Extracting prog: 34m5.365596506s
Minimizing prog: 1h49m30.906552719s
Simplifying prog options: 14m38.157453362s
Extracting C: 5m10.465124776s
Simplifying C: 0s


extracting reproducer from 51 programs
testing a last program of every proc
single: executing 11 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$CEC_RECEIVE-syz_open_procfs-read$FUSE-openat$rdma_cm-socket$nl_route-openat$audio1-ioctl$SNDCTL_DSP_SETTRIGGER-write$dsp-ioctl$SNDCTL_DSP_SYNC-openat$tun-ioctl$TUNSETIFF-prlimit64-sched_setscheduler-connect$unix-recvmmsg-socket$inet_mptcp-bind$inet-connect$inet-sendmmsg-setsockopt$sock_int-sendmmsg$inet-shutdown-recvmmsg
detailed listing:
executing program 0:
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000000)={0x1, 0xfffffffffffffffd, 0x101, 0x2, 0x1ff, 0x10000, "0ebd22ffffff0800", 0x66, 0xf, 0xfb, 0x0, 0xb, 0x43, 0xfa})
r0 = syz_open_procfs(0x0, 0x0)
read$FUSE(r0, &(0x7f00000019c0)={0x2020}, 0x91)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000001c0)=0x9)
write$dsp(r1, &(0x7f0000000140)='u', 0x1)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x1f5, 0x3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="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", 0x200}], 0x1}}], 0x1, 0x81)
setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000040), 0x4)
sendmmsg$inet(r3, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x2, 0x8090)
shutdown(r3, 0x1)
recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000100)}, 0x1}], 0x1, 0x1, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-ioctl$sock_SIOCGIFINDEX-socket$alg-sendmsg$key-open-prlimit64-sched_setscheduler-syz_genetlink_get_family_id$netlbl_unlabel-sched_setaffinity-read$msr-syz_open_dev$MSR-read$msr-openat$cgroup_root-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
socket$alg(0x26, 0x5, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x3}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00', r1, 0x400, 0x1})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$netlbl_mgmt-sendmsg$NLBL_MGMT_C_ADD-syz_genetlink_get_family_id$netlbl_cipso-ioctl$UI_SET_KEYBIT-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE-openat$iommufd-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-bind$rds-sendmsg$rds-setsockopt$RDS_CANCEL_SENT_TO-ioctl$IOMMU_IOAS_ALLOC-ioctl$IOMMU_VFIO_IOAS$SET-ioctl$IOMMU_VFIO_CHECK_EXTENSION-preadv
detailed listing:
executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x1226)
r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x7fffffff})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000000c0)={0xc, r4})
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x4)
preadv(0xffffffffffffffff, &(0x7f0000001100)=[{&(0x7f0000000800)=""/92, 0x5c}], 0x1, 0x8000012e, 0x81)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl-ioctl-syz_usb_connect-socket$netlink-sendmsg$nl_route-mount$tmpfs-syz_open_dev$video-syz_usb_disconnect-socket$netlink-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_CREATE_TAIL_CALL-ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL-openat$audio1-ioctl$SNDCTL_DSP_SETFRAGMENT-close-bpf$MAP_CREATE-socket-setsockopt$netlink_NETLINK_TX_RING-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$uac1-sendmsg$nl_generic-bpf$BPF_MAP_GET_FD_BY_ID-bpf$BPF_PROG_WITH_BTFID_LOAD-close_range-socket$nl_route
detailed listing:
executing program 0:
r0 = socket(0xa, 0x1, 0x0)
ioctl(r0, 0x8916, &(0x7f0000000000))
ioctl(r0, 0x8936, &(0x7f0000000000))
r1 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYRES32=r0], 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a008700"], 0x4c}}, 0x0)
mount$tmpfs(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x2000020, &(0x7f0000000700)={[{@nr_blocks={'nr_blocks', 0x3d, [0x38, 0x38, 0x53, 0x36, 0x25]}}]})
syz_open_dev$video(&(0x7f0000000440), 0x4, 0x0)
