Extracting prog: 41m38.288769391s Minimizing prog: 2h4m44.729292792s Simplifying prog options: 0s Extracting C: 4m50.675185651s Simplifying C: 29m54.679419718s extracting reproducer from 59 programs testing a last program of every proc single: executing 14 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_procfs$namespace-fchdir$auto-exit$auto-pivot_root$auto-mmap$auto-syz_genetlink_get_family_id$auto_ila-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-syz_genetlink_get_family_id$auto_batadv-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_BATADV_CMD_SET_MESH-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$auto_ILA_CMD_DEL-close_range$auto-socket-connect$auto-openat$auto_qrtr_tun_ops_tun-readv$auto-close_range$auto-socket$nl_generic-socket-openat$auto_kernfs_file_fops_kernfs_internal-close_range$auto-openat$auto_kvm_chardev_ops_kvm_main-ioctl$auto_KVM_CREATE_VM-ioctl$auto detailed listing: executing program 0: r0 = socket(0xa, 0x801, 0x84) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r1) exit$auto(0x7) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pimreg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dvmrp0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_virt_wifi\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$auto_ILA_CMD_DEL(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="000225bd7000fbdbdf2502000000cbfc0300000000000000000008000400", @ANYBLOB="2e94155a31e4e0128bec987305e7eb1b60a4c04fd1e367ef67883517b6718d3e8d0a8a6958d798bb802e51e30433e408054965526965ec888503122274982e7cab5b49ea3eea96b665ca3c754eca854e72e6f52e0a0bb178d8116a120c9b9eb75cd93caa1bff626e4cf8d4b6e9a2fc2180b4d24f5f7475e56ef4cb5145897f9f49ac4b949cb6dd03e9913192e1efa7265715bf9b1e967aa74d9d839384df461aff9643da754b914f9a28b0a420036c00b1ad375c4c3a4ad6771ca93dcdb5baeccf146d", @ANYBLOB="0c000100230300000000000008000400", @ANYRES32=r7, @ANYBLOB="a5180800906b2b34cae871365fc0458531f473f113d8abffcbb839ac44aadea1168d68e546939d03c88429792f47", @ANYRES32=r3, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB="0c00030000000000000000800c000300c60a00000000000008000400", @ANYRES32=r8, @ANYBLOB="0c000300fdffffffffffffff0000070006000000"], 0x84}}, 0x4050) close_range$auto(r0, r0, 0x0) r9 = socket(0x2a, 0x2, 0x1) connect$auto(r9, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x13d28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r11 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x688a01, 0x0) ioctl$auto_KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-openat$auto_trace_time_stamp_mode_fops_trace-read$auto_trace_time_stamp_mode_fops_trace-openat$auto_snd_rawmidi_f_ops_rawmidi-prctl$auto-write$auto-close_range$auto-mmap$auto-socket$nl_generic-openat$auto_tomoyo_operations_securityfs_if-mmap$auto-mmap$auto-listmount$auto-socket-mmap$auto-socket-getsockname$auto-syz_genetlink_get_family_id$auto_tipcv2-prctl$auto_PR_SCHED_CORE_CREATE-fcntl$auto-openat$auto_snd_pcm_oss_f_reg_pcm_oss-openat$auto_cpuid_fops_cpuid-socket$nl_generic-sendmsg$auto_SEG6_CMD_SET_TUNSRC-ioctl$auto_SNDCTL_DSP_SPEED-syz_open_procfs$namespace-getdents$auto-openat$auto_vmuser_fops_vmci_host-ioctl$auto_IOCTL_VMCI_INIT_CONTEXT detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x800, 0xa) r0 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x200, 0x0) read$auto_trace_time_stamp_mode_fops_trace(r0, &(0x7f00000000c0)=""/45, 0x2d) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0xfffffffffffffffd, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff}, 0x0, 0xf4240, 0x1) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0x401, 0x200000008000) r2 = socket(0x1d, 0x2, 0x6) getsockname$auto(r2, &(0x7f00000002c0)=@llc={0x1a, 0x323, 0x9f, 0x80, 0x3, 0x1, @random="0696b3781410"}, &(0x7f0000000180)=0x10481) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) prctl$auto_PR_SCHED_CORE_CREATE(0x9, 0x1, 0x0, 0x10, 0xf5) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="140008", @ANYRES16, @ANYBLOB="010028bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r5, 0x0, 0xfff) r6 