Extracting prog: 42m24.25064235s Minimizing prog: 2h1m49.693498561s Simplifying prog options: 0s Extracting C: 3m7.234265329s Simplifying C: 52m0.153620066s extracting reproducer from 70 programs testing a last program of every proc single: executing 20 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-openat$binderfs-ioctl$BINDER_WRITE_READ-mmap-lsetxattr$security_capability-openat$null-write$binfmt_register-sendfile detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x4008630a, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x4, 0x8}, {0x7, 0x5}], 0xffffffffffffffff}, 0x18, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x600700, 0x0) write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, 'security.capability\x00', 0x3a, '\\:&', 0x3a, './file0', 0x3a, [0x50, 0x50, 0x50, 0x4f, 0x4f, 0x43]}, 0x44) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-socket$inet-bind$inet-socket-getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3-listen-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-connect$bt_rfcomm-mkdirat-mount-mmap-chdir-openat$cgroup_ro-quotactl_fd$Q_GETFMT-openat-mount-dup-ioctl$KVM_SET_MSRS-write$P9_RREAD-setsockopt$bt_BT_DEFER_SETUP-sendto$inet-sendto$inet-openat$sysfs-write$cgroup_int-sendfile-sendto detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x783142, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x2, 0x0, &(0x7f0000000000)) listen(r1, 0x5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x14}, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x1000000) chdir(&(0x7f0000000180)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETFMT(r6, 0xffffffff80000401, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file3\x00', 0x505042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000200)='btrfs\x00', 0x0, &(0x7f0000000380)='acl') r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000098000040"]) write$P9_RREAD(r8, &(0x7f00000020c0)=ANY=[@ANYRES16=r1, @ANYRES16=r5, @ANYRESHEX=r7, @ANYRES32=r4, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYBLOB="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", @ANYRES64=r7, @ANYRES8=r7], 0xe4) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) sendto$inet(r1, 0x0, 0x0, 0x4c0d4, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149e82, 0x244) write$cgroup_int(r9, &(0x7f0000000040)=0x10001, 0x12) sendfile(r1, r0, 0x0, 0x7ffff000) sendto(r7, &(0x7f0000000480)="bce2ae8e6ebfc0f57d68b9c98df59643d24e3a3ac5372fc2c63ba400094c77c30bfd4a2196cf68232a3f2ed82f8471e765f860e7214833340d51f74aa31f573bd35bf6e7df186ad96a32fc4983ede1862d5af5e9413ad8eda1d24ded99c367a1f77d8162275c51deea8230027d3a2a4f7f0c7970f8ce2ecdeebcf53aa9432899802508e80666f647f11914ed0bdafa", 0x8f, 0x0, &(0x7f0000000100)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0x80) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-mmap-syz_open_dev$tty20-ioctl$KDFONTOP_GET-ioctl$KVM_CHECK_EXTENSION-socket$inet_udp-openat-add_key$fscrypt_v1-ioctl$KVM_SET_MSRS-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS-socketpair$unix-ioctl$USBDEVFS_DROP_PRIVILEGES-ioctl$KVM_RUN-ioctl$KVM_RUN-openat$kvm-ioctl$KVM_CREATE_VM-mkdir-mount$overlay-ioctl$KVM_CREATE_VCPU-socket-setsockopt$netlink_NETLINK_TX_RING-syz_genetlink_get_family_id$ethtool-syz_kvm_setup_cpu$x86-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-mmap detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0xffffe000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000012c0)={0x1, 0x0, 0x17, 0x16, 0x197, &(0x7f0000000ec0)}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000000)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x2, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000000)=0x2d265528) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x16) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir, 0x3a}], [], 0x2f}) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x30f7, 0x1, 0x7, 0x1000000}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r9, 0x100000000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-mount-creat-ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-mount detailed listing: executing program 0: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000080)={0x8, 0x0, {0x3, 0x1, 0xd4a, 0x3, 0x4}, 0x127dc7a2}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x25b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x5, {0x5, 0xf, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000080)={0x8, 0x0, {0x3, 0x1, 0xd4a, 0x3, 0x4}, 0x127dc7a2}) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x25b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x5, {0x5, 0xf, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) (async) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-readv-openat$rnullb-sendfile-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-sendfile-setrlimit-syz_open_dev$audion-ioctl$LOOP_SET_FD-timer_create-timer_settime-openat$procfs-openat$sysctl-openat$procfs-openat$sysctl-sendfile-sendfile-mlock-openat$ttynull-ioctl$TIOCSETD detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/210, 0xd2}, {&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000180)=""/177, 0xb1}, {&(0x7f0000000240)=""/242, 0xf2}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000340)=""/128, 0x80}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000480)=""/35, 0x23}], 0x8) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r0, r0, 0x0, 0x8) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) ioctl$LOOP_SET_FD(r2, 0x80044df9, 0xffffffffffffffff) timer_create(0x3, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x23b) sendfile(r4, r3, 0x0, 0x8000) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000540), 0x400800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000580)=0x17) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-readv-openat$rnullb-sendfile-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-sendfile-setrlimit-syz_open_dev$audion-ioctl$LOOP_SET_FD-timer_create-timer_settime-openat$procfs-openat$sysctl-openat$procfs-openat$sysctl-sendfile-sendfile-mlock-openat$ttynull-ioctl$TIOCSETD detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/210, 0xd2}, {&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000180)=""/177, 0xb1}, {&(0x7f0000000240)=""/242, 0xf2}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000340)=""/128, 0x80}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000480)=""/35, 0x23}], 0x8) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r0, r0, 0x0, 0x8) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) ioctl$LOOP_SET_FD(r2, 0x80044df9, 0xffffffffffffffff) timer_create(0x3, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x23b) sendfile(r4, r3, 0x0, 0x8000) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000540), 0x400800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000580)=0x17) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-ioctl$NBD_SET_SOCK-syz_emit_vhci-syz_emit_vhci-syz_clone-ptrace-ptrace$getregset-ptrace$getregset-mount-mount-mknodat-landlock_create_ruleset-landlock_restrict_self-truncate-link detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) r2 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) link(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./file0\x00') program crashed: INFO: task hung in grab_super single: successfully extracted reproducer found reproducer with 22 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-ioctl$NBD_SET_SOCK-syz_emit_vhci-syz_emit_vhci-syz_clone-ptrace-ptrace$getregset-ptrace$getregset-mount-mount-mknodat-landlock_create_ruleset-landlock_restrict_self-truncate detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) r2 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) program crashed: INFO: task hung in ext4_read_bh testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-ioctl$NBD_SET_SOCK-syz_emit_vhci-syz_emit_vhci-syz_clone-ptrace-ptrace$getregset-ptrace$getregset-mount-mount-mknodat-landlock_create_ruleset-landlock_restrict_self detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) r2 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) program crashed: INFO: task hung in grab_super testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-ioctl$NBD_SET_SOCK-syz_emit_vhci-syz_emit_vhci-syz_clone-ptrace-ptrace$getregset-ptrace$getregset-mount-mount-mknodat-landlock_create_ruleset detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) r2 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) program crashed: INFO: task hung in grab_super testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-ioctl$NBD_SET_SOCK-syz_emit_vhci-syz_emit_vhci-syz_clone-ptrace-ptrace$getregset-ptrace$getregset-mount-mount-mknodat detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) r2 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) program crashed: INFO: task hung in grab_super testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-ioctl$NBD_SET_SOCK-syz_emit_vhci-syz_emit_vhci-syz_clone-ptrace-ptrace$getregset-ptrace$getregset-mount-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) r2 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) program crashed: INFO: task hung in ext4_read_bh testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-ioctl$NBD_SET_SOCK-syz_emit_vhci-syz_emit_vhci-syz_clone-ptrace-ptrace$getregset-ptrace$getregset-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) r2 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) program crashed: INFO: task hung in ext4_read_bh testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-ioctl$NBD_SET_SOCK-syz_emit_vhci-syz_emit_vhci-syz_clone-ptrace-ptrace$getregset-ptrace$getregset detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) r2 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-ioctl$NBD_SET_SOCK-syz_emit_vhci-syz_emit_vhci-syz_clone-ptrace-ptrace$getregset-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) r2 