Extracting prog: 10m20.675429703s
Minimizing prog: 1h6m5.531309314s
Simplifying prog options: 22m57.609841482s
Extracting C: 5m13.225077568s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000009040)=@newqdisc={0x15c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x401}]}}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x98b4, 0x5, 0x1, 0x6, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x80, 0x3, 0x0, 0x0, 0x80000001, 0x1ff}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x1c, 0x9, 0x40000, 0x2, 0x200, 0x80000001}}, {0x4}}, {{0x1c, 0x1, {0x51, 0x4, 0x1000, 0xfffffff8, 0x2, 0x2, 0x3, 0x1}}, {0x6, 0x2, [0xdac]}}, {{0x1c, 0x1, {0x4, 0x16, 0x8, 0x0, 0x1, 0x401, 0x4, 0x2}}, {0x8, 0x2, [0x40, 0x9]}}, {{0x1c, 0x1, {0x3, 0x11, 0x40ba, 0x8, 0x0, 0x9, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}, {{0x1c, 0x1, {0xc, 0x1, 0x7, 0x7, 0x0, 0xb, 0xbb, 0x2}}, {0x8, 0x2, [0x7, 0x5]}}, {{0x1c, 0x1, {0x1, 0x0, 0x3, 0x26c99bf7, 0x2, 0xffff8262, 0x8001, 0x2}}, {0x8, 0x2, [0x4, 0x1a73]}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000009040)=@newqdisc={0x15c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x401}]}}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x98b4, 0x5, 0x1, 0x6, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x80, 0x3, 0x0, 0x0, 0x80000001, 0x1ff}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x1c, 0x9, 0x40000, 0x2, 0x200, 0x80000001}}, {0x4}}, {{0x1c, 0x1, {0x51, 0x4, 0x1000, 0xfffffff8, 0x2, 0x2, 0x3, 0x1}}, {0x6, 0x2, [0xdac]}}, {{0x1c, 0x1, {0x4, 0x16, 0x8, 0x0, 0x1, 0x401, 0x4, 0x2}}, {0x8, 0x2, [0x40, 0x9]}}, {{0x1c, 0x1, {0x3, 0x11, 0x40ba, 0x8, 0x0, 0x9, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}, {{0x1c, 0x1, {0xc, 0x1, 0x7, 0x7, 0x0, 0xb, 0xbb, 0x2}}, {0x8, 0x2, [0x7, 0x5]}}, {{0x1c, 0x1, {0x1, 0x0, 0x3, 0x26c99bf7, 0x2, 0xffff8262, 0x8001, 0x2}}, {0x8, 0x2, [0x4, 0x1a73]}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000009040)=@newqdisc={0x15c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x401}]}}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x98b4, 0x5, 0x1, 0x6, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x80, 0x3, 0x0, 0x0, 0x80000001, 0x1ff}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x1c, 0x9, 0x40000, 0x2, 0x200, 0x80000001}}, {0x4}}, {{0x1c, 0x1, {0x51, 0x4, 0x1000, 0xfffffff8, 0x2, 0x2, 0x3, 0x1}}, {0x6, 0x2, [0xdac]}}, {{0x1c, 0x1, {0x4, 0x16, 0x8, 0x0, 0x1, 0x401, 0x4, 0x2}}, {0x8, 0x2, [0x40, 0x9]}}, {{0x1c, 0x1, {0x3, 0x11, 0x40ba, 0x8, 0x0, 0x9, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}, {{0x1c, 0x1, {0xc, 0x1, 0x7, 0x7, 0x0, 0xb, 0xbb, 0x2}}, {0x8, 0x2, [0x7, 0x5]}}, {{0x1c, 0x1, {0x1, 0x0, 0x3, 0x26c99bf7, 0x2, 0xffff8262, 0x8001, 0x2}}, {0x8, 0x2, [0x4, 0x1a73]}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

program crashed: INFO: task hung in corrupted
single: successfully extracted reproducer
found reproducer with 3 syscalls
minimizing guilty program
testing program (duration=8m9.292784572s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'})