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x6) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-timerfd_settime$auto-bind$auto-openat$auto_kernfs_file_fops_kernfs_internal-openat$auto_vhost_vsock_fops_vsock-ioctl$auto_VHOST_GET_BACKEND_FEATURES2-openat$auto_proc_reg_file_ops_compat_inode-read$auto_proc_reg_file_ops_compat_inode-pwrite64$auto-mmap$auto-close_range$auto-socketpair$auto-openat$auto_kernfs_file_fops_kernfs_internal-keyctl$auto-syz_clone3-pipe$auto-socket-openat$auto_proc_sys_file_operations_proc_sysctl-readv$auto-vmsplice$auto-socket-sysfs$auto-madvise$auto-mlockall$auto-mmap$auto-close_range$auto-mmap$auto-ioctl$auto-write$auto_kernfs_file_fops_kernfs_internal detailed listing: executing program 0: mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = socket(0x10, 0x80002, 0x0) timerfd_settime$auto(r0, 0x3, 0x0, 0x0) bind$auto(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @rand_addr=0x64010101}, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/freezer.state\x00', 0x10b342, 0x0) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) ioctl$auto_VHOST_GET_BACKEND_FEATURES2(r2, 0x8008af26, &(0x7f0000000340)=0x4) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/92, 0x5c) pwrite64$auto(r1, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x2, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/binder/parameters/stop_on_user_error\x00', 0x2, 0x0) keyctl$auto(0xe, 0x1, 0x0, 0x5eaf, 0x8) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe$auto(&(0x7f0000001480)=0xffffffffffffffff) socket(0x2c, 0x80003, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) vmsplice$auto(r5, &(0x7f0000000000)={0x0, 0x7}, 0x5, 0x1) socket(0x28, 0x800, 0x0) sysfs$auto(0x2, 0x10, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0xffffffffffffffff, 0x5407, 0x38) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000100)='1', 0x1) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-openat$auto_output_bpc_fops_-bpf$auto_BPF_LINK_CREATE-mmap$auto-openat$auto_ftrace_set_event_fops_trace_events-socket$nl_generic-syz_genetlink_get_family_id$auto_mac80211_hwsim-sendmsg$auto_HWSIM_CMD_NEW_RADIO-mmap$auto-madvise$auto-close_range$auto-brk$auto-syslog$auto-fanotify_init$auto-open-fanotify_mark$auto-ioctl$auto_KVM_CREATE_VM-syslog$auto-move_pages$auto-openat$auto_proc_iter_file_ops_compat_inode-pread64$auto-mlockall$auto-openat$auto_snapshot_fops_user-personality$auto-ppoll$auto-mprotect$auto-mremap$auto-move_pages$auto-msgctl$auto_IPC_RMID detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/vkms/Virtual-1/output_bpc\x00', 0x48000, 0x0) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000340)=@batch={0x1987, 0x401, 0x8023, 0x7, 0x0, r0, 0x8001, 0x6}, 0x6a1e) mmap$auto(0x0, 0x7ff, 0x2, 0x40eb1, 0x602, 0x2f) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r1, 0x8, 0x0) brk$auto(0x40008000) syslog$auto(0x10000, &(0x7f0000000180)='/dev/snapshot\x00', 0xc0) r4 = fanotify_init$auto(0x5, 0x2000000000002) r5 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r4, 0x9, 0x9, 0xffffffffffffffff, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/filesystems\x00', 0x400042, 0x0) pread64$auto(r6, 0x0, 0x800003, 0x270) mlockall$auto(0x7) r7 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000001ac0)={r7, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x408000000}, &(0x7f00000002c0)={0x10000}, 0x8) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000480)={{0x7b0, 0x0, 0x0, 0x8758, 0x0, 0x7, 0xb}, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x10, 0x1, 0xd80, 0xd, 0x6c4a, 0x8000000000000000, 0x6, 0xa, 0xfff9}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendfile$auto-openat$auto_vmwgfx_driver_fops_vmwgfx_drv-mmap$auto-io_uring_setup$auto-openat$auto_tty_fops_tty_io-open-copy_file_range$auto-unshare$auto-openat$auto_ptdump_curknl_fops_-pread64$auto-shmget$auto-socket-sendfile$auto-ioctl$auto detailed listing: executing program 0: socket(0x18, 0x2, 0xfffffffd) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card0\x00', 0x103883, 0x0) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x3, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x115) copy_file_range$auto(r1, 0x0, r2, 0x0, 0x2400000000, 0x0) unshare$auto(0x8000000) r3 = openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x143900, 0x0) pread64$auto(r3, 0x0, 0x9, 0x1) shmget$auto(0x0, 0x8000000000000000, 0x8007e) socket(0x1d, 0x3, 0x80011) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto(r0, 0x64c9, r0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendfile$auto-openat$auto_vmwgfx_driver_fops_vmwgfx_drv-mmap$auto-io_uring_setup$auto-openat$auto_tty_fops_tty_io-open-copy_file_range$auto-unshare$auto-openat$auto_ptdump_curknl_fops_-pread64$auto-shmget$auto-socket-sendfile$auto-ioctl$auto detailed listing: executing program 0: socket(0x18, 0x2, 0xfffffffd) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card0\x00', 0x103883, 0x0) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x3, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x115) copy_file_range$auto(r1, 0x0, r2, 0x0, 0x2400000000, 0x0) unshare$auto(0x8000000) r3 = openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x143900, 0x0) pread64$auto(r3, 0x0, 0x9, 0x1) shmget$auto(0x0, 0x8000000000000000, 0x8007e) socket(0x1d, 0x3, 0x80011) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto(r0, 0x64c9, r0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-mmap$auto-madvise$auto-madvise$auto-prctl$auto-mmap$auto-select$auto-shmdt$auto-sendmsg$auto_L2TP_CMD_SESSION_CREATE-socket$nl_generic-syz_genetlink_get_family_id$auto_ovs_meter-sendmsg$auto_OVS_METER_CMD_SET-getrandom$auto-remap_file_pages$auto-openat$auto_tty_fops_tty_io-ioctl$auto_TIOCSETD2-ioctl$auto-mmap$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) r2 = socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) shmdt$auto(0x0) (async) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="000328bd7000fedbdf2505000000080019000b00000006001d00f7ff00000500120005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000400)={0x38, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x18, 0x4, 0x0, 0x1, [@nested={0x14, 0x2a, 0x0, 0x1, [@nested={0x8, 0xcc, 0x0, 0x1, [@generic="85f65a9a"]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4000) getrandom$auto(0x0, 0x6000000, 0x3) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) ioctl$auto(0x3, 0x540b, 0x1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) program crashed: INFO: task hung in vfs_coredump single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-mmap$auto-madvise$auto-madvise$auto-prctl$auto-mmap$auto-select$auto-shmdt$auto-sendmsg$auto_L2TP_CMD_SESSION_CREATE-socket$nl_generic-syz_genetlink_get_family_id$auto_ovs_meter-sendmsg$auto_OVS_METER_CMD_SET-getrandom$auto-remap_file_pages$auto-openat$auto_tty_fops_tty_io-ioctl$auto_TIOCSETD2-ioctl$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) r2 = socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) shmdt$auto(0x0) (async) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="000328bd7000fedbdf2505000000080019000b00000006001d00f7ff00000500120005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000400)={0x38, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x18, 0x4, 0x0, 0x1, [@nested={0x14, 0x2a, 0x0, 0x1, [@nested={0x8, 0xcc, 0x0, 0x1, [@generic="85f65a9a"]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4000) getrandom$auto(0x0, 0x6000000, 0x3) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) ioctl$auto(0x3, 0x540b, 0x1) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-mmap$auto-madvise$auto-madvise$auto-prctl$auto-mmap$auto-select$auto-shmdt$auto-sendmsg$auto_L2TP_CMD_SESSION_CREATE-socket$nl_generic-syz_genetlink_get_family_id$auto_ovs_meter-sendmsg$auto_OVS_METER_CMD_SET-getrandom$auto-remap_file_pages$auto-openat$auto_tty_fops_tty_io-ioctl$auto_TIOCSETD2 detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) r2 = socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) shmdt$auto(0x0) (async) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="000328bd7000fedbdf2505000000080019000b00000006001d00f7ff00000500120005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000400)={0x38, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x18, 0x4, 0x0, 0x1, [@nested={0x14, 0x2a, 0x0, 0x1, [@nested={0x8, 0xcc, 0x0, 0x1, [@generic="85f65a9a"]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4000) getrandom$auto(0x0, 