Extracting prog: 1h16m50.94767954s Minimizing prog: 2h10m1.32270887s Simplifying prog options: 0s Extracting C: 3m12.786650502s Simplifying C: 29m22.417611982s extracting reproducer from 65 programs testing a last program of every proc single: executing 15 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-socket-sendmsg$nl_route_sched-ioctl$sock_SIOCOUTQ detailed listing: executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x400000, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000007}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x2}}}}]}]}, 0x70}}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-socket-setsockopt$inet_int-socket$packet-setsockopt$packet_tx_ring detailed listing: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0x200000ff, 0x4, 0x1}, 0x48) r0 = socket(0x10, 0x803, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000380)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x2}, 0x1c) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-ioctl$TUNSETLINK-ioctl$BTRFS_IOC_TREE_SEARCH_V2-ioctl$BTRFS_IOC_TREE_SEARCH-bpf$BPF_PROG_ATTACH-socket$kcm-socket$igmp6-socket-socket$unix-socket$inet-sendto$inet-setsockopt$inet_tcp_TCP_CONGESTION-sendto$inet-setsockopt$inet_tcp_TCP_CONGESTION-socket$inet_tcp-setsockopt$inet_tcp_TCP_REPAIR_OPTIONS-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-setsockopt$MRT6_DEL_MIF-ioctl$SIOCSIFHWADDR-close detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000280)={{0x0, 0x3, 0x6, 0x3, 0x3, 0x6, 0xfffffffffffffb5b, 0x6, 0x3, 0x100, 0x4, 0x2, 0x2, 0xfffffffffffffffd, 0xd1}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001300)={{r1, 0x4, 0xa9, 0x2, 0x7fff, 0xc, 0x66a, 0x9, 0xffff, 0x7fffffff, 0x1, 0x2, 0x5, 0xffffffffffffffff, 0x59e}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x38, 0x21}, 0x20) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendto$inet(r6, 0x0, 0x0, 0x10008085, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='hybla', 0x5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000200)=[@mss={0x2, 0x3}, @mss={0x2, 0x9}, @mss={0x2, 0x7f}], 0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x0, 0x5, r8, 0xfffffff9}, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) close(0x3) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-setsockopt$sock_attach_bpf-sendmsg$kcm-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-socket$nl_route-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-getsockopt$SO_J1939_SEND_PRIO-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000380)="260502001a0014000600002f", 0xc}], 0x1}, 0x1800) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@tail_call]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000200)=0x4) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) (rerun: 64) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$PROG_LOAD-socket$nl_netfilter-socket$nl_netfilter-getsockopt-syz_genetlink_get_family_id$ethtool-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_TRIGGER_SCAN-sendmsg$IPSET_CMD_RENAME-bpf$MAP_CREATE_RINGBUF-bpf$PROG_LOAD-sendmsg$IPSET_CMD_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-setsockopt$netlink_NETLINK_TX_RING-write-socket$nl_netfilter-bpf$PROG_LOAD-bpf$PROG_LOAD-ioctl$EXT4_IOC_SETFSUUID-ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS-socket$inet6_sctp-syz_init_net_socket$bt_bnep-close-getsockopt$inet_sctp6_SCTP_MAX_BURST-bpf$BPF_PROG_TEST_RUN-socket$inet_smc-getsockopt$inet_mtu-sendmsg$IPSET_CMD_ADD detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(0xffffffffffffffff, 0x1, 0x1e, 0x0, &(0x7f00000004c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x14, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018", @ANYRESOCT=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f72740000"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed000007030000022800001d44000000000000620a00ff040400007203020100200000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)="240000001e005f02141f00fffffffff80100", 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f00000000c0)={0x0, 0x0, "c571527db5ad5d7a959e84305a13d87d"}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000200)) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r9) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000580)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mtu(r10, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000090601020000000000000000020000000900020073797a3100000000050001005d1c0000340007801800018014000240fe80000000000000000000000000003f0600044000040000050007000c000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$F2FS_IOC_MOVE_RANGE-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$PROG_LOAD-bpf$BPF_LINK_CREATE_XDP-bpf$LINK_DETACH-close-socket$inet6_sctp-socket$nl_generic-sendmsg$nl_generic-socket$inet_sctp-bpf$MAP_LOOKUP_ELEM-getsockopt$inet_sctp_SCTP_MAX_BURST-setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS-sendmmsg$inet_sctp-setsockopt-socket$alg-bind$alg-accept4-sendto$packet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-close detailed listing: executing program 0: r0 = socket(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0xffffffff, 0x1, 0x4}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000007c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xf, &(0x7f0000000840)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r4, 0x4) close(0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a00)={r0, &(0x7f0000000900)="ba5e7f3c0c9f66ad326acac3e19470456367cf3bdf705d750437", &(0x7f0000000940)=""/133}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) sendmmsg$inet_sctp(r0, &(0x7f0000002940)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000027c0)=[{&(0x7f0000000040)="0966097a8e7ae29687a9be682e1fe5112e5aa86debe4a009501625869aa5359b857585898d0abdf70e5c4197ee6f8d803af6b9", 0x33}, {&(0x7f0000000280)="ef6b189fe88c2200857497bc9d2b5c6a27f5d2efaee318d6a504db26ec55c652f64164e402bf8877d4a16c0af11133587e3b88b59df035cc3374a4d015b2374280e6bc11311d9a04b30a1b64aa256e59ce0e1307053fa737e86b3da8d4fc07f5bbf642e003dda56bfbeea13f0d07a121199ca66ed77c39c4a5d88e1acd2171fdc5375df102d39d801b0b2e916bf8024b1645f7cda758d36a53fbce271b9f752234c95975d693dd75d687afd33cb9ba404c8f7119a81236c6b828a62621ea00ca8e14ecca8eb4336a008ff5baaa3793a9a3606dfd65bb3cd9ec4ef57f1d536a0d603770f95c", 