Extracting prog: 1h12m37.711775202s Minimizing prog: 1h5m42.384907147s Simplifying prog options: 18m53.987900632s Extracting C: 5m12.778329159s Simplifying C: 0s extracting reproducer from 24 programs testing a last program of every proc single: executing 4 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_v4l2_fops_v4l2_dev-mmap$auto-close_range$auto-io_uring_setup$auto-io_uring_register$auto detailed listing: executing program 0: openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/radio18\x00', 0x8aa40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000640)={0x0, 0x1, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x7, 0xaaf, 0x8c48, 0x29b, 0x3, 0x7b, 0x0, 0x5, 0xfffffffffffffffa}, {0x100, 0x20001, 0x52, 0x85, 0x2, 0x1a7b8702, 0x2072c2, 0xc, 0xc80c}}) io_uring_register$auto(0x2, 0x20, &(0x7f0000000240), 0x1) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK-syz_genetlink_get_family_id$auto_nl80211-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040006"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001d40)={0x1030, r1, 0x8ff972b65c311bf5, 0x70bd26, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x137, 0x0, 0x0, @binary}]}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_OFFLOAD={0x100c, 0x9, 0x0, 0x1, [@generic="e286ec06496b89f2bbacab08e973d2e7d86222f24830e4260cdd35c2969e5709001d489abf8269680e60f1953a75fcf4adcb59f5ec7c1e45f38363ec9cddecafff673f017dc8c52042654d7aea997086fd56c59dc82bcb9367ddbf7ad99f6ae3c9915a76768db01aca823d88db62ebcd6b26b56ef08fe31500d06f03056348d8516585a5f4c75f39f725df25760bb09b11e892f87745aca6b5a0b38ec418df2a73442967844f0f30a075c29fadb2495102158bebf801d876ee7eaef92ed031bfaefe15e8636230c9e347999541ed482785097c28da7339e4a4e11c953c7cb1f5f852cf351a75e80496ce96f50518fceabfc1e93bf73c3b3bc82811f67fa9b3f59b867a5dc25e55c4882d5a041003f0b773875983f2a9d865d5a3424392e5d33730684e9842ec4e25cc1156a22e1ffdf2b3188e5759c260762a5e6568e9b43cb6746e8683223b548ad192ec628346f27749bfcaa13770f0801105afe13503f7def5cb74883f713cd7cc38c294109ad5601539fbed801b2d1976660ebc4e636675ca6a65d3c0047faed756bb5361ff4a323d5213b685c96f06acb56069aa48363d1db9a26606efcf87287c0b7ad54928e09494f79974b9783a2561716147ad2517fa882dca905fd8d15491d8782a673b394f04cdcf0a362ba19e0aa5652e868a421fce1df2f12e450fc17e8852d2ec7a636c589fcd72264dbef69cc19cdd816f514a8ecbd4a5eb0118445ab1d4d73107b3de774e3208017ae41ca48d491cd18b604552fe4ca8f6f980d7feceedfd9a6a695bd72dffb3cd74671247809bc6ddfbd69df9d1eac7e1aea99cd17e40932cd551db40fb15fba4541dedf0121062e6ddd4fe36c5140dc162ac2cbc0e985508ead04117bebdb9239749b401fb593268a4d67e5dd3ba70ea843c7a67fb48314a581440235f5150df4972313a4357314dae4a997d53917e4ae9b16cf92f4a031bce3494e3576b91d1833664e7f6e5193f2df271ee0a6e2625d442bd62e94dc4337a903db0f61e597374d8a1c494dedc72408c9ed5aac196697023c67e301c71de229b2ab2c795389dd4fbaf750c4c6bb117eea895c0241c8156ee33b83c6e4e27d37166d67ac4d67e61ef97f254dfa508f1b6b1f45fb19439cb5d2cb539cf3664f8106ac17bd9bfe2db9d61f4940a69af9063bb2b0c48759cd20a36a93c85b3c2c8bb978635c926031d76d1adc8feea462271d7559dbe735169dc4b48f42314539e505b57b9b8bee527374f6effa17e293f1a3890af00aa0749645a0ba329782f5a57ee0cb42d7dd061af9ae0d0e5fd6d01cc82c7a7828da4691b051e9cc79e23c4f80a641e8b026fcafab71bdb654dfafac300096c96dccea94f6e277c077fef9f422b6ddc8b8a533f4aa8cb1f37b02ba844fba283b722d8214b2e5d17f6dd27a57ddeb28c2f8a066f1cd826e7db64a71c4055cd18cd840724fd77bbefe1969491ab829f2e35dd94bc7c4fa51a831b743ecdfa93a00a23ae4fb681706b7e47e04241ba7fc369e7c0da6968d21b6855c0a718df88b46c0705f19d1bea4767f7e412fcbc5bf87f6fc25ac8a6f7451a0723141349625bdab4271c62d183829f30f2fa01e82688a6bfee368581d99111f49fb4e3a35aa362afb765fe361e5cfd3ce9929af1669063ce1f6e5babdaa66a077406f751bff67c0f2c7afd8019216311d2bfdc0c7edca326e1c2570b182effad7bf7c22ecf782b4c641bf7b7c5b4316d37cb3bdbbec725ba74175e516980ae6f23c51ea0ff284c760f8fb9b1a4135082083fe9685af4d3966c4b528571b448438c713ffa32440b7974b8db160771ebf633dcb123ac38aa9f073e89e46da00821c487039a8d0e555bb2d779df38f2dfb796057c7df0b1f97d9786f07a164e48f1876de11665405ad258e3a0e799ef8c47785bd2caa61eed09dc00a0122837b2180ed2ba917c7f1501c6b18d80e2659341da947ae9c32631581517b455256327a821a8acf647d71cdf8a4c623bbba8c776edb01fa41e3463448b54c7f2cb29c5accc4d4dc6feae05ffa029a404e8605a2dcf2f9d7e86891d7f2ca24cab49170baa34439732aa3c50f48fbe0d9f003b42534bcc5319e8883611749c6a65b766325aad5204cb8abf712c03d87269f593f8deca7bb42a542ca51dd7be2a99818911be84d5c2b00fdd8178008751702238536c08857ba319bd467a446f70f7f16dbee6f0f6ddbb904314794857acb061751ff8c107b270771998a89afc8044fe70a30a5fda001f01a8d4d29ee3b54d920c2c6f97054c94a295cb614274bbc7cf74533464b8b19fe374a2f42ed9775b010ace47aab9555ac0b25daabd4200329b6681087fa88e0e8acd49e0a8cc9824c0a4ab08ea62632bb9b1bfddbaf4b4355624fe871d058fa8598b3c68352870b2393220a9bec809a8bf7e1dc85968d09c4902677d41e379ffd9603d459c8e74d02ee847fda4352bbdba51fc3e2a143fe730112fe2072e70adbd4a38ee7672d388c2b4a21ced48446a5bee8d909b5f834d105f9a6ce4c2cc7421d13bd198d53f43bae59be37d60e1408db203633a5793699f22e6cf63cab34b1c450aab953b2635ab22daf6b12cd29b82b5fe8890a6a8163110e443bedfa7b198c490a73854ae24584ef2ac4a49425a13d43e401df1692702db4fb9e1d6007ed8ae0f3f1a1d8ac338ba6b871116db5ed78e14aa32b8bee5fb0a2b92ceae54e369160d0f82362138257a1e170dfc267fc0834be1679846ae7309963375cb79c96c148417c15bdb4d24e36c76e3efd036c646951869d63b98eaec4b2e7c795a8628d47fe379e7e9b302dd434212bccc3d260ab9535c50e39a33569069a6502b7394d731868a8d50fb90f7871c9327d38fe2208ec3423d659fb287606f693a0e431961ed2eba40636bad6a8c6a9c824053fd3e516874e580885bc68fcf2714928c7ddda6932148f794a4e275329bb7e49bd453567e4800a1dd9cde7d8748b5f85c5bf3e2016102109daa29eeafbe7209fcde3ee2676662ed30ae690d76810cfa5237954d3fc86e618b605647573e5c791a3b1f2854ae8a157c30f7a05c7deed16ba1ec075c02df691f5b1b03ec9a811fcbfc02bea80b027b1fa8c9857ef20d1b27279455e9c41ce6d9bb9f792d38c15f1b5e3776c68c7d22abc27817d12e948eb4ab693ac4f1e1323da3b834f5e8d2d41b38857f3c26791a841a83e6c3eaa0ca560b70eb611ff574a43ede5e7bcb097ce52454b4eb7a3fc3a61f8e7fa52223cf2c1a1e88c4ecb3f09fd1d2311f3872e3cdc1372a47968bddad6d15e8ce4d168219b33b83edf6e8b6af71a2c4330553d14cdd791cd1a8612f27a5d4c57d610b65a1e60c41cdf01b8963923ffa6acf8d20544ae9847e61e44f20fd4596d3718be72acd19107a3da5a6a815494d8ad7634d87043bf887965cd801ad4625ab22f2a8965f46cabe8fd5c0c09f0bee52884f8a53219f759803aaf69a2f3f5ec1cb4133b8908caaf7fcb927d36e9b75cfc735682ffc66d573da2d44e9b50a595a04394038c96e7790e417405a662dff28e70af26642bf146d7cafc62e47ce4b03a33cb53d314694017347b23ffe389bf3bf10208ada565152fa66a4e7aed511d34745d2e8faa96c7646568ce7898b046294f2599573af36f19b274cda8c1c00ad9892f90ca2411ba42e803fdf8bb057fa8a1a54a8246d8ee03eda82e905010c6a8431c666240fffa65ff85cbf1f2df158a4349b47c274d0840b56ba3bebf2ae63a5ded039b538173fbfc550fd8b89b03355b1dee5691e818560bd2e016ea419759f6af0ca64abce1ad08df07de32379c062078e7ce9b6c412bf31b35c9e1c93370780ace54704a1d69a1348a1c41eee1d34d53d11f672f4105aeaead53d7b12f7dcc187a0c449a59ee23cb9a43ffc6298b77e537c57f2c2261af994715207897d16b87694534a1b164de6ce22494abbe585c208b23ff0ee9f04ee665b0983b68e00db38481f3040166fe13f5f8727034a95a661311f706ff8f368014f60a15c33f723a604fead7427d2cd65ef92c012e8806dae3191217d411e480459627174419b55715f1910ceadd6b27fc1c8637dd8730017ebbad8fa7ae6239e7b4e9fd2137b7461b5654a39bd37fbf58c0d1c12e6d689ab9270e07fadca9c72bd127358fd49d8cb9220ed0c786e166d9fa433d81fc871b7ce44817c767bffb59652a9a0daccc8a874892a83b52e4895459c998763c427d4f7cecb8202bbea3445e65bf160a81b000b2b07ed31b60092ff1f8a06e95a29488cdbbdd13cfbbb3d66eb65a8858a5f14b3c221b052fbdab9337d405912cda10c9734c8e21fc14380fe62a80c8726b87a993ee9e7ea592bc2d5f67e537ec4680a35aef4a41a43b4caf56ae1820784d5df2a9f9700531034c3677c5fc9443dea89e9c3121bf0d699fbacbedec3b62535aadf782523f088d0880392fe653352bbdf4bb66b62c9147a9a2e97da37c41d46e81195264f41d0730a280753026705d509d4659c3cd4e584d581a90ecaab79cf954ed38b84ae2d097bfe6e6a6de3179d81efffaece4a53f00072a0b09d5c508fd7dbdd4328dc6ed7bfd5c34301450e680f6be95aaf8f0be88480384bfc2c4194618a30e50a42c70be8bfcf968e471187006a2aad8d4defe40101a43900a5534af4ad37aad7a1caeb38218a64260b8c19dcfd6a86346f83af37584f107760927986539cd59f7d3209e4441c51c6405c64ca710b33fa42d44401ff5008752f404c08cf7f54938656fd590af1cd793a86d752361d62bd1b4da4a6166e05dce0fcb37edd34df2868d6a5bb45f779c349792ee7ead066c527dfef2b9186498c650f8b03ff7cf681d2aa54da22559a25cc6b7e770881041f42aad2c26bc96486f98aacda0882dac30fa24a746842bbf74a182701266f51cda2f73263dd70e2ab093889fd9affce5ca4fdd3b2c8d51e88115c687b92b4d7be0eff0d530d7496567db9701e75b62217e78a0175929c4a32d3b6ed26d16aaf93d5de3ac8fb322794d820dc1920573626fb645c83a5347c58c8170a19382eb42153a180828aca2a3ff3d3358d6528ee3b62b818f4d4f1d7743b886771551f1fd85a68674ecba00eb16f5c5d70f679f864b0426743218a56f2d05988d8e48c51918e429464456f9a5204999a8b1458ceb4b9f507d72356c718aa81094bb2a517fee9ac57a31dee0401ea02f4c726d4b8501f52a1c52210dac850ce19c1b2f42010c58675494403d8a2a9a24aa9169f825830776e393eca92a8c4e414969e1b9ecb9aa99df7324606711c7fc307794c924156738035f5dbd516fec518d4b3056298701f970149a30ce2a658457910b903198e810a355b6076fd5c52c3458411f2f7fc6b60831ea067f5aca34b3bfa5def5ec1de59383765a00aac76a1cc19cf25817aeb64ce2456d2d9a958efe6f67c56908f2b605546cdcb704d5be3a077c0d87d474b3c982d1fee03b6d0e9f2a13a2a61a06550261e622e55c2f65cc79aa4064554954468e85a8afc451b4d360f8e64f25b7a7ab5eeaa96a5df1d7698f59a8c3d38692d5f2734ce28aa23085de888449431f3919cbf6eb4445d4fcc66d25acffa256354a0152a8609089cd7e8400787a767c2df7f3b117d122881f480c6785d9da5d41d84a844a773a57862f1cb7d4306a23f65e3efac0a4feb4b67aed8df12ba21469f12bc3f683a258ac81751aa863442c5f9ba57e4c8d94d24cf4dfb15d946c3604375febfe67088092ccbc75ed5029947dfc8c5d997b10ed4a472ab4b2b9255f44137a81a11aa4335733b", @typed={0x8, 0xfa, 0x0, 0x0, @u32=0x245}]}]}, 0x1030}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pwrite64$auto-mmap$auto-close_range$auto-bpf$auto-bpf$auto detailed listing: executing program 0: pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) mmap$auto(0x0, 0x276, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x408201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x1f, 0xffffffffffffffff, 0xffffffff, 0x800}, 0x92) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_ethtool-bind$auto detailed listing: executing program 0: close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) r0 = socket(0xa, 0x2, 0x88) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r0) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 6m0s testing program (duration=6m6s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5] detailed listing: executing program 2: r0 = socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(r0, 0x1, 0x5, &(0x7f0000000000)='!\x00', 0x7) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) executing program 1: sendmsg$auto_NET_SHAPER_CMD_CAP_GET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bdad, 0x25dfdbfb, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="13002cbd60ffdcdbdf2502"], 0x28}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x28, r1, 0x1, 0x8070bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_RINGS_RX_BUF_LEN={0x8, 0xa, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80000) executing program 3: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0x0) executing program 1: close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) sysfs$auto(0x2, 0x44, 0x0) bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/nfs/parameters/delay_retrans\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0x100085) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_NODE_ADDR={0xa, 0x1, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20000010) executing program 1: sendmsg$auto_IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x8050) setresgid$auto(0x81, 0x800000a0, 0x8) setresuid$auto(0x0, 0x7, 0x0) setfsuid$auto(0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/shm_next_id\x00', 0x88000, 0x0) executing program 0: mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$auto(0x3, 0xc0303e03, 0xffffffffffffffff) executing program 2: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/psample/out_tc_occ_max\x00', 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r0, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) executing program 3: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20040000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000080)='/dev/etherd/interfaces\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) executing program 1: mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @link_local}, 0x6a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) executing program 0: mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='\x16\x00', 0x2fb) executing program 3: mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/loginuid\x00', 0x3c8082, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/options/annotate\x00', 0x121882, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) executing program 1: mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r0, 0x84, 0x14, 0x0, &(0x7f0000000000)=0x401) executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, r0, 0x0) connect$auto(0x3, 0x0, 0x54) executing program 2: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0xa) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/tdls_wider_bw\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x20) executing program 3: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x4) executing program 0: mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(0x3, 0x0, 0x1) executing program 2: close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) r0 = socket(0xa, 0x2, 0x88) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r0) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) executing program 3: pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) mmap$auto(0x0, 0x276, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x408201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x1f, 0xffffffffffffffff, 0xffffffff, 0x800}, 0x92) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040006"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001d40)={0x1030, r1, 0x8ff972b65c311bf5, 0x70bd26, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x137, 0x0, 0x0, @binary}]}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_OFFLOAD={0x100c, 0x9, 0x0, 0x1, [@generic="e286ec06496b89f2bbacab08e973d2e7d86222f24830e4260cdd35c2969e5709001d489abf8269680e60f1953a75fcf4adcb59f5ec7c1e45f38363ec9cddecafff673f017dc8c52042654d7aea997086fd56c59dc82bcb9367ddbf7ad99f6ae3c9915a76768db01aca823d88db62ebcd6b26b56ef08fe31500d06f03056348d8516585a5f4c75f39f725df25760bb09b11e892f87745aca6b5a0b38ec418df2a73442967844f0f30a075c29fadb2495102158bebf801d876ee7eaef92ed031bfaefe15e8636230c9e347999541ed482785097c28da7339e4a4e11c953c7cb1f5f852cf351a75e80496ce96f50518fceabfc1e93bf73c3b3bc82811f67fa9b3f59b867a5dc25e55c4882d5a041003f0b773875983f2a9d865d5a3424392e5d33730684e9842ec4e25cc1156a22e1ffdf2b3188e5759c260762a5e6568e9b43cb6746e8683223b548ad192ec628346f27749bfcaa13770f0801105afe13503f7def5cb74883f713cd7cc38c294109ad5601539fbed801b2d1976660ebc4e636675ca6a65d3c0047faed756bb5361ff4a323d5213b685c96f06acb56069aa48363d1db9a26606efcf87287c0b7ad54928e09494f79974b9783a2561716147ad2517fa882dca905fd8d15491d8782a673b394f04cdcf0a362ba19e0aa5652e868a421fce1df2f12e450fc17e8852d2ec7a636c589fcd72264dbef69cc19cdd816f514a8ecbd4a5eb0118445ab1d4d73107b3de774e3208017ae41ca48d491cd18b604552fe4ca8f6f980d7feceedfd9a6a695bd72dffb3cd74671247809bc6ddfbd69df9d1eac7e1aea99cd17e40932cd551db40fb15fba4541dedf0121062e6ddd4fe36c5140dc162ac2cbc0e985508ead04117bebdb9239749b401fb593268a4d67e5dd3ba70ea843c7a67fb48314a581440235f5150df4972313a4357314dae4a997d53917e4ae9b16cf92f4a031bce3494e3576b91d1833664e7f6e5193f2df271ee0a6e2625d442bd62e94dc4337a903db0f61e597374d8a1c494dedc72408c9ed5aac196697023c67e301c71de229b2ab2c795389dd4fbaf750c4c6bb117eea895c0241c8156ee33b83c6e4e27d37166d67ac4d67e61ef97f254dfa508f1b6b1f45fb19439cb5d2cb539cf3664f8106ac17bd9bfe2db9d61f4940a69af9063bb2b0c48759cd20a36a93c85b3c2c8bb978635c926031d76d1adc8feea462271d7559dbe735169dc4b48f42314539e505b57b9b8bee527374f6effa17e293f1a3890af00aa0749645a0ba329782f5a57ee0cb42d7dd061af9ae0d0e5fd6d01cc82c7a7828da4691b051e9cc79e23c4f80a641e8b026fcafab71bdb654dfafac300096c96dccea94f6e277c077fef9f422b6ddc8b8a533f4aa8cb1f37b02ba844fba283b722d8214b2e5d17f6dd27a57ddeb28c2f8a066f1cd826e7db64a71c4055cd18cd840724fd77bbefe1969491ab829f2e35dd94bc7c4fa51a831b743ecdfa93a00a23ae4fb681706b7e47e04241ba7fc369e7c0da6968d21b6855c0a718df88b46c0705f19d1bea4767f7e412fcbc5bf87f6fc25ac8a6f7451a0723141349625bdab4271c62d183829f30f2fa01e82688a6bfee368581d99111f49fb4e3a35aa362afb765fe361e5cfd3ce9929af1669063ce1f6e5babdaa66a077406f751bff67c0f2c7afd8019216311d2bfdc0c7edca326e1c2570b182effad7bf7c22ecf782b4c641bf7b7c5b4316d37cb3bdbbec725ba74175e516980ae6f23c51ea0ff284c760f8fb9b1a4135082083fe9685af4d3966c4b528571b448438c713ffa32440b7974b8db160771ebf633dcb123ac38aa9f073e89e46da00821c487039a8d0e555bb2d779df38f2dfb796057c7df0b1f97d9786f07a164e48f1876de11665405ad258e3a0e799ef8c47785bd2caa61eed09dc00a0122837b2180ed2ba917c7f1501c6b18d80e2659341da947ae9c32631581517b455256327a821a8acf647d71cdf8a4c623bbba8c776edb01fa41e3463448b54c7f2cb29c5accc4d4dc6feae05ffa029a404e8605a2dcf2f9d7e86891d7f2ca24cab49170baa34439732aa3c50f48fbe0d9f003b42534bcc5319e8883611749c6a65b766325aad5204cb8abf712c03d87269f593f8deca7bb42a542ca51dd7be2a99818911be84d5c2b00fdd8178008751702238536c08857ba319bd467a446f70f7f16dbee6f0f6ddbb904314794857acb061751ff8c107b270771998a89afc8044fe70a30a5fda001f01a8d4d29ee3b54d920c2c6f97054c94a295cb614274bbc7cf74533464b8b19fe374a2f42ed9775b010ace47aab9555ac0b25daabd4200329b6681087fa88e0e8acd49e0a8cc9824c0a4ab08ea62632bb9b1bfddbaf4b4355624fe871d058fa8598b3c68352870b2393220a9bec809a8bf7e1dc85968d09c4902677d41e379ffd9603d459c8e74d02ee847fda4352bbdba51fc3e2a143fe730112fe2072e70adbd4a38ee7672d388c2b4a21ced48446a5bee8d909b5f834d105f9a6ce4c2cc7421d13bd198d53f43bae59be37d60e1408db203633a5793699f22e6cf63cab34b1c450aab953b2635ab22daf6b12cd29b82b5fe8890a6a8163110e443bedfa7b198c490a73854ae24584ef2ac4a49425a13d43e401df1692702db4fb9e1d6007ed8ae0f3f1a1d8ac338ba6b871116db5ed78e14aa32b8bee5fb0a2b92ceae54e369160d0f82362138257a1e170dfc267fc0834be1679846ae7309963375cb79c96c148417c15bdb4d24e36c76e3efd036c646951869d63b98eaec4b2e7c795a8628d47fe379e7e9b302dd434212bccc3d260ab9535c50e39a33569069a6502b7394d731868a8d50fb90f7871c9327d38fe2208ec3423d659fb287606f693a0e431961ed2eba40636bad6a8c6a9c824053fd3e516874e580885bc68fcf2714928c7ddda6932148f794a4e275329bb7e49bd453567e4800a1dd9cde7d8748b5f85c5bf3e2016102109daa29eeafbe7209fcde3ee2676662ed30ae690d76810cfa5237954d3fc86e618b605647573e5c791a3b1f2854ae8a157c30f7a05c7deed16ba1ec075c02df691f5b1b03ec9a811fcbfc02bea80b027b1fa8c9857ef20d1b27279455e9c41ce6d9bb9f792d38c15f1b5e3776c68c7d22abc27817d12e948eb4ab693ac4f1e1323da3b834f5e8d2d41b38857f3c26791a841a83e6c3eaa0ca560b70eb611ff574a43ede5e7bcb097ce52454b4eb7a3fc3a61f8e7fa52223cf2c1a1e88c4ecb3f09fd1d2311f3872e3cdc1372a47968bddad6d15e8ce4d168219b33b83edf6e8b6af71a2c4330553d14cdd791cd1a8612f27a5d4c57d610b65a1e60c41cdf01b8963923ffa6acf8d20544ae9847e61e44f20fd4596d3718be72acd19107a3da5a6a815494d8ad7634d87043bf887965cd801ad4625ab22f2a8965f46cabe8fd5c0c09f0bee52884f8a53219f759803aaf69a2f3f5ec1cb4133b8908caaf7fcb927d36e9b75cfc735682ffc66d573da2d44e9b50a595a04394038c96e7790e417405a662dff28e70af26642bf146d7cafc62e47ce4b03a33cb53d314694017347b23ffe389bf3bf10208ada565152fa66a4e7aed511d34745d2e8faa96c7646568ce7898b046294f2599573af36f19b274cda8c1c00ad9892f90ca2411ba42e803fdf8bb057fa8a1a54a8246d8ee03eda82e905010c6a8431c666240fffa65ff85cbf1f2df158a4349b47c274d0840b56ba3bebf2ae63a5ded039b538173fbfc550fd8b89b03355b1dee5691e818560bd2e016ea419759f6af0ca64abce1ad08df07de32379c062078e7ce9b6c412bf31b35c9e1c93370780ace54704a1d69a1348a1c41eee1d34d53d11f672f4105aeaead53d7b12f7dcc187a0c449a59ee23cb9a43ffc6298b77e537c57f2c2261af994715207897d16b87694534a1b164de6ce22494abbe585c208b23ff0ee9f04ee665b0983b68e00db38481f3040166fe13f5f8727034a95a661311f706ff8f368014f60a15c33f723a604fead7427d2cd65ef92c012e8806dae3191217d411e480459627174419b55715f1910ceadd6b27fc1c8637dd8730017ebbad8fa7ae6239e7b4e9fd2137b7461b5654a39bd37fbf58c0d1c12e6d689ab9270e07fadca9c72bd127358fd49d8cb9220ed0c786e166d9fa433d81fc871b7ce44817c767bffb59652a9a0daccc8a874892a83b52e4895459c998763c427d4f7cecb8202bbea3445e65bf160a81b000b2b07ed31b60092ff1f8a06e95a29488cdbbdd13cfbbb3d66eb65a8858a5f14b3c221b052fbdab9337d405912cda10c9734c8e21fc14380fe62a80c8726b87a993ee9e7ea592bc2d5f67e537ec4680a35aef4a41a43b4caf56ae1820784d5df2a9f9700531034c3677c5fc9443dea89e9c3121bf0d699fbacbedec3b62535aadf782523f088d0880392fe653352bbdf4bb66b62c9147a9a2e97da37c41d46e81195264f41d0730a280753026705d509d4659c3cd4e584d581a90ecaab79cf954ed38b84ae2d097bfe6e6a6de3179d81efffaece4a53f00072a0b09d5c508fd7dbdd4328dc6ed7bfd5c34301450e680f6be95aaf8f0be88480384bfc2c4194618a30e50a42c70be8bfcf968e471187006a2aad8d4defe40101a43900a5534af4ad37aad7a1caeb38218a64260b8c19dcfd6a86346f83af37584f107760927986539cd59f7d3209e4441c51c6405c64ca710b33fa42d44401ff5008752f404c08cf7f54938656fd590af1cd793a86d752361d62bd1b4da4a6166e05dce0fcb37edd34df2868d6a5bb45f779c349792ee7ead066c527dfef2b9186498c650f8b03ff7cf681d2aa54da22559a25cc6b7e770881041f42aad2c26bc96486f98aacda0882dac30fa24a746842bbf74a182701266f51cda2f73263dd70e2ab093889fd9affce5ca4fdd3b2c8d51e88115c687b92b4d7be0eff0d530d7496567db9701e75b62217e78a0175929c4a32d3b6ed26d16aaf93d5de3ac8fb322794d820dc1920573626fb645c83a5347c58c8170a19382eb42153a180828aca2a3ff3d3358d6528ee3b62b818f4d4f1d7743b886771551f1fd85a68674ecba00eb16f5c5d70f679f864b0426743218a56f2d05988d8e48c51918e429464456f9a5204999a8b1458ceb4b9f507d72356c718aa81094bb2a517fee9ac57a31dee0401ea02f4c726d4b8501f52a1c52210dac850ce19c1b2f42010c58675494403d8a2a9a24aa9169f825830776e393eca92a8c4e414969e1b9ecb9aa99df7324606711c7fc307794c924156738035f5dbd516fec518d4b3056298701f970149a30ce2a658457910b903198e810a355b6076fd5c52c3458411f2f7fc6b60831ea067f5aca34b3bfa5def5ec1de59383765a00aac76a1cc19cf25817aeb64ce2456d2d9a958efe6f67c56908f2b605546cdcb704d5be3a077c0d87d474b3c982d1fee03b6d0e9f2a13a2a61a06550261e622e55c2f65cc79aa4064554954468e85a8afc451b4d360f8e64f25b7a7ab5eeaa96a5df1d7698f59a8c3d38692d5f2734ce28aa23085de888449431f3919cbf6eb4445d4fcc66d25acffa256354a0152a8609089cd7e8400787a767c2df7f3b117d122881f480c6785d9da5d41d84a844a773a57862f1cb7d4306a23f65e3efac0a4feb4b67aed8df12ba21469f12bc3f683a258ac81751aa863442c5f9ba57e4c8d94d24cf4dfb15d946c3604375febfe67088092ccbc75ed5029947dfc8c5d997b10ed4a472ab4b2b9255f44137a81a11aa4335733b", @typed={0x8, 0xfa, 0x0, 0x0, @u32=0x245}]}]}, 0x1030}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000) executing program 0: openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/radio18\x00', 0x8aa40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000640)={0x0, 0x1, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x7, 0xaaf, 0x8c48, 0x29b, 0x3, 0x7b, 0x0, 0x5, 0xfffffffffffffffa}, {0x100, 0x20001, 0x52, 0x85, 0x2, 0x1a7b8702, 0x2072c2, 0xc, 0xc80c}}) io_uring_register$auto(0x2, 0x20, &(0x7f0000000240), 0x1) program crashed: INFO: task hung in remove_one bisect: bisecting 24 programs bisect: split chunks (needed=false): <24> bisect: split chunk #0 of len 24 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m4s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5] detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$auto(0x3, 0xc0303e03, 0xffffffffffffffff) executing program 2: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/psample/out_tc_occ_max\x00', 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r0, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) executing program 3: openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20040000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000080)='/dev/etherd/interfaces\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) executing program 1: mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @link_local}, 0x6a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) executing program 0: mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='\x16\x00', 0x2fb) executing program 3: mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/loginuid\x00', 0x3c8082, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/options/annotate\x00', 0x121882, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) executing program 1: mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r0, 0x84, 0x14, 0x0, &(0x7f0000000000)=0x401) executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, r0, 0x0) connect$auto(0x3, 0x0, 0x54) executing program 2: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0xa) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/tdls_wider_bw\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x20) executing program 3: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x4) executing program 0: mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(0x3, 0x0, 0x1) executing program 2: close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) r0 = socket(0xa, 0x2, 0x88) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r0) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) executing program 3: pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) mmap$auto(0x0, 0x276, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x408201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x1f, 0xffffffffffffffff, 0xffffffff, 0x800}, 0x92) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040006"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001d40)={0x1030, r1, 0x8ff972b65c311bf5, 0x70bd26, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x137, 0x0, 0x0, @binary}]}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_OFFLOAD={0x100c, 0x9, 0x0, 0x1, [@generic="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", @typed={0x8, 0xfa, 0x0, 0x0, @u32=0x245}]}]}, 0x1030}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000) executing program 0: openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/radio18\x00', 0x8aa40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000640)={0x0, 0x1, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x7, 0xaaf, 0x8c48, 0x29b, 0x3, 0x7b, 0x0, 0x5, 0xfffffffffffffffa}, {0x100, 0x20001, 0x52, 0x85, 0x2, 0x1a7b8702, 0x2072c2, 0xc, 0xc80c}}) io_uring_register$auto(0x2, 0x20, &(0x7f0000000240), 0x1) program crashed: INFO: task hung in remove_one bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 5] detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, r0, 0x0) connect$auto(0x3, 0x0, 0x54) executing program 2: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0xa) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/tdls_wider_bw\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x20) executing program 3: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x4) executing program 0: mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(0x3, 0x0, 0x1) executing program 2: close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) r0 = socket(0xa, 0x2, 0x88) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r0) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) executing program 3: pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) mmap$auto(0x0, 0x276, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x408201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x1f, 0xffffffffffffffff, 0xffffffff, 0x800}, 0x92) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040006"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001d40)={0x1030, r1, 0x8ff972b65c311bf5, 0x70bd26, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x137, 0x0, 0x0, @binary}]}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_OFFLOAD={0x100c, 0x9, 0x0, 0x1, [@generic="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", @typed={0x8, 0xfa, 0x0, 0x0, @u32=0x245}]}]}, 0x1030}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000) executing program 0: openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/radio18\x00', 0x8aa40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000640)={0x0, 0x1, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x7, 0xaaf, 0x8c48, 0x29b, 0x3, 0x7b, 0x0, 0x5, 0xfffffffffffffffa}, {0x100, 0x20001, 0x52, 0x85, 0x2, 0x1a7b8702, 0x2072c2, 0xc, 0xc80c}}) io_uring_register$auto(0x2, 0x20, &(0x7f0000000240), 0x1) program crashed: INFO: task hung in remove_one bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 bisect: split chunks (needed=true): <8> bisect: split chunk #0 of len 8 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5] detailed listing: executing program 2: close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) r0 = socket(0xa, 0x2, 0x88) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r0) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) executing program 3: pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) mmap$auto(0x0, 0x276, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x408201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x1f, 0xffffffffffffffff, 0xffffffff, 0x800}, 0x92) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040006"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001d40)={0x1030, r1, 0x8ff972b65c311bf5, 0x70bd26, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x137, 0x0, 0x0, @binary}]}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_OFFLOAD={0x100c, 0x9, 0x0, 0x1, [@generic="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", @typed={0x8, 0xfa, 0x0, 0x0, @u32=0x245}]}]}, 0x1030}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000) executing program 0: openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/radio18\x00', 0x8aa40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000640)={0x0, 0x1, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x7, 0xaaf, 0x8c48, 0x29b, 0x3, 0x7b, 0x0, 0x5, 0xfffffffffffffffa}, {0x100, 0x20001, 0x52, 0x85, 0x2, 0x1a7b8702, 0x2072c2, 0xc, 0xc80c}}) io_uring_register$auto(0x2, 0x20, &(0x7f0000000240), 0x1) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5] detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, r0, 0x0) connect$auto(0x3, 0x0, 0x54) executing program 2: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0xa) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/tdls_wider_bw\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x20) executing program 3: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x4) executing program 0: mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(0x3, 0x0, 0x1) program crashed: INFO: task hung in remove_one bisect: the chunk can be dropped bisect: split chunks (needed=true): <4> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5] detailed listing: executing program 3: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x4) executing program 0: mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(0x3, 0x0, 0x1) program crashed: INFO: task hung in remove_one bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir$auto-mount$auto-chdir$auto-open-lseek$auto detailed listing: executing program 0: mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(0x3, 0x0, 0x1) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_nsim_dev_max_vfs_fops_dev-write$auto detailed listing: executing program 3: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x4) program crashed: INFO: task hung in remove_one bisect: the chunk can be dropped bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 3: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x4) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_nsim_dev_max_vfs_fops_dev-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x4) program crashed: INFO: task hung in remove_one bisect: concatenation succeeded found reproducer with 5 syscalls minimizing guilty program testing program (duration=8m57.483964518s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_nsim_dev_max_vfs_fops_dev detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) program did not crash testing program (duration=8m57.483964518s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) write$auto(0xffffffffffffffff, 0x0, 0x4) program did not crash testing program (duration=8m57.483964518s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_nsim_dev_max_vfs_fops_dev-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) r0 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r0, 0x0, 0x4) program did not crash testing program (duration=8m57.483964518s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-read$auto-openat$auto_nsim_dev_max_vfs_fops_dev-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) r0 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r0, 0x0, 0x4) program did not crash testing program (duration=8m57.483964518s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_nsim_dev_max_vfs_fops_dev-write$auto detailed listing: executing program 0: r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x4) program did not crash testing program (duration=8m57.483964518s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_nsim_dev_max_vfs_fops_dev-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x4) program did not crash testing program (duration=8m57.483964518s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_nsim_dev_max_vfs_fops_dev-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, 0x0, 0x48002, 0x0) write$auto(r1, 0x0, 0x4) program did not crash extracting C reproducer testing compiled C program (duration=8m57.483964518s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_nsim_dev_max_vfs_fops_dev-write$auto program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=8m57.483964518s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_nsim_dev_max_vfs_fops_dev-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x4) program crashed: INFO: task hung in remove_one extracting C reproducer testing compiled C program (duration=8m57.483964518s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_nsim_dev_max_vfs_fops_dev-write$auto program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=8m57.483964518s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_nsim_dev_max_vfs_fops_dev-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x4) program did not crash testing program (duration=8m57.483964518s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_nsim_dev_max_vfs_fops_dev-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x4) program crashed: INFO: task hung in remove_one validation run: crashed=true testing program (duration=8m57.483964518s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_nsim_dev_max_vfs_fops_dev-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x4) program crashed: INFO: task hung in remove_one validation run: crashed=true testing program (duration=8m57.483964518s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_kernfs_file_fops_kernfs_internal-read$auto-openat$auto_nsim_dev_max_vfs_fops_dev-write$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x4) program crashed: INFO: task hung in remove_one validation run: crashed=true reproducing took 2h56m13.898804383s repro crashed as (corrupted=false): INFO: task syz-executor:9412 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:24208 pid:9412 tgid:9412 ppid:1 task_flags:0x480140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_timeout+0x1b2/0x280 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:100 [inline] __wait_for_common+0x2e7/0x4c0 kernel/sched/completion.c:121 __debugfs_file_removed fs/debugfs/inode.c:751 [inline] remove_one+0x312/0x420 fs/debugfs/inode.c:758 __simple_recursive_removal+0x148/0x5c0 fs/libfs.c:625 debugfs_remove+0x5d/0x80 fs/debugfs/inode.c:781 nsim_dev_debugfs_exit drivers/net/netdevsim/dev.c:372 [inline] nsim_drv_remove+0xd2/0x1e0 drivers/net/netdevsim/dev.c:1782 device_remove+0xcb/0x180 drivers/base/dd.c:571 __device_release_driver drivers/base/dd.c:1284 [inline] device_release_driver_internal+0x42e/0x600 drivers/base/dd.c:1307 bus_remove_device+0x22f/0x440 drivers/base/bus.c:616 device_del+0x376/0x9b0 drivers/base/core.c:3878 device_unregister+0x1d/0xe0 drivers/base/core.c:3919 nsim_bus_dev_del drivers/net/netdevsim/bus.c:491 [inline] del_device_store+0x346/0x480 drivers/net/netdevsim/bus.c:244 bus_attr_store+0x74/0xb0 drivers/base/bus.c:172 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142 kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:352 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x6ac/0x1070 fs/read_write.c:688 ksys_write+0x12a/0x250 fs/read_write.c:740 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f18b615cfce RSP: 002b:00007ffc8a989b88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000555581e2c500 RCX: 00007f18b615cfce RDX: 0000000000000001 RSI: 00007ffc8a989c10 RDI: 0000000000000005 RBP: 00007f18b623351c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc8a989c10 R14: 00007f18b6f44620 R15: 0000000000000003 INFO: task syz.0.3522:9714 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.3522 state:D stack:27016 pid:9714 tgid:9714 ppid:8902 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 nsim_bus_dev_max_vfs_write+0x206/0x410 drivers/net/netdevsim/dev.c:276 full_proxy_write+0x135/0x1a0 fs/debugfs/file.c:388 vfs_write+0x2aa/0x1070 fs/read_write.c:686 ksys_write+0x12a/0x250 fs/read_write.c:740 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6bbe99c799 RSP: 002b:00007ffc19d4d5b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f6bbec15fa0 RCX: 00007f6bbe99c799 RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00007f6bbea32c99 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f6bbec15fac R14: 00007f6bbec15fa0 R15: 00007f6bbec15fa0 INFO: task syz.1.3523:9715 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.3523 state:D stack:27016 pid:9715 tgid:9715 ppid:8470 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 nsim_bus_dev_max_vfs_write+0x206/0x410 drivers/net/netdevsim/dev.c:276 full_proxy_write+0x135/0x1a0 fs/debugfs/file.c:388 vfs_write+0x2aa/0x1070 fs/read_write.c:686 ksys_write+0x12a/0x250 fs/read_write.c:740 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2d26d9c799 RSP: 002b:00007ffe1f1560c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f2d27015fa0 RCX: 00007f2d26d9c799 RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00007f2d26e32c99 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f2d27015fac R14: 00007f2d27015fa0 R15: 00007f2d27015fa0 INFO: task syz.2.3524:9716 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.3524 state:D stack:27016 pid:9716 tgid:9716 ppid:5975 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 nsim_bus_dev_max_vfs_write+0x206/0x410 drivers/net/netdevsim/dev.c:276 full_proxy_write+0x135/0x1a0 fs/debugfs/file.c:388 vfs_write+0x2aa/0x1070 fs/read_write.c:686 ksys_write+0x12a/0x250 fs/read_write.c:740 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f560439c799 RSP: 002b:00007fffba184458 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f5604615fa0 RCX: 00007f560439c799 RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00007f5604432c99 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f5604615fac R14: 00007f5604615fa0 R15: 00007f5604615fa0 Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffffffff8e7e74e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:312 [inline] #0: ffffffff8e7e74e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:850 [inline] #0: ffffffff8e7e74e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775 1 lock held by syslogd/5176: #0: ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 kernel/sched/core.c:647 2 locks held by getty/5586: #0: ffff888033b360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 drivers/tty/n_tty.c:2211 7 locks held by syz-executor/9412: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff888035edd488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 #4: ffff8880352850e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline] #4: ffff8880352850e8 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1106 [inline] #4: ffff8880352850e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600 drivers/base/dd.c:1304 #5: ffff888035284250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 drivers/net/netdevsim/dev.c:1778 #6: ffff88805e805a70 (&sb->s_type->i_mutex_key#10/2){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1073 [inline] #6: ffff88805e805a70 (&sb->s_type->i_mutex_key#10/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 fs/libfs.c:621 2 locks held by syz.0.3522/9714: #0: ffff8880202a0420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff888035284250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_bus_dev_max_vfs_write+0x206/0x410 drivers/net/netdevsim/dev.c:276 2 locks held by syz.1.3523/9715: #0: ffff8880202a0420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff888035284250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_bus_dev_max_vfs_write+0x206/0x410 drivers/net/netdevsim/dev.c:276 2 locks held by syz.2.3524/9716: #0: ffff8880202a0420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff888035284250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_bus_dev_max_vfs_write+0x206/0x410 drivers/net/netdevsim/dev.c:276 4 locks held by syz-executor/9773: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff888079fda088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9777: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff8880330a7088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9779: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff8880638d0488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9804: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff888079887088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9821: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff8880294adc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9822: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff888033f56888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9827: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff888075e0bc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9853: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff88805b8ee488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9871: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff88807cb0f088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9872: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff8880777a1888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9874: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff8880764f8488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x1d7/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x141/0x190 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xd25/0x1050 kernel/hung_task.c:515 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5183 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 RIP: 0010:memcpy_orig+0x8f/0x130 arch/x86/lib/memcpy_64.S:121 Code: 8d 76 e0 4c 89 47 f8 4c 89 4f f0 4c 89 57 e8 4c 89 5f e0 48 8d 7f e0 73 d2 83 c2 20 48 29 d6 48 29 d7 83 fa 10 72 34 4c 8b 06 <4c> 8b 4e 08 4c 8b 54 16 f0 4c 8b 5c 16 f8 4c 89 07 4c 89 4f 08 4c RSP: 0018:ffffc90002fd7938 EFLAGS: 00000246 RAX: ffffc90002fd7b00 RBX: ffffffff8e7b7678 RCX: ffffffff81e7b3d3 RDX: 0000000000000010 RSI: ffffffff8e7b7680 RDI: ffffc90002fd7b00 RBP: 80000000ffffed45 R08: ffffffffffff9398 R09: fffff520005faf61 R10: ffffc90002fd7b0f R11: 0000000000000000 R12: 00000000ffffed45 R13: ffffc90002fd7af8 R14: 0000000000000000 R15: ffffffff8e73c798 FS: 00007fa841898c80(0000) GS:ffff888124349000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000556011163a38 CR3: 000000007dbf4000 CR4: 00000000003526f0 Call Trace: desc_read+0x183/0x380 kernel/printk/printk_ringbuffer.c:496 desc_read_finalized_seq+0x89/0x1d0 kernel/printk/printk_ringbuffer.c:1931 prb_read kernel/printk/printk_ringbuffer.c:1979 [inline] _prb_read_valid+0x1f1/0x880 kernel/printk/printk_ringbuffer.c:2170 prb_read_valid+0x78/0xa0 kernel/printk/printk_ringbuffer.c:2242 syslog_print+0x3cb/0x620 kernel/printk/printk.c:1628 do_syslog+0x5bd/0x6d0 kernel/printk/printk.c:1763 __do_sys_syslog kernel/printk/printk.c:1855 [inline] __se_sys_syslog kernel/printk/printk.c:1853 [inline] __x64_sys_syslog+0x74/0xb0 kernel/printk/printk.c:1853 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa841a62a37 Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 RSP: 002b:00007ffe5e28e2f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 RAX: ffffffffffffffda RBX: 00007fa841c02490 RCX: 00007fa841a62a37 RDX: 00000000000003ff RSI: 00007fa841c02490 RDI: 0000000000000002 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000004000 R11: 0000000000000206 R12: 00007fa841c02490 R13: 00007fa841bdfdfe R14: 00007fa841c0250e R15: 00007fa841c0250e final repro crashed as (corrupted=false): INFO: task syz-executor:9412 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:24208 pid:9412 tgid:9412 ppid:1 task_flags:0x480140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_timeout+0x1b2/0x280 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:100 [inline] __wait_for_common+0x2e7/0x4c0 kernel/sched/completion.c:121 __debugfs_file_removed fs/debugfs/inode.c:751 [inline] remove_one+0x312/0x420 fs/debugfs/inode.c:758 __simple_recursive_removal+0x148/0x5c0 fs/libfs.c:625 debugfs_remove+0x5d/0x80 fs/debugfs/inode.c:781 nsim_dev_debugfs_exit drivers/net/netdevsim/dev.c:372 [inline] nsim_drv_remove+0xd2/0x1e0 drivers/net/netdevsim/dev.c:1782 device_remove+0xcb/0x180 drivers/base/dd.c:571 __device_release_driver drivers/base/dd.c:1284 [inline] device_release_driver_internal+0x42e/0x600 drivers/base/dd.c:1307 bus_remove_device+0x22f/0x440 drivers/base/bus.c:616 device_del+0x376/0x9b0 drivers/base/core.c:3878 device_unregister+0x1d/0xe0 drivers/base/core.c:3919 nsim_bus_dev_del drivers/net/netdevsim/bus.c:491 [inline] del_device_store+0x346/0x480 drivers/net/netdevsim/bus.c:244 bus_attr_store+0x74/0xb0 drivers/base/bus.c:172 sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:142 kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:352 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x6ac/0x1070 fs/read_write.c:688 ksys_write+0x12a/0x250 fs/read_write.c:740 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f18b615cfce RSP: 002b:00007ffc8a989b88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000555581e2c500 RCX: 00007f18b615cfce RDX: 0000000000000001 RSI: 00007ffc8a989c10 RDI: 0000000000000005 RBP: 00007f18b623351c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc8a989c10 R14: 00007f18b6f44620 R15: 0000000000000003 INFO: task syz.0.3522:9714 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.3522 state:D stack:27016 pid:9714 tgid:9714 ppid:8902 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 nsim_bus_dev_max_vfs_write+0x206/0x410 drivers/net/netdevsim/dev.c:276 full_proxy_write+0x135/0x1a0 fs/debugfs/file.c:388 vfs_write+0x2aa/0x1070 fs/read_write.c:686 ksys_write+0x12a/0x250 fs/read_write.c:740 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6bbe99c799 RSP: 002b:00007ffc19d4d5b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f6bbec15fa0 RCX: 00007f6bbe99c799 RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00007f6bbea32c99 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f6bbec15fac R14: 00007f6bbec15fa0 R15: 00007f6bbec15fa0 INFO: task syz.1.3523:9715 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.3523 state:D stack:27016 pid:9715 tgid:9715 ppid:8470 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 nsim_bus_dev_max_vfs_write+0x206/0x410 drivers/net/netdevsim/dev.c:276 full_proxy_write+0x135/0x1a0 fs/debugfs/file.c:388 vfs_write+0x2aa/0x1070 fs/read_write.c:686 ksys_write+0x12a/0x250 fs/read_write.c:740 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2d26d9c799 RSP: 002b:00007ffe1f1560c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f2d27015fa0 RCX: 00007f2d26d9c799 RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00007f2d26e32c99 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f2d27015fac R14: 00007f2d27015fa0 R15: 00007f2d27015fa0 INFO: task syz.2.3524:9716 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.3524 state:D stack:27016 pid:9716 tgid:9716 ppid:5975 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 nsim_bus_dev_max_vfs_write+0x206/0x410 drivers/net/netdevsim/dev.c:276 full_proxy_write+0x135/0x1a0 fs/debugfs/file.c:388 vfs_write+0x2aa/0x1070 fs/read_write.c:686 ksys_write+0x12a/0x250 fs/read_write.c:740 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f560439c799 RSP: 002b:00007fffba184458 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f5604615fa0 RCX: 00007f560439c799 RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00007f5604432c99 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f5604615fac R14: 00007f5604615fa0 R15: 00007f5604615fa0 Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffffffff8e7e74e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:312 [inline] #0: ffffffff8e7e74e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:850 [inline] #0: ffffffff8e7e74e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775 1 lock held by syslogd/5176: #0: ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 kernel/sched/core.c:647 2 locks held by getty/5586: #0: ffff888033b360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 drivers/tty/n_tty.c:2211 7 locks held by syz-executor/9412: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff888035edd488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 #4: ffff8880352850e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline] #4: ffff8880352850e8 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1106 [inline] #4: ffff8880352850e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600 drivers/base/dd.c:1304 #5: ffff888035284250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 drivers/net/netdevsim/dev.c:1778 #6: ffff88805e805a70 (&sb->s_type->i_mutex_key#10/2){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1073 [inline] #6: ffff88805e805a70 (&sb->s_type->i_mutex_key#10/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 fs/libfs.c:621 2 locks held by syz.0.3522/9714: #0: ffff8880202a0420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff888035284250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_bus_dev_max_vfs_write+0x206/0x410 drivers/net/netdevsim/dev.c:276 2 locks held by syz.1.3523/9715: #0: ffff8880202a0420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff888035284250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_bus_dev_max_vfs_write+0x206/0x410 drivers/net/netdevsim/dev.c:276 2 locks held by syz.2.3524/9716: #0: ffff8880202a0420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff888035284250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_bus_dev_max_vfs_write+0x206/0x410 drivers/net/netdevsim/dev.c:276 4 locks held by syz-executor/9773: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff888079fda088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9777: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff8880330a7088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9779: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff8880638d0488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9804: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff888079887088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9821: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff8880294adc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9822: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff888033f56888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9827: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff888075e0bc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9853: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff88805b8ee488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9871: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff88807cb0f088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9872: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff8880777a1888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 4 locks held by syz-executor/9874: #0: ffff888037f58420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:740 #1: ffff8880764f8488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:343 #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff888029f1ac38 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:344 #3: ffffffff8fb6cd68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x1d7/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x141/0x190 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xd25/0x1050 kernel/hung_task.c:515 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5183 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 RIP: 0010:memcpy_orig+0x8f/0x130 arch/x86/lib/memcpy_64.S:121 Code: 8d 76 e0 4c 89 47 f8 4c 89 4f f0 4c 89 57 e8 4c 89 5f e0 48 8d 7f e0 73 d2 83 c2 20 48 29 d6 48 29 d7 83 fa 10 72 34 4c 8b 06 <4c> 8b 4e 08 4c 8b 54 16 f0 4c 8b 5c 16 f8 4c 89 07 4c 89 4f 08 4c RSP: 0018:ffffc90002fd7938 EFLAGS: 00000246 RAX: ffffc90002fd7b00 RBX: ffffffff8e7b7678 RCX: ffffffff81e7b3d3 RDX: 0000000000000010 RSI: ffffffff8e7b7680 RDI: ffffc90002fd7b00 RBP: 80000000ffffed45 R08: ffffffffffff9398 R09: fffff520005faf61 R10: ffffc90002fd7b0f R11: 0000000000000000 R12: 00000000ffffed45 R13: ffffc90002fd7af8 R14: 0000000000000000 R15: ffffffff8e73c798 FS: 00007fa841898c80(0000) GS:ffff888124349000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000556011163a38 CR3: 000000007dbf4000 CR4: 00000000003526f0 Call Trace: desc_read+0x183/0x380 kernel/printk/printk_ringbuffer.c:496 desc_read_finalized_seq+0x89/0x1d0 kernel/printk/printk_ringbuffer.c:1931 prb_read kernel/printk/printk_ringbuffer.c:1979 [inline] _prb_read_valid+0x1f1/0x880 kernel/printk/printk_ringbuffer.c:2170 prb_read_valid+0x78/0xa0 kernel/printk/printk_ringbuffer.c:2242 syslog_print+0x3cb/0x620 kernel/printk/printk.c:1628 do_syslog+0x5bd/0x6d0 kernel/printk/printk.c:1763 __do_sys_syslog kernel/printk/printk.c:1855 [inline] __se_sys_syslog kernel/printk/printk.c:1853 [inline] __x64_sys_syslog+0x74/0xb0 kernel/printk/printk.c:1853 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa841a62a37 Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 RSP: 002b:00007ffe5e28e2f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 RAX: ffffffffffffffda RBX: 00007fa841c02490 RCX: 00007fa841a62a37 RDX: 00000000000003ff RSI: 00007fa841c02490 RDI: 0000000000000002 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000004000 R11: 0000000000000206 R12: 00007fa841c02490 R13: 00007fa841bdfdfe R14: 00007fa841c0250e R15: 00007fa841c0250e