0x6000000, 0x3) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-mmap$auto-madvise$auto-madvise$auto-prctl$auto-mmap$auto-select$auto-shmdt$auto-sendmsg$auto_L2TP_CMD_SESSION_CREATE-socket$nl_generic-syz_genetlink_get_family_id$auto_ovs_meter-sendmsg$auto_OVS_METER_CMD_SET-getrandom$auto-remap_file_pages$auto-openat$auto_tty_fops_tty_io detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) r2 = socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) shmdt$auto(0x0) (async) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="000328bd7000fedbdf2505000000080019000b00000006001d00f7ff00000500120005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000400)={0x38, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x18, 0x4, 0x0, 0x1, [@nested={0x14, 0x2a, 0x0, 0x1, [@nested={0x8, 0xcc, 0x0, 0x1, [@generic="85f65a9a"]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4000) getrandom$auto(0x0, 0x6000000, 0x3) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-mmap$auto-madvise$auto-madvise$auto-prctl$auto-mmap$auto-select$auto-shmdt$auto-sendmsg$auto_L2TP_CMD_SESSION_CREATE-socket$nl_generic-syz_genetlink_get_family_id$auto_ovs_meter-sendmsg$auto_OVS_METER_CMD_SET-getrandom$auto-remap_file_pages$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) r2 = socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) shmdt$auto(0x0) (async) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="000328bd7000fedbdf2505000000080019000b00000006001d00f7ff00000500120005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000400)={0x38, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x18, 0x4, 0x0, 0x1, [@nested={0x14, 0x2a, 0x0, 0x1, [@nested={0x8, 0xcc, 0x0, 0x1, [@generic="85f65a9a"]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4000) getrandom$auto(0x0, 0x6000000, 0x3) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-mmap$auto-madvise$auto-madvise$auto-prctl$auto-mmap$auto-select$auto-shmdt$auto-sendmsg$auto_L2TP_CMD_SESSION_CREATE-socket$nl_generic-syz_genetlink_get_family_id$auto_ovs_meter-sendmsg$auto_OVS_METER_CMD_SET-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) r2 = socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) shmdt$auto(0x0) (async) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="000328bd7000fedbdf2505000000080019000b00000006001d00f7ff00000500120005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000400)={0x38, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x18, 0x4, 0x0, 0x1, [@nested={0x14, 0x2a, 0x0, 0x1, [@nested={0x8, 0xcc, 0x0, 0x1, [@generic="85f65a9a"]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4000) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-mmap$auto-madvise$auto-madvise$auto-prctl$auto-mmap$auto-select$auto-shmdt$auto-sendmsg$auto_L2TP_CMD_SESSION_CREATE-socket$nl_generic-syz_genetlink_get_family_id$auto_ovs_meter-sendmsg$auto_OVS_METER_CMD_SET detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) r2 = socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) shmdt$auto(0x0) (async) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="000328bd7000fedbdf2505000000080019000b00000006001d00f7ff00000500120005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000400)={0x38, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x18, 0x4, 0x0, 0x1, [@nested={0x14, 0x2a, 0x0, 0x1, [@nested={0x8, 0xcc, 0x0, 0x1, [@generic="85f65a9a"]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-mmap$auto-madvise$auto-madvise$auto-prctl$auto-mmap$auto-select$auto-shmdt$auto-sendmsg$auto_L2TP_CMD_SESSION_CREATE-socket$nl_generic-syz_genetlink_get_family_id$auto_ovs_meter-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) r2 = socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) shmdt$auto(0x0) (async) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="000328bd7000fedbdf2505000000080019000b00000006001d00f7ff00000500120005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-mmap$auto-madvise$auto-madvise$auto-prctl$auto-mmap$auto-select$auto-shmdt$auto-sendmsg$auto_L2TP_CMD_SESSION_CREATE-socket$nl_generic-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) r2 = socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) shmdt$auto(0x0) (async) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="000328bd7000fedbdf2505000000080019000b00000006001d00f7ff00000500120005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-mmap$auto-madvise$auto-madvise$auto-prctl$auto-mmap$auto-select$auto-shmdt$auto-sendmsg$auto_L2TP_CMD_SESSION_CREATE-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) r2 = socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) shmdt$auto(0x0) (async) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="000328bd7000fedbdf2505000000080019000b00000006001d00f7ff00000500120005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-mmap$auto-madvise$auto-madvise$auto-prctl$auto-mmap$auto-select$auto-shmdt$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) shmdt$auto(0x0) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-mmap$auto-madvise$auto-madvise$auto-prctl$auto-mmap$auto-select$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-mmap$auto-madvise$auto-madvise$auto-prctl$auto-mmap$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-mmap$auto-madvise$auto-madvise$auto-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-mmap$auto-madvise$auto-madvise$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getrandom$auto(0x0, 0x6000000, 0x3) (async) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-mmap$auto-madvise$auto-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-mmap$auto-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-syz_genetlink_get_family_id$auto_l2tp-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-mmap$auto-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-socketpair$auto-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) socketpair$auto(0x1e, 0x5, 0x9, 0x0) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-fanotify_init$auto-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-close_range$auto-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-sendmsg$auto_NL80211_CMD_GET_REG-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-sendmsg$auto_OVS_DP_CMD_NEW-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-socket-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) socket(0x10, 0x2, 0x0) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-mmap$auto-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-recvmmsg$auto-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x4, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000000), 0x16, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-mmap$auto-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getrandom$auto(0x0, 0x6000000, 0x3) program crashed: INFO: task hung in vfs_coredump extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-getrandom$auto program crashed: INFO: task hung in vfs_coredump simplifying C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-getrandom$auto program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-getrandom$auto program crashed: INFO: task hung in vfs_coredump testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-getrandom$auto program crashed: INFO: task hung in vfs_coredump testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-getrandom$auto program crashed: INFO: task hung in vfs_coredump testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-getrandom$auto program crashed: INFO: task hung in vfs_coredump testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-getrandom$auto program crashed: INFO: task hung in vfs_coredump testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-getrandom$auto program crashed: INFO: task hung in vfs_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getrandom$auto(0x0, 0x6000000, 0x3) program crashed: INFO: task hung in vfs_coredump validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getrandom$auto(0x0, 0x6000000, 0x3) program crashed: INFO: task hung in vfs_coredump validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-prctl$auto-getrandom$auto detailed listing: executing program 0: mmap$auto(0x8, 0x4000000001, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getrandom$auto(0x0, 