syz_usb_disconnect(r1)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000340)={'syztnl1\x00', <r7=>0x0, 0x700, 0x80, 0x4, 0x30000, {{0x19, 0x4, 0x1, 0x6, 0x64, 0x67, 0x0, 0x9, 0x2f, 0x0, @local, @broadcast, {[@cipso={0x86, 0x41, 0xffffffffffffffff, [{0x5, 0xf, "8a1784686ae716ecf5c2bf8c23"}, {0x2, 0xf, "e61798d8c80b94c76541d94811"}, {0x1, 0x3, "89"}, {0x5, 0x6, "2e291d69"}, {0x1, 0x3, 'Z'}, {0x1, 0x11, "049a854955e17986abbd61b6a3cbf6"}]}, @generic={0x88, 0xf, "0886d0c97bac0673879f046624"}]}}}}})
r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000200)=0x16)
close(r8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10)
r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100fa2a00090400000190f19c000905eced"], 0x0)
syz_usb_control_io(r11, 0x0, 0x0)
syz_usb_control_io$hid(r11, 0x0, 0x0)
syz_usb_control_io(r11, 0x0, 0x0)
syz_usb_control_io$uac1(r11, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000140)={0x0, 0x14, 0x3, "fa554f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r9], 0x28}}, 0x0)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x6, 0x10}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000c0f0ffff0000000004000000185b00000f0000000004000200000000694930001000000018120000bb96e7c46cabc5e13c766a0c31e3162a09c7abf6b4295bb1e03e8c6b12481cfb14db6006fa94901f32ae994804373093a25cf7f2234f2cfc57dbe37b335ffbdc1c535ba7f920178b1861496b4632ad392af840c222e4fdae9fbb7ab41ca533736a653b9fadcb4a4b5642223e241b176698a803cfadf06acc", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018220000", @ANYRES32=r6, @ANYBLOB="0000000005000000183000000100000000000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x22cf, 0x0, 0x0, 0x41000, 0x4, '\x00', r7, 0x0, r0, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xe, 0x8, 0x9}, 0x10, 0x6, 0xffffffffffffffff, 0x2, &(0x7f0000000540)=[r9, r12], &(0x7f0000000580)=[{0x3, 0x4, 0x2, 0x3}, {0x5, 0x4, 0x1, 0x3}], 0x10, 0x10001, @void, @value}, 0x94)
close_range(r3, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$netrom-dup3-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_WIPHY_NETNS-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_SET_PMKSA-getsockopt$netrom_NETROM_T1-prctl$PR_SET_SECCOMP-sysfs$1-syz_usb_connect-socket$inet6-setsockopt$inet6_IPV6_HOPOPTS-connect$inet6-setsockopt$inet6_IPV6_DSTOPTS-syz_usb_control_io$cdc_ecm-openat$vnet-socket$packet-openat$fuse-close_range-socket$inet6-bind$inet6-listen-socket$inet_dccp-connect$inet-accept4-sendmsg$TIPC_CMD_GET_BEARER_NAMES-io_uring_enter-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_WDS_PEER
detailed listing:
executing program 0:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = dup3(r0, r0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="77ba00000000000000001f0000"], 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="0c0099000600000066000000"], 0x28}}, 0x80)
getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
sysfs$1(0x1, 0x0)
r5 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000001e40)=ANY=[], 0x8)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0xf, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r7, 0x43)
r8 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
r9 = accept4(r7, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r9, 0x0, 0x40)
io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9)
sendmsg$NL80211_CMD_SET_WDS_PEER(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0001045050505050500000"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4808)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-socket$inet6_dccp-connect$inet6-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS-mount-openat$cgroup_ro-write$UHID_CREATE2-mmap-openat$hwrng-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_TSC_KHZ
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c)
socket(0x2, 0x2, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r3, 0xab00, r4)
ioctl$NBD_DO_IT(r3, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)
mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8087, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xb0400, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ(r8, 0xaea2, 0x0)

