Extracting prog: 1h19m5.265544847s Minimizing prog: 2h22m27.765459215s Simplifying prog options: 17m34.067740262s Extracting C: 5m13.435429065s Simplifying C: 0s extracting reproducer from 60 programs testing a last program of every proc single: executing 16 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$auto-prctl$auto-openat$auto_kernfs_file_fops_kernfs_internal-mmap$auto-mmap$auto-recvmmsg$auto-sendmmsg$auto-sendmmsg$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_GET_MSRS-mmap$auto-mmap$auto-timer_create$auto-close_range$auto-close_range$auto-openat$auto_tracing_saved_tgids_fops_trace-openat$auto_fops_u16_-openat$auto_tty_fops_tty_io-openat$auto_def_blk_fops_fs-preadv2$auto-move_pages$auto-move_pages$auto-openat$auto_tty_fops_tty_io-openat$auto_tty_fops_tty_io-ioctl$auto-ioctl$auto-write$auto detailed listing: executing program 0: socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x803, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim6/psample/out_tc\x00', 0x80000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x20100, 0x0) preadv2$auto(r0, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto(0x3, 0x402c542d, r1) (async) ioctl$auto(0x3, 0x402c542d, r1) write$auto(0x3, 0x0, 0xfffffdef) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-bpf$auto_BPF_BTF_GET_FD_BY_ID-ioctl$auto_UI_SET_SNDBIT-setsockopt$auto detailed listing: executing program 0: r0 = socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=@link_create={@map_fd=r0, @target_fd=r0, 0x9eae, 0x2, @bpf_attr_link_create_4_1={0xffff, 0x80000001}}, 0x2) ioctl$auto_UI_SET_SNDBIT(r1, 0x4004556a, &(0x7f00000000c0)=0x94) setsockopt$auto(r0, 0x6, 0x21, 0x0, 0x20) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-pidfd_open$auto-mmap$auto-move_pages$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-prctl$auto-openat$auto_rfcomm_dlc_debugfs_fops_-openat$auto_tracing_entries_fops_trace-write$auto-openat$auto_kernfs_file_fops_kernfs_internal-writev$auto-syz_genetlink_get_family_id$auto_smbd_genl-sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE-msync$auto-openat$auto_tty_fops_tty_io-ioctl$auto-newfstatat$auto-msgctl$auto-openat$auto_wakeup_sources_stats_fops_wakeup-read$auto-mmap$auto-openat$auto_tomoyo_operations_securityfs_if-read$auto-close_range$auto-openat$auto_tty_fops_tty_io-socketpair$auto-ioctl$auto-mmap$auto-sendmsg$auto_SMC_PNETID_DEL detailed listing: executing program 0: socket(0xa, 0x2, 0x0) r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x1000}, 0x3) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(r3, 0x4b47, 0x1) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180)={0xcf68, 0x7, 0x6, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x1f, 0x7d, 0x0, 0x1, 0x1, 0xfffffffffffffff9, 0xffffffffffff7fff, 0x1000}, 0x8) msgctl$auto(0x4, 0x10000, &(0x7f00000002c0)={{0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x1, 0x4}, &(0x7f0000000240)=0x9, &(0x7f0000000280), 0x25, 0x553, 0x9, 0xf41, 0x2, 0xffff, 0x6, 0x3, @raw=0xe, @raw=0x59}) r4 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f00000010c0), 0x40002, 0x0) read$auto(r4, &(0x7f0000001100)='/dev/ttyr8\x00', 0xf92) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x20000008000) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xe0301, 0x0) r7 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r6, 0x4b72, r7) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_SMC_PNETID_DEL(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d80000", @ANYRES16, @ANYBLOB="000227bd7000fbdbdf2503000000a70001002f4565762f617564696f31005649a3aab13b9d4ac6c027db56d4eec2dda7ee248dc4e964030d46ecb8b15a7cff47509729cf07fb5c6e89433a84441d75b49a62cea774551477b4141d559d8ba45595332e4fab22348abb5938405a3560a46dff6217bb7fea342aa4f4b490c0bfd46dbfc715be0198d76c4497297dfa4bdf3e66b82695392d0acc5777e29c4b0c4507cad336e8cb3f28fa49e2ae2c956b3883cfc544cc000c000200253a5ec62d3a7c0005000400a40000000500040009000000"], 0xd8}}, 0x4) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare$auto-memfd_secret$auto-ftruncate$auto-mmap$auto-socket-close_range$auto-socket-socket-bind$auto-connect$auto-close_range$auto-socket$nl_generic-close_range$auto-landlock_create_ruleset$auto-landlock_restrict_self$auto-close_range$auto-ioctl$auto_VHOST_SET_VRING_CALL2-pidfd_getfd$auto-socket$nl_generic-close_range$auto-landlock_create_ruleset$auto-mmap$auto-close_range$auto-socket-socket-socketpair$auto-setsockopt$auto-landlock_restrict_self$auto-mknod$auto-rename$auto detailed listing: executing program 0: unshare$auto(0x40000080) memfd_secret$auto(0x0) ftruncate$auto(0x3, 0x700) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400000000000400, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$auto_VHOST_SET_VRING_CALL2(r2, 0x4008af21, &(0x7f0000000280)={0x8, 0xffffffffffffffff}) pidfd_getfd$auto(r3, r0, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) landlock_restrict_self$auto(r4, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)') program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-madvise$auto-mmap$auto-getrandom$auto-openat$auto_tty_fops_tty_io-openat$auto_console_fops_tty_io-write$auto_console_fops_tty_io-ioctl$auto-close_range$auto-socket$nl_generic-openat$auto_kvm_chardev_ops_kvm_main-close_range$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-ioctl$auto_SNDCTL_DSP_GETODELAY-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyw6\x00', 0xc0480, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b", 0x6) ioctl$auto(r2, 0x4b67, 0x1) close_range$auto(0x2, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x82, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000040)) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-madvise$auto-mmap$auto-getrandom$auto-openat$auto_tty_fops_tty_io-openat$auto_console_fops_tty_io-write$auto_console_fops_tty_io-ioctl$auto-mmap$auto-close_range$auto-socket$nl_generic-openat$auto_kvm_chardev_ops_kvm_main-close_range$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-ioctl$auto_SNDCTL_DSP_GETODELAY-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyw6\x00', 0xc0480, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b3c", 0xfdef) ioctl$auto(r2, 0x4b67, 0x1) mmap$auto(0x1bf, 0x1000000202000a, 0x1, 0x72, r3, 0x8001) close_range$auto(0x2, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x82, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000040)) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-madvise$auto-mmap$auto-getrandom$auto-openat$auto_tty_fops_tty_io-openat$auto_console_fops_tty_io-write$auto_console_fops_tty_io-ioctl$auto-mmap$auto-close_range$auto-socket$nl_generic-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_snd_pcm_oss_f_reg_pcm_oss-ioctl$auto_SNDCTL_DSP_GETODELAY-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyw6\x00', 0xc0480, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b", 0x6) ioctl$auto(r2, 0x4b67, 0x1) mmap$auto(0x1bf, 0x1000000202000a, 0x1, 0x72, r3, 0x8001) close_range$auto(0x2, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x82, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000040)) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-madvise$auto-mmap$auto-getrandom$auto-openat$auto_tty_fops_tty_io-openat$auto_console_fops_tty_io-write$auto_console_fops_tty_io-ioctl$auto-close_range$auto-socket$nl_generic-openat$auto_kvm_chardev_ops_kvm_main-close_range$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-ioctl$auto_SNDCTL_DSP_GETODELAY-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyw6\x00', 0xc0480, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b", 0x6) ioctl$auto(r2, 0x4b67, 0x1) close_range$auto(0x2, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x82, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000040)) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-madvise$auto-mmap$auto-getrandom$auto-openat$auto_tty_fops_tty_io-openat$auto_console_fops_tty_io-write$auto_console_fops_tty_io-ioctl$auto-mmap$auto-close_range$auto-socket$nl_generic-openat$auto_kvm_chardev_ops_kvm_main-close_range$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-ioctl$auto_SNDCTL_DSP_GETODELAY-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyw6\x00', 0xc0480, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b3c", 0xfdef) ioctl$auto(r2, 0x4b67, 0x1) mmap$auto(0x1bf, 0x1000000202000a, 0x1, 0x72, r3, 0x8001) close_range$auto(0x2, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x82, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000040)) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-madvise$auto-mmap$auto-getrandom$auto-openat$auto_tty_fops_tty_io-openat$auto_console_fops_tty_io-write$auto_console_fops_tty_io-ioctl$auto-mmap$auto-close_range$auto-socket$nl_generic-openat$auto_kvm_chardev_ops_kvm_main-openat$auto_snd_pcm_oss_f_reg_pcm_oss-ioctl$auto_SNDCTL_DSP_GETODELAY-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyw6\x00', 0xc0480, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b", 0x6) ioctl$auto(r2, 0x4b67, 0x1) mmap$auto(0x1bf, 0x1000000202000a, 0x1, 0x72, r3, 