Extracting prog: 5m56.364199345s Minimizing prog: 16m27.258888262s Simplifying prog options: 0s Extracting C: 1m21.73694942s Simplifying C: 8m30.051237868s extracting reproducer from 37 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY detailed listing: executing program 0: socket(0x2b, 0x1, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x114, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) program did not crash single: failed to extract reproducer bisect: bisecting 37 programs with base timeout 30s testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3] detailed listing: executing program 1: unshare(0x20000400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x45) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "741cb976"}]}}, 0x0}, 0x0) executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x3b, @dev={0xac, 0x14, 0x14, 0x42}, 0x4e27, 0x1, 'nq\x00', 0x24, 0x7ff, 0x68}, 0x2c) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f0000002820000004", @ANYRES32, @ANYBLOB="a7a2a5f7"], 0x20) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8000) executing program 32: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8000) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0x8107}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000840)=""/253, 0xfd}, {&(0x7f0000000040)=""/92, 0x5c}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0xfffffffffffffe30, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000240)=""/146, 0x92}, {&(0x7f0000002e00)=""/4109, 0x100d}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/90, 0x5a}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000500)={0x38, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c095}, 0x0) executing program 2: r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201410180739820ca2e01c1df07010203010902240001010310000904f20402fff012000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, 0x0) executing program 3: unshare(0x22020400) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) executing program 0: r0 = socket(0x28, 0x1, 0x0) r1 = gettid() fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x0, 0x2, 0x3ff, 0xffffffffffffffff, r1}) executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, &(0x7f0000000080), 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xc0}}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000d00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60000000001406"], 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4090, 0xe9c}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000000700)=""/104, 0x68}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000004740)=""/4083, 0xff3}], 0x4}, 0x8}], 0x3, 0x2, 0x0) executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000680)=[{&(0x7f00000003c0)="b1f3e591937d8b12860eb438e350bae82eecc402814086fac94445a7f6cad18110c54a443a064d7d0b7b38358fe5ee323ca628d73d627cf38ef6faddbdbde6c1729a19da73e58afd22a865497aadbb9e9342d6142092d58076f033c0c0168cbbc3fad3cf3e2de62c16cfc6ea707a4f56ad7dfeaf642c96d9490853cea955dc55dd7f11946b66e6d324e75245a653a1c3b7937fcabf059f6d3a3d6a2408769104173218e44202b11b8a79470c", 0xac}, {&(0x7f0000003380)="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", 0xf54}, {0x0, 0xf00}], 0x3, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2effa351e66b290c}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 3: capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xf7fffffb}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/65, 0x41}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000280)=""/123, 0x7b}], 0x1}, 0xfff}], 0x2, 0x0, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000fc0)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) executing program 2: r0 = open(&(0x7f0000000340)='./cgroup\x00', 0x0, 0x120) getdents(r0, &(0x7f0000000000)=""/78, 0x4e) getdents64(r0, 0xfffffffffffffffe, 0x41) executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="f6189c2267844c96ca2009"], 0x33) close(r0) executing program 5: openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) socket$inet6(0xa, 0x3, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000288c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x40002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x51) executing program 4: socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003000000000005000300000000000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) executing program 0: io_setup(0x3f, &(0x7f0000000140)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0x0, 0xfffffffffffffffe}]) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000f16"], 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 5: unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r0, 0x0, 0x0, 0x4}, 0x20) executing program 4: socket(0x2b, 0x1, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x114, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY detailed listing: executing program 0: socket(0x2b, 0x1, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x114, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) program crashed: possible deadlock in smc_diag_dump_proto single: successfully extracted reproducer found reproducer with 3 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag detailed listing: executing program 0: socket(0x2b, 0x1, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmsg$SOCK_DIAG_BY_FAMILY detailed listing: executing program 0: socket(0x2b, 0x1, 0x1) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x114, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY detailed listing: executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x114, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY detailed listing: executing program 0: socket(0x2b, 0x1, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, 0x0, 0x4000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY detailed listing: executing program 0: socket(0x2b, 0x1, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4050}, 0x4000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY detailed listing: executing program 0: socket(0x2b, 0x1, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY detailed listing: executing program 0: socket(0x2b, 0x1, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) program crashed: possible deadlock in smc_diag_dump_proto extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY program crashed: possible deadlock in smc_diag_dump_proto simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY program crashed: possible deadlock in smc_diag_dump_proto testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY program crashed: possible deadlock in smc_diag_dump_proto testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY program crashed: possible deadlock in smc_diag_dump_proto testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY program crashed: possible deadlock in smc_diag_dump_proto testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY program crashed: possible deadlock in smc_diag_dump_proto testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY program crashed: possible deadlock in smc_diag_dump_proto testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY program crashed: possible deadlock in smc_diag_dump_proto testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY detailed listing: executing program 0: socket(0x2b, 0x1, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) program crashed: possible deadlock in smc_diag_dump_proto validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY detailed listing: executing program 0: socket(0x2b, 0x1, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) program crashed: possible deadlock in smc_diag_dump_proto validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$nl_sock_diag-sendmsg$SOCK_DIAG_BY_FAMILY detailed listing: executing program 0: socket(0x2b, 0x1, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) program crashed: possible deadlock in smc_diag_dump_proto validation run: crashed=true reproducing took 37m3.274410113s repro crashed as (corrupted=false): ====================================================== WARNING: possible circular locking dependency detected syzkaller #0 Not tainted ------------------------------------------------------ syz.0.17/6109 is trying to acquire lock: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:44 [inline] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 kernel/softirq.c:168 but task is already holding lock: ffffffff8efa6608 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: read_lock include/linux/rwlock_rt.h:37 [inline] ffffffff8efa6608 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 net/smc/smc_diag.c:207 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #1 (smc_v6_hashinfo.lock){++.+}-{3:3}: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 rt_write_lock+0x6a/0x110 kernel/locking/spinlock_rt.c:242 write_lock_bh include/linux/rwlock_rt.h:99 [inline] smc_hash_sk+0x8f/0x2a0 net/smc/af_smc.c:193 smc_sk_init+0x5a1/0x7f0 net/smc/af_smc.c:399 smc_sock_alloc net/smc/af_smc.c:420 [inline] __smc_create+0x10d/0x280 net/smc/af_smc.c:3382 __sock_create+0x4b3/0x9f0 net/socket.c:1589 sock_create net/socket.c:1647 [inline] __sys_socket_create net/socket.c:1684 [inline] __sys_socket+0xd7/0x1b0 net/socket.c:1731 __do_sys_socket net/socket.c:1745 [inline] __se_sys_socket net/socket.c:1743 [inline] __x64_sys_socket+0x7a/0x90 net/socket.c:1743 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: check_prev_add kernel/locking/lockdep.c:3165 [inline] check_prevs_add kernel/locking/lockdep.c:3284 [inline] validate_chain+0xb9b/0x2140 kernel/locking/lockdep.c:3908 __lock_acquire+0xab9/0xd20 kernel/locking/lockdep.c:5237 reacquire_held_locks+0x127/0x1d0 kernel/locking/lockdep.c:5385 __lock_release kernel/locking/lockdep.c:5574 [inline] lock_release+0x1b4/0x3e0 kernel/locking/lockdep.c:5889 __local_bh_enable_ip+0x10c/0x270 kernel/softirq.c:228 local_bh_enable include/linux/bottom_half.h:33 [inline] sock_i_ino+0xa9/0xc0 net/core/sock.c:2800 smc_diag_msg_attrs_fill net/smc/smc_diag.c:68 [inline] __smc_diag_dump net/smc/smc_diag.c:98 [inline] smc_diag_dump_proto+0xa4c/0x1fb0 net/smc/smc_diag.c:217 smc_diag_dump+0x59/0xa0 net/smc/smc_diag.c:236 netlink_dump+0x6e4/0xe90 net/netlink/af_netlink.c:2327 __netlink_dump_start+0x5cb/0x7e0 net/netlink/af_netlink.c:2442 netlink_dump_start include/linux/netlink.h:341 [inline] smc_diag_handler_dump+0x178/0x210 net/smc/smc_diag.c:251 sock_diag_rcv_msg+0x4c9/0x600 net/core/sock_diag.c:-1 netlink_rcv_skb+0x205/0x470 net/netlink/af_netlink.c:2552 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x843/0xa10 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:714 [inline] __sock_sendmsg+0x219/0x270 net/socket.c:729 ____sys_sendmsg+0x508/0x820 net/socket.c:2614 ___sys_sendmsg+0x21f/0x2a0 net/socket.c:2668 __sys_sendmsg net/socket.c:2700 [inline] __do_sys_sendmsg net/socket.c:2705 [inline] __se_sys_sendmsg net/socket.c:2703 [inline] __x64_sys_sendmsg+0x1a1/0x260 net/socket.c:2703 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f other info that might help us debug this: Possible unsafe locking scenario: CPU0 CPU1 ---- ---- rlock(smc_v6_hashinfo.lock); lock((softirq_ctrl.lock)); lock(smc_v6_hashinfo.lock); lock((softirq_ctrl.lock)); *** DEADLOCK *** 3 locks held by syz.0.17/6109: #0: ffff888035fbe908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 net/netlink/af_netlink.c:2406 #1: ffffffff8efa6608 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: read_lock include/linux/rwlock_rt.h:37 [inline] #1: ffffffff8efa6608 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 net/smc/smc_diag.c:207 #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 kernel/locking/spinlock_rt.c:234 stack backtrace: CPU: 0 UID: 0 PID: 6109 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 print_circular_bug+0x2ee/0x310 kernel/locking/lockdep.c:2043 check_noncircular+0x134/0x160 kernel/locking/lockdep.c:2175 check_prev_add kernel/locking/lockdep.c:3165 [inline] check_prevs_add kernel/locking/lockdep.c:3284 [inline] validate_chain+0xb9b/0x2140 kernel/locking/lockdep.c:3908 __lock_acquire+0xab9/0xd20 kernel/locking/lockdep.c:5237 reacquire_held_locks+0x127/0x1d0 kernel/locking/lockdep.c:5385 __lock_release kernel/locking/lockdep.c:5574 [inline] lock_release+0x1b4/0x3e0 kernel/locking/lockdep.c:5889 __local_bh_enable_ip+0x10c/0x270 kernel/softirq.c:228 local_bh_enable include/linux/bottom_half.h:33 [inline] sock_i_ino+0xa9/0xc0 net/core/sock.c:2800 smc_diag_msg_attrs_fill net/smc/smc_diag.c:68 [inline] __smc_diag_dump net/smc/smc_diag.c:98 [inline] smc_diag_dump_proto+0xa4c/0x1fb0 net/smc/smc_diag.c:217 smc_diag_dump+0x59/0xa0 net/smc/smc_diag.c:236 netlink_dump+0x6e4/0xe90 net/netlink/af_netlink.c:2327 __netlink_dump_start+0x5cb/0x7e0 net/netlink/af_netlink.c:2442 netlink_dump_start include/linux/netlink.h:341 [inline] smc_diag_handler_dump+0x178/0x210 net/smc/smc_diag.c:251 sock_diag_rcv_msg+0x4c9/0x600 net/core/sock_diag.c:-1 netlink_rcv_skb+0x205/0x470 net/netlink/af_netlink.c:2552 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x843/0xa10 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:714 [inline] __sock_sendmsg+0x219/0x270 net/socket.c:729 ____sys_sendmsg+0x508/0x820 net/socket.c:2614 ___sys_sendmsg+0x21f/0x2a0 net/socket.c:2668 __sys_sendmsg net/socket.c:2700 [inline] __do_sys_sendmsg net/socket.c:2705 [inline] __se_sys_sendmsg net/socket.c:2703 [inline] __x64_sys_sendmsg+0x1a1/0x260 net/socket.c:2703 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe07d70ebe9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffe932c2428 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fe07d935fa0 RCX: 00007fe07d70ebe9 RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000004 RBP: 00007fe07d791e19 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fe07d935fa0 R14: 00007fe07d935fa0 R15: 0000000000000003 final repro crashed as (corrupted=false): ====================================================== WARNING: possible circular locking dependency detected syzkaller #0 Not tainted ------------------------------------------------------ syz.0.17/6109 is trying to acquire lock: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:44 [inline] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 kernel/softirq.c:168 but task is already holding lock: ffffffff8efa6608 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: read_lock include/linux/rwlock_rt.h:37 [inline] ffffffff8efa6608 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 net/smc/smc_diag.c:207 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #1 (smc_v6_hashinfo.lock){++.+}-{3:3}: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 rt_write_lock+0x6a/0x110 kernel/locking/spinlock_rt.c:242 write_lock_bh include/linux/rwlock_rt.h:99 [inline] smc_hash_sk+0x8f/0x2a0 net/smc/af_smc.c:193 smc_sk_init+0x5a1/0x7f0 net/smc/af_smc.c:399 smc_sock_alloc net/smc/af_smc.c:420 [inline] __smc_create+0x10d/0x280 net/smc/af_smc.c:3382 __sock_create+0x4b3/0x9f0 net/socket.c:1589 sock_create net/socket.c:1647 [inline] __sys_socket_create net/socket.c:1684 [inline] __sys_socket+0xd7/0x1b0 net/socket.c:1731 __do_sys_socket net/socket.c:1745 [inline] __se_sys_socket net/socket.c:1743 [inline] __x64_sys_socket+0x7a/0x90 net/socket.c:1743 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: check_prev_add kernel/locking/lockdep.c:3165 [inline] check_prevs_add kernel/locking/lockdep.c:3284 [inline] validate_chain+0xb9b/0x2140 kernel/locking/lockdep.c:3908 __lock_acquire+0xab9/0xd20 kernel/locking/lockdep.c:5237 reacquire_held_locks+0x127/0x1d0 kernel/locking/lockdep.c:5385 __lock_release kernel/locking/lockdep.c:5574 [inline] lock_release+0x1b4/0x3e0 kernel/locking/lockdep.c:5889 __local_bh_enable_ip+0x10c/0x270 kernel/softirq.c:228 local_bh_enable include/linux/bottom_half.h:33 [inline] sock_i_ino+0xa9/0xc0 net/core/sock.c:2800 smc_diag_msg_attrs_fill net/smc/smc_diag.c:68 [inline] __smc_diag_dump net/smc/smc_diag.c:98 [inline] smc_diag_dump_proto+0xa4c/0x1fb0 net/smc/smc_diag.c:217 smc_diag_dump+0x59/0xa0 net/smc/smc_diag.c:236 netlink_dump+0x6e4/0xe90 net/netlink/af_netlink.c:2327 __netlink_dump_start+0x5cb/0x7e0 net/netlink/af_netlink.c:2442 netlink_dump_start include/linux/netlink.h:341 [inline] smc_diag_handler_dump+0x178/0x210 net/smc/smc_diag.c:251 sock_diag_rcv_msg+0x4c9/0x600 net/core/sock_diag.c:-1 netlink_rcv_skb+0x205/0x470 net/netlink/af_netlink.c:2552 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x843/0xa10 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:714 [inline] __sock_sendmsg+0x219/0x270 net/socket.c:729 ____sys_sendmsg+0x508/0x820 net/socket.c:2614 ___sys_sendmsg+0x21f/0x2a0 net/socket.c:2668 __sys_sendmsg net/socket.c:2700 [inline] __do_sys_sendmsg net/socket.c:2705 [inline] __se_sys_sendmsg net/socket.c:2703 [inline] __x64_sys_sendmsg+0x1a1/0x260 net/socket.c:2703 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f other info that might help us debug this: Possible unsafe locking scenario: CPU0 CPU1 ---- ---- rlock(smc_v6_hashinfo.lock); lock((softirq_ctrl.lock)); lock(smc_v6_hashinfo.lock); lock((softirq_ctrl.lock)); *** DEADLOCK *** 3 locks held by syz.0.17/6109: #0: ffff888035fbe908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 net/netlink/af_netlink.c:2406 #1: ffffffff8efa6608 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: read_lock include/linux/rwlock_rt.h:37 [inline] #1: ffffffff8efa6608 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 net/smc/smc_diag.c:207 #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 kernel/locking/spinlock_rt.c:234 stack backtrace: CPU: 0 UID: 0 PID: 6109 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 print_circular_bug+0x2ee/0x310 kernel/locking/lockdep.c:2043 check_noncircular+0x134/0x160 kernel/locking/lockdep.c:2175 check_prev_add kernel/locking/lockdep.c:3165 [inline] check_prevs_add kernel/locking/lockdep.c:3284 [inline] validate_chain+0xb9b/0x2140 kernel/locking/lockdep.c:3908 __lock_acquire+0xab9/0xd20 kernel/locking/lockdep.c:5237 reacquire_held_locks+0x127/0x1d0 kernel/locking/lockdep.c:5385 __lock_release kernel/locking/lockdep.c:5574 [inline] lock_release+0x1b4/0x3e0 kernel/locking/lockdep.c:5889 __local_bh_enable_ip+0x10c/0x270 kernel/softirq.c:228 local_bh_enable include/linux/bottom_half.h:33 [inline] sock_i_ino+0xa9/0xc0 net/core/sock.c:2800 smc_diag_msg_attrs_fill net/smc/smc_diag.c:68 [inline] __smc_diag_dump net/smc/smc_diag.c:98 [inline] smc_diag_dump_proto+0xa4c/0x1fb0 net/smc/smc_diag.c:217 smc_diag_dump+0x59/0xa0 net/smc/smc_diag.c:236 netlink_dump+0x6e4/0xe90 net/netlink/af_netlink.c:2327 __netlink_dump_start+0x5cb/0x7e0 net/netlink/af_netlink.c:2442 netlink_dump_start include/linux/netlink.h:341 [inline] smc_diag_handler_dump+0x178/0x210 net/smc/smc_diag.c:251 sock_diag_rcv_msg+0x4c9/0x600 net/core/sock_diag.c:-1 netlink_rcv_skb+0x205/0x470 net/netlink/af_netlink.c:2552 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x843/0xa10 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:714 [inline] __sock_sendmsg+0x219/0x270 net/socket.c:729 ____sys_sendmsg+0x508/0x820 net/socket.c:2614 ___sys_sendmsg+0x21f/0x2a0 net/socket.c:2668 __sys_sendmsg net/socket.c:2700 [inline] __do_sys_sendmsg net/socket.c:2705 [inline] __se_sys_sendmsg net/socket.c:2703 [inline] __x64_sys_sendmsg+0x1a1/0x260 net/socket.c:2703 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe07d70ebe9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffe932c2428 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fe07d935fa0 RCX: 00007fe07d70ebe9 RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000004 RBP: 00007fe07d791e19 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fe07d935fa0 R14: 00007fe07d935fa0 R15: 0000000000000003