0xe5}, {&(0x7f0000000380)="e362884e6fe9cbe056eac47af1787b5a2eb6db8e1b11f374cd15a2ca1d49b39d0d148fda72f0ea7974327bb71c4e1ad10e37e1b21a64b880eeaa101dcc3f026589de496e68ed985e4563d7360f6d906ffccd71f7a70a00de7f07d47bfd43fb2d", 0x60}, {&(0x7f0000000400)="bb7b7fcf0c5495c552584909cd1a16859775c3724357ed0f16b8afb29741e264781c053667e8f8a82416c4be7662fbbcb06cf28e9cc5ec805649939d0907c787aca758643802955640f36da1835ef9daea1f630353417e9a5405fa7027e7afb6af58d55d91ca54b3de21c024054743161a13731c50c1e7bc207acb34f0613cc46f62ad449acfc25a934160f1e8e873b6d1b46e0c725a8743d965cb524ae495afb78479274a766d0e5887e8", 0xab}, {&(0x7f00000004c0)="2b31191f2b960907614d68", 0xb}, {&(0x7f0000000500)="d66bd4f75c17533c85e30e9793e783794aba722b112968353eb2c946fdcb542eb204179eea2da9df9a177654ce85fb5fe777b839f2dc53d139679679fdbcaa13c60b8143f7813414bdd58e641513ebb288ae863b6467e865be776d35aedf7b498f41b1d323c3d12e9a392addbef9d085589c1d0850cee3572da84cdcaae39f3b9218cf05aec29f4b0cd74da21e477f60d17eab979c5fdf9be51ebea6885d8e72548d795e840f8dbdd26155859f93ad32589224578aac5fcb18870d35b7bcc62b20f3e8822422b49536ed6856939cb390dac8ef569290d4ab09d22cb45d66dfe00df3160521cab7b923b8", 0xea}, {&(0x7f0000000600)="323835a546b3bcca56f99b5b13cfe2e5ec655d78f0bbff6ed3d96ce298787af57b5298a3fe11fb1947171ecb99cfd925471aed79d9af2cd648bc12d99f1fc7abb8072d1a00fa96bb3e98b740d28770b1032b5b42490006a9dba73327232b106b753704417ce60f5e0874a8e2d37758825fc789c09d3e61ad545261d9f1f32452fcf94c58c62364ed877b521c444948a9fdfb360f37e58b703e67419d907f82ec18740f386089c7adb8c37dcb14abc99f6142adac162a67131c2eebf07be410ffd1675b8d6b1311d34882d115c0716b3d4f4644733bf69c7390e3c7b3112f324b7b7a3d8e1bb099ee16b0", 0xea}, {&(0x7f0000000700)="6ebfa0273abd97a14f9cfeeaf50cad9f296da7cb08623e07cd012484ce0afba152a65a", 0x23}, {&(0x7f0000000740)="1c54fc6315a0b48a66b0c7ae03a5116aa4bb07d612e2f02a2eca5598f5c1af42fadfc3805dc78cb2ed8ef4631b863802d5ed9081e144552f6d60e2f92c770a5211afafb11b3465e22dade1e0f899a594676e7b1926d572b03a8971942c3d600d", 0x60}, {&(0x7f00000017c0)="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", 0x1000}], 0xa, &(0x7f0000002880)=[@authinfo={0x18, 0x84, 0x6, {0x7fff}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x37}}, @authinfo={0x18, 0x84, 0x6, {0x79cd}}, @sndinfo={0x20, 0x84, 0x2, {0x81, 0x8200, 0x80000000, 0x4, r8}}, @dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}], 0x88, 0x800}], 0x1, 0x40000) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000200060000071a80010061cc", 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendto$packet(r10, &(0x7f00000008c0)="7f", 0x1, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe5}, 0x90) close(r0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_type-socket$nl_generic-sendmsg$nl_generic-write$cgroup_type-openat$cgroup_procs-write$cgroup_pid-openat$cgroup_root-openat$cgroup_ro-socket$nl_netfilter-sendmsg$NFT_BATCH-write$cgroup_int detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000880) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$F2FS_IOC_MOVE_RANGE-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$PROG_LOAD-bpf$BPF_LINK_CREATE_XDP-bpf$LINK_DETACH-close-socket$inet6_sctp-socket$nl_generic-sendmsg$nl_generic-socket$inet_sctp-bpf$MAP_LOOKUP_ELEM-getsockopt$inet_sctp_SCTP_MAX_BURST-setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS-sendmmsg$inet_sctp-setsockopt-socket$alg-bind$alg-accept4-sendto$packet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-close detailed listing: executing program 0: r0 = socket(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0xffffffff, 0x1, 0x4}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000007c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xf, &(0x7f0000000840)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r4, 0x4) close(0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a00)={r0, &(0x7f0000000900)="ba5e7f3c0c9f66ad326acac3e19470456367cf3bdf705d750437", &(0x7f0000000940)=""/133}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) sendmmsg$inet_sctp(r0, &(0x7f0000002940)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000027c0)=[{&(0x7f0000000040)="0966097a8e7ae29687a9be682e1fe5112e5aa86debe4a009501625869aa5359b857585898d0abdf70e5c4197ee6f8d803af6b9", 0x33}, {&(0x7f0000000280)="ef6b189fe88c2200857497bc9d2b5c6a27f5d2efaee318d6a504db26ec55c652f64164e402bf8877d4a16c0af11133587e3b88b59df035cc3374a4d015b2374280e6bc11311d9a04b30a1b64aa256e59ce0e1307053fa737e86b3da8d4fc07f5bbf642e003dda56bfbeea13f0d07a121199ca66ed77c39c4a5d88e1acd2171fdc5375df102d39d801b0b2e916bf8024b1645f7cda758d36a53fbce271b9f752234c95975d693dd75d687afd33cb9ba404c8f7119a81236c6b828a62621ea00ca8e14ecca8eb4336a008ff5baaa3793a9a3606dfd65bb3cd9ec4ef57f1d536a0d603770f95c", 0xe5}, {&(0x7f0000000380)="e362884e6fe9cbe056eac47af1787b5a2eb6db8e1b11f374cd15a2ca1d49b39d0d148fda72f0ea7974327bb71c4e1ad10e37e1b21a64b880eeaa101dcc3f026589de496e68ed985e4563d7360f6d906ffccd71f7a70a00de7f07d47bfd43fb2d", 0x60}, {&(0x7f0000000400)="bb7b7fcf0c5495c552584909cd1a16859775c3724357ed0f16b8afb29741e264781c053667e8f8a82416c4be7662fbbcb06cf28e9cc5ec805649939d0907c787aca758643802955640f36da1835ef9daea1f630353417e9a5405fa7027e7afb6af58d55d91ca54b3de21c024054743161a13731c50c1e7bc207acb34f0613cc46f62ad449acfc25a934160f1e8e873b6d1b46e0c725a8743d965cb524ae495afb78479274a766d0e5887e8", 0xab}, {&(0x7f00000004c0)="2b31191f2b960907614d68", 0xb}, {&(0x7f0000000500)="d66bd4f75c17533c85e30e9793e783794aba722b112968353eb2c946fdcb542eb204179eea2da9df9a177654ce85fb5fe777b839f2dc53d139679679fdbcaa13c60b8143f7813414bdd58e641513ebb288ae863b6467e865be776d35aedf7b498f41b1d323c3d12e9a392addbef9d085589c1d0850cee3572da84cdcaae39f3b9218cf05aec29f4b0cd74da21e477f60d17eab979c5fdf9be51ebea6885d8e72548d795e840f8dbdd26155859f93ad32589224578aac5fcb18870d35b7bcc62b20f3e8822422b49536ed6856939cb390dac8ef569290d4ab09d22cb45d66dfe00df3160521cab7b923b8", 0xea}, {&(0x7f0000000600)="323835a546b3bcca56f99b5b13cfe2e5ec655d78f0bbff6ed3d96ce298787af57b5298a3fe11fb1947171ecb99cfd925471aed79d9af2cd648bc12d99f1fc7abb8072d1a00fa96bb3e98b740d28770b1032b5b42490006a9dba73327232b106b753704417ce60f5e0874a8e2d37758825fc789c09d3e61ad545261d9f1f32452fcf94c58c62364ed877b521c444948a9fdfb360f37e58b703e67419d907f82ec18740f386089c7adb8c37dcb14abc99f6142adac162a67131c2eebf07be410ffd1675b8d6b1311d34882d115c0716b3d4f4644733bf69c7390e3c7b3112f324b7b7a3d8e1bb099ee16b0", 