program crashed: INFO: task hung in bdev_release
single: successfully extracted reproducer
found reproducer with 22 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-socket$inet6_dccp-connect$inet6-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS-mount-openat$cgroup_ro-write$UHID_CREATE2-mmap-openat$hwrng-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c)
socket(0x2, 0x2, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r3, 0xab00, r4)
ioctl$NBD_DO_IT(r3, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)
mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8087, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xb0400, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-socket$inet6_dccp-connect$inet6-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS-mount-openat$cgroup_ro-write$UHID_CREATE2-mmap-openat$hwrng-ioctl$KVM_CREATE_VM
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c)
socket(0x2, 0x2, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r3, 0xab00, r4)
ioctl$NBD_DO_IT(r3, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)
mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8087, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xb0400, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)

program crashed: INFO: task hung in bdev_open
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-socket$inet6_dccp-connect$inet6-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS-mount-openat$cgroup_ro-write$UHID_CREATE2-mmap-openat$hwrng
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c)
socket(0x2, 0x2, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r3, 0xab00, r4)
ioctl$NBD_DO_IT(r3, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)
mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8087, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xb0400, 0x0)

program crashed: INFO: task hung in bdev_open
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-socket$inet6_dccp-connect$inet6-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS-mount-openat$cgroup_ro-write$UHID_CREATE2-mmap
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c)
socket(0x2, 0x2, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r3, 0xab00, r4)
ioctl$NBD_DO_IT(r3, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)
mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8087, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0)

program crashed: INFO: task hung in bdev_open
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-socket$inet6_dccp-connect$inet6-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS-mount-openat$cgroup_ro-write$UHID_CREATE2
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c)
socket(0x2, 0x2, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r3, 0xab00, r4)
ioctl$NBD_DO_IT(r3, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)
mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8087, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, 0x0, 0x118)

program crashed: INFO: task hung in block_read_full_folio
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-socket$inet6_dccp-connect$inet6-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS-mount-openat$cgroup_ro
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c)
socket(0x2, 0x2, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r3, 0xab00, r4)
ioctl$NBD_DO_IT(r3, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)
mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8087, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

program crashed: INFO: task hung in bdev_open
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-socket$inet6_dccp-connect$inet6-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS-mount
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c)
socket(0x2, 0x2, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r3, 0xab00, r4)
ioctl$NBD_DO_IT(r3, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)
mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8087, 0x0)

program crashed: INFO: task hung in bdev_open
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-socket$inet6_dccp-connect$inet6-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c)
socket(0x2, 0x2, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r3, 0xab00, r4)
ioctl$NBD_DO_IT(r3, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-socket$inet6_dccp-connect$inet6-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c)
socket(0x2, 0x2, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
ioctl$NBD_DO_IT(r2, 0xab03)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-socket$inet6_dccp-connect$inet6-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c)
socket(0x2, 0x2, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r3, 0xab00, r4)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-socket$inet6_dccp-connect$inet6-socket-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c)
socket(0x2, 0x2, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$NBD_DO_IT(r3, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-socket$inet6_dccp-connect$inet6-socket-syz_open_dev$ndb-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c)
socket(0x2, 0x2, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff)
ioctl$NBD_DO_IT(r3, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-socket$inet6_dccp-connect$inet6-socket-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c)
socket(0x2, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3)
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-socket$inet6_dccp-connect$inet6-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c)
r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r3, 0xab00, r4)
ioctl$NBD_DO_IT(r3, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-socket$inet6_dccp-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$video-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0xffffffffffffffff, 0x20c842)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x200000a)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-openat$dir-syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-getsockopt$sock_int-syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000240))
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200000a)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socketpair$unix-syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200000a)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200000a)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200000a)

program crashed: INFO: task hung in bdev_release
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
r0 = syz_open_dev$ndb(0x0, 0x0, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200000a)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$ndb(0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200000a)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200000a)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200000a)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
detailed listing:
executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200000a)

program crashed: INFO: task hung in bdev_release
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$ndb-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-ioctl$NBD_DO_IT-ioctl$NBD_SET_SIZE_BLOCKS
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
reproducing took 2h43m24.720526156s
repro crashed as (corrupted=false):
INFO: task syz.0.16:6034 blocked for more than 143 seconds.
      Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16        state:D stack:26048 pid:6034  tgid:6034  ppid:5961   task_flags:0x400040 flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5377 [inline]
 __schedule+0xf43/0x5890 kernel/sched/core.c:6764
 __schedule_loop kernel/sched/core.c:6841 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6856
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6913
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x6bd/0xb10 kernel/locking/mutex.c:730
 bdev_release+0x15a/0x6d0 block/bdev.c:1086
 blkdev_release+0x15/0x20 block/fops.c:660
 __fput+0x3ff/0xb70 fs/file_table.c:450
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x27b/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f139ed8cda9
RSP: 002b:00007ffdb9567768 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007f139efa7ba0 RCX: 00007f139ed8cda9
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007f139efa7ba0 R08: 0000000000000000 R09: 00007ffdb9567a6f
R10: 00007f139efa7ac0 R11: 0000000000000246 R12: 00000000000570dc
R13: 00007f139efa6080 R14: 0000000000000032 R15: ffffffffffffffff
 </TASK>
INFO: task syz.0.16:6035 blocked for more than 143 seconds.
      Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16        state:D stack:26096 pid:6035  tgid:6034  ppid:5961   task_flags:0x400140 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5377 [inline]
 __schedule+0xf43/0x5890 kernel/sched/core.c:6764
 __schedule_loop kernel/sched/core.c:6841 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6856
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6913
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x6bd/0xb10 kernel/locking/mutex.c:730
 bdev_release+0x15a/0x6d0 block/bdev.c:1086
 blkdev_release+0x15/0x20 block/fops.c:660
 __fput+0x3ff/0xb70 fs/file_table.c:450
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x27b/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f139ed8cda9
RSP: 002b:00007f139fc32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: 0000000000000000 RBX: 00007f139efa5fa0 RCX: 00007f139ed8cda9
RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004
RBP: 00007f139ee0e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f139efa5fa0 R15: 00007ffdb9567608
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/30:
 #0: ffffffff8e1bcbc0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 #0: ffffffff8e1bcbc0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffffffff8e1bcbc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6746
2 locks held by klogd/5184:
 #0: ffff8880b873ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:598
 #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: fs_reclaim_acquire mm/page_alloc.c:3870 [inline]
 #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: fs_reclaim_acquire+0xae/0x150 mm/page_alloc.c:3861
2 locks held by getty/5589:
 #0: ffff88803703a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211
1 lock held by udevd/5855:
 #0: ffff888025c9a4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by udevd/5856:
 #0: ffff888143b404c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
2 locks held by kworker/u8:1/5943:
1 lock held by udevd/5972:
 #0: ffff888025c984c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by udevd/5973:
 #0: ffff888025c9e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.0.16/6034:
 #0: ffff888025c984c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.0.16/6035:
 #0: ffff888025c984c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.1.17/6065:
 #0: ffff888025c9a4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.1.17/6066:
 #0: ffff888025c9a4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.2.18/6082:
 #0: ffff888025c9e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.2.18/6083:
 #0: ffff888025c9e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.3.19/6101:
 #0: ffff888143b404c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.3.19/6102:
 #0: ffff888143b404c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6106:
 #0: ffff888025e374c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by udevd/6108:
 #0: ffff888025d3f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.4.20/6126:
 #0: ffff888025d3f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.4.20/6127:
 #0: ffff888025d3f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6132:
 #0: ffff888025e334c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.5.21/6150:
 #0: ffff888025e334c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.5.21/6151:
 #0: ffff888025e334c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.6.22/6173:
 #0: ffff888025e374c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.6.22/6174:
 #0: ffff888025e374c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6179:
 #0: ffff888025f5b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by udevd/6196:
 #0: ffff888025f5f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.7.23/6198:
 #0: ffff888025f5b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.7.23/6199:
 #0: ffff888025f5b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6211:
 #0: ffff888025f934c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.8.24/6229:
 #0: ffff888025f5f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.8.24/6230:
 #0: ffff888025f5f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.9.25/6252:
 #0: ffff888025f934c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.9.25/6253:
 #0: ffff888025f934c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:236 [inline]
 watchdog+0xf62/0x12b0 kernel/hung_task.c:399
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 998 Comm: kworker/u8:6 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Workqueue: bat_events batadv_nc_worker
RIP: 0010:hlock_class+0x56/0x130 kernel/locking/lockdep.c:230
Code: 20 66 81 e3 ff 1f 0f b7 db be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 c0 8c eb 96 e8 92 1c 87 00 48 0f a3 1d 9a dd 55 15 <73> 13 48 69 c3 c8 00 00 00 5b 48 05 e0 90 eb 96 c3 cc cc cc cc 48
RSP: 0018:ffffc90003d3f790 EFLAGS: 00000047
RAX: 0000000000000001 RBX: 0000000000000021 RCX: ffffffff8195af1e
RDX: fffffbfff2dd7199 RSI: 0000000000000008 RDI: ffffffff96eb8cc0
RBP: ffffc90003d3f8e0 R08: 0000000000000000 R09: fffffbfff2dd7198
R10: ffffffff96eb8cc7 R11: 0000000000000002 R12: ffff88802685c880
R13: 0000000000000200 R14: 0000000000000009 R15: 1ffff920007a7efa
FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555575e8e5c8 CR3: 000000000df80000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 mark_lock+0xb5/0xc60 kernel/locking/lockdep.c:4729
 mark_usage kernel/locking/lockdep.c:4672 [inline]
 __lock_acquire+0x9f1/0x3c40 kernel/locking/lockdep.c:5182
 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5851
 rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 rcu_read_lock include/linux/rcupdate.h:849 [inline]
 batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:408 [inline]
 batadv_nc_worker+0x16a/0x1060 net/batman-adv/network-coding.c:719
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