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) program crashed: INFO: task hung in ext4_read_bh testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-ioctl$NBD_SET_SOCK-syz_emit_vhci-syz_emit_vhci-syz_clone-ptrace-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) r2 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) program crashed: INFO: task hung in ext4_read_bh testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-ioctl$NBD_SET_SOCK-syz_emit_vhci-syz_emit_vhci-syz_clone-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) program crashed: INFO: task hung in ext4_read_bh testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-ioctl$NBD_SET_SOCK-syz_emit_vhci-syz_emit_vhci-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) program crashed: INFO: task hung in ext4_read_bh testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-ioctl$NBD_SET_SOCK-syz_emit_vhci-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) (async) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) program crashed: INFO: task hung in ext4_read_bh testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) program crashed: INFO: task hung in ext4_read_bh testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) program crashed: INFO: task hung in ext4_read_bh testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-socketpair$nbd-syz_open_dev$ndb-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-socketpair$nbd-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-syz_usb_connect$cdc_ncm-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-syz_usb_connect$cdc_ncm-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) program crashed: INFO: task hung in ext4_read_bh testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$fuse-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2c8000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) program crashed: INFO: task hung in ext4_read_bh testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) program crashed: INFO: task hung in ext4_read_bh testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) program crashed: INFO: task hung in ext4_read_bh testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) program crashed: INFO: task hung in ext4_read_bh testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) program crashed: INFO: task hung in ext4_read_bh testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x200000, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount program crashed: INFO: task hung in ext4_read_bh simplifying C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount program crashed: INFO: task hung in ext4_read_bh testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount program crashed: INFO: task hung in ext4_read_bh testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount program crashed: INFO: task hung in ext4_read_bh testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount program crashed: INFO: task hung in ext4_read_bh testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount program crashed: INFO: task hung in ext4_read_bh testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount program crashed: INFO: task hung in ext4_read_bh testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount program crashed: INFO: task hung in ext4_read_bh testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount program crashed: INFO: task hung in ext4_read_bh testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount program crashed: INFO: task hung in ext4_read_bh testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount program crashed: INFO: task hung in ext4_read_bh testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount program crashed: INFO: task hung in ext4_read_bh testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount program crashed: INFO: task hung in ext4_read_bh testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount program crashed: INFO: task hung in ext4_read_bh testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) program crashed: INFO: task hung in ext4_read_bh validation run: crashed=true testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) program crashed: INFO: task hung in ext4_read_bh validation run: crashed=true testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-mount detailed listing: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) program crashed: INFO: task hung in ext4_read_bh validation run: crashed=true reproducing took 3h48m50.988519216s repro crashed as (corrupted=false): INFO: task syz.0.17:6042 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:24456 pid:6042 tgid:6042 ppid:5993 task_flags:0x400140 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0x165/0x360 kernel/sched/core.c:7058 io_schedule+0x80/0xd0 kernel/sched/core.c:7903 bit_wait_io+0x11/0xd0 