0x6000000, 0x3) program crashed: INFO: task hung in vfs_coredump validation run: crashed=true reproducing took 3h31m13.535315366s repro crashed as (corrupted=false): INFO: task syz.0.17:6012 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:28120 pid:6012 tgid:6010 ppid:5963 task_flags:0x400640 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:100 [inline] __wait_for_common+0x2fc/0x4e0 kernel/sched/completion.c:121 wait_for_common kernel/sched/completion.c:132 [inline] wait_for_completion_state+0x1c/0x40 kernel/sched/completion.c:269 coredump_wait fs/coredump.c:534 [inline] vfs_coredump+0x848/0x55e0 fs/coredump.c:1196 get_signal+0x22e1/0x26d0 kernel/signal.c:3019 arch_do_signal_or_restart+0x8f/0x7a0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:41 [inline] exit_to_user_mode_loop+0x8c/0x540 kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline] do_syscall_64+0x4ee/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f182c18f7c9 RSP: 002b:00007f182d0da0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: ffffffffffffffda RBX: 00007f182c3e6098 RCX: 00007f182c18f7c9 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f182c3e609c RBP: 00007f182c3e6090 R08: 00007f182d0fc000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f182c3e6128 R14: 00007fff44638a70 R15: 00007fff44638b58 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline] #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6775 3 locks held by kworker/u9:1/5151: #0: ffff88807c6b9148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232 #1: ffffc9000ef27c90 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233 #2: ffff8880340b8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x470 net/bluetooth/hci_sync.c:331 2 locks held by getty/5590: #0: ffff88814d06b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 drivers/tty/n_tty.c:2211 1 lock held by syz.0.17/6011: 1 lock held by syz.1.18/6037: 1 lock held by syz.2.19/6067: 1 lock held by syz.3.20/6093: 1 lock held by syz.4.21/6124: 1 lock held by syz.5.22/6163: 1 lock held by syz.6.23/6196: 1 lock held by syz.7.24/6230: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x133/0x180 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xe66/0x1180 kernel/hung_task.c:515 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 74 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:__lock_acquire+0x155/0x2890 kernel/locking/lockdep.c:5170 Code: 1e 4b 8d 74 1e d8 0f b7 46 20 25 ff 1f 00 00 44 39 c8 75 0b 48 83 3c 24 00 0f 85 be 03 00 00 4d 01 de 44 89 ca 41 0f b7 46 20 <66> 81 e2 ff 1f 4d 89 6e 10 66 25 00 e0 09 d0 66 41 89 46 20 48 8b RSP: 0018:ffffc9000218f308 EFLAGS: 00000086 RAX: 0000000000000007 RBX: 0000000000000000 RCX: 0000000000000002 RDX: 0000000000000007 RSI: ffff88801cbc2a00 RDI: ffffffff8e3c9520 RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000007 R10: 0000000000000002 R11: ffff88801cbc29b0 R12: ffff88801cbc1e80 R13: ffffffff8e3c9520 R14: ffff88801cbc2a28 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8881249fc000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005633703e3320 CR3: 000000000e184000 CR4: 00000000003526f0 Call Trace: lock_acquire kernel/locking/lockdep.c:5868 [inline] lock_acquire+0x179/0x330 kernel/locking/lockdep.c:5825 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:867 [inline] class_rcu_constructor include/linux/rcupdate.h:1195 [inline] unwind_next_frame+0xd1/0x20b0 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56 kasan_save_track+0x14/0x30 mm/kasan/common.c:77 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:252 [inline] __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:284 kasan_slab_free include/linux/kasan.h:234 [inline] slab_free_hook mm/slub.c:2540 [inline] slab_free mm/slub.c:6670 [inline] kfree+0x2f8/0x6e0 mm/slub.c:6878 ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1576 [inline] ieee80211_ibss_rx_queued_mgmt+0x1ab4/0x2fc0 net/mac80211/ibss.c:1602 ieee80211_iface_process_skb net/mac80211/iface.c:1736 [inline] ieee80211_iface_work+0xe28/0x1350 net/mac80211/iface.c:1790 cfg80211_wiphy_work+0x3fb/0x560 net/wireless/core.c:438 process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 