final repro crashed as (corrupted=false):
INFO: task syz.0.16:6034 blocked for more than 143 seconds.
      Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16        state:D stack:26048 pid:6034  tgid:6034  ppid:5961   task_flags:0x400040 flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5377 [inline]
 __schedule+0xf43/0x5890 kernel/sched/core.c:6764
 __schedule_loop kernel/sched/core.c:6841 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6856
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6913
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x6bd/0xb10 kernel/locking/mutex.c:730
 bdev_release+0x15a/0x6d0 block/bdev.c:1086
 blkdev_release+0x15/0x20 block/fops.c:660
 __fput+0x3ff/0xb70 fs/file_table.c:450
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x27b/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f139ed8cda9
RSP: 002b:00007ffdb9567768 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007f139efa7ba0 RCX: 00007f139ed8cda9
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007f139efa7ba0 R08: 0000000000000000 R09: 00007ffdb9567a6f
R10: 00007f139efa7ac0 R11: 0000000000000246 R12: 00000000000570dc
R13: 00007f139efa6080 R14: 0000000000000032 R15: ffffffffffffffff
 </TASK>
INFO: task syz.0.16:6035 blocked for more than 143 seconds.
      Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16        state:D stack:26096 pid:6035  tgid:6034  ppid:5961   task_flags:0x400140 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5377 [inline]
 __schedule+0xf43/0x5890 kernel/sched/core.c:6764
 __schedule_loop kernel/sched/core.c:6841 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6856
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6913
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x6bd/0xb10 kernel/locking/mutex.c:730
 bdev_release+0x15a/0x6d0 block/bdev.c:1086
 blkdev_release+0x15/0x20 block/fops.c:660
 __fput+0x3ff/0xb70 fs/file_table.c:450
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x27b/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f139ed8cda9
RSP: 002b:00007f139fc32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: 0000000000000000 RBX: 00007f139efa5fa0 RCX: 00007f139ed8cda9
RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004
RBP: 00007f139ee0e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f139efa5fa0 R15: 00007ffdb9567608
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/30:
 #0: ffffffff8e1bcbc0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 #0: ffffffff8e1bcbc0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffffffff8e1bcbc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6746
2 locks held by klogd/5184:
 #0: ffff8880b873ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:598
 #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: fs_reclaim_acquire mm/page_alloc.c:3870 [inline]
 #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: fs_reclaim_acquire+0xae/0x150 mm/page_alloc.c:3861
2 locks held by getty/5589:
 #0: ffff88803703a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211
1 lock held by udevd/5855:
 #0: ffff888025c9a4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by udevd/5856:
 #0: ffff888143b404c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
2 locks held by kworker/u8:1/5943:
1 lock held by udevd/5972:
 #0: ffff888025c984c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by udevd/5973:
 #0: ffff888025c9e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.0.16/6034:
 #0: ffff888025c984c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.0.16/6035:
 #0: ffff888025c984c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.1.17/6065:
 #0: ffff888025c9a4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.1.17/6066:
 #0: ffff888025c9a4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.2.18/6082:
 #0: ffff888025c9e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.2.18/6083:
 #0: ffff888025c9e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.3.19/6101:
 #0: ffff888143b404c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.3.19/6102:
 #0: ffff888143b404c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6106:
 #0: ffff888025e374c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by udevd/6108:
 #0: ffff888025d3f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.4.20/6126:
 #0: ffff888025d3f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.4.20/6127:
 #0: ffff888025d3f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6132:
 #0: ffff888025e334c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.5.21/6150:
 #0: ffff888025e334c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.5.21/6151:
 #0: ffff888025e334c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.6.22/6173:
 #0: ffff888025e374c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.6.22/6174:
 #0: ffff888025e374c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6179:
 #0: ffff888025f5b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by udevd/6196:
 #0: ffff888025f5f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.7.23/6198:
 #0: ffff888025f5b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.7.23/6199:
 #0: ffff888025f5b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by udevd/6211:
 #0: ffff888025f934c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 block/bdev.c:903
1 lock held by syz.8.24/6229:
 #0: ffff888025f5f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.8.24/6230:
 #0: ffff888025f5f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.9.25/6252:
 #0: ffff888025f934c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086
1 lock held by syz.9.25/6253:
 #0: ffff888025f934c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 block/bdev.c:1086

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:236 [inline]
 watchdog+0xf62/0x12b0 kernel/hung_task.c:399
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 998 Comm: kworker/u8:6 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Workqueue: bat_events batadv_nc_worker
RIP: 0010:hlock_class+0x56/0x130 kernel/locking/lockdep.c:230
Code: 20 66 81 e3 ff 1f 0f b7 db be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 c0 8c eb 96 e8 92 1c 87 00 48 0f a3 1d 9a dd 55 15 <73> 13 48 69 c3 c8 00 00 00 5b 48 05 e0 90 eb 96 c3 cc cc cc cc 48
RSP: 0018:ffffc90003d3f790 EFLAGS: 00000047
RAX: 0000000000000001 RBX: 0000000000000021 RCX: ffffffff8195af1e
RDX: fffffbfff2dd7199 RSI: 0000000000000008 RDI: ffffffff96eb8cc0
RBP: ffffc90003d3f8e0 R08: 0000000000000000 R09: fffffbfff2dd7198
R10: ffffffff96eb8cc7 R11: 0000000000000002 R12: ffff88802685c880
R13: 0000000000000200 R14: 0000000000000009 R15: 1ffff920007a7efa
FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555575e8e5c8 CR3: 000000000df80000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 mark_lock+0xb5/0xc60 kernel/locking/lockdep.c:4729
 mark_usage kernel/locking/lockdep.c:4672 [inline]
 __lock_acquire+0x9f1/0x3c40 kernel/locking/lockdep.c:5182
 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5851
 rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 rcu_read_lock include/linux/rcupdate.h:849 [inline]
 batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:408 [inline]
 batadv_nc_worker+0x16a/0x1060 net/batman-adv/network-coding.c:719
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>