Extracting prog: 13m39.099913083s
Minimizing prog: 2h19m6.012090235s
Simplifying prog options: 16m49.81904246s
Extracting C: 5m12.858888349s
Simplifying C: 0s


extracting reproducer from 54 programs
testing a last program of every proc
single: executing 14 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto
detailed listing:
executing program 0:
mmap$auto(0xf5000000, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-ioctl$sock_SIOCGIFINDEX-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-prlimit64$auto-openat$auto_nsim_dev_health_break_fops_health-openat$auto_proc_sys_file_operations_proc_sysctl-write$auto-openat$auto_snapshot_fops_user-ioctl$auto_SNAPSHOT_ATOMIC_RESTORE-ioctl$auto_BTRFS_IOC_ENCODED_READ-mmap$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'})
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
prlimit64$auto(0x0, 0x7, 0x0, &(0x7f00000001c0)={0x6, 0x4})
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/sit0/arp_evict_nocarrier\x00', 0x6a0002, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)
r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x1203f, 0x0)
ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r6, 0x3304, 0x0)
ioctl$auto_BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000000180)={&(0x7f0000000140)={0x0, 0xffffffffffff5318}, 0xd750000000000000, 0x2, 0x2000000001000, 0x3, 0x0, 0x1, 0x239, 0x8, "2856aeeaba9eafcb409d7c0746f4b7e448026f57ffffffff7bc76ec83fab1ebc04544645016ee3def8cf08000000000000009d1beece496c77ac78a7030100"})
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
single: successfully extracted reproducer
found reproducer with 25 syscalls
minimizing guilty program
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-ioctl$sock_SIOCGIFINDEX-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-prlimit64$auto-openat$auto_nsim_dev_health_break_fops_health-openat$auto_proc_sys_file_operations_proc_sysctl-write$auto-openat$auto_snapshot_fops_user-ioctl$auto_SNAPSHOT_ATOMIC_RESTORE-ioctl$auto_BTRFS_IOC_ENCODED_READ-mmap$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'})
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
prlimit64$auto(0x0, 0x7, 0x0, &(0x7f00000001c0)={0x6, 0x4})
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/sit0/arp_evict_nocarrier\x00', 0x6a0002, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)
r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x1203f, 0x0)
ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r6, 0x3304, 0x0)
ioctl$auto_BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000000180)={&(0x7f0000000140)={0x0, 0xffffffffffff5318}, 0xd750000000000000, 0x2, 0x2000000001000, 0x3, 0x0, 0x1, 0x239, 0x8, "2856aeeaba9eafcb409d7c0746f4b7e448026f57ffffffff7bc76ec83fab1ebc04544645016ee3def8cf08000000000000009d1beece496c77ac78a7030100"})
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)

program did not crash
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-ioctl$sock_SIOCGIFINDEX-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-prlimit64$auto-openat$auto_nsim_dev_health_break_fops_health-openat$auto_proc_sys_file_operations_proc_sysctl-write$auto-openat$auto_snapshot_fops_user-ioctl$auto_SNAPSHOT_ATOMIC_RESTORE-ioctl$auto_BTRFS_IOC_ENCODED_READ-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'})
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
prlimit64$auto(0x0, 0x7, 0x0, &(0x7f00000001c0)={0x6, 0x4})
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/sit0/arp_evict_nocarrier\x00', 0x6a0002, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)
r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x1203f, 0x0)
ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r6, 0x3304, 0x0)
ioctl$auto_BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000000180)={&(0x7f0000000140)={0x0, 0xffffffffffff5318}, 0xd750000000000000, 0x2, 0x2000000001000, 0x3, 0x0, 0x1, 0x239, 0x8, "2856aeeaba9eafcb409d7c0746f4b7e448026f57ffffffff7bc76ec83fab1ebc04544645016ee3def8cf08000000000000009d1beece496c77ac78a7030100"})
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in devlink_health_report
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-ioctl$sock_SIOCGIFINDEX-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-prlimit64$auto-openat$auto_nsim_dev_health_break_fops_health-openat$auto_proc_sys_file_operations_proc_sysctl-write$auto-openat$auto_snapshot_fops_user-ioctl$auto_SNAPSHOT_ATOMIC_RESTORE-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'})
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
prlimit64$auto(0x0, 0x7, 0x0, &(0x7f00000001c0)={0x6, 0x4})
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/sit0/arp_evict_nocarrier\x00', 0x6a0002, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)
r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x1203f, 0x0)
ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r6, 0x3304, 0x0)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-ioctl$sock_SIOCGIFINDEX-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-prlimit64$auto-openat$auto_nsim_dev_health_break_fops_health-openat$auto_proc_sys_file_operations_proc_sysctl-write$auto-openat$auto_snapshot_fops_user-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'})
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
prlimit64$auto(0x0, 0x7, 0x0, &(0x7f00000001c0)={0x6, 0x4})