0x8001) close_range$auto(0x2, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x82, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000040)) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-madvise$auto-mmap$auto-getrandom$auto-openat$auto_tty_fops_tty_io-openat$auto_console_fops_tty_io-write$auto_console_fops_tty_io-ioctl$auto-mmap$auto-close_range$auto-socket$nl_generic-openat$auto_kvm_chardev_ops_kvm_main-close_range$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-ioctl$auto_SNDCTL_DSP_GETODELAY-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyw6\x00', 0xc0480, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d5b9b39", 0xfdef) ioctl$auto(r2, 0x4b67, 0x1) mmap$auto(0x1bf, 0x1000000202000a, 0x1, 0x72, r3, 0x8001) close_range$auto(0x2, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x82, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000040)) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-madvise$auto-mmap$auto-getrandom$auto-openat$auto_tty_fops_tty_io-openat$auto_console_fops_tty_io-write$auto_console_fops_tty_io-ioctl$auto-mmap$auto-close_range$auto-socket$nl_generic-openat$auto_kvm_chardev_ops_kvm_main-close_range$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-ioctl$auto_SNDCTL_DSP_GETODELAY-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyw6\x00', 0xc0480, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d3e9b39", 0xfdef) ioctl$auto(r2, 0x4b67, 0x1) mmap$auto(0x1bf, 0x1000000202000a, 0x1, 0x72, r3, 0x8001) close_range$auto(0x2, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x82, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000040)) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-socket-mmap$auto-recvmmsg$auto-sendmmsg$auto-setsockopt$auto_SO_SNDBUFFORCE-ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE-open-execveat$auto-syz_clone-sendmsg$auto_NFSD_CMD_THREADS_SET-openat$auto_mon_fops_text_t_mon_text-pread64$auto-mmap$auto-madvise$auto-mmap$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400, 0xdf, 0xeb3, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setsockopt$auto_SO_SNDBUFFORCE(r2, 0x8001, 0x20, 0x0, 0x8c46) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) r3 = open(0x0, 0x22240, 0x154) execveat$auto(r3, 0x0, 0x0, 0x0, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r4, 0x0, 0x84, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-socket-mmap$auto-recvmmsg$auto-sendmmsg$auto-setsockopt$auto_SO_SNDBUFFORCE-ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE-open-execveat$auto-syz_clone-sendmsg$auto_NFSD_CMD_THREADS_SET-openat$auto_mon_fops_text_t_mon_text-pread64$auto-mmap$auto-madvise$auto-mmap$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400, 0xdf, 0xeb3, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setsockopt$auto_SO_SNDBUFFORCE(r2, 0x8001, 0x20, 0x0, 0x8c46) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) r3 = open(0x0, 0x22240, 0x154) execveat$auto(r3, 0x0, 0x0, 0x0, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r4, 0x0, 0x84, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-socket-mmap$auto-recvmmsg$auto-sendmmsg$auto-setsockopt$auto_SO_SNDBUFFORCE-ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE-open-execveat$auto-syz_clone-sendmsg$auto_NFSD_CMD_THREADS_SET-openat$auto_mon_fops_text_t_mon_text-pread64$auto-mmap$auto-madvise$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400, 0xdf, 0xeb3, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setsockopt$auto_SO_SNDBUFFORCE(r2, 0x8001, 0x20, 0x0, 0x8c46) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) r3 = open(0x0, 0x22240, 0x154) execveat$auto(r3, 0x0, 0x0, 0x0, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r4, 0x0, 0x84, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-socket-mmap$auto-recvmmsg$auto-sendmmsg$auto-setsockopt$auto_SO_SNDBUFFORCE-ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE-open-execveat$auto-syz_clone-sendmsg$auto_NFSD_CMD_THREADS_SET-openat$auto_mon_fops_text_t_mon_text-pread64$auto-mmap$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400, 0xdf, 0xeb3, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setsockopt$auto_SO_SNDBUFFORCE(r2, 0x8001, 0x20, 0x0, 0x8c46) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) r3 = open(0x0, 0x22240, 0x154) execveat$auto(r3, 0x0, 0x0, 0x0, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r4, 0x0, 0x84, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-socket-mmap$auto-recvmmsg$auto-sendmmsg$auto-setsockopt$auto_SO_SNDBUFFORCE-ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE-open-execveat$auto-syz_clone-sendmsg$auto_NFSD_CMD_THREADS_SET-openat$auto_mon_fops_text_t_mon_text-pread64$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400, 0xdf, 0xeb3, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setsockopt$auto_SO_SNDBUFFORCE(r2, 0x8001, 0x20, 0x0, 0x8c46) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) r3 = open(0x0, 0x22240, 0x154) execveat$auto(r3, 0x0, 0x0, 0x0, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r4, 0x0, 0x84, 0xc) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-socket-mmap$auto-recvmmsg$auto-sendmmsg$auto-setsockopt$auto_SO_SNDBUFFORCE-ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE-open-execveat$auto-syz_clone-sendmsg$auto_NFSD_CMD_THREADS_SET-openat$auto_mon_fops_text_t_mon_text-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400, 0xdf, 0xeb3, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setsockopt$auto_SO_SNDBUFFORCE(r2, 0x8001, 0x20, 0x0, 0x8c46) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) r3 = open(0x0, 0x22240, 0x154) execveat$auto(r3, 0x0, 0x0, 0x0, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_setup testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-socket-mmap$auto-recvmmsg$auto-sendmmsg$auto-setsockopt$auto_SO_SNDBUFFORCE-ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE-open-execveat$auto-syz_clone-sendmsg$auto_NFSD_CMD_THREADS_SET-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400, 0xdf, 0xeb3, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setsockopt$auto_SO_SNDBUFFORCE(r2, 0x8001, 0x20, 0x0, 0x8c46) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) r3 = open(0x0, 0x22240, 0x154) execveat$auto(r3, 0x0, 0x0, 0x0, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-socket-mmap$auto-recvmmsg$auto-sendmmsg$auto-setsockopt$auto_SO_SNDBUFFORCE-ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE-open-execveat$auto-syz_clone-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400, 0xdf, 0xeb3, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setsockopt$auto_SO_SNDBUFFORCE(r2, 0x8001, 0x20, 0x0, 0x8c46) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) r3 = open(0x0, 0x22240, 0x154) execveat$auto(r3, 0x0, 0x0, 0x0, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-socket-mmap$auto-recvmmsg$auto-sendmmsg$auto-setsockopt$auto_SO_SNDBUFFORCE-ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE-open-execveat$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400, 0xdf, 0xeb3, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setsockopt$auto_SO_SNDBUFFORCE(r2, 0x8001, 0x20, 0x0, 0x8c46) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) r3 = open(0x0, 0x22240, 0x154) execveat$auto(r3, 0x0, 0x0, 0x0, 0x1000) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-socket-mmap$auto-recvmmsg$auto-sendmmsg$auto-setsockopt$auto_SO_SNDBUFFORCE-ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE-open-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400, 0xdf, 0xeb3, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setsockopt$auto_SO_SNDBUFFORCE(r2, 0x8001, 0x20, 0x0, 0x8c46) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) open(0x0, 0x22240, 0x154) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-socket-mmap$auto-recvmmsg$auto-sendmmsg$auto-setsockopt$auto_SO_SNDBUFFORCE-ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400, 0xdf, 0xeb3, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setsockopt$auto_SO_SNDBUFFORCE(r2, 0x8001, 0x20, 0x0, 0x8c46) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-socket-mmap$auto-recvmmsg$auto-sendmmsg$auto-setsockopt$auto_SO_SNDBUFFORCE-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400, 0xdf, 0xeb3, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setsockopt$auto_SO_SNDBUFFORCE(r2, 0x8001, 0x20, 0x0, 0x8c46) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-socket-mmap$auto-recvmmsg$auto-sendmmsg$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400, 0xdf, 0xeb3, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-socket-mmap$auto-recvmmsg$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400, 0xdf, 0xeb3, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-socket-mmap$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400, 0xdf, 0xeb3, 0x401, 0x8000) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-socket-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0x3b) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-openat$auto_nsim_dev_health_break_fops_health-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x2, 0x0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-mmap$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-landlock_restrict_self$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-syz_genetlink_get_family_id$auto_nl80211-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) getrandom$auto(0x0, 0xa, 0x3) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) getrandom$auto(0x0, 0xa, 0x3) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-socket-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) getrandom$auto(0x0, 0xa, 0x3) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-fallocate$auto-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-open-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-map_shadow_stack$auto-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_setup testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x803b, 0x1, 0x4, 0x5, 0x10004) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4020009, 0x20000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_setup testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto detailed listing: executing program 0: r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto detailed listing: executing program 0: r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) getrandom$auto(0x0, 0xa, 0x3) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto detailed listing: executing program 0: r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, 0x0) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) getrandom$auto(0x0, 0xa, 0x3) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto program did not crash simplifying guilty program options testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto detailed listing: executing program 0: r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) getrandom$auto(0x0, 0xa, 0x3) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto detailed listing: executing program 0: r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto detailed listing: executing program 0: r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_setup validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto detailed listing: executing program 0: r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_def_blk_fops_fs-ioctl$auto_BLKTRACESETUP-ioctl$auto_BLKTRACETEARDOWN-getrandom$auto detailed listing: executing program 0: r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x80408, 0xfff, 0x400004, 0x200000000140000d}) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) getrandom$auto(0x0, 0xa, 0x3) program crashed: INFO: task hung in blk_trace_ioctl validation run: crashed=true reproducing took 4h17m54.017658347s repro crashed as (corrupted=false): INFO: task syz.5.22:6360 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.5.22 state:D stack:29000 pid:6360 tgid:6358 ppid:6329 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 blk_debugfs_lock_nomemsave block/blk.h:740 [inline] blk_trace_remove kernel/trace/blktrace.c:561 [inline] blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 blkdev_common_ioctl+0x170c/0x2ba0 block/ioctl.c:724 blkdev_ioctl+0x43b/0x6f0 block/ioctl.c:798 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f02f179c799 RSP: 002b:00007f02f2592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f02f1a16090 RCX: 00007f02f179c799 RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000003 RBP: 00007f02f1832c99 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f02f1a16128 R14: 00007f02f1a16090 R15: 00007ffeaa8d5c08 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff8e7e7660 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:312 [inline] #0: ffffffff8e7e7660 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:850 [inline] #0: ffffffff8e7e7660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775 2 locks held by getty/5586: #0: ffff8880383990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 drivers/tty/n_tty.c:2211 2 locks held by syz.5.22/6359: 1 lock held by syz.5.22/6360: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by syz.6.23/6447: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock block/blk.h:752 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 kernel/trace/blktrace.c:788 1 lock held by syz.6.23/6448: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by syz.7.24/6478: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock block/blk.h:752 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 kernel/trace/blktrace.c:788 1 lock held by syz.7.24/6481: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by syz.8.25/6644: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock block/blk.h:752 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 kernel/trace/blktrace.c:788 1 lock held by syz.8.25/6645: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by syz.9.26/6675: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock block/blk.h:752 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 kernel/trace/blktrace.c:788 1 lock held by syz.9.26/6676: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by syz.0.27/6799: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock block/blk.h:752 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 kernel/trace/blktrace.c:788 1 lock held by syz.0.27/6800: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by syz.1.28/7059: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock block/blk.h:752 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 kernel/trace/blktrace.c:788 1 lock held by syz.1.28/7060: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by syz.2.29/7250: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock block/blk.h:752 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 kernel/trace/blktrace.c:788 1 lock held by syz.2.29/7252: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by syz.3.30/7521: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock block/blk.h:752 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 kernel/trace/blktrace.c:788 1 lock held by syz.3.30/7522: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by dhcpcd-run-hook/7664: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x1d7/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x141/0x190 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xd25/0x1050 kernel/hung_task.c:515 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet RIP: 0010:__kasan_check_byte+0x1c/0x50 mm/kasan/common.c:578 Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 41 54 49 89 f4 55 48 89 fd 53 e8 4d 20 00 00 89 c3 84 c0 74 0b 89 d8 5b <5d> 41 5c e9 0c 21 1d 09 4c 89 e1 48 89 ef 31 d2 be 01 00 00 00 e8 RSP: 0018:ffffc90000127a18 EFLAGS: 00000202 RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 RDX: 0000000000000000 RSI: ffffffff8b55ad8a RDI: fffffbfff1cfcecc RBP: ffffffff8e7e7660 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000400 R11: 0000000000000000 R12: ffffffff8b55ad8a R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888124449000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f096e1d1318 CR3: 000000000e598000 CR4: 00000000003526f0 Call Trace: kasan_check_byte include/linux/kasan.h:402 [inline] lock_acquire kernel/locking/lockdep.c:5842 [inline] lock_acquire+0x148/0x380 kernel/locking/lockdep.c:5825 rcu_lock_acquire include/linux/rcupdate.h:312 [inline] rcu_read_lock include/linux/rcupdate.h:850 [inline] batadv_iv_ogm_slide_own_bcast_window net/batman-adv/bat_iv_ogm.c:764 [inline] batadv_iv_ogm_schedule_buff+0x5da/0x1520 net/batman-adv/bat_iv_ogm.c:836 batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:876 [inline] batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:869 [inline] batadv_iv_send_outstanding_bat_ogm_packet+0x6e0/0x860 net/batman-adv/bat_iv_ogm.c:1712 process_one_work+0xa23/0x19a0 kernel/workqueue.c:3276 process_scheduled_works kernel/workqueue.c:3359 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3440 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 final repro crashed as (corrupted=false): INFO: task syz.5.22:6360 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.5.22 state:D stack:29000 pid:6360 tgid:6358 ppid:6329 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7065 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 blk_debugfs_lock_nomemsave block/blk.h:740 [inline] blk_trace_remove kernel/trace/blktrace.c:561 [inline] blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 blkdev_common_ioctl+0x170c/0x2ba0 block/ioctl.c:724 blkdev_ioctl+0x43b/0x6f0 block/ioctl.c:798 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f02f179c799 RSP: 002b:00007f02f2592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f02f1a16090 RCX: 00007f02f179c799 RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000003 RBP: 00007f02f1832c99 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f02f1a16128 R14: 00007f02f1a16090 R15: 00007ffeaa8d5c08 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff8e7e7660 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:312 [inline] #0: ffffffff8e7e7660 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:850 [inline] #0: ffffffff8e7e7660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775 2 locks held by getty/5586: #0: ffff8880383990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 drivers/tty/n_tty.c:2211 2 locks held by syz.5.22/6359: 1 lock held by syz.5.22/6360: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by syz.6.23/6447: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock block/blk.h:752 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 kernel/trace/blktrace.c:788 1 lock held by syz.6.23/6448: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by syz.7.24/6478: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock block/blk.h:752 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 kernel/trace/blktrace.c:788 1 lock held by syz.7.24/6481: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by syz.8.25/6644: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock block/blk.h:752 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 kernel/trace/blktrace.c:788 1 lock held by syz.8.25/6645: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by syz.9.26/6675: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock block/blk.h:752 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 kernel/trace/blktrace.c:788 1 lock held by syz.9.26/6676: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by syz.0.27/6799: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock block/blk.h:752 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 kernel/trace/blktrace.c:788 1 lock held by syz.0.27/6800: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by syz.1.28/7059: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock block/blk.h:752 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 kernel/trace/blktrace.c:788 1 lock held by syz.1.28/7060: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by syz.2.29/7250: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock block/blk.h:752 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 kernel/trace/blktrace.c:788 1 lock held by syz.2.29/7252: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by syz.3.30/7521: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock block/blk.h:752 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 kernel/trace/blktrace.c:788 1 lock held by syz.3.30/7522: #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_debugfs_lock_nomemsave block/blk.h:740 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:561 [inline] #0: ffff88802748af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x263/0x320 kernel/trace/blktrace.c:952 1 lock held by dhcpcd-run-hook/7664: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x1d7/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x141/0x190 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xd25/0x1050 kernel/hung_task.c:515 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet RIP: 0010:__kasan_check_byte+0x1c/0x50 mm/kasan/common.c:578 Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 41 54 49 89 f4 55 48 89 fd 53 e8 4d 20 00 00 89 c3 84 c0 74 0b 89 d8 5b <5d> 41 5c e9 0c 21 1d 09 4c 89 e1 48 89 ef 31 d2 be 01 00 00 00 e8 RSP: 0018:ffffc90000127a18 EFLAGS: 00000202 RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 RDX: 0000000000000000 RSI: ffffffff8b55ad8a RDI: fffffbfff1cfcecc RBP: ffffffff8e7e7660 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000400 R11: 0000000000000000 R12: ffffffff8b55ad8a R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888124449000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f096e1d1318 CR3: 000000000e598000 CR4: 00000000003526f0 Call Trace: kasan_check_byte include/linux/kasan.h:402 [inline] lock_acquire kernel/locking/lockdep.c:5842 [inline] lock_acquire+0x148/0x380 kernel/locking/lockdep.c:5825 rcu_lock_acquire include/linux/rcupdate.h:312 [inline] rcu_read_lock include/linux/rcupdate.h:850 [inline] batadv_iv_ogm_slide_own_bcast_window net/batman-adv/bat_iv_ogm.c:764 [inline] batadv_iv_ogm_schedule_buff+0x5da/0x1520 net/batman-adv/bat_iv_ogm.c:836 batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:876 [inline] batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:869 [inline] batadv_iv_send_outstanding_bat_ogm_packet+0x6e0/0x860 net/batman-adv/bat_iv_ogm.c:1712 process_one_work+0xa23/0x19a0 kernel/workqueue.c:3276 process_scheduled_works kernel/workqueue.c:3359 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3440 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245