0xea}, {&(0x7f0000000700)="6ebfa0273abd97a14f9cfeeaf50cad9f296da7cb08623e07cd012484ce0afba152a65a", 0x23}, {&(0x7f0000000740)="1c54fc6315a0b48a66b0c7ae03a5116aa4bb07d612e2f02a2eca5598f5c1af42fadfc3805dc78cb2ed8ef4631b863802d5ed9081e144552f6d60e2f92c770a5211afafb11b3465e22dade1e0f899a594676e7b1926d572b03a8971942c3d600d", 0x60}, {&(0x7f00000017c0)="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", 0x1000}], 0xa, &(0x7f0000002880)=[@authinfo={0x18, 0x84, 0x6, {0x7fff}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x37}}, @authinfo={0x18, 0x84, 0x6, {0x79cd}}, @sndinfo={0x20, 0x84, 0x2, {0x81, 0x8200, 0x80000000, 0x4, r8}}, @dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}], 0x88, 0x800}], 0x1, 0x40000) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000200060000071a80010061cc", 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendto$packet(r10, &(0x7f00000008c0)="7f", 0x1, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe5}, 0x90) close(r0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_type-socket$nl_generic-sendmsg$nl_generic-write$cgroup_type-openat$cgroup_procs-write$cgroup_pid-openat$cgroup_root-openat$cgroup_ro-socket$nl_netfilter-sendmsg$NFT_BATCH-write$cgroup_int detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000880) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_icmp_raw-getsockopt$inet_int-socket$nl_netfilter-socket$nl_generic-sendmsg$nl_generic-sendmsg$IPSET_CMD_CREATE detailed listing: executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000280)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x74, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-openat$tun-close-ioctl$TUNSETLINK-socketpair$tipc-ioctl$SIOCSIFHWADDR-socket$packet-socket$nl_generic-sendmsg$nl_generic-write$cgroup_devices detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$pppl2tp-socket$nl_generic-sendmsg$nl_generic-socket$inet6_udp-connect$inet6-socket$nl_route-sendmsg$nl_route-connect$pppl2tp-writev-sendmsg$nl_route-socket$key-sendmsg$nl_xfrm-socket$nl_route-sendmsg$nl_route_sched-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000100008000000000020000000000000000000000000000004000000000000000ad0001000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200740000000000000014000e00fc020000000000000000005800000000"], 0x104}, 0x1, 0x0, 0x0, 0xb855ebcebd820809}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x444, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x418, 0x2, [@TCA_U32_POLICE={0x414, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x4, 0xffffffff, 0x6, 0x1ff, 0xa7, 0x17ea, 0x1000, 0x4993, 0x9, 0x9, 0x611d, 0xc1d2, 0x10001, 0x7, 0x6, 0x3, 0x9c, 0x80, 0x5532, 0xb, 0x0, 0x8001, 0x7, 0x40, 0x10001, 0x17df, 0xa, 0xfff, 0x797e, 0x3, 0x5, 0x8, 0x1, 0xb, 0x8000, 0x9, 0x508, 0x2, 0x99d, 0x3, 0xdfb4, 0x7, 0x3, 0x4, 0x40, 0x5636, 0x8, 0x101, 0x3ff, 0x5, 0xe, 0xfffffff7, 0x3, 0xfd, 0x8, 0x6, 0x4, 0x81, 0xa6c0, 0x3ff, 0x9, 0x7fff, 0xfffff80c, 0x3, 0x80, 0x6, 0x5, 0xc, 0x7f, 0x10001, 0x7, 0x0, 0x401, 0x0, 0x26, 0xad2c, 0x9, 0x8, 0x0, 0x8, 0x0, 0xe19, 0x8000, 0x8, 0x5, 0x2, 0x5, 0x7, 0x5, 0x33, 0x9, 0x6, 0x5, 0x4, 0x8, 0x4b68af1f, 0x80000001, 0x3, 0x7da, 0x6, 0x40, 0x3, 0x4, 0x6, 0x2, 0x0, 0x2, 0x38ac, 0x6, 0x80000001, 0x9, 0x6, 0x101, 0xfffffffe, 0x5, 0x61b, 0xfffffc01, 0xb672, 0x73, 0x10001, 0xbc, 0xe, 0x800, 0x2, 0x0, 0x8, 0x6, 0x7, 0x38db7112, 0x7ff, 0x2, 0x6, 0x1000, 0x0, 0x4, 0x7ff, 0x800, 0x1, 0x3, 0x2d, 0x2a, 0x3, 0x8411, 0x6, 0x4, 0xfff, 0x3, 0xba, 0x6, 0x0, 0x101, 0x7ff, 0x3, 0x8, 0x40, 0x8, 0x2000000, 0x3, 0xca2, 0x9, 0x1ff, 0x3, 0x7, 0xd2a, 0x6, 0x4, 0x8, 0x1, 0x2, 0x3, 0x3de, 0x9, 0x5, 0x3, 0x0, 0x4, 0x50000000, 0x1, 0xe302, 0xadc7, 0x1, 0x5, 0xfffffff8, 0x6, 0x4, 0x2, 0x3ff, 0x7, 0x200, 0x765b, 0x6, 0x2, 0x8, 0x8, 0x8, 0x200, 0x6, 0x8d7b, 0x6, 0xe, 0x284a5d11, 0xfffffe01, 0xb, 0x9, 0x9, 0x8, 0x9, 0x3, 0x2000, 0x6, 0xcceaa41, 0xa9, 0xf, 0x5, 0x7ff, 0x4, 0x5fad, 0x7fff, 0xf, 0x7ff, 0x7, 0x3, 0x7, 0x5, 0x200, 0x10001, 0xaf39, 0x6, 0x600, 0x418, 0xe, 0x2, 0x6, 0x7, 0x4, 0x4, 0x8, 0x3, 0x3, 0x8, 0x5, 0x8, 0x2, 0x8a, 0xffffff51, 0x100000, 0x100, 0xf, 0x1, 0x1ff, 0x101, 0x0, 0x8001, 0x100, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}]}]}}]}, 0x444}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit single: successfully extracted reproducer found reproducer with 17 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$pppl2tp-socket$nl_generic-sendmsg$nl_generic-socket$inet6_udp-connect$inet6-socket$nl_route-sendmsg$nl_route-connect$pppl2tp-writev-sendmsg$nl_route-socket$key-sendmsg$nl_xfrm-socket$nl_route-sendmsg$nl_route_sched-socket$nl_generic detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000100008000000000020000000000000000000000000000004000000000000000ad0001000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200740000000000000014000e00fc020000000000000000005800000000"], 0x104}, 0x1, 0x0, 0x0, 0xb855ebcebd820809}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x444, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x418, 0x2, [@TCA_U32_POLICE={0x414, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x4, 0xffffffff, 0x6, 0x1ff, 0xa7, 0x17ea, 0x1000, 0x4993, 0x9, 0x9, 0x611d, 0xc1d2, 0x10001, 0x7, 0x6, 0x3, 0x9c, 0x80, 0x5532, 0xb, 0x0, 0x8001, 0x7, 0x40, 0x10001, 0x17df, 0xa, 0xfff, 0x797e, 0x3, 0x5, 0x8, 0x1, 0xb, 0x8000, 0x9, 0x508, 0x2, 0x99d, 0x3, 0xdfb4, 0x7, 0x3, 0x4, 0x40, 0x5636, 0x8, 0x101, 0x3ff, 0x5, 0xe, 0xfffffff7, 0x3, 0xfd, 0x8, 0x6, 0x4, 0x81, 0xa6c0, 0x3ff, 0x9, 0x7fff, 0xfffff80c, 0x3, 0x80, 0x6, 0x5, 0xc, 0x7f, 0x10001, 0x7, 0x0, 0x401, 0x0, 0x26, 0xad2c, 0x9, 0x8, 0x0, 0x8, 0x0, 0xe19, 0x8000, 0x8, 0x5, 0x2, 0x5, 0x7, 0x5, 0x33, 0x9, 0x6, 0x5, 0x4, 0x8, 0x4b68af1f, 0x80000001, 0x3, 0x7da, 0x6, 0x40, 0x3, 0x4, 0x6, 0x2, 0x0, 0x2, 0x38ac, 0x6, 0x80000001, 0x9, 0x6, 0x101, 0xfffffffe, 0x5, 0x61b, 0xfffffc01, 0xb672, 0x73, 0x10001, 0xbc, 0xe, 0x800, 0x2, 0x0, 0x8, 0x6, 0x7, 0x38db7112, 0x7ff, 0x2, 0x6, 0x1000, 0x0, 0x4, 0x7ff, 0x800, 0x1, 0x3, 0x2d, 0x2a, 0x3, 0x8411, 0x6, 0x4, 0xfff, 0x3, 0xba, 0x6, 0x0, 0x101, 0x7ff, 0x3, 0x8, 0x40, 0x8, 0x2000000, 0x3, 