kernel/sched/wait_bit.c:250 __wait_on_bit+0xb6/0x310 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0x123/0x170 kernel/sched/wait_bit.c:67 wait_on_buffer include/linux/buffer_head.h:420 [inline] ext4_read_bh+0x20d/0x260 fs/ext4/super.c:207 ext4_read_bh_lock fs/ext4/super.c:220 [inline] __ext4_sb_bread_gfp+0x1c9/0x210 fs/ext4/super.c:242 ext4_sb_bread_unmovable fs/ext4/super.c:265 [inline] ext4_load_super fs/ext4/super.c:5063 [inline] __ext4_fill_super fs/ext4/super.c:5267 [inline] ext4_fill_super+0x802/0x6090 fs/ext4/super.c:5728 get_tree_bdev_flags+0x40b/0x4d0 fs/super.c:1692 vfs_get_tree+0x8f/0x2b0 fs/super.c:1752 do_new_mount+0x2a2/0xa30 fs/namespace.c:3810 do_mount fs/namespace.c:4138 [inline] __do_sys_mount fs/namespace.c:4349 [inline] __se_sys_mount+0x317/0x410 fs/namespace.c:4326 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f733498ebe9 RSP: 002b:00007ffe0adbf068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f7334bc5fa0 RCX: 00007f733498ebe9 RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000100 RBP: 00007f7334a11e19 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f7334bc5fa0 R14: 00007f7334bc5fa0 R15: 0000000000000005 INFO: lockdep is turned off. NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:332 [inline] watchdog+0xf60/0xfa0 kernel/hung_task.c:495 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x47c/0x820 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:82 Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 0f 22 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 RAX: a34074f8f13bed00 RBX: ffffffff8197ac78 RCX: a34074f8f13bed00 RDX: 0000000000000001 RSI: ffffffff8c04e5e0 RDI: ffffffff8197ac78 RBP: ffffc90000197f10 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fe52d30 R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a55b40 FS: 0000000000000000(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000056389163e5d0 CR3: 00000000754ec000 CR4: 00000000003526f0 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:757 default_idle_call+0x74/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:190 [inline] do_idle+0x1e8/0x510 kernel/sched/idle.c:330 cpu_startup_entry+0x44/0x60 kernel/sched/idle.c:428 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:315 common_startup_64+0x13e/0x147 final repro crashed as (corrupted=false): INFO: task syz.0.17:6042 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:24456 pid:6042 tgid:6042 ppid:5993 task_flags:0x400140 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0x165/0x360 kernel/sched/core.c:7058 io_schedule+0x80/0xd0 kernel/sched/core.c:7903 bit_wait_io+0x11/0xd0 kernel/sched/wait_bit.c:250 __wait_on_bit+0xb6/0x310 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0x123/0x170 kernel/sched/wait_bit.c:67 wait_on_buffer include/linux/buffer_head.h:420 [inline] ext4_read_bh+0x20d/0x260 fs/ext4/super.c:207 ext4_read_bh_lock fs/ext4/super.c:220 [inline] __ext4_sb_bread_gfp+0x1c9/0x210 fs/ext4/super.c:242 ext4_sb_bread_unmovable fs/ext4/super.c:265 [inline] ext4_load_super fs/ext4/super.c:5063 [inline] __ext4_fill_super fs/ext4/super.c:5267 [inline] ext4_fill_super+0x802/0x6090 fs/ext4/super.c:5728 get_tree_bdev_flags+0x40b/0x4d0 fs/super.c:1692 vfs_get_tree+0x8f/0x2b0 fs/super.c:1752 do_new_mount+0x2a2/0xa30 fs/namespace.c:3810 do_mount fs/namespace.c:4138 [inline] __do_sys_mount fs/namespace.c:4349 [inline] __se_sys_mount+0x317/0x410 fs/namespace.c:4326 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f733498ebe9 RSP: 002b:00007ffe0adbf068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f7334bc5fa0 RCX: 00007f733498ebe9 RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000100 RBP: 00007f7334a11e19 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f7334bc5fa0 R14: 00007f7334bc5fa0 R15: 0000000000000005 INFO: lockdep is turned off. NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:332 [inline] watchdog+0xf60/0xfa0 kernel/hung_task.c:495 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x47c/0x820 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:82 Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 0f 22 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 RAX: a34074f8f13bed00 RBX: ffffffff8197ac78 RCX: a34074f8f13bed00 RDX: 0000000000000001 RSI: ffffffff8c04e5e0 RDI: ffffffff8197ac78 RBP: ffffc90000197f10 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fe52d30 R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a55b40 FS: 0000000000000000(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000056389163e5d0 CR3: 00000000754ec000 CR4: 00000000003526f0 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:757 default_idle_call+0x74/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:190 [inline] do_idle+0x1e8/0x510 kernel/sched/idle.c:330 cpu_startup_entry+0x44/0x60 kernel/sched/idle.c:428 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:315 common_startup_64+0x13e/0x147