final repro crashed as (corrupted=false): INFO: task syz.0.17:6012 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:28120 pid:6012 tgid:6010 ppid:5963 task_flags:0x400640 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_timeout+0x257/0x290 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:100 [inline] __wait_for_common+0x2fc/0x4e0 kernel/sched/completion.c:121 wait_for_common kernel/sched/completion.c:132 [inline] wait_for_completion_state+0x1c/0x40 kernel/sched/completion.c:269 coredump_wait fs/coredump.c:534 [inline] vfs_coredump+0x848/0x55e0 fs/coredump.c:1196 get_signal+0x22e1/0x26d0 kernel/signal.c:3019 arch_do_signal_or_restart+0x8f/0x7a0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:41 [inline] exit_to_user_mode_loop+0x8c/0x540 kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline] do_syscall_64+0x4ee/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f182c18f7c9 RSP: 002b:00007f182d0da0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: ffffffffffffffda RBX: 00007f182c3e6098 RCX: 00007f182c18f7c9 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f182c3e609c RBP: 00007f182c3e6090 R08: 00007f182d0fc000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f182c3e6128 R14: 00007fff44638a70 R15: 00007fff44638b58 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline] #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6775 3 locks held by kworker/u9:1/5151: #0: ffff88807c6b9148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232 #1: ffffc9000ef27c90 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233 #2: ffff8880340b8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x470 net/bluetooth/hci_sync.c:331 2 locks held by getty/5590: #0: ffff88814d06b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 drivers/tty/n_tty.c:2211 1 lock held by syz.0.17/6011: 1 lock held by syz.1.18/6037: 1 lock held by syz.2.19/6067: 1 lock held by syz.3.20/6093: 1 lock held by syz.4.21/6124: 1 lock held by syz.5.22/6163: 1 lock held by syz.6.23/6196: 1 lock held by syz.7.24/6230: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x133/0x180 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xe66/0x1180 kernel/hung_task.c:515 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 74 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:__lock_acquire+0x155/0x2890 kernel/locking/lockdep.c:5170 Code: 1e 4b 8d 74 1e d8 0f b7 46 20 25 ff 1f 00 00 44 39 c8 75 0b 48 83 3c 24 00 0f 85 be 03 00 00 4d 01 de 44 89 ca 41 0f b7 46 20 <66> 81 e2 ff 1f 4d 89 6e 10 66 25 00 e0 09 d0 66 41 89 46 20 48 8b RSP: 0018:ffffc9000218f308 EFLAGS: 00000086 RAX: 0000000000000007 RBX: 0000000000000000 RCX: 0000000000000002 RDX: 0000000000000007 RSI: ffff88801cbc2a00 RDI: ffffffff8e3c9520 RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000007 R10: 0000000000000002 R11: ffff88801cbc29b0 R12: ffff88801cbc1e80 R13: ffffffff8e3c9520 R14: ffff88801cbc2a28 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8881249fc000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005633703e3320 CR3: 000000000e184000 CR4: 00000000003526f0 Call Trace: lock_acquire kernel/locking/lockdep.c:5868 [inline] lock_acquire+0x179/0x330 kernel/locking/lockdep.c:5825 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:867 [inline] class_rcu_constructor include/linux/rcupdate.h:1195 [inline] unwind_next_frame+0xd1/0x20b0 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56 kasan_save_track+0x14/0x30 mm/kasan/common.c:77 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:252 [inline] __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:284 kasan_slab_free include/linux/kasan.h:234 [inline] slab_free_hook mm/slub.c:2540 [inline] slab_free mm/slub.c:6670 [inline] kfree+0x2f8/0x6e0 mm/slub.c:6878 ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1576 [inline] ieee80211_ibss_rx_queued_mgmt+0x1ab4/0x2fc0 net/mac80211/ibss.c:1602 ieee80211_iface_process_skb net/mac80211/iface.c:1736 [inline] ieee80211_iface_work+0xe28/0x1350 net/mac80211/iface.c:1790 cfg80211_wiphy_work+0x3fb/0x560 net/wireless/core.c:438 process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246