0xca2, 0x9, 0x1ff, 0x3, 0x7, 0xd2a, 0x6, 0x4, 0x8, 0x1, 0x2, 0x3, 0x3de, 0x9, 0x5, 0x3, 0x0, 0x4, 0x50000000, 0x1, 0xe302, 0xadc7, 0x1, 0x5, 0xfffffff8, 0x6, 0x4, 0x2, 0x3ff, 0x7, 0x200, 0x765b, 0x6, 0x2, 0x8, 0x8, 0x8, 0x200, 0x6, 0x8d7b, 0x6, 0xe, 0x284a5d11, 0xfffffe01, 0xb, 0x9, 0x9, 0x8, 0x9, 0x3, 0x2000, 0x6, 0xcceaa41, 0xa9, 0xf, 0x5, 0x7ff, 0x4, 0x5fad, 0x7fff, 0xf, 0x7ff, 0x7, 0x3, 0x7, 0x5, 0x200, 0x10001, 0xaf39, 0x6, 0x600, 0x418, 0xe, 0x2, 0x6, 0x7, 0x4, 0x4, 0x8, 0x3, 0x3, 0x8, 0x5, 0x8, 0x2, 0x8a, 0xffffff51, 0x100000, 0x100, 0xf, 0x1, 0x1ff, 0x101, 0x0, 0x8001, 0x100, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}]}]}}]}, 0x444}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$pppl2tp-socket$nl_generic-sendmsg$nl_generic-socket$inet6_udp-connect$inet6-socket$nl_route-sendmsg$nl_route-connect$pppl2tp-writev-sendmsg$nl_route-socket$key-sendmsg$nl_xfrm-socket$nl_route-sendmsg$nl_route_sched-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000100008000000000020000000000000000000000000000004000000000000000ad0001000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200740000000000000014000e00fc020000000000000000005800000000"], 0x104}, 0x1, 0x0, 0x0, 0xb855ebcebd820809}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x444, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x418, 0x2, [@TCA_U32_POLICE={0x414, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x4, 0xffffffff, 0x6, 0x1ff, 0xa7, 0x17ea, 0x1000, 0x4993, 0x9, 0x9, 0x611d, 0xc1d2, 0x10001, 0x7, 0x6, 0x3, 0x9c, 0x80, 0x5532, 0xb, 0x0, 0x8001, 0x7, 0x40, 0x10001, 0x17df, 0xa, 0xfff, 0x797e, 0x3, 0x5, 0x8, 0x1, 0xb, 0x8000, 0x9, 0x508, 0x2, 0x99d, 0x3, 0xdfb4, 0x7, 0x3, 0x4, 0x40, 0x5636, 0x8, 0x101, 0x3ff, 0x5, 0xe, 0xfffffff7, 0x3, 0xfd, 0x8, 0x6, 0x4, 0x81, 0xa6c0, 0x3ff, 0x9, 0x7fff, 0xfffff80c, 0x3, 0x80, 0x6, 0x5, 0xc, 0x7f, 0x10001, 0x7, 0x0, 0x401, 0x0, 0x26, 0xad2c, 0x9, 0x8, 0x0, 0x8, 0x0, 0xe19, 0x8000, 0x8, 0x5, 0x2, 0x5, 0x7, 0x5, 0x33, 0x9, 0x6, 0x5, 0x4, 0x8, 0x4b68af1f, 0x80000001, 0x3, 0x7da, 0x6, 0x40, 0x3, 0x4, 0x6, 0x2, 0x0, 0x2, 0x38ac, 0x6, 0x80000001, 0x9, 0x6, 0x101, 0xfffffffe, 0x5, 0x61b, 0xfffffc01, 0xb672, 0x73, 0x10001, 0xbc, 0xe, 0x800, 0x2, 0x0, 0x8, 0x6, 0x7, 0x38db7112, 0x7ff, 0x2, 0x6, 0x1000, 0x0, 0x4, 0x7ff, 0x800, 0x1, 0x3, 0x2d, 0x2a, 0x3, 0x8411, 0x6, 0x4, 0xfff, 0x3, 0xba, 0x6, 0x0, 0x101, 0x7ff, 0x3, 0x8, 0x40, 0x8, 0x2000000, 0x3, 0xca2, 0x9, 0x1ff, 0x3, 0x7, 0xd2a, 0x6, 0x4, 0x8, 0x1, 0x2, 0x3, 0x3de, 0x9, 0x5, 0x3, 0x0, 0x4, 0x50000000, 0x1, 0xe302, 0xadc7, 0x1, 0x5, 0xfffffff8, 0x6, 0x4, 0x2, 0x3ff, 0x7, 0x200, 0x765b, 0x6, 0x2, 0x8, 0x8, 0x8, 0x200, 0x6, 0x8d7b, 0x6, 0xe, 0x284a5d11, 0xfffffe01, 0xb, 0x9, 0x9, 0x8, 0x9, 0x3, 0x2000, 0x6, 0xcceaa41, 0xa9, 0xf, 0x5, 0x7ff, 0x4, 0x5fad, 0x7fff, 0xf, 0x7ff, 0x7, 0x3, 0x7, 0x5, 0x200, 0x10001, 0xaf39, 0x6, 0x600, 0x418, 0xe, 0x2, 0x6, 0x7, 0x4, 0x4, 0x8, 0x3, 0x3, 0x8, 0x5, 0x8, 0x2, 0x8a, 0xffffff51, 0x100000, 0x100, 0xf, 0x1, 0x1ff, 0x101, 0x0, 0x8001, 0x100, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}]}]}}]}, 0x444}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$pppl2tp-socket$nl_generic-sendmsg$nl_generic-socket$inet6_udp-connect$inet6-socket$nl_route-sendmsg$nl_route-connect$pppl2tp-writev-sendmsg$nl_route-socket$key-sendmsg$nl_xfrm-socket$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000100008000000000020000000000000000000000000000004000000000000000ad0001000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200740000000000000014000e00fc020000000000000000005800000000"], 0x104}, 0x1, 0x0, 0x0, 0xb855ebcebd820809}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$pppl2tp-socket$nl_generic-sendmsg$nl_generic-socket$inet6_udp-connect$inet6-socket$nl_route-sendmsg$nl_route-connect$pppl2tp-writev-sendmsg$nl_route-socket$key-sendmsg$nl_xfrm-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000100008000000000020000000000000000000000000000004000000000000000ad0001000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200740000000000000014000e00fc020000000000000000005800000000"], 0x104}, 0x1, 0x0, 0x0, 0xb855ebcebd820809}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$pppl2tp-socket$nl_generic-sendmsg$nl_generic-socket$inet6_udp-connect$inet6-socket$nl_route-sendmsg$nl_route-connect$pppl2tp-writev-sendmsg$nl_route-socket$key-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$pppl2tp-socket$nl_generic-sendmsg$nl_generic-socket$inet6_udp-connect$inet6-socket$nl_route-sendmsg$nl_route-connect$pppl2tp-writev-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$pppl2tp-socket$nl_generic-sendmsg$nl_generic-socket$inet6_udp-connect$inet6-socket$nl_route-sendmsg$nl_route-connect$pppl2tp-writev-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$pppl2tp-socket$nl_generic-sendmsg$nl_generic-socket$inet6_udp-connect$inet6-socket$nl_route-sendmsg$nl_route-connect$pppl2tp-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$pppl2tp-socket$nl_generic-sendmsg$nl_generic-socket$inet6_udp-connect$inet6-socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$pppl2tp-socket$nl_generic-sendmsg$nl_generic-socket$inet6_udp-connect$inet6-socket$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$pppl2tp-socket$nl_generic-sendmsg$nl_generic-socket$inet6_udp-connect$inet6-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$pppl2tp-socket$nl_generic-sendmsg$nl_generic-socket$inet6_udp-socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000000) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$pppl2tp-socket$nl_generic-sendmsg$nl_generic-socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$pppl2tp-socket$nl_generic-socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$pppl2tp-socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_listener_set_doit simplifying C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic program crashed: INFO: task hung in nfsd_nl_listener_set_doit testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit validation run: crashed=true testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit validation run: crashed=true testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$nl_generic-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)=ANY=[@ANYBLOB="140000002700010028bd7000ffdb06f306000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) program