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/sit0/arp_evict_nocarrier\x00', 0x6a0002, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x1203f, 0x0)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-ioctl$sock_SIOCGIFINDEX-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-prlimit64$auto-openat$auto_nsim_dev_health_break_fops_health-openat$auto_proc_sys_file_operations_proc_sysctl-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'})
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
prlimit64$auto(0x0, 0x7, 0x0, &(0x7f00000001c0)={0x6, 0x4})
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/sit0/arp_evict_nocarrier\x00', 0x6a0002, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-ioctl$sock_SIOCGIFINDEX-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-prlimit64$auto-openat$auto_nsim_dev_health_break_fops_health-openat$auto_proc_sys_file_operations_proc_sysctl-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'})
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
prlimit64$auto(0x0, 0x7, 0x0, &(0x7f00000001c0)={0x6, 0x4})
openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/sit0/arp_evict_nocarrier\x00', 0x6a0002, 0x0)
io_uring_setup$auto(0x6, 0x0)

program did not crash
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-ioctl$sock_SIOCGIFINDEX-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-prlimit64$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'})
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
prlimit64$auto(0x0, 0x7, 0x0, &(0x7f00000001c0)={0x6, 0x4})
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-ioctl$sock_SIOCGIFINDEX-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-prlimit64$auto-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'})
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
prlimit64$auto(0x0, 0x7, 0x0, &(0x7f00000001c0)={0x6, 0x4})
write$auto(0xffffffffffffffff, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program did not crash
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-ioctl$sock_SIOCGIFINDEX-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'})
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-ioctl$sock_SIOCGIFINDEX-sysfs$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'})
sysfs$auto(0x2, 0x11, 0x0)
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-ioctl$sock_SIOCGIFINDEX-openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'})
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x8000)
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x4)
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r4, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r4, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r4, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r3, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r3, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0)
r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r2, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r2, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0)
r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r1, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x581d40, 0x0)
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program did not crash
testing program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, 0x0, 0x6)
io_uring_setup$auto(0x6, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=7m40.499318658s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=7m40.499318658s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
extracting C reproducer
testing compiled C program (duration=7m40.499318658s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing program (duration=7m40.499318658s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program did not crash
testing program (duration=7m40.499318658s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
validation run: crashed=true
testing program (duration=7m40.499318658s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
validation run: crashed=true
testing program (duration=7m40.499318658s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto-io_uring_setup$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)
io_uring_setup$auto(0x6, 0x0)

program crashed: INFO: task hung in remove_one
validation run: crashed=true
reproducing took 3h7m53.940164087s
repro crashed as (corrupted=false):
INFO: task kworker/u8:6:749 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:6    state:D stack:24776 pid:749   tgid:749   ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: netns cleanup_net
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75
 do_wait_for_common kernel/sched/completion.c:100 [inline]
 __wait_for_common+0x2fc/0x4e0 kernel/sched/completion.c:121
 __debugfs_file_removed fs/debugfs/inode.c:751 [inline]
 remove_one+0x312/0x420 fs/debugfs/inode.c:758
 __simple_recursive_removal+0x15b/0x610 fs/libfs.c:623
 debugfs_remove+0x5d/0x80 fs/debugfs/inode.c:781
 nsim_dev_health_exit+0x3b/0xe0 drivers/net/netdevsim/health.c:227
 nsim_dev_reload_destroy+0x144/0x4d0 drivers/net/netdevsim/dev.c:1766
 nsim_dev_reload_down+0x66/0xd0 drivers/net/netdevsim/dev.c:1038
 devlink_reload+0x1a1/0x7c0 net/devlink/dev.c:461
 devlink_pernet_pre_exit+0x1a0/0x2b0 net/devlink/core.c:509
 ops_pre_exit_list net/core/net_namespace.c:161 [inline]
 ops_undo_list+0x187/0xab0 net/core/net_namespace.c:234
 cleanup_net+0x41b/0x830 net/core/net_namespace.c:696