program did not crash
testing program (duration=8m9.292784572s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000009040)=@newqdisc={0x15c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x401}]}}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x98b4, 0x5, 0x1, 0x6, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x80, 0x3, 0x0, 0x0, 0x80000001, 0x1ff}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x1c, 0x9, 0x40000, 0x2, 0x200, 0x80000001}}, {0x4}}, {{0x1c, 0x1, {0x51, 0x4, 0x1000, 0xfffffff8, 0x2, 0x2, 0x3, 0x1}}, {0x6, 0x2, [0xdac]}}, {{0x1c, 0x1, {0x4, 0x16, 0x8, 0x0, 0x1, 0x401, 0x4, 0x2}}, {0x8, 0x2, [0x40, 0x9]}}, {{0x1c, 0x1, {0x3, 0x11, 0x40ba, 0x8, 0x0, 0x9, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}, {{0x1c, 0x1, {0xc, 0x1, 0x7, 0x7, 0x0, 0xb, 0xbb, 0x2}}, {0x8, 0x2, [0x7, 0x5]}}, {{0x1c, 0x1, {0x1, 0x0, 0x3, 0x26c99bf7, 0x2, 0xffff8262, 0x8001, 0x2}}, {0x8, 0x2, [0x4, 0x1a73]}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

program did not crash
testing program (duration=8m9.292784572s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
detailed listing:
executing program 0:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000009040)=@newqdisc={0x15c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x401}]}}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x98b4, 0x5, 0x1, 0x6, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x80, 0x3, 0x0, 0x0, 0x80000001, 0x1ff}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x1c, 0x9, 0x40000, 0x2, 0x200, 0x80000001}}, {0x4}}, {{0x1c, 0x1, {0x51, 0x4, 0x1000, 0xfffffff8, 0x2, 0x2, 0x3, 0x1}}, {0x6, 0x2, [0xdac]}}, {{0x1c, 0x1, {0x4, 0x16, 0x8, 0x0, 0x1, 0x401, 0x4, 0x2}}, {0x8, 0x2, [0x40, 0x9]}}, {{0x1c, 0x1, {0x3, 0x11, 0x40ba, 0x8, 0x0, 0x9, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}, {{0x1c, 0x1, {0xc, 0x1, 0x7, 0x7, 0x0, 0xb, 0xbb, 0x2}}, {0x8, 0x2, [0x7, 0x5]}}, {{0x1c, 0x1, {0x1, 0x0, 0x3, 0x26c99bf7, 0x2, 0xffff8262, 0x8001, 0x2}}, {0x8, 0x2, [0x4, 0x1a73]}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

program did not crash
testing program (duration=8m9.292784572s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000009040)=@newqdisc={0x15c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x401}]}}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x98b4, 0x5, 0x1, 0x6, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x80, 0x3, 0x0, 0x0, 0x80000001, 0x1ff}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x1c, 0x9, 0x40000, 0x2, 0x200, 0x80000001}}, {0x4}}, {{0x1c, 0x1, {0x51, 0x4, 0x1000, 0xfffffff8, 0x2, 0x2, 0x3, 0x1}}, {0x6, 0x2, [0xdac]}}, {{0x1c, 0x1, {0x4, 0x16, 0x8, 0x0, 0x1, 0x401, 0x4, 0x2}}, {0x8, 0x2, [0x40, 0x9]}}, {{0x1c, 0x1, {0x3, 0x11, 0x40ba, 0x8, 0x0, 0x9, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}, {{0x1c, 0x1, {0xc, 0x1, 0x7, 0x7, 0x0, 0xb, 0xbb, 0x2}}, {0x8, 0x2, [0x7, 0x5]}}, {{0x1c, 0x1, {0x1, 0x0, 0x3, 0x26c99bf7, 0x2, 0xffff8262, 0x8001, 0x2}}, {0x8, 0x2, [0x4, 0x1a73]}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

program did not crash
testing program (duration=8m9.292784572s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)

program did not crash
testing program (duration=8m9.292784572s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0)

program did not crash
testing program (duration=8m9.292784572s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)