crashed: INFO: task hung in nfsd_nl_listener_set_doit validation run: crashed=true reproducing took 4h9m27.706338769s repro crashed as (corrupted=false): INFO: task syz.3.20:6022 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.20 state:D stack:21672 pid:6022 tgid:6022 ppid:5792 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7bf/0x1550 kernel/locking/mutex.c:821 nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7bb/0x940 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775 __sock_sendmsg net/socket.c:790 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2684 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2738 __sys_sendmsg net/socket.c:2770 [inline] __do_sys_sendmsg net/socket.c:2775 [inline] __se_sys_sendmsg net/socket.c:2773 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2773 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe79819e019 RSP: 002b:00007fff9d216a88 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fe798425fa0 RCX: 00007fe79819e019 RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 RBP: 00007fe79823500c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fe798425fac R14: 00007fe798425fa0 R15: 00007fe798425fa0 INFO: task syz.2.19:6023 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.19 state:D stack:21672 pid:6023 tgid:6023 ppid:5801 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7bf/0x1550 kernel/locking/mutex.c:821 nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7bb/0x940 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775 __sock_sendmsg net/socket.c:790 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2684 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2738 __sys_sendmsg net/socket.c:2770 [inline] __do_sys_sendmsg net/socket.c:2775 [inline] __se_sys_sendmsg net/socket.c:2773 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2773 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa80479e019 RSP: 002b:00007ffd9f512398 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fa804a25fa0 RCX: 00007fa80479e019 RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 RBP: 00007fa80483500c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa804a25fac R14: 00007fa804a25fa0 R15: 00007fa804a25fa0 INFO: task syz.0.17:6024 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:21352 pid:6024 tgid:6024 ppid:5784 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7bf/0x1550 kernel/locking/mutex.c:821 nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7bb/0x940 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775 __sock_sendmsg net/socket.c:790 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2684 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2738 __sys_sendmsg net/socket.c:2770 [inline] __do_sys_sendmsg net/socket.c:2775 [inline] __se_sys_sendmsg net/socket.c:2773 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2773 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fed6bb9e019 RSP: 002b:00007ffee609fe38 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fed6be25fa0 RCX: 00007fed6bb9e019 RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 RBP: 00007fed6bc3500c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fed6be25fac R14: 00007fed6be25fa0 R15: 00007fed6be25fa0 INFO: task syz.4.21:6025 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.21 state:D stack:21672 pid:6025 tgid:6025 ppid:5798 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7bf/0x1550 kernel/locking/mutex.c:821 nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7bb/0x940 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775 __sock_sendmsg net/socket.c:790 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2684 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2738 __sys_sendmsg net/socket.c:2770 [inline] __do_sys_sendmsg net/socket.c:2775 [inline] __se_sys_sendmsg net/socket.c:2773 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2773 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc0f0d9e019 RSP: 002b:00007fffba025a28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fc0f1025fa0 RCX: 00007fc0f0d9e019 RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 RBP: 00007fc0f0e3500c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fc0f1025fac R14: 00007fc0f1025fa0 R15: 00007fc0f1025fa0 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 3 locks held by kworker/u9:0/50: #0: ffff88802b28f940 ((wq_completion)hci13){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88802b28f940 ((wq_completion)hci13){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90000ba7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90000ba7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff888022b10ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 net/bluetooth/hci_sync.c:331 4 locks held by kworker/u8:4/57: #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc900015e7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc900015e7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:313 #3: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:311 [inline] #3: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 kernel/rcu/tree_exp.h:961 2 locks held by getty/5381: #0: ffff88803641e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211 3 locks held by kworker/u9:3/5793: #0: ffff888035e11940 ((wq_completion)hci12){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff888035e11940 ((wq_completion)hci12){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc900038f7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc900038f7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff888058178ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 net/bluetooth/hci_sync.c:331 2 locks held by syz.1.18/6012: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.3.20/6022: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.2.19/6023: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.0.17/6024: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.4.21/6025: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 3 locks held by kworker/u9:4/6089: #0: ffff88807caa3140 ((wq_completion)hci14){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88807caa3140 ((wq_completion)hci14){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc9000206fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc9000206fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff888060728ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 net/bluetooth/hci_sync.c:331 2 locks held by syz.5.22/6148: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.6.23/6219: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.7.24/6235: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.9.26/6236: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.8.25/6237: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.1.27/6278: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.3.28/6376: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.0.29/6404: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.2.30/6425: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.4.31/6426: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.5.32/6468: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.6.33/6575: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.7.34/6617: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.8.35/6633: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.9.36/6634: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.1.37/6671: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.3.38/6716: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.0.39/6818: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.2.40/6820: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.4.41/6833: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.5.42/6866: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.6.43/6908: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.7.44/7003: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.8.45/7049: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.9.46/7063: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.1.47/7070: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.3.48/7106: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.0.49/7152: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.2.50/7220: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.4.51/7259: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.5.52/7260: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.6.53/7301: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 3 locks held by kworker/u9:9/7302: #0: ffff88807b569940 ((wq_completion)hci11){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88807b569940 ((wq_completion)hci11){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90006a97c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90006a97c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff88807b1d4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 net/bluetooth/hci_sync.c:331 2 locks held by syz.7.54/7344: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.8.55/7409: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.1.57/7485: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.9.56/7496: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.3.58/7503: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 7 locks held by syz-executor/7505: #0: ffff88807fe9e450 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2733 [inline] #0: ffff88807fe9e450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 fs/read_write.c:683 #1: ffff88804130d080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 fs/kernfs/file.c:336 #2: ffff8880299df3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff8880299df3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 fs/kernfs/file.c:337 #3: ffffffff8f8a9a40 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 #4: ffff888054be9128 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1102 [inline] #4: ffff888054be9128 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1171 [inline] #4: ffff888054be9128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 drivers/base/dd.c:1369 #5: ffff888054be8258 (&devlink->lock_key#34){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 drivers/net/netdevsim/dev.c:1799 #6: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #6: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 net/core/dev.c:2163 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:122 nmi_trigger_cpumask_backtrace+0x17a/0x380 lib/nmi_backtrace.c:65 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd7/0x1030 kernel/hung_task.c:561 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 16 Comm: rcu_preempt Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:98 [inline] RIP: 0010:memory_is_nonzero mm/kasan/generic.c:115 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:140 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:172 [inline] RIP: 0010:check_region_inline mm/kasan/generic.c:191 [inline] RIP: 0010:kasan_check_range+0x97/0x2c0 mm/kasan/generic.c:200 Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd RSP: 0018:ffffc90000157908 EFLAGS: 00000002 RAX: 00000000ffffff01 RBX: ffffffffffffffff RCX: ffffffff81a3668b RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000157980 RBP: ffffc900001579f0 R08: ffffc90000157983 R09: 1ffff9200002af30 R10: dffffc0000000000 R11: fffff5200002af30 R12: 0000000000000001 R13: ffffffff9aa74920 R14: fffff5200002af31 R15: 1ffff9200002af30 FS: 0000000000000000(0000) GS:ffff888124f4d000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f28db60c4b0 CR3: 000000000e946000 CR4: 00000000003526f0 Call Trace: instrument_read_write include/linux/instrumented.h:55 [inline] atomic_try_cmpxchg_acquire include/linux/atomic/atomic-instrumented.h:1301 [inline] queued_spin_lock include/asm-generic/qspinlock.h:111 [inline] do_raw_spin_lock+0x12b/0x2f0 kernel/locking/spinlock_debug.c:116 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock_irqsave+0x4c/0x60 kernel/locking/spinlock.c:166 debug_object_assert_init+0xb0/0x380 lib/debugobjects.c:1070 debug_timer_assert_init kernel/time/timer.c:803 [inline] debug_assert_init kernel/time/timer.c:848 [inline] __try_to_del_timer_sync kernel/time/timer.c:1457 [inline] __timer_delete_sync+0x181/0x520 kernel/time/timer.c:1621 schedule_timeout+0x15a/0x2c0 kernel/time/sleep_timeout.c:100 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 final repro