 process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257
 process_scheduled_works kernel/workqueue.c:3340 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
INFO: task syz-executor:8449 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:24544 pid:8449  tgid:8449  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776
 device_lock include/linux/device.h:895 [inline]
 device_del+0xa0/0x9f0 drivers/base/core.c:3840
 device_unregister+0x1d/0xe0 drivers/base/core.c:3919
 nsim_bus_dev_del drivers/net/netdevsim/bus.c:483 [inline]
 del_device_store+0x355/0x4a0 drivers/net/netdevsim/bus.c:244
 bus_attr_store+0x74/0xb0 drivers/base/bus.c:172
 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142
 kernfs_fop_write_iter+0x3af/0x570 fs/kernfs/file.c:352
 new_sync_write fs/read_write.c:593 [inline]
 vfs_write+0x7d3/0x11d0 fs/read_write.c:686
 ksys_write+0x12a/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8611b8e27f
RSP: 002b:00007ffff3085040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f8611b8e27f
RDX: 0000000000000001 RSI: 00007ffff3085090 RDI: 0000000000000005
RBP: 00007f8611c152cb R08: 0000000000000000 R09: 00007ffff3084e97
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
R13: 00007ffff3085090 R14: 00007f8612914620 R15: 0000000000000003
 </TASK>
INFO: task syz.1.2386:8466 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.2386      state:D stack:28792 pid:8466  tgid:8466  ppid:5976   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776
 devlink_health_report+0x6b4/0xaa0 net/devlink/health.c:680
 nsim_dev_health_break_write+0x166/0x210 drivers/net/netdevsim/health.c:162
 full_proxy_write+0x131/0x1a0 fs/debugfs/file.c:388
 vfs_write+0x2a0/0x11d0 fs/read_write.c:684
 ksys_write+0x12a/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1cacf8f7c9
RSP: 002b:00007ffc368d34c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f1cad1e5fa0 RCX: 00007f1cacf8f7c9
RDX: 0000000000000006 RSI: 0000200000005900 RDI: 0000000000000003
RBP: 00007f1cad013f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f1cad1e5fa0 R14: 00007f1cad1e5fa0 R15: 0000000000000003
 </TASK>
INFO: task syz.0.2412:8494 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.2412      state:D stack:28488 pid:8494  tgid:8494  ppid:5977   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 rwsem_down_read_slowpath+0x64b/0xbf0 kernel/locking/rwsem.c:1086
 __down_read_common kernel/locking/rwsem.c:1261 [inline]
 __down_read kernel/locking/rwsem.c:1274 [inline]
 down_read+0xef/0x460 kernel/locking/rwsem.c:1539
 inode_lock_shared include/linux/fs.h:1042 [inline]
 open_last_lookups fs/namei.c:4539 [inline]
 path_openat+0x1248/0x3140 fs/namei.c:4784
 do_filp_open+0x20b/0x470 fs/namei.c:4814
 do_sys_openat2+0x121/0x290 fs/open.c:1430
 do_sys_open fs/open.c:1436 [inline]
 __do_sys_openat fs/open.c:1452 [inline]
 __se_sys_openat fs/open.c:1447 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1447
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8de938f7c9
RSP: 002b:00007ffd7b367c48 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f8de95e5fa0 RCX: 00007f8de938f7c9
RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c
RBP: 00007f8de9413f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f8de95e5fa0 R14: 00007f8de95e5fa0 R15: 0000000000000004
 </TASK>
INFO: task syz.3.2413:8495 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.2413      state:D stack:28488 pid:8495  tgid:8495  ppid:5984   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 rwsem_down_read_slowpath+0x64b/0xbf0 kernel/locking/rwsem.c:1086
 __down_read_common kernel/locking/rwsem.c:1261 [inline]
 __down_read kernel/locking/rwsem.c:1274 [inline]
 down_read+0xef/0x460 kernel/locking/rwsem.c:1539
 inode_lock_shared include/linux/fs.h:1042 [inline]
 open_last_lookups fs/namei.c:4539 [inline]
 path_openat+0x1248/0x3140 fs/namei.c:4784
 do_filp_open+0x20b/0x470 fs/namei.c:4814
 do_sys_openat2+0x121/0x290 fs/open.c:1430
 do_sys_open fs/open.c:1436 [inline]
 __do_sys_openat fs/open.c:1452 [inline]
 __se_sys_openat fs/open.c:1447 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1447
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fdebb18f7c9
RSP: 002b:00007ffc7d767ba8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fdebb3e5fa0 RCX: 00007fdebb18f7c9
RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c
RBP: 00007fdebb213f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fdebb3e5fa0 R14: 00007fdebb3e5fa0 R15: 0000000000000004
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/31:
 #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline]
 #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6775
6 locks held by kworker/u8:6/749:
 #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232
 #1: ffffc900037f7c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233
 #2: ffffffff9012e890 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 net/core/net_namespace.c:670
 #3: ffff888031e5f0e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline]
 #3: ffff888031e5f0e8 (&dev->mutex){....}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:108 [inline]
 #3: ffff888031e5f0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12c/0x2b0 net/devlink/core.c:506
 #4: ffff88807b540250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devl_lock net/devlink/core.c:276 [inline]
 #4: ffff88807b540250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:109 [inline]
 #4: ffff88807b540250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x136/0x2b0 net/devlink/core.c:506
 #5: ffff88805af938a0 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1072 [inline]
 #5: ffff88805af938a0 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x354/0x610 fs/libfs.c:619
5 locks held by kworker/u8:7/1026:
2 locks held by getty/5590:
 #0: ffff888031d470a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 drivers/tty/n_tty.c:2211
5 locks held by syz-executor/8449:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888060f14888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
 #4: ffff888031e5f0e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline]
 #4: ffff888031e5f0e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9f0 drivers/base/core.c:3840
2 locks held by syz.1.2386/8466:
 #0: ffff8881412c0420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88807b540250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_health_report+0x6b4/0xaa0 net/devlink/health.c:680
2 locks held by syz.0.2412/8494:
 #0: ffff8881412c0420 (sb_writers#8){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:4529 [inline]
 #0: ffff8881412c0420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x183a/0x3140 fs/namei.c:4784
 #1: ffff88805af938a0 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1042 [inline]
 #1: ffff88805af938a0 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: open_last_lookups fs/namei.c:4539 [inline]
 #1: ffff88805af938a0 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0x1248/0x3140 fs/namei.c:4784
2 locks held by syz.3.2413/8495:
 #0: ffff8881412c0420 (sb_writers#8){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:4529 [inline]
 #0: ffff8881412c0420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x183a/0x3140 fs/namei.c:4784
 #1: ffff88805af938a0 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1042 [inline]
 #1: ffff88805af938a0 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: open_last_lookups fs/namei.c:4539 [inline]
 #1: ffff88805af938a0 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0x1248/0x3140 fs/namei.c:4784
4 locks held by syz-executor/8507:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88807b0e6088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8518:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888035d47c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8519:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88805fc85488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8542:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888071cd8c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8552:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888073757c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8564:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888147adfc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8566:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888033d0fc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8588:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888027001c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8598:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88801fb7f088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8609:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888060b48088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8610:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88807668c088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x133/0x180 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]
 watchdog+0xe66/0x1180 kernel/hung_task.c:515
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:82
Code: f6 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 e7 14 00 fb f4 <e9> cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6
RAX: 000000000012d80b RBX: 0000000000000001 RCX: ffffffff8b7576d9
RDX: 0000000000000000 RSI: ffffffff8daca977 RDI: ffffffff8bf2b580
RBP: ffffed1003b53b70 R08: 0000000000000001 R09: ffffed10170a673d
R10: ffff8880b85339eb R11: ffff88801da9e6b0 R12: 0000000000000001
R13: ffff88801da9db80 R14: ffffffff9088e8d0 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881249fc000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056104a2fe0b0 CR3: 0000000072b30000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline]
 default_idle+0x13/0x20 arch/x86/kernel/process.c:767
 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122
 cpuidle_idle_call kernel/sched/idle.c:191 [inline]
 do_idle+0x38d/0x510 kernel/sched/idle.c:332
 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:430
 start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312
 common_startup_64+0x13e/0x148
 </TASK>

final repro crashed as (corrupted=false):
INFO: task kworker/u8:6:749 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:6    state:D stack:24776 pid:749   tgid:749   ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: netns cleanup_net
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75
 do_wait_for_common kernel/sched/completion.c:100 [inline]
 __wait_for_common+0x2fc/0x4e0 kernel/sched/completion.c:121
 __debugfs_file_removed fs/debugfs/inode.c:751 [inline]
 remove_one+0x312/0x420 fs/debugfs/inode.c:758
 __simple_recursive_removal+0x15b/0x610 fs/libfs.c:623
 debugfs_remove+0x5d/0x80 fs/debugfs/inode.c:781
 nsim_dev_health_exit+0x3b/0xe0 drivers/net/netdevsim/health.c:227
 nsim_dev_reload_destroy+0x144/0x4d0 drivers/net/netdevsim/dev.c:1766
 nsim_dev_reload_down+0x66/0xd0 drivers/net/netdevsim/dev.c:1038
 devlink_reload+0x1a1/0x7c0 net/devlink/dev.c:461
 devlink_pernet_pre_exit+0x1a0/0x2b0 net/devlink/core.c:509
 ops_pre_exit_list net/core/net_namespace.c:161 [inline]
 ops_undo_list+0x187/0xab0 net/core/net_namespace.c:234
 cleanup_net+0x41b/0x830 net/core/net_namespace.c:696
 process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257
 process_scheduled_works kernel/workqueue.c:3340 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
INFO: task syz-executor:8449 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:24544 pid:8449  tgid:8449  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776
 device_lock include/linux/device.h:895 [inline]
 device_del+0xa0/0x9f0 drivers/base/core.c:3840
 device_unregister+0x1d/0xe0 drivers/base/core.c:3919
 nsim_bus_dev_del drivers/net/netdevsim/bus.c:483 [inline]
 del_device_store+0x355/0x4a0 drivers/net/netdevsim/bus.c:244
 bus_attr_store+0x74/0xb0 drivers/base/bus.c:172
 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142
 kernfs_fop_write_iter+0x3af/0x570 fs/kernfs/file.c:352
 new_sync_write fs/read_write.c:593 [inline]
 vfs_write+0x7d3/0x11d0 fs/read_write.c:686
 ksys_write+0x12a/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8611b8e27f
RSP: 002b:00007ffff3085040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f8611b8e27f
RDX: 0000000000000001 RSI: 00007ffff3085090 RDI: 0000000000000005
RBP: 00007f8611c152cb R08: 0000000000000000 R09: 00007ffff3084e97
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
R13: 00007ffff3085090 R14: 00007f8612914620 R15: 0000000000000003
 </TASK>
INFO: task syz.1.2386:8466 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.2386      state:D stack:28792 pid:8466  tgid:8466  ppid:5976   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776
 devlink_health_report+0x6b4/0xaa0 net/devlink/health.c:680
 nsim_dev_health_break_write+0x166/0x210 drivers/net/netdevsim/health.c:162
 full_proxy_write+0x131/0x1a0 fs/debugfs/file.c:388
 vfs_write+0x2a0/0x11d0 fs/read_write.c:684
 ksys_write+0x12a/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1cacf8f7c9
RSP: 002b:00007ffc368d34c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f1cad1e5fa0 RCX: 00007f1cacf8f7c9
RDX: 0000000000000006 RSI: 0000200000005900 RDI: 0000000000000003
RBP: 00007f1cad013f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f1cad1e5fa0 R14: 00007f1cad1e5fa0 R15: 0000000000000003
 </TASK>
INFO: task syz.0.2412:8494 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.2412      state:D stack:28488 pid:8494  tgid:8494  ppid:5977   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 rwsem_down_read_slowpath+0x64b/0xbf0 kernel/locking/rwsem.c:1086
 __down_read_common kernel/locking/rwsem.c:1261 [inline]
 __down_read kernel/locking/rwsem.c:1274 [inline]
 down_read+0xef/0x460 kernel/locking/rwsem.c:1539
 inode_lock_shared include/linux/fs.h:1042 [inline]
 open_last_lookups fs/namei.c:4539 [inline]
 path_openat+0x1248/0x3140 fs/namei.c:4784
 do_filp_open+0x20b/0x470 fs/namei.c:4814
 do_sys_openat2+0x121/0x290 fs/open.c:1430
 do_sys_open fs/open.c:1436 [inline]
 __do_sys_openat fs/open.c:1452 [inline]
 __se_sys_openat fs/open.c:1447 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1447
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8de938f7c9
RSP: 002b:00007ffd7b367c48 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f8de95e5fa0 RCX: 00007f8de938f7c9
RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c
RBP: 00007f8de9413f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f8de95e5fa0 R14: 00007f8de95e5fa0 R15: 0000000000000004
 </TASK>
INFO: task syz.3.2413:8495 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.2413      state:D stack:28488 pid:8495  tgid:8495  ppid:5984   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 rwsem_down_read_slowpath+0x64b/0xbf0 kernel/locking/rwsem.c:1086
 __down_read_common kernel/locking/rwsem.c:1261 [inline]
 __down_read kernel/locking/rwsem.c:1274 [inline]
 down_read+0xef/0x460 kernel/locking/rwsem.c:1539
 inode_lock_shared include/linux/fs.h:1042 [inline]
 open_last_lookups fs/namei.c:4539 [inline]
 path_openat+0x1248/0x3140 fs/namei.c:4784
 do_filp_open+0x20b/0x470 fs/namei.c:4814
 do_sys_openat2+0x121/0x290 fs/open.c:1430
 do_sys_open fs/open.c:1436 [inline]
 __do_sys_openat fs/open.c:1452 [inline]
 __se_sys_openat fs/open.c:1447 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1447
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fdebb18f7c9
RSP: 002b:00007ffc7d767ba8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fdebb3e5fa0 RCX: 00007fdebb18f7c9
RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c
RBP: 00007fdebb213f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fdebb3e5fa0 R14: 00007fdebb3e5fa0 R15: 0000000000000004
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/31:
 #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline]
 #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6775
6 locks held by kworker/u8:6/749:
 #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232
 #1: ffffc900037f7c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233
 #2: ffffffff9012e890 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 net/core/net_namespace.c:670
 #3: ffff888031e5f0e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline]
 #3: ffff888031e5f0e8 (&dev->mutex){....}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:108 [inline]
 #3: ffff888031e5f0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12c/0x2b0 net/devlink/core.c:506
 #4: ffff88807b540250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devl_lock net/devlink/core.c:276 [inline]
 #4: ffff88807b540250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:109 [inline]
 #4: ffff88807b540250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x136/0x2b0 net/devlink/core.c:506
 #5: ffff88805af938a0 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1072 [inline]
 #5: ffff88805af938a0 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x354/0x610 fs/libfs.c:619
5 locks held by kworker/u8:7/1026:
2 locks held by getty/5590:
 #0: ffff888031d470a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 drivers/tty/n_tty.c:2211
5 locks held by syz-executor/8449:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888060f14888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
 #4: ffff888031e5f0e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline]
 #4: ffff888031e5f0e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9f0 drivers/base/core.c:3840
2 locks held by syz.1.2386/8466:
 #0: ffff8881412c0420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88807b540250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_health_report+0x6b4/0xaa0 net/devlink/health.c:680
2 locks held by syz.0.2412/8494:
 #0: ffff8881412c0420 (sb_writers#8){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:4529 [inline]
 #0: ffff8881412c0420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x183a/0x3140 fs/namei.c:4784
 #1: ffff88805af938a0 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1042 [inline]
 #1: ffff88805af938a0 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: open_last_lookups fs/namei.c:4539 [inline]
 #1: ffff88805af938a0 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0x1248/0x3140 fs/namei.c:4784
2 locks held by syz.3.2413/8495:
 #0: ffff8881412c0420 (sb_writers#8){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:4529 [inline]
 #0: ffff8881412c0420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x183a/0x3140 fs/namei.c:4784
 #1: ffff88805af938a0 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1042 [inline]
 #1: ffff88805af938a0 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: open_last_lookups fs/namei.c:4539 [inline]
 #1: ffff88805af938a0 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0x1248/0x3140 fs/namei.c:4784
4 locks held by syz-executor/8507:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88807b0e6088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8518:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888035d47c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8519:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88805fc85488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8542:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888071cd8c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8552:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888073757c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8564:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888147adfc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8566:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888033d0fc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8588:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888027001c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8598:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88801fb7f088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8609:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888060b48088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/8610:
 #0: ffff8880357a2420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88807668c088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff8881427a35a8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bacc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x133/0x180 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]
 watchdog+0xe66/0x1180 kernel/hung_task.c:515
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:82
Code: f6 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 e7 14 00 fb f4 <e9> cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6
RAX: 000000000012d80b RBX: 0000000000000001 RCX: ffffffff8b7576d9
RDX: 0000000000000000 RSI: ffffffff8daca977 RDI: ffffffff8bf2b580
RBP: ffffed1003b53b70 R08: 0000000000000001 R09: ffffed10170a673d
R10: ffff8880b85339eb R11: ffff88801da9e6b0 R12: 0000000000000001
R13: ffff88801da9db80 R14: ffffffff9088e8d0 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881249fc000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056104a2fe0b0 CR3: 0000000072b30000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline]
 default_idle+0x13/0x20 arch/x86/kernel/process.c:767
 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122
 cpuidle_idle_call kernel/sched/idle.c:191 [inline]
 do_idle+0x38d/0x510 kernel/sched/idle.c:332
 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:430
 start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312
 common_startup_64+0x13e/0x148
 </TASK>