program did not crash
testing program (duration=8m9.292784572s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000009040)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x401}]}}, @TCA_STAB={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=8m9.292784572s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
program crashed: INFO: task hung in rescuer_thread
a never seen crash title: INFO: task hung in rescuer_thread, ignore
simplifying guilty program options
testing program (duration=8m9.292784572s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000009040)=@newqdisc={0x15c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x401}]}}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x98b4, 0x5, 0x1, 0x6, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x80, 0x3, 0x0, 0x0, 0x80000001, 0x1ff}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x1c, 0x9, 0x40000, 0x2, 0x200, 0x80000001}}, {0x4}}, {{0x1c, 0x1, {0x51, 0x4, 0x1000, 0xfffffff8, 0x2, 0x2, 0x3, 0x1}}, {0x6, 0x2, [0xdac]}}, {{0x1c, 0x1, {0x4, 0x16, 0x8, 0x0, 0x1, 0x401, 0x4, 0x2}}, {0x8, 0x2, [0x40, 0x9]}}, {{0x1c, 0x1, {0x3, 0x11, 0x40ba, 0x8, 0x0, 0x9, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}, {{0x1c, 0x1, {0xc, 0x1, 0x7, 0x7, 0x0, 0xb, 0xbb, 0x2}}, {0x8, 0x2, [0x7, 0x5]}}, {{0x1c, 0x1, {0x1, 0x0, 0x3, 0x26c99bf7, 0x2, 0xffff8262, 0x8001, 0x2}}, {0x8, 0x2, [0x4, 0x1a73]}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

program crashed: INFO: task hung in worker_attach_to_pool
a never seen crash title: INFO: task hung in worker_attach_to_pool, ignore
testing program (duration=8m9.292784572s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000009040)=@newqdisc={0x15c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x401}]}}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x98b4, 0x5, 0x1, 0x6, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x80, 0x3, 0x0, 0x0, 0x80000001, 0x1ff}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x1c, 0x9, 0x40000, 0x2, 0x200, 0x80000001}}, {0x4}}, {{0x1c, 0x1, {0x51, 0x4, 0x1000, 0xfffffff8, 0x2, 0x2, 0x3, 0x1}}, {0x6, 0x2, [0xdac]}}, {{0x1c, 0x1, {0x4, 0x16, 0x8, 0x0, 0x1, 0x401, 0x4, 0x2}}, {0x8, 0x2, [0x40, 0x9]}}, {{0x1c, 0x1, {0x3, 0x11, 0x40ba, 0x8, 0x0, 0x9, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}, {{0x1c, 0x1, {0xc, 0x1, 0x7, 0x7, 0x0, 0xb, 0xbb, 0x2}}, {0x8, 0x2, [0x7, 0x5]}}, {{0x1c, 0x1, {0x1, 0x0, 0x3, 0x26c99bf7, 0x2, 0xffff8262, 0x8001, 0x2}}, {0x8, 0x2, [0x4, 0x1a73]}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

program did not crash
testing program (duration=8m9.292784572s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000009040)=@newqdisc={0x15c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x401}]}}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x98b4, 0x5, 0x1, 0x6, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x80, 0x3, 0x0, 0x0, 0x80000001, 0x1ff}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x1c, 0x9, 0x40000, 0x2, 0x200, 0x80000001}}, {0x4}}, {{0x1c, 0x1, {0x51, 0x4, 0x1000, 0xfffffff8, 0x2, 0x2, 0x3, 0x1}}, {0x6, 0x2, [0xdac]}}, {{0x1c, 0x1, {0x4, 0x16, 0x8, 0x0, 0x1, 0x401, 0x4, 0x2}}, {0x8, 0x2, [0x40, 0x9]}}, {{0x1c, 0x1, {0x3, 0x11, 0x40ba, 0x8, 0x0, 0x9, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}, {{0x1c, 0x1, {0xc, 0x1, 0x7, 0x7, 0x0, 0xb, 0xbb, 0x2}}, {0x8, 0x2, [0x7, 0x5]}}, {{0x1c, 0x1, {0x1, 0x0, 0x3, 0x26c99bf7, 0x2, 0xffff8262, 0x8001, 0x2}}, {0x8, 0x2, [0x4, 0x1a73]}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