crashed as (corrupted=false): INFO: task syz.3.20:6022 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.20 state:D stack:21672 pid:6022 tgid:6022 ppid:5792 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7bf/0x1550 kernel/locking/mutex.c:821 nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7bb/0x940 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775 __sock_sendmsg net/socket.c:790 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2684 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2738 __sys_sendmsg net/socket.c:2770 [inline] __do_sys_sendmsg net/socket.c:2775 [inline] __se_sys_sendmsg net/socket.c:2773 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2773 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe79819e019 RSP: 002b:00007fff9d216a88 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fe798425fa0 RCX: 00007fe79819e019 RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 RBP: 00007fe79823500c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fe798425fac R14: 00007fe798425fa0 R15: 00007fe798425fa0 INFO: task syz.2.19:6023 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.19 state:D stack:21672 pid:6023 tgid:6023 ppid:5801 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7bf/0x1550 kernel/locking/mutex.c:821 nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7bb/0x940 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775 __sock_sendmsg net/socket.c:790 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2684 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2738 __sys_sendmsg net/socket.c:2770 [inline] __do_sys_sendmsg net/socket.c:2775 [inline] __se_sys_sendmsg net/socket.c:2773 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2773 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa80479e019 RSP: 002b:00007ffd9f512398 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fa804a25fa0 RCX: 00007fa80479e019 RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 RBP: 00007fa80483500c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa804a25fac R14: 00007fa804a25fa0 R15: 00007fa804a25fa0 INFO: task syz.0.17:6024 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:21352 pid:6024 tgid:6024 ppid:5784 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7bf/0x1550 kernel/locking/mutex.c:821 nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7bb/0x940 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775 __sock_sendmsg net/socket.c:790 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2684 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2738 __sys_sendmsg net/socket.c:2770 [inline] __do_sys_sendmsg net/socket.c:2775 [inline] __se_sys_sendmsg net/socket.c:2773 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2773 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fed6bb9e019 RSP: 002b:00007ffee609fe38 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fed6be25fa0 RCX: 00007fed6bb9e019 RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 RBP: 00007fed6bc3500c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fed6be25fac R14: 00007fed6be25fa0 R15: 00007fed6be25fa0 INFO: task syz.4.21:6025 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.21 state:D stack:21672 pid:6025 tgid:6025 ppid:5798 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7bf/0x1550 kernel/locking/mutex.c:821 nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline] genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7bb/0x940 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775 __sock_sendmsg net/socket.c:790 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2684 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2738 __sys_sendmsg net/socket.c:2770 [inline] __do_sys_sendmsg net/socket.c:2775 [inline] __se_sys_sendmsg net/socket.c:2773 [inline] __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2773 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc0f0d9e019 RSP: 002b:00007fffba025a28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fc0f1025fa0 RCX: 00007fc0f0d9e019 RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 RBP: 00007fc0f0e3500c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fc0f1025fac R14: 00007fc0f1025fa0 R15: 00007fc0f1025fa0 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 3 locks held by kworker/u9:0/50: #0: ffff88802b28f940 ((wq_completion)hci13){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88802b28f940 ((wq_completion)hci13){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90000ba7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90000ba7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff888022b10ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 net/bluetooth/hci_sync.c:331 4 locks held by kworker/u8:4/57: #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc900015e7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc900015e7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:313 #3: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:311 [inline] #3: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 kernel/rcu/tree_exp.h:961 2 locks held by getty/5381: #0: ffff88803641e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211 3 locks held by kworker/u9:3/5793: #0: ffff888035e11940 ((wq_completion)hci12){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff888035e11940 ((wq_completion)hci12){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc900038f7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc900038f7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff888058178ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 net/bluetooth/hci_sync.c:331 2 locks held by syz.1.18/6012: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.3.20/6022: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.2.19/6023: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.0.17/6024: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.4.21/6025: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 3 locks held by kworker/u9:4/6089: #0: ffff88807caa3140 ((wq_completion)hci14){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88807caa3140 ((wq_completion)hci14){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc9000206fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc9000206fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff888060728ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 