
 pick_next_task kernel/sched/core.c:6067 [inline]
 __schedule+0x5d3/0x5de0 kernel/sched/core.c:6870
 __schedule_loop kernel/sched/core.c:7011 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:7026
 toggle_allocation_gate mm/kfence/core.c:854 [inline]
 toggle_allocation_gate+0x1d9/0x280 mm/kfence/core.c:844
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

final repro crashed as (corrupted=false):
INFO: task kworker/u8:3:51 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:3    state:D stack:23688 pid:51    tgid:51    ppid:2      task_flags:0x4208160 flags:0x00080000
Workqueue: netns cleanup_net
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5325 [inline]
 __schedule+0x1190/0x5de0 kernel/sched/core.c:6929
 __schedule_loop kernel/sched/core.c:7011 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:7026
 schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75
 do_wait_for_common kernel/sched/completion.c:100 [inline]
 __wait_for_common+0x2fc/0x4e0 kernel/sched/completion.c:121
 __debugfs_file_removed fs/debugfs/inode.c:770 [inline]
 remove_one+0x312/0x420 fs/debugfs/inode.c:777
 __simple_recursive_removal+0x15b/0x610 fs/libfs.c:631
 debugfs_remove+0x5d/0x80 fs/debugfs/inode.c:800
 nsim_dev_health_exit+0x3b/0xe0 drivers/net/netdevsim/health.c:227
 nsim_dev_reload_destroy+0x144/0x4d0 drivers/net/netdevsim/dev.c:1710
 nsim_dev_reload_down+0x6e/0xd0 drivers/net/netdevsim/dev.c:983
 devlink_reload+0x1a1/0x7c0 net/devlink/dev.c:461
 devlink_pernet_pre_exit+0x1a0/0x2b0 net/devlink/core.c:509
 ops_pre_exit_list net/core/net_namespace.c:161 [inline]
 ops_undo_list+0x187/0xab0 net/core/net_namespace.c:234
 cleanup_net+0x41b/0x8b0 net/core/net_namespace.c:695
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
INFO: task syz-executor:9072 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:24424 pid:9072  tgid:9072  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5325 [inline]
 __schedule+0x1190/0x5de0 kernel/sched/core.c:6929
 __schedule_loop kernel/sched/core.c:7011 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:7026
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083
 __mutex_lock_common kernel/locking/mutex.c:676 [inline]
 __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760
 device_lock include/linux/device.h:914 [inline]
 device_del+0xa0/0x9f0 drivers/base/core.c:3840
 device_unregister+0x1d/0xc0 drivers/base/core.c:3919
 nsim_bus_dev_del drivers/net/netdevsim/bus.c:483 [inline]
 del_device_store+0x355/0x4a0 drivers/net/netdevsim/bus.c:244
 bus_attr_store+0x74/0xb0 drivers/base/bus.c:172
 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142
 kernfs_fop_write_iter+0x3af/0x570 fs/kernfs/file.c:352
 new_sync_write fs/read_write.c:593 [inline]
 vfs_write+0x7d3/0x11d0 fs/read_write.c:686
 ksys_write+0x12a/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8e6738e27f
RSP: 002b:00007fffe2d64590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f8e6738e27f
RDX: 0000000000000001 RSI: 00007fffe2d645e0 RDI: 0000000000000005
RBP: 00007f8e674152cb R08: 0000000000000000 R09: 00007fffe2d643e7
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
R13: 00007fffe2d645e0 R14: 00007f8e68114620 R15: 0000000000000003
 </TASK>
INFO: task syz.0.2965:9090 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.2965      state:D stack:28824 pid:9090  tgid:9090  ppid:5965   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5325 [inline]
 __schedule+0x1190/0x5de0 kernel/sched/core.c:6929
 __schedule_loop kernel/sched/core.c:7011 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:7026
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083
 __mutex_lock_common kernel/locking/mutex.c:676 [inline]
 __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760
 devlink_health_report+0x6b4/0xb00 net/devlink/health.c:680
 nsim_dev_health_break_write+0x166/0x210 drivers/net/netdevsim/health.c:162
 full_proxy_write+0x131/0x1a0 fs/debugfs/file.c:388
 vfs_write+0x2a0/0x11d0 fs/read_write.c:684
 ksys_write+0x12a/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fbc5178f7c9
RSP: 002b:00007ffcfef8f528 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fbc519e5fa0 RCX: 00007fbc5178f7c9
RDX: 0000000000000006 RSI: 0000200000005900 RDI: 0000000000000003
RBP: 00007fbc51813f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fbc519e5fa0 R14: 00007fbc519e5fa0 R15: 0000000000000003
 </TASK>
INFO: task syz.1.2995:9125 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.2995      state:D stack:28824 pid:9125  tgid:9125  ppid:5969   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5325 [inline]
 __schedule+0x1190/0x5de0 kernel/sched/core.c:6929
 __schedule_loop kernel/sched/core.c:7011 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:7026
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083
 rwsem_down_read_slowpath+0x64b/0xbf0 kernel/locking/rwsem.c:1086
 __down_read_common kernel/locking/rwsem.c:1261 [inline]
 __down_read kernel/locking/rwsem.c:1274 [inline]
 down_read+0xef/0x480 kernel/locking/rwsem.c:1539
 inode_lock_shared include/linux/fs.h:995 [inline]
 open_last_lookups fs/namei.c:3894 [inline]
 path_openat+0x818/0x2cb0 fs/namei.c:4131
 do_filp_open+0x20b/0x470 fs/namei.c:4161
 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437
 do_sys_open fs/open.c:1452 [inline]
 __do_sys_openat fs/open.c:1468 [inline]
 __se_sys_openat fs/open.c:1463 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1463
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8b6d58f7c9
RSP: 002b:00007ffecdb33218 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f8b6d7e5fa0 RCX: 00007f8b6d58f7c9
RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c
RBP: 00007f8b6d613f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f8b6d7e5fa0 R14: 00007f8b6d7e5fa0 R15: 0000000000000004
 </TASK>
INFO: task syz.3.2996:9126 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.2996      state:D stack:28072 pid:9126  tgid:9126  ppid:8508   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5325 [inline]
 __schedule+0x1190/0x5de0 kernel/sched/core.c:6929
 __schedule_loop kernel/sched/core.c:7011 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:7026
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083
 rwsem_down_read_slowpath+0x64b/0xbf0 kernel/locking/rwsem.c:1086
 __down_read_common kernel/locking/rwsem.c:1261 [inline]
 __down_read kernel/locking/rwsem.c:1274 [inline]
 down_read+0xef/0x480 kernel/locking/rwsem.c:1539
 inode_lock_shared include/linux/fs.h:995 [inline]
 open_last_lookups fs/namei.c:3894 [inline]
 path_openat+0x818/0x2cb0 fs/namei.c:4131
 do_filp_open+0x20b/0x470 fs/namei.c:4161
 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437
 do_sys_open fs/open.c:1452 [inline]
 __do_sys_openat fs/open.c:1468 [inline]
 __se_sys_openat fs/open.c:1463 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1463
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1eedd8f7c9
RSP: 002b:00007ffc117bd278 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f1eedfe5fa0 RCX: 00007f1eedd8f7c9
RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c
RBP: 00007f1eede13f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f1eedfe5fa0 R14: 00007f1eedfe5fa0 R15: 0000000000000004
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/31:
 #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline]
 #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6775
6 locks held by kworker/u8:3/51:
 #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3238
 #1: ffffc90000bc7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3239
 #2: ffffffff900d4ed0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 net/core/net_namespace.c:669
 #3: ffff888031e700e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:914 [inline]
 #3: ffff888031e700e8 (&dev->mutex){....}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:108 [inline]
 #3: ffff888031e700e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12c/0x2b0 net/devlink/core.c:506
 #4: ffff888031e71250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devl_lock net/devlink/core.c:276 [inline]
 #4: ffff888031e71250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:109 [inline]
 #4: ffff888031e71250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x136/0x2b0 net/devlink/core.c:506
 #5: ffff88805d7c4b58 (&sb->s_type->i_mutex_key#3/2){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1025 [inline]
 #5: ffff88805d7c4b58 (&sb->s_type->i_mutex_key#3/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x354/0x610 fs/libfs.c:627
2 locks held by getty/5589:
 #0: ffff88814dc6d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 drivers/tty/n_tty.c:2222
5 locks held by syz-executor/9072:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88805dd5b488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
 #4: ffff888031e700e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:914 [inline]
 #4: ffff888031e700e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9f0 drivers/base/core.c:3840
2 locks held by syz.0.2965/9090:
 #0: ffff8881416da420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888031e71250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_health_report+0x6b4/0xb00 net/devlink/health.c:680
2 locks held by syz.1.2995/9125:
 #0: ffff8881416da420 (sb_writers#8){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:3884 [inline]
 #0: ffff8881416da420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x1ec8/0x2cb0 fs/namei.c:4131
 #1: ffff88805d7c4b58 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:995 [inline]
 #1: ffff88805d7c4b58 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: open_last_lookups fs/namei.c:3894 [inline]
 #1: ffff88805d7c4b58 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: path_openat+0x818/0x2cb0 fs/namei.c:4131
2 locks held by syz.3.2996/9126:
 #0: ffff8881416da420 (sb_writers#8){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:3884 [inline]
 #0: ffff8881416da420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x1ec8/0x2cb0 fs/namei.c:4131
 #1: ffff88805d7c4b58 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:995 [inline]
 #1: ffff88805d7c4b58 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: open_last_lookups fs/namei.c:3894 [inline]
 #1: ffff88805d7c4b58 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: path_openat+0x818/0x2cb0 fs/namei.c:4131
4 locks held by syz-executor/9139:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88802c64d088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9150:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88806be8d488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9152:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888077680c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9175:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88804af91488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9188:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff8880299ad888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9200:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88806003ac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9202:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88807a0fac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9224:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88805f690088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9235:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888049f5ac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9247:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88805e755488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9248:
 #0: ffff888034a18420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff8880296c3c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff888144be8878 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f66d0e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:332 [inline]
 watchdog+0xf3f/0x1170 kernel/hung_task.c:495
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 1007 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:sched_asym kernel/sched/fair.c:10231 [inline]
RIP: 0010:sched_group_asym kernel/sched/fair.c:10258 [inline]
RIP: 0010:update_sg_lb_stats kernel/sched/fair.c:10419 [inline]
RIP: 0010:update_sd_lb_stats.constprop.0+0x146f/0x2d70 kernel/sched/fair.c:11047
Code: 00 00 00 00 fc ff df 80 3c 06 00 0f 85 f1 16 00 00 48 8b 04 24 44 89 e6 4c 89 44 24 58 48 89 54 24 30 48 8b 38 48 89 4c 24 18 <e8> 5c a9 fc ff 48 8b 4c 24 18 48 8b 54 24 30 84 c0 4c 8b 44 24 58
RSP: 0018:ffffc90003e0f228 EFLAGS: 00000046
RAX: ffffc90003e0f6c8 RBX: ffff88801da9bd80 RCX: ffffc90003e0f6f4
RDX: ffffc90003e0f374 RSI: 0000000000000001 RDI: ffff88801be96400
RBP: dffffc0000000000 R08: ffffc90003e0f368 R09: 0000000000000000
R10: ffff88801da9be80 R11: ffffffff93a2d4c0 R12: 0000000000000001
R13: ffffc90003e0f340 R14: ffffc90003e0f350 R15: ffffc90003e0f450
FS:  0000000000000000(0000) GS:ffff888124b0d000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000559e1219a168 CR3: 000000000e182000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 sched_balance_find_src_group+0x92/0xc90 kernel/sched/fair.c:11306
 sched_balance_rq+0x851/0x3110 kernel/sched/fair.c:11768
 sched_balance_newidle+0x726/0x1470 kernel/sched/fair.c:12855
 pick_next_task_fair+0x54/0x1040 kernel/sched/fair.c:8931
 __pick_next_task+0xf1/0x6c0 kernel/sched/core.c:5969
 pick_next_task kernel/sched/core.c:6067 [inline]
 __schedule+0x5d3/0x5de0 kernel/sched/core.c:6870
 __schedule_loop kernel/sched/core.c:7011 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:7026
 toggle_allocation_gate mm/kfence/core.c:854 [inline]
 toggle_allocation_gate+0x1d9/0x280 mm/kfence/core.c:844
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>