Extracting prog: 31m5.902067228s
Minimizing prog: 3h15m30.004609427s
Simplifying prog options: 17m36.670360139s
Extracting C: 5m12.702098349s
Simplifying C: 0s


extracting reproducer from 45 programs
testing a last program of every proc
single: executing 10 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_sys_file_operations_proc_sysctl-sendfile$auto-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nl802154-sendmsg$auto_NL802154_CMD_GET_SEC_DEV-ioctl$auto_XFS_IOC_ALLOCSP-mq_timedsend$auto-sendmsg$auto_NL802154_CMD_GET_WPAN_PHY-mmap$auto-memfd_create$auto-mmap$auto-socket-socket-ioctl$sock_SIOCGIFINDEX-setresuid$auto-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0)
sendfile$auto(r0, r0, 0x0, 0x4932462d)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="09032abd7000fedbdf2519400000"], 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000100)={0x4, 0x9, 0xca, 0x5, 0xda3, <r4=>0xffffffffffffffff})
mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x7ffffffd, &(0x7f0000000080)={0x3, 0x80000001})
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY_NAME={0xd, 0x2, '%%)}@#:>\x00'}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x7}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008040}, 0x20048890)
mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000)
memfd_create$auto(0x0, 0x9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x1d, 0x2, 0x6)
r5 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
setresuid$auto(0x0, 0x7, 0x8080)
write$auto(0x3, 0x0, 0xfffffdf2)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-madvise$auto-openat$auto_kernfs_file_fops_kernfs_internal-mmap$auto-read$auto-madvise$auto-prctl$auto-unshare$auto-socket$nl_generic-openat$auto_proc_fail_nth_operations_base-openat$auto_kernel_debug_fops_orangefs_debugfs-openat$auto_snd_ctl_f_ops_control-ioctl$auto-openat$auto_split_huge_pages_fops_huge_memory-write$auto_split_huge_pages_fops_huge_memory-sendfile$auto-ioctl$auto_MON_IOCG_STATS-mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-getpid-mlockall$auto-openat$auto_proc_reg_file_ops_compat_inode-close_range$auto-socket$nl_generic-mmap$auto-setpriority$auto-socketpair$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/ip6_vti0/operstate\x00', 0xc0400, 0x0)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
read$auto(r0, 0x0, 0x1)
madvise$auto(0x5, 0x4, 0xc)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
unshare$auto(0x40000080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x881, 0x0)
openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000140), 0x20402, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0)
ioctl$auto(r2, 0x80045500, 0xffffffffffffffff)
r3 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r3, &(0x7f0000000100)='1', 0x1)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x3)
ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)={0x75, 0x5})
mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0)
sendfile$auto(r1, r4, 0x0, 0x6)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
getpid()
mlockall$auto(0x5)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm0p/sub5/status\x00', 0x8100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
setpriority$auto(0x2, 0x0, 0x80000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto_usbdev_file_operations_usb-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-sendmsg$auto_CTRL_CMD_GETPOLICY-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-socket$nl_generic-syz_genetlink_get_family_id$auto_tipcv2-syz_clone-ptrace$auto-ptrace$auto_PTRACE_SETSIGINFO-setfsuid$auto-setreuid$auto-shmctl$auto_SHM_INFO-socket-write$auto-sendmsg$auto_TIPC_NL_PEER_REMOVE-syz_genetlink_get_family_id$auto_ethtool-sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET-mmap$auto-mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-socket-mremap$auto-getsockopt$auto-openat$auto_lowpan_control_fops_6lowpan-sendmmsg$auto-writev$auto-io_uring_setup$auto
detailed listing:
executing program 0:
mmap$auto_usbdev_file_operations_usb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000002, 0x30, 0xffffffffffffffff, 0x3)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYRES64=0x0], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x4070bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0x8040804)
mmap$auto(0x0, 0x2000b, 0x5, 0x100eb1, 0x401, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r2, 0x4, 0x7)
ptrace$auto_PTRACE_SETSIGINFO(0x4203, r2, 0x7fffffffffffffff, 0xffffffffffff8000)
r3 = setfsuid$auto(0xee00)
setreuid$auto(r3, 0x0)
shmctl$auto_SHM_INFO(0x5, 0xe, &(0x7f0000000280)={{0x7, <r4=>0xee00, 0xffffffffffffffff, 0x0, 0x8, 0xb, 0x8}, 0x2, 0x9, 0x573f31a3, 0x9, @inferred, @inferred, 0x4f8, 0x0, &(0x7f0000000300)="d619971d5f2ef47e6bb403db85a66fa9429f01ef477ef6d8f9fb5cab30353b288fe9bf5fcf2d49eef8e21f3858318b53cfab0d378921c28851d5facc55d184f681d2b780dcbe168c437753e6ba1af66f08b3015cc519c84dc1c1f349dc2de0b10715063a5b61be81ab72d52ba5a08a7b5a2c83e3323ed35cd75c7e37defed06766d1442a3edd8adf0d9bf52ffa09e994413c5023dee74874aa8735e58ec7253cbcfbcbff69238756dd96aed4941783f09be7dc286e73337abd27ed44eae11bd812ec60", &(0x7f0000000400)="cd0f726e7c4be67c74899d46c8107078e9985655bc9e7bdfd4b28a8e0cfab75fe30c9b389a3b173d61c8498a1fd5fa83dfb69c4bac4a51740010c0e762a0c2aaae1aa70565e9ead4dcc3696f"})
r5 = socket(0x10, 0x2, 0x4)
write$auto(r5, &(0x7f0000000000)='-\x00', 0xfdef)
sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f00000110c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="48150000", @ANYRES16=r1, @ANYBLOB="030026bd7000fedbdf2514000000dd000780f95669cb455fab5bb5c8b8a234aed606c1c380e249bd3819ff37bb0cd5d7b905729a7a8cac9ba4b0777081e5d033f2776ede2eda84d2795255205feef18efc59d9e1043f8af46fc25841a1976b952ea3501f96bebd6172d1e2dee7c1e927c0bf2e20ee8f1bf51ff886e53666fa1782c977edd2cf4aab9f3418e0995d45e64edc17acac1730b63208fa91ba6e1d463a0fa5c7a8044aa04d987268b14313abacfdb981f384c6848d1c30609df764cb3210f0faecef5b48592f063df9506d6c24372aa61918cfbb9ce404355ecb57d3be181ba56c41b652abf4180000008700098008005200", @ANYRES32=r2, @ANYBLOB="08008700", @ANYRES32=r4, @ANYBLOB="020d6aa9460e82223cb2798526101961bcc2c0eebe2df9ef00caddaf8456f4ff7c157b1422b4d7f88af0ba7798d149993ced38ed5dfe86e6c920257aa09dbba642090c5859c75d13d468822cbcc9fa409b3130d3eb24ea309554b1f0b281c117450ba7870826c753c704002b2e4028bb72f11c00b710068041c95bca4d59713cae5bc2fc53f8bcb52337d2a8d73f600ba7d6d7d1d43885854afd9ff8714187b95f5ccbd22c63afab95f8df8e15e63c2a2087e772a2f34e229cdf061136c8bbc33aa381a48757f60b4a6c0efb4e6658effad86b912651eca1a6f86f7f19f3b7b589611ae1c03995c7aaec2c6e2664a39aa63090cabdb7e64516b64a12420c57dc4f40f282a2d2d8ce3b60915edc1928cec969c8db88d4a609e01afca895c15dff613d85a9941b265b45e592fec9709fb2d557caabb2a2f43bf7dc6008274c791a59ee801dfb70baf96544ffb8947a96ffd43c8a4cf1b07a916dbd72267cadcf3099fceb204f886d122497f11e843160447345a98fdbaaaf56d9eb6763b3b3fb38f0baf4955e69a577f96d6ffb54c9b39dc0928d00d0afd019335b16d0793ea53150d115b45bb345217b79f8a9e20682c30a823ab31aa10d37e07b86a7b351a237f51ff10bfaf9d1e4d071741d942764a39f6312f4d702141ef88e56f01726794550602438a198bf68ec8c75e309b63a80c5f9d90379168f516625cb0120b0f3b0955d9073d659f080802df3abdb8b9776b249c4d1393e1e85198dd4926f9d008a6f8c1477f630d90cf3caeed86bff30ef4ce716411c2e1e33c5ee2ba080ecad522c5b7edbc4145fb6fbe69b8d01164d44f80973d611fbecd0747966b4908d0487b94cd55c968aed68c95a1a70ad6276ef56149c88dbf6ca771f7cf0b87c9805c9c7a001738a1b46e087acd78b4de44d8ae9e06c755776afb11e817696c2a890b89eebc0b6298b22c1358852cd1ed6202240b20a11dff784f6597f07ba0173786ba7809598a0af87afc2164f899bd53a22d029c0d905ff1d12ad2c3bc276056412fe625f66ed94b73855ca372e2f7832201c2831f970271e0a658c85e724906f99dc91cb056729c2254946b3e0e75ddb13387cd03367247b8c60863e2a74964fd11a33ed4c28304a68f1278922f8c88dfb63da1d3ac8e2d28004624907cc23b4b95067c8d67ab1f6c81ff25c520424865383bc253c92aa59756d46f9dd9a58f39d85ea8b15a9e9ca283006d843cdb85ccef081275e303c94cd82c602af310a61d82ddbbd31a40151105cb17bba291b4bdb21914bb4167e573ebde7b4fed8c7fea77969fd68e6116f14f61e3a0a1059a765f52938b267a41d8f7fa7aece7aee06ba1e2cd25a994d09a88e4b9e8ceb62b7ecb0511070424f06609b297a023c960d2adcc5bf1f42ab76167f1d27908b2aa324a58b633016bdadeb936c9bb06cd5a982f131dc8dacb64899835e3667eda653791c1744e6a77560a2a0d0ed66328a94d0332987cb2c38094cfdd4a4d351d839ee342c28c54e3d4e42f74817a149710ddd5c8713bfd3884bbf0d794653be07a37ab3296b41ed0a035cedebf37d02f8d51bb11330fc95832bd9a360f1d46931cfa5e649bbc554c76ee3b6049947e1ce43cb5a04f81d8e09498798719e6eaf62f9aebf431cd960c33517fe8751fca6d66d77369f6c0fc8763553245975b515260cf7b0ec400f64d2e2e48e5dd2cb9814e060b1ca85ce3d540ce6ea99185b31f1de5ccebbb5ae5164c428247f031a24f12c7f8cb2c59a8c89308d0c73b5c7e68921f70a493b1695f15d9597f5b3ea381ce3411065428dbc387ee373e639ba878cf7ea34fc42bc8530ada2188b1838db6612fbfab1afe5952e2522b9ef59893c6cad65faf3028dcb494ab77839971bd8b6eb3751949315590676a40d2f7747197b912a058d8083e6f192b14b92606be32da1800c7f2fd26baf2f4ca3a1ccdbdbdd0b0d9881469721100f8b60e28b656ab803ead8d495e4f59e30600b4027910f6ec9a6a6783fc100618a4deae2786b91631c4a16871a978a568b55095bda56202d2af0335cdbffba21eca2991d37100e08c391e13c01e9f92efb12eb66a09f84f4e2d1e2d928b60bd1228eaced49496693c90b388bed5ab0a37421d99f392d366fcc4d10d766db19e4c7ee75c1718e8fe5309a6008b22128050654b3d200c344df81d86b4918aa31d9c8fd8b22b5b4a88d4716160757db098ed83bedb718039a9252c34d0a22f2359b8ec04c33f295204997892bb91345384260cad4a0c923467bdb90c3b4c5a9d207f20910a9dfe31dc2fd835be21b2d3a2f8b160f82fa4e1137a7bd985165d647cb52d01c9107fe666fae3e371f4d72cf2b5d0d6004b5dd3ea3a738170099e42144e128a922e170031d4c252eb93713494b2097c73135367334decf7481c908a28eb37941fdd9dd4ef648db0464597182e5fb8f038bf2a042deadaadb9d0156b16712b11784ad816ec7c03dd5dbf7b7c05559baff4b5bf8ac5f42894f55644d1de5ba73a92b9be004a4e703ec7de72f514e37eb47ea7786b49bdce086a11716f40aea94b1869d98d8254033a2f01855ff3dc0b397a37ee6a687ea15d2ccb5a840ceb7fcbaf1d23cf4c612df7512a4ae7b66289b3402fbd81f4140a2d366cfa93796d7f8c0888a013f29bdebf6064181e251ea66f04963667015ad327f9d9ea05de8d2a4a227bad5b42432a26e4836fa046dee0cc0761a446b13d5a83239ac18bc1ae2d546f71f8d9329dbf8cdaa16f2eb97e8ef57216afbeb954751b3af3d1e05dcfd6c29289c186414b5ea4fa35434b7d1da561a0dd9b4ba5a03e15c4afb7a8292715b718ef15c5945c8867e7181f6f5e2c81df23e16bcf0376d66b5159cf7184aa3439c78b7ed5cc8aa58106aedefa3a93bc4ce8382bc0d2e951b5fc87ca2513df0d0097ffb868f782dbd1d888b1045ef1dd5fa5225218dbbf6230ccaa7232721cc6ca1e1ede579709223a0bf26664bb4ef919cf41e08acc11423b7dcedbd9242549d5ca5908abe50dba1ab8588f7af3dea8bcac14bcee1c10128340eb0735aab4f7689a6fe0cf4b72bc339d779a82f3623bf5bba2a556807e77fac913b6c95932d3a3fb20c3a8d029d0161457fe55a1de4b7750f1a65096eb99ead9253e9fadea1f898370487bee819a234cfdc774e90f30cee2477ae500cd14d3bb47a9b000aa2f7e8220c3f2469983b00aabdcaa6df9fd160266b2f00007edf871756a33bd70a7240d3ae1ada3c5d9b1fed28e64338e16b75d1af2a213a981ed9da728f7d56237cc1a860d1b25609997fb839ff874ccdf35bfc203d643c22085a1edf3d7857a1345aa7d393e84df8ccfe0382677880dbcbb8fdd99944bbf9e278050c444c062798bd38d422ac94c400a09e0b3f0cca2e9c88d42c44269a316243c29c7c0199d19b12675924f322f5a4194c64afb01a5ee719088ca493dfccfd90ef7fb976e733deb02df71f1b7ae65d92513fb7d2be2e623d3b8b2b7bcea5706730eeb67b3215a53f00115a8fc75aafa4ef13353be4449242fc9d759d6b1a9840d3703a5f20349533a8f92cd282ae409672af7f08ee16626d02667753fa11ca75adc27ae588b4e5c980b4fe58dcf94b899d0a423b23c66193aace99b0218e114b5d0c2dc240a50b9411ea133ed725e7c22d0e2a6058ad3e8a9b5c1b2bb63766e47a33bb91f9a83e824c5879832dc2a07adc15d41f417493737064c4cb56b3aee19afb9ab11cc4784470ea3661ef140a4d65f5b0ee87caf61b40f4e25041af23c91d405c7dfc9a381b835abbbc53574eebced3e16c1f6fcbed3789e6dfea45016fc0708bd07c87ffc806ed061426026dbdb755cb6e6578cfd2ce36a4e0309d9d39800fd2f9275c8b07cdc6497b577050f6f0289ef366bee0668bcef31c91ef8ebd55626ee08a5acd384009922cc82e5470ba7b9f7083df90505efd6133b9025bd1d1de451336295615793cf47af0fb7310f4931d97c9402af5e4e6be6d117aa7dddd860420dd1b5f9998328d82c9c4c2e127d45bbdb64c932f0bbf3a201025609b3dc90e34024f956096da8084c4f13810a145da9a31ca0865ed7c597a010d4ab8d07f50ac2ab4b467228b3f0029f2d39b09813ed39287394af39a0c71fa0deee4bff4720711038c9e7b12a7385adb2edc021dc8a94af0f6343bc1bff8df5cb26cca0b4c380d54c973c1cb7134d7b64305f127e90bac4840fda2a032c20d097b72c9fba1d296fd3607a7f1e338a4303e3c45bf1b9c28c4e4603411ece4adbab413926c2a37c401d048c0afc215113509db220413893f7174d5c5e49d72f9c6bf44f074f187a36290bd477d19dc1a1695ad1188b10342986691a1a5b8c31f6163a3ffaa0e4fad6f802a073e7585c7c01f97f013c1e9646f5d5c360dcff89d6205955161347bf14b803c293791bdcf50bbd34bbcd2fd4b65bd98c70d2e7b968f67e5d31b2a624f1694891aecd435734c96e7c313bb73738c485f36bb3b608e3b3d30a737447f789e1b4a3407d8e396e1cf1bf3e955cbb44f8e28fb963d5d70c0bfa910beafc1528972438db544ecbb7fd68e819f2b8dada1c73ad88597c7e88697de008bd905d0258cb0e7d80221d61856e0677ae9299d8c1876fc894125e7c8fa5b7da23d183761df68bbf0ce403bfba583e774d949a790ef08d1a78eac5a13a5ca4badd590113f3a7bc2cbf9c3756683769abbe257ff73355ef4eb5e497ab85015bce382d85fcea03358eb211034705753cc9d9e750d8ed50bf9fa5b0675557e74f95ff34c4432a79e66c93a9827f1d2bf11f1d1b85b819bdf398b6b4bc02a218db190d00926a17a37d5bb871f76099f5b78f0b3f4a3790c786fd859e6b01b2a746ec833988fd325e191c33e0425511d640502f4facb0bcd260a6f27e909f77d0ce5021e581b4aaf24037c1a024fa8d160efea59e08c5bee60bfe72f46fa0538a70ed24c55426208eac51786c1b9bb21a15f3f5f6b8c096f804bf349fc2ec5fc15d5da81fb2d292b9488a3c29c0016a5fc78464c87092d951b297ae9ad9dee67708f33ace79d7104b1d443db66639e1996f135b982d9513cdc1bf58e07cdf0d94d723c8e7855367adc50d724027ab8f495d4d880ab9c442ed54545cfcecbe883eac0f6d46377ded695bbbb0f6d3c7f31a1790de833beb8086c82033c345fe636c2340378751aeb3fe35c5267866255d73216629312a28d331bdd8e7fa780d9ad9e06873f606323a313b7e55e20a7d0b21b8730b19807ed2f5bef61bbdb662be76ec63a7ee6454c48f75e9b2cf639c5cac8c9b7ff69bdd8e3773131f7b091b68da47c194da8f721e4084c941da39390edfbbac945bfe18ac13fa6007814fdf7ecc9d8a3bed70aa854a48723d7e0defee0efff2ba6364abb52262ac601325cbfc0b6bb27079e107b7123d16d67a42d747de910bac15a8865acdd366c0ac3edfa7c1922cb3b89a8650223b41e16651f23d141c75b652b056dac776692fc0ccb7414723811f0b80c7cace9c513850bc9706b6b5e993f7cf466e6a73d4a686a80e1497d4e4f9df973f834cb387cc7b19be35cd07e175b78e8504a34cfbb9ce23eb26a9416993bf3e042c08b06fe9eb317d82c793ba4fc4def392f9c0d13ebd3762545ac7a7b7cf6caaf8b962529fae2cd38ebf86098f2da68e12b8182cae7ed215b527c589ac1260a380fb832b9506dba30120694300ef122039a53e1a67acdbebd055cc3ee62d492066b5302e4059e651a5bf1cccd9d8ae3d7ce5e13ae0de0d75b0bc6f11e83c180fadf55a245c850da2e20afa1140894f9ffdc310a00b461aa651b8cbb5c0f03bc914f71f5bc2ec47f0e9cdc598137c89317e64d17fe1b442a1b39a71c495692553002351a292efd2270718db88499fae6a298d564afc123f931e1fa9e0b80ddedf818bbea18b1cb0999783bb208d2774bafd550c0c78394a27431ce0c0c8fb0ae632d0c00e9800400178004007880c7beb962ae3bafd31b0e99615e59c804fb1ffcd80d0dc6a8c588d4ea514942f88e69dfecac63b33d54ec46b160d14667cf188dd3907214c61651383fc6219d71d88c8c758669c1c2625ab5bec06bc94c89222c4bb4e3d62bcf2dfa40a546a5a224d57ef18741996371118699f65a0768d29dc9eebdffb5de0828c527a347f29861d656011bf18e7ed1f5726dd12bbb6bd8758018594170e7bc6d71eedef9430b0b39d2c27fa14e00c8000180e2272cb5c022aa7657c66943cc53ee97771af1b46065094399d54e27f5dc9ec686b39a06ee917adc4ed38a6ed62ca2b873b5f92a7137951e5ada932c08ff898baea581515d4f5154e3f8dd1956e196db06062086af8dfbdb126d0c34c188010a9c25150e575c2133e39e548a6013f93d25d479365750f65d11dd944371cc8ffcad8da4021bdf8da573c95aebe56578a973e00abc8a2180ab4463246524133d47e21d5207096c51184c588884afa18ea4b445e9ba1f251dc501ad51f80800b800ac1e010149020480eace3ff56204f7f425c4b8d5aef8fad1d3da770c3746175da5421da23c193f45cf1c7eceb6554ed2fd575683009b2efcf808009a00", @ANYRES32=r4, @ANYBLOB="0c021980040046000800f100", @ANYRES32=r5, @ANYBLOB="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"], 0x1548}, 0x1, 0x0, 0x0, 0x20008105}, 0x40)
r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042cbd7000fedbdf2512000000200001801400020067000000000000000000000000080003000008000800e0000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8000800)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/irq/2/hwirq\x00', 0x80000, 0x0)
read$auto(r7, 0x0, 0x20)
r8 = socket(0x2, 0x5, 0x0)
mremap$auto(0x1, 0x5, 0x5, 0xb, 0xfffffffffffffff6)
getsockopt$auto(r8, 0x84, 0x75, 0x0, 0x0)
openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800008}, 0x1, 0x20000000)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000180), 0x7112}, 0x8)
io_uring_setup$auto(0x3ff, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-memfd_create$auto-openat$auto_def_blk_fops_fs-sendmsg$auto_NL80211_CMD_SET_CQM-write$auto-mmap$auto-getpid-process_vm_readv$auto-openat$auto_cec_devnode_fops_cec_priv-ioctl$auto_CEC_TRANSMIT-close_range$auto-mremap$auto-setresuid$auto-mremap$auto-msync$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32)
memfd_create$auto(0x0, 0xe) (async, rerun: 32)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
sendmsg$auto_NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x8000) (async)
write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) (async, rerun: 64)
r1 = getpid() (rerun: 64)
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) (async)
r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec4\x00', 0x181f82, 0x0)
ioctl$auto_CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000080)={0x40000000001, 0xfffffffffffffffe, 0x2, 0xffffffff, 0xa, 0xffffffff, '\x00', 0xa, 0x26, 0x82, 0x5, 0x4, 0x5, 0x3})
close_range$auto(0x2, 0x8, 0x0) (async)
mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) (async, rerun: 32)
setresuid$auto(0xffffffff, 0x7, 0x3) (rerun: 32)
mremap$auto(0x0, 0x2, 0x72c6, 0x0, 0xfff)
msync$auto(0x0, 0xe0, 0x6)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-bpf$auto-sendmsg$auto_HWSIM_CMD_FRAME-socket-sendmsg$auto_NL80211_CMD_GET_REG-recvmmsg$auto-sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-openat$auto_nsim_dev_health_break_fops_health-openat$auto_proc_sys_file_operations_proc_sysctl-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, <r9=>r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
sendmsg$auto_HWSIM_CMD_FRAME(r9, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HWSIM_ATTR_TX_INFO={0xa, 0x7, [{0x2, 0xe4}, {0x10, 0x8}, {0x80, 0x8}]}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48040)
r10 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='^\x00', @ANYBLOB="e4ac932c75e718d7"], 0x1ac}, 0x1, 0x0, 0x0, 0x100}, 0x40000)
recvmmsg$auto(r10, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0xa, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="e8634624271a02000000010000000101d8", @ANYRES16=0x0, @ANYBLOB="100c2cbd7000ffdbdf252700000004000180", @ANYRESDEC=0x0], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
r11 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/sit0/arp_evict_nocarrier\x00', 0x6a0002, 0x0)
write$auto(r11, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
single: successfully extracted reproducer
found reproducer with 29 syscalls
minimizing guilty program
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-bpf$auto-sendmsg$auto_HWSIM_CMD_FRAME-socket-sendmsg$auto_NL80211_CMD_GET_REG-recvmmsg$auto-sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-openat$auto_nsim_dev_health_break_fops_health-openat$auto_proc_sys_file_operations_proc_sysctl
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, <r9=>r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
sendmsg$auto_HWSIM_CMD_FRAME(r9, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HWSIM_ATTR_TX_INFO={0xa, 0x7, [{0x2, 0xe4}, {0x10, 0x8}, {0x80, 0x8}]}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48040)
r10 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='^\x00', @ANYBLOB="e4ac932c75e718d7"], 0x1ac}, 0x1, 0x0, 0x0, 0x100}, 0x40000)
recvmmsg$auto(r10, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0xa, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="e8634624271a02000000010000000101d8", @ANYRES16=0x0, @ANYBLOB="100c2cbd7000ffdbdf252700000004000180", @ANYRESDEC=0x0], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/sit0/arp_evict_nocarrier\x00', 0x6a0002, 0x0)

program did not crash
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-bpf$auto-sendmsg$auto_HWSIM_CMD_FRAME-socket-sendmsg$auto_NL80211_CMD_GET_REG-recvmmsg$auto-sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, <r9=>r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
sendmsg$auto_HWSIM_CMD_FRAME(r9, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HWSIM_ATTR_TX_INFO={0xa, 0x7, [{0x2, 0xe4}, {0x10, 0x8}, {0x80, 0x8}]}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48040)
r10 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='^\x00', @ANYBLOB="e4ac932c75e718d7"], 0x1ac}, 0x1, 0x0, 0x0, 0x100}, 0x40000)
recvmmsg$auto(r10, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0xa, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="e8634624271a02000000010000000101d8", @ANYRES16=0x0, @ANYBLOB="100c2cbd7000ffdbdf252700000004000180", @ANYRESDEC=0x0], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
r11 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r11, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-bpf$auto-sendmsg$auto_HWSIM_CMD_FRAME-socket-sendmsg$auto_NL80211_CMD_GET_REG-recvmmsg$auto-sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, <r9=>r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
sendmsg$auto_HWSIM_CMD_FRAME(r9, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HWSIM_ATTR_TX_INFO={0xa, 0x7, [{0x2, 0xe4}, {0x10, 0x8}, {0x80, 0x8}]}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48040)
r10 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='^\x00', @ANYBLOB="e4ac932c75e718d7"], 0x1ac}, 0x1, 0x0, 0x0, 0x100}, 0x40000)
recvmmsg$auto(r10, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0xa, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="e8634624271a02000000010000000101d8", @ANYRES16=0x0, @ANYBLOB="100c2cbd7000ffdbdf252700000004000180", @ANYRESDEC=0x0], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000005900)='\x00', 0x6)

program did not crash
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-bpf$auto-sendmsg$auto_HWSIM_CMD_FRAME-socket-sendmsg$auto_NL80211_CMD_GET_REG-recvmmsg$auto-sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG-sysfs$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, <r9=>r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
sendmsg$auto_HWSIM_CMD_FRAME(r9, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HWSIM_ATTR_TX_INFO={0xa, 0x7, [{0x2, 0xe4}, {0x10, 0x8}, {0x80, 0x8}]}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48040)
r10 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='^\x00', @ANYBLOB="e4ac932c75e718d7"], 0x1ac}, 0x1, 0x0, 0x0, 0x100}, 0x40000)
recvmmsg$auto(r10, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0xa, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="e8634624271a02000000010000000101d8", @ANYRES16=0x0, @ANYBLOB="100c2cbd7000ffdbdf252700000004000180", @ANYRESDEC=0x0], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sysfs$auto(0x2, 0x11, 0x0)
r11 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r11, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-bpf$auto-sendmsg$auto_HWSIM_CMD_FRAME-socket-sendmsg$auto_NL80211_CMD_GET_REG-recvmmsg$auto-sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, <r9=>r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
sendmsg$auto_HWSIM_CMD_FRAME(r9, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HWSIM_ATTR_TX_INFO={0xa, 0x7, [{0x2, 0xe4}, {0x10, 0x8}, {0x80, 0x8}]}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48040)
r10 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='^\x00', @ANYBLOB="e4ac932c75e718d7"], 0x1ac}, 0x1, 0x0, 0x0, 0x100}, 0x40000)
recvmmsg$auto(r10, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0xa, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="e8634624271a02000000010000000101d8", @ANYRES16=0x0, @ANYBLOB="100c2cbd7000ffdbdf252700000004000180", @ANYRESDEC=0x0], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r11 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r11, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-bpf$auto-sendmsg$auto_HWSIM_CMD_FRAME-socket-sendmsg$auto_NL80211_CMD_GET_REG-recvmmsg$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, <r9=>r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
sendmsg$auto_HWSIM_CMD_FRAME(r9, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HWSIM_ATTR_TX_INFO={0xa, 0x7, [{0x2, 0xe4}, {0x10, 0x8}, {0x80, 0x8}]}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48040)
r10 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='^\x00', @ANYBLOB="e4ac932c75e718d7"], 0x1ac}, 0x1, 0x0, 0x0, 0x100}, 0x40000)
recvmmsg$auto(r10, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0xa, 0x7}, 0x7}, 0x5, 0x66a6, 0x0)
r11 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r11, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-bpf$auto-sendmsg$auto_HWSIM_CMD_FRAME-socket-sendmsg$auto_NL80211_CMD_GET_REG-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, <r9=>r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
sendmsg$auto_HWSIM_CMD_FRAME(r9, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HWSIM_ATTR_TX_INFO={0xa, 0x7, [{0x2, 0xe4}, {0x10, 0x8}, {0x80, 0x8}]}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48040)
r10 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='^\x00', @ANYBLOB="e4ac932c75e718d7"], 0x1ac}, 0x1, 0x0, 0x0, 0x100}, 0x40000)
r11 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r11, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-bpf$auto-sendmsg$auto_HWSIM_CMD_FRAME-socket-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, <r9=>r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
sendmsg$auto_HWSIM_CMD_FRAME(r9, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HWSIM_ATTR_TX_INFO={0xa, 0x7, [{0x2, 0xe4}, {0x10, 0x8}, {0x80, 0x8}]}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48040)
socket(0x10, 0x2, 0x0)
r10 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r10, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-bpf$auto-sendmsg$auto_HWSIM_CMD_FRAME-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, <r9=>r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
sendmsg$auto_HWSIM_CMD_FRAME(r9, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HWSIM_ATTR_TX_INFO={0xa, 0x7, [{0x2, 0xe4}, {0x10, 0x8}, {0x80, 0x8}]}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48040)
r10 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r10, &(0x7f0000005900)='\x00', 0x6)

program crashed: lost connection to test machine
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-bpf$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf)
r9 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r9, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'})
r7 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r7, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-socket$nl_generic-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r7, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-ioctl$auto_FIDEDUPERANGE-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000)
r7 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r7, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-writev$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4)
r7 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r7, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-setsockopt$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff)
r6 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r6, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_proc_fail_nth_operations_base-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r6 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r6, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r6, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-sendmsg$auto_CTRL_CMD_GETPOLICY-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="c253254100ffdbdf250a00000008000200d6c66c247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-syz_genetlink_get_family_id$auto_nlctrl-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r3, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-socket$nl_generic-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r3, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-sendfile$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7)
r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r3, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0)
r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r2, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-ioctl$auto_I2C_FUNCS-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0))
r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r2, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-read$auto_kernfs_file_fops_kernfs_internal-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0)
r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r1, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0)
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program did not crash
testing program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, 0x0, 0x6)

program did not crash
extracting C reproducer
testing compiled C program (duration=7m42.967351789s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=7m42.967351789s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
extracting C reproducer
testing compiled C program (duration=7m42.967351789s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing program (duration=7m42.967351789s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program did not crash
testing program (duration=7m42.967351789s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
validation run: crashed=true
testing program (duration=7m42.967351789s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
validation run: crashed=true
testing program (duration=7m42.967351789s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, &(0x7f0000005900)='\x00', 0x6)

program crashed: INFO: task hung in remove_one
validation run: crashed=true
reproducing took 4h28m45.288542286s
repro crashed as (corrupted=false):
INFO: task kworker/u8:1:13 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:1    state:D stack:24120 pid:13    tgid:13    ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: netns cleanup_net
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75
 do_wait_for_common kernel/sched/completion.c:100 [inline]
 __wait_for_common+0x2fc/0x4e0 kernel/sched/completion.c:121
 __debugfs_file_removed fs/debugfs/inode.c:751 [inline]
 remove_one+0x312/0x420 fs/debugfs/inode.c:758
 __simple_recursive_removal+0x15b/0x610 fs/libfs.c:631
 debugfs_remove+0x5d/0x80 fs/debugfs/inode.c:781
 nsim_dev_health_exit+0x3b/0xe0 drivers/net/netdevsim/health.c:227
 nsim_dev_reload_destroy+0x144/0x4d0 drivers/net/netdevsim/dev.c:1766
 nsim_dev_reload_down+0x66/0xd0 drivers/net/netdevsim/dev.c:1038
 devlink_reload+0x1a1/0x7c0 net/devlink/dev.c:461
 devlink_pernet_pre_exit+0x1a0/0x2b0 net/devlink/core.c:509
 ops_pre_exit_list net/core/net_namespace.c:161 [inline]
 ops_undo_list+0x187/0xab0 net/core/net_namespace.c:234
 cleanup_net+0x41b/0x830 net/core/net_namespace.c:696
 process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257
 process_scheduled_works kernel/workqueue.c:3340 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
INFO: task syz-executor:8964 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:24384 pid:8964  tgid:8964  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776
 device_lock include/linux/device.h:895 [inline]
 device_del+0xa0/0x9f0 drivers/base/core.c:3840
 device_unregister+0x1d/0xe0 drivers/base/core.c:3919
 nsim_bus_dev_del drivers/net/netdevsim/bus.c:483 [inline]
 del_device_store+0x355/0x4a0 drivers/net/netdevsim/bus.c:244
 bus_attr_store+0x74/0xb0 drivers/base/bus.c:172
 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142
 kernfs_fop_write_iter+0x3af/0x570 fs/kernfs/file.c:352
 new_sync_write fs/read_write.c:593 [inline]
 vfs_write+0x7d3/0x11d0 fs/read_write.c:686
 ksys_write+0x12a/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7c2778e27f
RSP: 002b:00007ffe0931f840 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f7c2778e27f
RDX: 0000000000000001 RSI: 00007ffe0931f890 RDI: 0000000000000005
RBP: 00007f7c278152cb R08: 0000000000000000 R09: 00007ffe0931f697
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
R13: 00007ffe0931f890 R14: 00007f7c28514620 R15: 0000000000000003
 </TASK>
INFO: task syz.3.2882:8985 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.2882      state:D stack:27608 pid:8985  tgid:8985  ppid:8390   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776
 devlink_health_report+0x6b4/0xaa0 net/devlink/health.c:680
 nsim_dev_health_break_write+0x166/0x210 drivers/net/netdevsim/health.c:162
 full_proxy_write+0x131/0x1a0 fs/debugfs/file.c:388
 vfs_write+0x2a0/0x11d0 fs/read_write.c:684
 ksys_write+0x12a/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7facd318f7c9
RSP: 002b:00007ffc4f447058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007facd33e5fa0 RCX: 00007facd318f7c9
RDX: 0000000000000006 RSI: 0000200000005900 RDI: 0000000000000003
RBP: 00007facd3213f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007facd33e5fa0 R14: 00007facd33e5fa0 R15: 0000000000000003
 </TASK>
INFO: task syz.1.2911:9018 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.2911      state:D stack:28792 pid:9018  tgid:9018  ppid:5953   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 rwsem_down_read_slowpath+0x64b/0xbf0 kernel/locking/rwsem.c:1086
 __down_read_common kernel/locking/rwsem.c:1261 [inline]
 __down_read kernel/locking/rwsem.c:1274 [inline]
 down_read+0xef/0x460 kernel/locking/rwsem.c:1539
 inode_lock_shared include/linux/fs.h:1042 [inline]
 open_last_lookups fs/namei.c:4539 [inline]
 path_openat+0x1248/0x3140 fs/namei.c:4784
 do_filp_open+0x20b/0x470 fs/namei.c:4814
 do_sys_openat2+0x121/0x290 fs/open.c:1430
 do_sys_open fs/open.c:1436 [inline]
 __do_sys_openat fs/open.c:1452 [inline]
 __se_sys_openat fs/open.c:1447 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1447
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff68478f7c9
RSP: 002b:00007ffce4c0fdc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ff6849e5fa0 RCX: 00007ff68478f7c9
RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c
RBP: 00007ff684813f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ff6849e5fa0 R14: 00007ff6849e5fa0 R15: 0000000000000004
 </TASK>
INFO: task syz.0.2912:9020 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.2912      state:D stack:27984 pid:9020  tgid:9020  ppid:5949   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 rwsem_down_read_slowpath+0x64b/0xbf0 kernel/locking/rwsem.c:1086
 __down_read_common kernel/locking/rwsem.c:1261 [inline]
 __down_read kernel/locking/rwsem.c:1274 [inline]
 down_read+0xef/0x460 kernel/locking/rwsem.c:1539
 inode_lock_shared include/linux/fs.h:1042 [inline]
 open_last_lookups fs/namei.c:4539 [inline]
 path_openat+0x1248/0x3140 fs/namei.c:4784
 do_filp_open+0x20b/0x470 fs/namei.c:4814
 do_sys_openat2+0x121/0x290 fs/open.c:1430
 do_sys_open fs/open.c:1436 [inline]
 __do_sys_openat fs/open.c:1452 [inline]
 __se_sys_openat fs/open.c:1447 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1447
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc08a78f7c9
RSP: 002b:00007ffde4752588 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fc08a9e5fa0 RCX: 00007fc08a78f7c9
RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c
RBP: 00007fc08a813f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc08a9e5fa0 R14: 00007fc08a9e5fa0 R15: 0000000000000004
 </TASK>

Showing all locks held in the system:
6 locks held by kworker/u8:1/13:
 #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232
 #1: ffffc90000127c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233
 #2: ffffffff9012e6d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 net/core/net_namespace.c:670
 #3: ffff8880306280e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline]
 #3: ffff8880306280e8 (&dev->mutex){....}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:108 [inline]
 #3: ffff8880306280e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12c/0x2b0 net/devlink/core.c:506
 #4: ffff888030629250 (&devlink->lock_key#3){+.+.}-{4:4}, at: devl_lock net/devlink/core.c:276 [inline]
 #4: ffff888030629250 (&devlink->lock_key#3){+.+.}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:109 [inline]
 #4: ffff888030629250 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x136/0x2b0 net/devlink/core.c:506
 #5: ffff8880576e1a70 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1072 [inline]
 #5: ffff8880576e1a70 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x354/0x610 fs/libfs.c:627
1 lock held by khungtaskd/31:
 #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline]
 #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6775
1 lock held by klogd/5189:
 #0: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:639
2 locks held by getty/5590:
 #0: ffff888035fca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 drivers/tty/n_tty.c:2211
5 locks held by syz-executor/8964:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff8880734d3c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
 #4: ffff8880306280e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline]
 #4: ffff8880306280e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9f0 drivers/base/core.c:3840
2 locks held by syz.3.2882/8985:
 #0: ffff888141aa8420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888030629250 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_health_report+0x6b4/0xaa0 net/devlink/health.c:680
2 locks held by syz.1.2911/9018:
 #0: ffff888141aa8420 (sb_writers#8){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:4529 [inline]
 #0: ffff888141aa8420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x183a/0x3140 fs/namei.c:4784
 #1: ffff8880576e1a70 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1042 [inline]
 #1: ffff8880576e1a70 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: open_last_lookups fs/namei.c:4539 [inline]
 #1: ffff8880576e1a70 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0x1248/0x3140 fs/namei.c:4784
2 locks held by syz.0.2912/9020:
 #0: ffff888141aa8420 (sb_writers#8){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:4529 [inline]
 #0: ffff888141aa8420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x183a/0x3140 fs/namei.c:4784
 #1: ffff8880576e1a70 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1042 [inline]
 #1: ffff8880576e1a70 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: open_last_lookups fs/namei.c:4539 [inline]
 #1: ffff8880576e1a70 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0x1248/0x3140 fs/namei.c:4784
4 locks held by syz-executor/9025:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888073660888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9036:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888145b6cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9037:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888143ecdc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9060:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88807bffec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9071:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88806ac96488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9082:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88805cb47088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9083:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888035404488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9109:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888075ea3888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9120:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888076fc6088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9131:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88807bd66488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9132:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888033a24088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
2 locks held by dhcpcd/9153:
 #0: ffff88807a426260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1700 [inline]
 #0: ffff88807a426260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 net/packet/af_packet.c:3197
 #1: ffffffff8e3d4bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 kernel/rcu/tree_exp.h:311
2 locks held by dhcpcd/9154:
 #0: ffff88805af0a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1700 [inline]
 #0: ffff88805af0a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 net/packet/af_packet.c:3197
 #1: ffffffff8e3d4bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 kernel/rcu/tree_exp.h:343

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x133/0x180 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]
 watchdog+0xe66/0x1180 kernel/hung_task.c:515
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:82
Code: f6 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 f7 14 00 fb f4 <e9> cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6
RAX: 000000000015e43f RBX: 0000000000000000 RCX: ffffffff8b7566d9
RDX: 0000000000000000 RSI: ffffffff8daca141 RDI: ffffffff8bf2b480
RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d
R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000
R13: ffffffff8e097b40 R14: ffffffff9088e1d0 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881248fd000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055e6fda6c660 CR3: 000000000e184000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline]
 default_idle+0x13/0x20 arch/x86/kernel/process.c:767
 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122
 cpuidle_idle_call kernel/sched/idle.c:191 [inline]
 do_idle+0x38d/0x510 kernel/sched/idle.c:332
 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:430
 rest_init+0x16b/0x2b0 init/main.c:757
 start_kernel+0x3ef/0x4d0 init/main.c:1206
 x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:310
 x86_64_start_kernel+0x130/0x190 arch/x86/kernel/head64.c:291
 common_startup_64+0x13e/0x148
 </TASK>

final repro crashed as (corrupted=false):
INFO: task kworker/u8:1:13 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:1    state:D stack:24120 pid:13    tgid:13    ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: netns cleanup_net
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75
 do_wait_for_common kernel/sched/completion.c:100 [inline]
 __wait_for_common+0x2fc/0x4e0 kernel/sched/completion.c:121
 __debugfs_file_removed fs/debugfs/inode.c:751 [inline]
 remove_one+0x312/0x420 fs/debugfs/inode.c:758
 __simple_recursive_removal+0x15b/0x610 fs/libfs.c:631
 debugfs_remove+0x5d/0x80 fs/debugfs/inode.c:781
 nsim_dev_health_exit+0x3b/0xe0 drivers/net/netdevsim/health.c:227
 nsim_dev_reload_destroy+0x144/0x4d0 drivers/net/netdevsim/dev.c:1766
 nsim_dev_reload_down+0x66/0xd0 drivers/net/netdevsim/dev.c:1038
 devlink_reload+0x1a1/0x7c0 net/devlink/dev.c:461
 devlink_pernet_pre_exit+0x1a0/0x2b0 net/devlink/core.c:509
 ops_pre_exit_list net/core/net_namespace.c:161 [inline]
 ops_undo_list+0x187/0xab0 net/core/net_namespace.c:234
 cleanup_net+0x41b/0x830 net/core/net_namespace.c:696
 process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257
 process_scheduled_works kernel/workqueue.c:3340 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
INFO: task syz-executor:8964 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:24384 pid:8964  tgid:8964  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776
 device_lock include/linux/device.h:895 [inline]
 device_del+0xa0/0x9f0 drivers/base/core.c:3840
 device_unregister+0x1d/0xe0 drivers/base/core.c:3919
 nsim_bus_dev_del drivers/net/netdevsim/bus.c:483 [inline]
 del_device_store+0x355/0x4a0 drivers/net/netdevsim/bus.c:244
 bus_attr_store+0x74/0xb0 drivers/base/bus.c:172
 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142
 kernfs_fop_write_iter+0x3af/0x570 fs/kernfs/file.c:352
 new_sync_write fs/read_write.c:593 [inline]
 vfs_write+0x7d3/0x11d0 fs/read_write.c:686
 ksys_write+0x12a/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7c2778e27f
RSP: 002b:00007ffe0931f840 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f7c2778e27f
RDX: 0000000000000001 RSI: 00007ffe0931f890 RDI: 0000000000000005
RBP: 00007f7c278152cb R08: 0000000000000000 R09: 00007ffe0931f697
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
R13: 00007ffe0931f890 R14: 00007f7c28514620 R15: 0000000000000003
 </TASK>
INFO: task syz.3.2882:8985 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.2882      state:D stack:27608 pid:8985  tgid:8985  ppid:8390   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776
 devlink_health_report+0x6b4/0xaa0 net/devlink/health.c:680
 nsim_dev_health_break_write+0x166/0x210 drivers/net/netdevsim/health.c:162
 full_proxy_write+0x131/0x1a0 fs/debugfs/file.c:388
 vfs_write+0x2a0/0x11d0 fs/read_write.c:684
 ksys_write+0x12a/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7facd318f7c9
RSP: 002b:00007ffc4f447058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007facd33e5fa0 RCX: 00007facd318f7c9
RDX: 0000000000000006 RSI: 0000200000005900 RDI: 0000000000000003
RBP: 00007facd3213f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007facd33e5fa0 R14: 00007facd33e5fa0 R15: 0000000000000003
 </TASK>
INFO: task syz.1.2911:9018 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.2911      state:D stack:28792 pid:9018  tgid:9018  ppid:5953   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 rwsem_down_read_slowpath+0x64b/0xbf0 kernel/locking/rwsem.c:1086
 __down_read_common kernel/locking/rwsem.c:1261 [inline]
 __down_read kernel/locking/rwsem.c:1274 [inline]
 down_read+0xef/0x460 kernel/locking/rwsem.c:1539
 inode_lock_shared include/linux/fs.h:1042 [inline]
 open_last_lookups fs/namei.c:4539 [inline]
 path_openat+0x1248/0x3140 fs/namei.c:4784
 do_filp_open+0x20b/0x470 fs/namei.c:4814
 do_sys_openat2+0x121/0x290 fs/open.c:1430
 do_sys_open fs/open.c:1436 [inline]
 __do_sys_openat fs/open.c:1452 [inline]
 __se_sys_openat fs/open.c:1447 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1447
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff68478f7c9
RSP: 002b:00007ffce4c0fdc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ff6849e5fa0 RCX: 00007ff68478f7c9
RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c
RBP: 00007ff684813f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ff6849e5fa0 R14: 00007ff6849e5fa0 R15: 0000000000000004
 </TASK>
INFO: task syz.0.2912:9020 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.2912      state:D stack:27984 pid:9020  tgid:9020  ppid:5949   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1139/0x6150 kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xe7/0x3a0 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017
 rwsem_down_read_slowpath+0x64b/0xbf0 kernel/locking/rwsem.c:1086
 __down_read_common kernel/locking/rwsem.c:1261 [inline]
 __down_read kernel/locking/rwsem.c:1274 [inline]
 down_read+0xef/0x460 kernel/locking/rwsem.c:1539
 inode_lock_shared include/linux/fs.h:1042 [inline]
 open_last_lookups fs/namei.c:4539 [inline]
 path_openat+0x1248/0x3140 fs/namei.c:4784
 do_filp_open+0x20b/0x470 fs/namei.c:4814
 do_sys_openat2+0x121/0x290 fs/open.c:1430
 do_sys_open fs/open.c:1436 [inline]
 __do_sys_openat fs/open.c:1452 [inline]
 __se_sys_openat fs/open.c:1447 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1447
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc08a78f7c9
RSP: 002b:00007ffde4752588 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fc08a9e5fa0 RCX: 00007fc08a78f7c9
RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c
RBP: 00007fc08a813f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc08a9e5fa0 R14: 00007fc08a9e5fa0 R15: 0000000000000004
 </TASK>

Showing all locks held in the system:
6 locks held by kworker/u8:1/13:
 #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232
 #1: ffffc90000127c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233
 #2: ffffffff9012e6d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 net/core/net_namespace.c:670
 #3: ffff8880306280e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline]
 #3: ffff8880306280e8 (&dev->mutex){....}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:108 [inline]
 #3: ffff8880306280e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12c/0x2b0 net/devlink/core.c:506
 #4: ffff888030629250 (&devlink->lock_key#3){+.+.}-{4:4}, at: devl_lock net/devlink/core.c:276 [inline]
 #4: ffff888030629250 (&devlink->lock_key#3){+.+.}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:109 [inline]
 #4: ffff888030629250 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x136/0x2b0 net/devlink/core.c:506
 #5: ffff8880576e1a70 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1072 [inline]
 #5: ffff8880576e1a70 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x354/0x610 fs/libfs.c:627
1 lock held by khungtaskd/31:
 #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline]
 #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6775
1 lock held by klogd/5189:
 #0: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:639
2 locks held by getty/5590:
 #0: ffff888035fca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 drivers/tty/n_tty.c:2211
5 locks held by syz-executor/8964:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff8880734d3c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
 #4: ffff8880306280e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline]
 #4: ffff8880306280e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9f0 drivers/base/core.c:3840
2 locks held by syz.3.2882/8985:
 #0: ffff888141aa8420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888030629250 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_health_report+0x6b4/0xaa0 net/devlink/health.c:680
2 locks held by syz.1.2911/9018:
 #0: ffff888141aa8420 (sb_writers#8){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:4529 [inline]
 #0: ffff888141aa8420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x183a/0x3140 fs/namei.c:4784
 #1: ffff8880576e1a70 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1042 [inline]
 #1: ffff8880576e1a70 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: open_last_lookups fs/namei.c:4539 [inline]
 #1: ffff8880576e1a70 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0x1248/0x3140 fs/namei.c:4784
2 locks held by syz.0.2912/9020:
 #0: ffff888141aa8420 (sb_writers#8){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:4529 [inline]
 #0: ffff888141aa8420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x183a/0x3140 fs/namei.c:4784
 #1: ffff8880576e1a70 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1042 [inline]
 #1: ffff8880576e1a70 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: open_last_lookups fs/namei.c:4539 [inline]
 #1: ffff8880576e1a70 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0x1248/0x3140 fs/namei.c:4784
4 locks held by syz-executor/9025:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888073660888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9036:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888145b6cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9037:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888143ecdc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9060:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88807bffec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9071:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88806ac96488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9082:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88805cb47088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9083:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888035404488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9109:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888075ea3888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9120:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888076fc6088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9131:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff88807bd66488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
4 locks held by syz-executor/9132:
 #0: ffff888034cde420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:738
 #1: ffff888033a24088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 fs/kernfs/file.c:343
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff88814371c788 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 fs/kernfs/file.c:344
 #3: ffffffff8f6bac28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 drivers/net/netdevsim/bus.c:234
2 locks held by dhcpcd/9153:
 #0: ffff88807a426260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1700 [inline]
 #0: ffff88807a426260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 net/packet/af_packet.c:3197
 #1: ffffffff8e3d4bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 kernel/rcu/tree_exp.h:311
2 locks held by dhcpcd/9154:
 #0: ffff88805af0a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1700 [inline]
 #0: ffff88805af0a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 net/packet/af_packet.c:3197
 #1: ffffffff8e3d4bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 kernel/rcu/tree_exp.h:343

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x133/0x180 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]
 watchdog+0xe66/0x1180 kernel/hung_task.c:515
 kthread+0x3c5/0x780 kernel/kthread.c:463
 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:82
Code: f6 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 f7 14 00 fb f4 <e9> cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6
RAX: 000000000015e43f RBX: 0000000000000000 RCX: ffffffff8b7566d9
RDX: 0000000000000000 RSI: ffffffff8daca141 RDI: ffffffff8bf2b480
RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d
R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000
R13: ffffffff8e097b40 R14: ffffffff9088e1d0 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881248fd000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055e6fda6c660 CR3: 000000000e184000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline]
 default_idle+0x13/0x20 arch/x86/kernel/process.c:767
 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122
 cpuidle_idle_call kernel/sched/idle.c:191 [inline]
 do_idle+0x38d/0x510 kernel/sched/idle.c:332
 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:430
 rest_init+0x16b/0x2b0 init/main.c:757
 start_kernel+0x3ef/0x4d0 init/main.c:1206
 x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:310
 x86_64_start_kernel+0x130/0x190 arch/x86/kernel/head64.c:291
 common_startup_64+0x13e/0x148
 </TASK>