net/bluetooth/hci_sync.c:331 2 locks held by syz.5.22/6148: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.6.23/6219: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.7.24/6235: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.9.26/6236: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.8.25/6237: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.1.27/6278: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.3.28/6376: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.0.29/6404: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.2.30/6425: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.4.31/6426: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.5.32/6468: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.6.33/6575: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.7.34/6617: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.8.35/6633: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.9.36/6634: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.1.37/6671: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.3.38/6716: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.0.39/6818: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.2.40/6820: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.4.41/6833: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.5.42/6866: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.6.43/6908: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.7.44/7003: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.8.45/7049: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.9.46/7063: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.1.47/7070: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.3.48/7106: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.0.49/7152: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.2.50/7220: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.4.51/7259: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.5.52/7260: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.6.53/7301: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 3 locks held by kworker/u9:9/7302: #0: ffff88807b569940 ((wq_completion)hci11){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88807b569940 ((wq_completion)hci11){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90006a97c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90006a97c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff88807b1d4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 net/bluetooth/hci_sync.c:331 2 locks held by syz.7.54/7344: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.8.55/7409: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.1.57/7485: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.9.56/7496: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 2 locks held by syz.3.58/7503: #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217 #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 fs/nfsd/nfsctl.c:1964 7 locks held by syz-executor/7505: #0: ffff88807fe9e450 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2733 [inline] #0: ffff88807fe9e450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 fs/read_write.c:683 #1: ffff88804130d080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 fs/kernfs/file.c:336 #2: ffff8880299df3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff8880299df3c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 fs/kernfs/file.c:337 #3: ffffffff8f8a9a40 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 drivers/net/netdevsim/bus.c:234 #4: ffff888054be9128 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1102 [inline] #4: ffff888054be9128 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1171 [inline] #4: ffff888054be9128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 drivers/base/dd.c:1369 #5: ffff888054be8258 (&devlink->lock_key#34){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 drivers/net/netdevsim/dev.c:1799 #6: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #6: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 net/core/dev.c:2163 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:122 nmi_trigger_cpumask_backtrace+0x17a/0x380 lib/nmi_backtrace.c:65 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd7/0x1030 kernel/hung_task.c:561 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 16 Comm: rcu_preempt Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:98 [inline] RIP: 0010:memory_is_nonzero mm/kasan/generic.c:115 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:140 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:172 [inline] RIP: 0010:check_region_inline mm/kasan/generic.c:191 [inline] RIP: 0010:kasan_check_range+0x97/0x2c0 mm/kasan/generic.c:200 Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd RSP: 0018:ffffc90000157908 EFLAGS: 00000002 RAX: 00000000ffffff01 RBX: ffffffffffffffff RCX: ffffffff81a3668b RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000157980 RBP: ffffc900001579f0 R08: ffffc90000157983 R09: 1ffff9200002af30 R10: dffffc0000000000 R11: fffff5200002af30 R12: 0000000000000001 R13: ffffffff9aa74920 R14: fffff5200002af31 R15: 1ffff9200002af30 FS: 0000000000000000(0000) GS:ffff888124f4d000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f28db60c4b0 CR3: 000000000e946000 CR4: 00000000003526f0 Call Trace: instrument_read_write include/linux/instrumented.h:55 [inline] atomic_try_cmpxchg_acquire include/linux/atomic/atomic-instrumented.h:1301 [inline] queued_spin_lock include/asm-generic/qspinlock.h:111 [inline] do_raw_spin_lock+0x12b/0x2f0 kernel/locking/spinlock_debug.c:116 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock_irqsave+0x4c/0x60 kernel/locking/spinlock.c:166 debug_object_assert_init+0xb0/0x380 lib/debugobjects.c:1070 debug_timer_assert_init kernel/time/timer.c:803 [inline] debug_assert_init kernel/time/timer.c:848 [inline] __try_to_del_timer_sync kernel/time/timer.c:1457 [inline] __timer_delete_sync+0x181/0x520 kernel/time/timer.c:1621 schedule_timeout+0x15a/0x2c0 kernel/time/sleep_timeout.c:100 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245