program crashed: INFO: task hung in corrupted
extracting C reproducer
testing compiled C program (duration=8m9.292784572s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing program (duration=8m9.292784572s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000009040)=@newqdisc={0x15c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x401}]}}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x98b4, 0x5, 0x1, 0x6, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x80, 0x3, 0x0, 0x0, 0x80000001, 0x1ff}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x1c, 0x9, 0x40000, 0x2, 0x200, 0x80000001}}, {0x4}}, {{0x1c, 0x1, {0x51, 0x4, 0x1000, 0xfffffff8, 0x2, 0x2, 0x3, 0x1}}, {0x6, 0x2, [0xdac]}}, {{0x1c, 0x1, {0x4, 0x16, 0x8, 0x0, 0x1, 0x401, 0x4, 0x2}}, {0x8, 0x2, [0x40, 0x9]}}, {{0x1c, 0x1, {0x3, 0x11, 0x40ba, 0x8, 0x0, 0x9, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}, {{0x1c, 0x1, {0xc, 0x1, 0x7, 0x7, 0x0, 0xb, 0xbb, 0x2}}, {0x8, 0x2, [0x7, 0x5]}}, {{0x1c, 0x1, {0x1, 0x0, 0x3, 0x26c99bf7, 0x2, 0xffff8262, 0x8001, 0x2}}, {0x8, 0x2, [0x4, 0x1a73]}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=8m9.292784572s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000009040)=@newqdisc={0x15c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x401}]}}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x98b4, 0x5, 0x1, 0x6, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x80, 0x3, 0x0, 0x0, 0x80000001, 0x1ff}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x1c, 0x9, 0x40000, 0x2, 0x200, 0x80000001}}, {0x4}}, {{0x1c, 0x1, {0x51, 0x4, 0x1000, 0xfffffff8, 0x2, 0x2, 0x3, 0x1}}, {0x6, 0x2, [0xdac]}}, {{0x1c, 0x1, {0x4, 0x16, 0x8, 0x0, 0x1, 0x401, 0x4, 0x2}}, {0x8, 0x2, [0x40, 0x9]}}, {{0x1c, 0x1, {0x3, 0x11, 0x40ba, 0x8, 0x0, 0x9, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}, {{0x1c, 0x1, {0xc, 0x1, 0x7, 0x7, 0x0, 0xb, 0xbb, 0x2}}, {0x8, 0x2, [0x7, 0x5]}}, {{0x1c, 0x1, {0x1, 0x0, 0x3, 0x26c99bf7, 0x2, 0xffff8262, 0x8001, 0x2}}, {0x8, 0x2, [0x4, 0x1a73]}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

program crashed: INFO: task hung in tun_chr_close
validation run: crashed=true
testing program (duration=8m9.292784572s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000009040)=@newqdisc={0x15c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x401}]}}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x98b4, 0x5, 0x1, 0x6, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x80, 0x3, 0x0, 0x0, 0x80000001, 0x1ff}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x1c, 0x9, 0x40000, 0x2, 0x200, 0x80000001}}, {0x4}}, {{0x1c, 0x1, {0x51, 0x4, 0x1000, 0xfffffff8, 0x2, 0x2, 0x3, 0x1}}, {0x6, 0x2, [0xdac]}}, {{0x1c, 0x1, {0x4, 0x16, 0x8, 0x0, 0x1, 0x401, 0x4, 0x2}}, {0x8, 0x2, [0x40, 0x9]}}, {{0x1c, 0x1, {0x3, 0x11, 0x40ba, 0x8, 0x0, 0x9, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}, {{0x1c, 0x1, {0xc, 0x1, 0x7, 0x7, 0x0, 0xb, 0xbb, 0x2}}, {0x8, 0x2, [0x7, 0x5]}}, {{0x1c, 0x1, {0x1, 0x0, 0x3, 0x26c99bf7, 0x2, 0xffff8262, 0x8001, 0x2}}, {0x8, 0x2, [0x4, 0x1a73]}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

program crashed: INFO: task hung in worker_attach_to_pool
validation run: crashed=true
testing program (duration=8m9.292784572s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000009040)=@newqdisc={0x15c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x401}]}}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x98b4, 0x5, 0x1, 0x6, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x80, 0x3, 0x0, 0x0, 0x80000001, 0x1ff}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x1c, 0x9, 0x40000, 0x2, 0x200, 0x80000001}}, {0x4}}, {{0x1c, 0x1, {0x51, 0x4, 0x1000, 0xfffffff8, 0x2, 0x2, 0x3, 0x1}}, {0x6, 0x2, [0xdac]}}, {{0x1c, 0x1, {0x4, 0x16, 0x8, 0x0, 0x1, 0x401, 0x4, 0x2}}, {0x8, 0x2, [0x40, 0x9]}}, {{0x1c, 0x1, {0x3, 0x11, 0x40ba, 0x8, 0x0, 0x9, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}, {{0x1c, 0x1, {0xc, 0x1, 0x7, 0x7, 0x0, 0xb, 0xbb, 0x2}}, {0x8, 0x2, [0x7, 0x5]}}, {{0x1c, 0x1, {0x1, 0x0, 0x3, 0x26c99bf7, 0x2, 0xffff8262, 0x8001, 0x2}}, {0x8, 0x2, [0x4, 0x1a73]}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

program crashed: INFO: task hung in register_nexthop_notifier
validation run: crashed=true
reproducing took 2h6m32.8768667s
repro crashed as (corrupted=false):
INFO: task syz-executor:6164 blocked for more than 159 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:25144 pid:6164  tgid:6164  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5260 [inline]
 __schedule+0x14ea/0x5050 kernel/sched/core.c:6867
 __schedule_loop kernel/sched/core.c:6949 [inline]
 schedule+0x164/0x360 kernel/sched/core.c:6964
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7fe/0x1300 kernel/locking/mutex.c:776
 register_nexthop_notifier+0x88/0x290 net/ipv4/nexthop.c:3971
 ops_init+0x35c/0x5c0 net/core/net_namespace.c:137
 setup_net+0x118/0x340 net/core/net_namespace.c:446
 copy_net_ns+0x50e/0x730 net/core/net_namespace.c:581
 create_new_namespaces+0x3e7/0x6a0 kernel/nsproxy.c:130
 unshare_nsproxy_namespaces+0x11a/0x160 kernel/nsproxy.c:226
 ksys_unshare+0x4f4/0x900 kernel/fork.c:3171
 __do_sys_unshare kernel/fork.c:3242 [inline]
 __se_sys_unshare kernel/fork.c:3240 [inline]
 __x64_sys_unshare+0x38/0x50 kernel/fork.c:3240
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f982259c1a7
RSP: 002b:00007fff89580da8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f982259c1a7
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00007fff89580e00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff89580e08
R13: 0000000000000002 R14: 00007fff89580fe8 R15: 0000000000000000
 </TASK>

Showing all locks held in the system:
1 lock held by pool_workqueue_/3:
 #0: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:343 [inline]
 #0: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 kernel/rcu/tree_exp.h:956
1 lock held by kworker/R-rcu_g/4:

final repro crashed as (corrupted=false):
INFO: task syz-executor:6164 blocked for more than 159 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:25144 pid:6164  tgid:6164  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5260 [inline]
 __schedule+0x14ea/0x5050 kernel/sched/core.c:6867
 __schedule_loop kernel/sched/core.c:6949 [inline]
 schedule+0x164/0x360 kernel/sched/core.c:6964
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021
 __mutex_lock_common kernel/locking/mutex.c:692 [inline]
 __mutex_lock+0x7fe/0x1300 kernel/locking/mutex.c:776
 register_nexthop_notifier+0x88/0x290 net/ipv4/nexthop.c:3971
 ops_init+0x35c/0x5c0 net/core/net_namespace.c:137
 setup_net+0x118/0x340 net/core/net_namespace.c:446
 copy_net_ns+0x50e/0x730 net/core/net_namespace.c:581
 create_new_namespaces+0x3e7/0x6a0 kernel/nsproxy.c:130
 unshare_nsproxy_namespaces+0x11a/0x160 kernel/nsproxy.c:226
 ksys_unshare+0x4f4/0x900 kernel/fork.c:3171
 __do_sys_unshare kernel/fork.c:3242 [inline]
 __se_sys_unshare kernel/fork.c:3240 [inline]
 __x64_sys_unshare+0x38/0x50 kernel/fork.c:3240
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f982259c1a7
RSP: 002b:00007fff89580da8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f982259c1a7
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00007fff89580e00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff89580e08
R13: 0000000000000002 R14: 00007fff89580fe8 R15: 0000000000000000
 </TASK>

Showing all locks held in the system:
1 lock held by pool_workqueue_/3:
 #0: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:343 [inline]
 #0: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 kernel/rcu/tree_exp.h:956
1 lock held by kworker/R-rcu_g/4: