Extracting prog: 11m58.448493157s
Minimizing prog: 36m37.14045518s
Simplifying prog options: 19m37.569231037s
Extracting C: 5m9.895338481s
Simplifying C: 0s


extracting reproducer from 56 programs
testing a last program of every proc
single: executing 16 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-socket-socket$netlink-sendmsg$netlink-openat$cgroup_ro-setns-creat-write$cgroup_int-madvise-rt_sigqueueinfo-syz_kvm_setup_syzos_vm$x86
detailed listing:
executing program 0:
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socket(0xf, 0x3, 0xa4b6)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="0a001b"], 0x2c}, {&(0x7f00000002c0)={0x2c, 0x1e, 0x300, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0xee, 0x0, 0x0, @uid}, @typed={0xc, 0x11e, 0x0, 0x0, @u64=0x7fffffff}, @typed={0x8, 0x9e, 0x0, 0x0, @pid}]}, 0x2c}, {&(0x7f0000002fc0)={0x1254, 0x31, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x123c, 0x55, 0x0, 0x1, [@nested={0x28, 0xef, 0x0, 0x1, [@typed={0xc, 0x3a, 0x0, 0x0, @u64=0xffffffffffffff80}, @typed={0x8, 0x62, 0x0, 0x0, @uid}, @typed={0x4, 0xb7}, @typed={0x8, 0x6e, 0x0, 0x0, @pid}, @typed={0x4, 0x13f}]}, @nested={0xc, 0xe, 0x0, 0x1, [@generic, @generic, @typed={0x8, 0xcb, 0x0, 0x0, @u32=0x3}]}, @nested={0x5e, 0xb9, 0x0, 0x1, [@generic="1dcbc8edf35b2fc27c97f30e7747ac271dca95df4ae2f71ad77ce6ffbf8203024d9fa6a7506b997738fedc95b8d75029c34142fbb0f2e53aedc672dd9fc6cd83c4955a643bf61d9f696c9c0a12c02ecccf882404dacf", @nested={0x4, 0x92}]}, @nested={0x115b, 0xf7, 0x0, 0x1, [@generic="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", @generic="a7a22f564e515809a84cf070c364c137fc67309567d28dfd5b12bafd0083d14dd7a9e804b871801dd2bd51232cc12897e3806ec540161b94902b6e425737afe9a41d5b163c05f9d537a89e5200fca2a11b99f45e984abc97fe1fd83cdf536b41ef427470cda2db3cb6c6f68ce384d0bc21714c23aea283540ee57512df9e362ebdab9ed21998f35409e3477231e5eac45f03b9b3ea1eb11c9e9afa769e8b65a2b74fba1168714973e3c5e6f4a73a7ddc5a9ff1902037eadd88bb75d8555979a2411cf1354e781ef3931f5e7590f13d54a5769818510a4ece65b4fcfcea8d85967f457056789290f8257e1fa41f49ec73a4bb59cfad2de15c26b8ef6fbf33371208c6f2694e1c1dad05524fe3eca47f9560b64a03b99c1ac21327a64b0c76f80e8f3ea75685383fa2b2f51f39af2e04ea2a4ad7e9f773b05b9c3f09265d113f9afcb0cc6f4ca4512958dfb215bdb41e542df1967a7a237d22cb3656c18a21d73ce915369e1201cb4881b26953af6a84df4f60699b7f28e97ee31ba3eba2f3b6eca5a5bd96cae5604a596b5d37312560d9a22b7dda15a538aa8b0989928dee98e608b754a634cea8245e4a239d5a762bc00aea80cefc76314d4f42a92f701eae7dd2caddf76ed948f05e9590316789f2050013b795da0e3c9c6139b875fe7acff6e7b62f9b428d10bfe1fa95fa45e5fb51b39131f0790cbdb1ab6e3b89c1782abb5db6748c1c7ee6ebfe82b7c5f4b7acf3f052fd6b052037577f5c979f5274102eb91f7f5bf6d7614f47790ce067d727771838ab8103b1b6a79cf9998fc4b57ebbf30510d3c39bc39e328f8665dd51239e44e1240ac5861f2a0097d4e42759dec6f65c48e4cbd32c266ebba619254c58d3a319aa9d709ffe265a3cb06ad780b75c883865220c0046bb3c353ecfaccb8a996c136bfeade679f075c8aeb46ee10e04f6fe41bae00e7a70532a5c8a8f2f8fb380fd16edf1f065a643368603f1c6b71b027e5b4e71d8b2e71445cf8cb340dbd0ef1fee8c9af12e57d5d4a870cf9eb7b0b09ee5d02ecd624680a8abea5be93f2efaa16a19b9f3aaae59dc703486ab88b2a16ea39961c27fa0779163e2c43f55845b4f4694c4075b6ea6745a0c1f6e5aed10e2884be42413cb77ddd128908fc9b5a45237d06544a6c6034476f66ded6ea7bc888e241493a9db25bc9eb9d9b12823774cd5be01a4f7e95622ff469814632b64374a7226e233257d507bc189a6ee3e7c415f0181e695404d1507b3901e5ae7124b6f30d6b042b01b7a756099db6ae1a660215c95bd5be3fa465b9ce1eb65874a3882b7a2fe0fd2cf28de6b688d353bf68d78bcdd5d3145a6a9ebe6ab676b79c8b69b28eebc39e759ac8a366d76a5077c6c19da775a569603b730727f6a2c8075acb6b871fa3c88c2330bda952f775adb2e79fb766678ee4f0a3b39d8f3cf47e64e489ee8611709f87d7acaaab16b929d223da010920fcfe320c0d30073bd274f3947b56e0cf7ba0436a5c29612735a01c777625920c074042f53d0a25f86b16cd3ed795e750387c0993ebbdc693e2238ed790731d245554a61466032046c86d9ebd9f13ce790f66c0ee8f3fd4508547e61a250925e3ab28114efcd3699d4a85efc9c56d9e236ddba5af56e8ab795731fbecd72e28c58dfaab509391517975ee7b734e4f7585b8e7381ab38ed058aa9686f42473ec2291069a30c05c447532b983e7244900a83a0014dc31133033b0f9273540cc8ece39323091762b625d32e3fe18f26dabd1593cb4287dd3d09049893e1ab639febebb15070e87abba4336e581de8590af1d7cb18ab94cb6868a64f44fc3c398f4e085b3f7f806c9062cd6e11f870af78c27a2415b2ac7413db43ac463dc5e1a79c63cd8faca674604ec223f9e798a530bc66411db019aeb9e18d8053d6eda66d08245d6431cdc466641cdf90dc87dacab072bce7ae430b9f8789c8d520809df89856366ac61a07625833183606ad8674a62ab190533c7f5dff4e79fa95cc019b7fa93a213050635bf95f52fbaee2e1068b687e9b496ee3eb3e3b0eaabc763689ef42b2b172c8444c5130eee0b3e2692a72e8a661e46595abb286d06cf840f32a264ad1b50800532f8dea4d5a02a32abd0a9dff0e986ab03d21067a8e613e24e336a010d926df68c9a2904ed115994e62afbdbbd92fdc5107f0e029fbd0dac5b63b377e7504923f32d4e16f06e0252af5c8356107cab5ede3366a4adb2bd3e709cf587edb45252bde405bb958fcf636dce32426009a863ba3d8a89d5272e20e0ca8aab54b59e9f2a1892973cf9b75d50885111cdadefb7876d2f7ba02cd7c976dda8056dca881437e5caed8011cd5eea9f0535a6c0f89b019d5b235e0ae6906a6351b2ee1e323dfdee3b1ba4de70e2b779f076ad360ec2dcc9a1b973f74b613b34ce1b3dfe2a9a0e758c415fa84aeb21d19e6aec09966c58a55a6ae50820475c764246abb51b29b2f805be4cc084e19d66104052bab778b0bc5010a0b277585b715e947b417d280c8d57fee32c345357d3ec41392845fcd6d534cf9be135dd7108bc0265fe635a0985b1c78686e156acf3adc38cb3815c5426de374e25aeced16d85c586b1f2c6c12b664aa2b6a51ada51f6223c162236235e2d9ef9a03609522c8947596e81541e0d74601ba3acbec00e474c361e024525b48d96d6f0bd5042410e0519c5a4b8cda444009b3727cf559e8fe9508891c951fc208f516c7fe7c8a0dbde2061384e9fedbf9ab1c795499c20d7738defa91dcc06c6304913a8e7c349bfd6b9ba1245292e87aab73c74f80c42608c96122ed4828702099357a21a64b74505075daa1c81ebd6ddcb5fd08791bf116b5bdf8d00f9a7df9557a990aea98809b26357c0ed3846a17fcb8ee097b112093859023fbbdbe04e42aaba8f9cf25bff175865ac9ac1f9e422dada07d8749f931210bc47be1531f2c8870a8623f911a0b9141cc8b45532dba3e768685a9f7b4d86af1d5d06a8d1931f30b698f35e3462f3b4aa0cbec05c631aa053351c245df836ea4723a1d31c00142d294ff82283762eac7f31f56273cb7df4e9535cacd5972e81c52482ec2458e1c34865a86c4b266d9db2eb5fbd67b7b60f20dfeda60af34bd7d8c4f28c1a7784b1eff8860426dc2c392c8ed3365e9df339f0710970146b8d74a97199b258aa27c79f05ebd5a447ce571e3666ca4d74922b60b68cb969fcebc60fe8bba9dd1f24d8b1e03afaf3620f799e0d7aff24c38463c88c4818a9fea6f8621a9da6da00256716e01bdc7f3d472673ac4e2158219deae595b17e90b6eb10fec205301c54d92afb11545ec6e63ed72bd5faa61ae04f991bfc138a1951f373cb858970a5437c666ec0c3dbfe1fb8c82c45598400d0863b6519f0c73a85ac2c0a96d384052c0efbe620b624d0506e254d913d2794d3869b1e7ffcfbc046f2d22ddb862c30ab19a3a3a824ca329b2dd0749be5be427efb9878533ffa527d6283cfe91ebddaf6a166452a320a3f424caa692ce2f0008a83385e9ec8844b63024a3b61a487b3e574f3f750b34a8e19754329524f4df669355eff6e5b8a558da856f8e79862eadcc60e9b488f3d95481d4d0e5e88996977d0fc7dfb7c6bc266ffff22abc981b5650c981cb05f81d870a8611ab743cc3e84b751dc0efc6e4d0bc35955582ec53361c4e58d000a68b395ce38cb0b43e106fa1028fb82b3137032320e543ccfa285b037e929caa59b93dbc55b34b8cdd012150f0b470671e5d53668cb07d81149c2437b30bb020c4cc651ee01c89568dd6827f6d903cea545c7f2612a6cfba67f2a5d6a912132790e9c896b1faae220b8f7e492820bfe47a007b93a4b2d7b44c75161afa2316ba1745d56220c807eb96b10f5a6f4ab614e8002662c93de0afffef014b7ac7856c14bfa7a0f717c20c4185331ea5e47440d98e1ac9b4a77bc3e7396d82c7dc497ca96a0c32b5b424895001a90dbf6de78fe8a20d11fe611f0daa300fe39b0f4f40f9337fe901c8df5e2282fa89f0d19162063fd55e551d2a469ac66664c4657c7e490a61b62d19fbc127c39d58d35ac19b974559f6bde1176b520f03bd2c209368da6857fbbc00bdf2bf4660a14007571d34f8a3ad42775d25fa7d0377c25eb52d2f1131c5cec674609797b502e60c66c709d03a162ecd3cdd575224152f1fa581d7c2bf6c99cf067a1c16f69e6869d34cc8260900d36a52452c60c744af142cfca45bfc0815680870f4597d79d14cc3222ec09f9823ca36402ce971fe19d2551862ed0709b7a351b3284d286bfc61c75429192fd4c3d4d025d04c36cd58e066c1e40240f7d1fd66d6a80e2827094d104822d041346fb3450f67006bc07212100833dcc7d8b8912f4e0db2d8426985fbd785b063a48cb8e327da61da4ac965dcc60ae7d62a91ea421f26005abc53bb4a3424a2e4e725bc9381efd490fd4188e2b474ebc72ec6a2caa001ea8c13840cd85a2500d757eee7bd550e15962a230b0c503bbb0329beeeeb9ae9e2c97995834d7c1200ce675a244961b4cdb4045bb60c0d52422c1ea2de817beec7f426a5e74ad7b8dbe6e052dc9c00a3771a753104132d0505e25eb41ef630474db0b7f8207c4b5af7c289b893e91d0c19913085816c88ee94df80b4ad20c317ae68df8f55bca974e11419b0865eb8a6ce24d17d0f88573ef1afe0cf72f6dcb44e965fee17c5e1c26096e4aaa8b2b24bbe28234b1f08288ef83361fd779fdcc1765adb0a2826f808593f901699412f3e0ffd530aeef10f962c515bbb4fc425ac0d7f7f2e3da5b55424b18bd10cae2958948222989c37f49f31d59a9b4945e38399e24f6a2918ca5782fdc68fe5b074d110cd2722d34cd28da5ead91fcd45e0d8099f86fbb56d128f10195947e83485614f468edf1201978673b6fc8156e570245125875f1c51a353ab39e900ba49d48af18421473850243f10d6a2e110ce5c4604195a7c88224726a9b225d51243f0ae4bc57316ae4dab5d8cbc914f2df481b4c21b773deb48765829aa0d4df18a78163bc497fe35d7946c344eade9b6017ace9c6d8c3a515c517d47f2824a22b8233c7c9246731b14693dbf68ac4cb318a60cc938fa6f0e4237e82d90562b34b7cbc5337574ad604189e60f63f634674c6a7d667bfab4d1431a28c501142f8c749571e3dbd76095ff89b8951c828937e3563781bb8c6fa8e55ac5e066454ee059ace3ee5954627b314ba71f5ab558bf34be26aa5336ac1daad182f049779102f51f41b25368ecd87b78fa663aab4389085b86bb0b9a492a46263a6b5adcb814d8d544b54f671041d1c68e1adaff8cca5a4bbe1705082d209275251668c48a9f66dd72dc2f3c6688d95d022ad37113c1ac2dd277c55bf6642a5fac2bf417b5988ea84e68c7772d49f99bb984474debcf6c783f0a61697f480c906f5314a18986b6a5f2e8119f914e7e615660a5a6a04152ff70ed338b66f0666f60ff48213f36d025bf9dfabd7bdc9731cbc7ae45034cf7ce7a2d1204c96a0ab66bfa28137d9220f238a137f9093d28810cd8a6d087266829e30842c9ef2576c2e94e79c62b3bea2f1560a507ac78d07353f84263bcedbc1a223eca647d89743aa5e7b0704e99ee72cd24fd5d259e2d40fdd44c04c65627a22dc13281a6918ed09cacf10cb7f1b360ef08dda437811ee6571005f525fdf85b6f2605ba90280c29488be16ae53c3e2c5b8c3e28db79f2201a10f08892", @generic]}, @typed={0x47, 0x13c, 0x0, 0x0, @binary="5945316fc9ff5a31987f24ffd8a145c0c1c9c7e5066ea5fc31453eba91d902b5a64b74efb3c9733afd4a6aa194f20ad6f1ad207a80502953bb8f4133af609c7ce3ce75"}]}, @nested={0x8, 0xc7, 0x0, 0x1, [@nested={0x4, 0x78}]}]}, 0x1254}, {0x0}], 0x4, 0x0, 0x0, 0x4000002}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
setns(r1, 0x10000000)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
rt_sigqueueinfo(0x0, 0x13, 0x0)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000081000/0x400000)=nil)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL
detailed listing:
executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75"}})

program crashed: INFO: task hung in rtnl_lock
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=7m9.832331364s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix
detailed listing:
executing program 0:
socket$unix(0x1, 0x5, 0x0)

program did not crash
testing program (duration=7m9.832331364s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_SIOCETHTOOL
detailed listing:
executing program 0:
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75"}})

program did not crash
testing program (duration=7m9.832331364s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL
detailed listing:
executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0)

program did not crash
testing program (duration=7m9.832331364s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL
detailed listing:
executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', 0x0})

program did not crash
testing program (duration=7m9.832331364s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL
detailed listing:
executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs})

program did not crash
extracting C reproducer
testing compiled C program (duration=7m9.832331364s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=7m9.832331364s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL
detailed listing:
executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75"}})

program crashed: INFO: task hung in rtnl_lock
extracting C reproducer
testing compiled C program (duration=7m9.832331364s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing program (duration=7m9.832331364s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL
detailed listing:
executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75"}})

program did not crash
testing program (duration=7m9.832331364s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL
detailed listing:
executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75"}})

program did not crash
validation run: crashed=false
testing program (duration=7m9.832331364s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL
detailed listing:
executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75"}})

program crashed: INFO: task hung in rtnl_lock
validation run: crashed=true
testing program (duration=7m9.832331364s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL
detailed listing:
executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75"}})

program crashed: INFO: task hung in rtnl_lock
validation run: crashed=true
testing program (duration=7m9.832331364s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-ioctl$sock_SIOCETHTOOL
detailed listing:
executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75"}})

program crashed: INFO: task hung in rtnl_lock
validation run: crashed=true
reproducing took 1h37m43.953367447s
repro crashed as (corrupted=false):
INFO: task kworker/u8:1:13 blocked for more than 122 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:1    state:D stack:0     pid:13    tgid:13    ppid:2      flags:0x00004000
Workqueue: events_unbound linkwatch_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 __mutex_lock_common kernel/locking/mutex.c:707 [inline]
 __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803
 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134
 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285
 rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79
 linkwatch_event+0x12/0x60 net/core/link_watch.c:285
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0x7d5/0x1020 kernel/workqueue.c:3319
 worker_thread+0xc58/0x1250 kernel/workqueue.c:3400
 kthread+0x2c7/0x370 kernel/kthread.c:389
 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/u8:2:46 blocked for more than 125 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:2    state:D stack:0     pid:46    tgid:46    ppid:2      flags:0x00004000
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 __mutex_lock_common kernel/locking/mutex.c:707 [inline]
 __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803
 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134
 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285
 rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79
 addrconf_dad_work+0xca/0x14e0 net/ipv6/addrconf.c:4240
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0x7d5/0x1020 kernel/workqueue.c:3319
 worker_thread+0xc58/0x1250 kernel/workqueue.c:3400
 kthread+0x2c7/0x370 kernel/kthread.c:389
 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task syz-executor:409 blocked for more than 126 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:0     pid:409   tgid:409   ppid:1      flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 __mutex_lock_common kernel/locking/mutex.c:707 [inline]
 __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803
 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134
 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285
 rtnl_lock net/core/rtnetlink.c:79 [inline]
 rtnetlink_rcv_msg+0x75f/0xa00 net/core/rtnetlink.c:6675
 netlink_rcv_skb+0x22b/0x4a0 net/netlink/af_netlink.c:2537
 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6696
 netlink_unicast_kernel net/netlink/af_netlink.c:1316 [inline]
 netlink_unicast+0x8c9/0xa60 net/netlink/af_netlink.c:1342
 netlink_sendmsg+0x7f0/0xaf0 net/netlink/af_netlink.c:1886
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 __sys_sendto+0x66a/0x6f0 net/socket.c:2217
 __do_sys_sendto net/socket.c:2229 [inline]
 __se_sys_sendto net/socket.c:2225 [inline]
 __x64_sys_sendto+0xe9/0x100 net/socket.c:2225
 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f181a9907e3
RSP: 002b:00007ffde22adc58 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f181b6e4620 RCX: 00007f181a9907e3
RDX: 000000000000002c RSI: 00007f181b6e4670 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007ffde22adc74 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f181b6e4670 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:410 blocked for more than 127 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:0     pid:410   tgid:410   ppid:1      flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 __mutex_lock_common kernel/locking/mutex.c:707 [inline]
 __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803
 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134
 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285
 rtnl_lock net/core/rtnetlink.c:79 [inline]
 rtnetlink_rcv_msg+0x75f/0xa00 net/core/rtnetlink.c:6675
 netlink_rcv_skb+0x22b/0x4a0 net/netlink/af_netlink.c:2537
 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6696
 netlink_unicast_kernel net/netlink/af_netlink.c:1316 [inline]
 netlink_unicast+0x8c9/0xa60 net/netlink/af_netlink.c:1342
 netlink_sendmsg+0x7f0/0xaf0 net/netlink/af_netlink.c:1886
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 __sys_sendto+0x66a/0x6f0 net/socket.c:2217
 __do_sys_sendto net/socket.c:2229 [inline]
 __se_sys_sendto net/socket.c:2225 [inline]
 __x64_sys_sendto+0xe9/0x100 net/socket.c:2225
 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f9e537907e3
RSP: 002b:00007ffd4949af18 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f9e544e4620 RCX: 00007f9e537907e3
RDX: 0000000000000028 RSI: 00007f9e544e4670 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007ffd4949af34 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f9e544e4670 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:412 blocked for more than 128 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:0     pid:412   tgid:412   ppid:1      flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 __mutex_lock_common kernel/locking/mutex.c:707 [inline]
 __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803
 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134
 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285
 rtnl_lock net/core/rtnetlink.c:79 [inline]
 rtnetlink_rcv_msg+0x75f/0xa00 net/core/rtnetlink.c:6675
 netlink_rcv_skb+0x22b/0x4a0 net/netlink/af_netlink.c:2537
 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6696
 netlink_unicast_kernel net/netlink/af_netlink.c:1316 [inline]
 netlink_unicast+0x8c9/0xa60 net/netlink/af_netlink.c:1342
 netlink_sendmsg+0x7f0/0xaf0 net/netlink/af_netlink.c:1886
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 __sys_sendto+0x66a/0x6f0 net/socket.c:2217
 __do_sys_sendto net/socket.c:2229 [inline]
 __se_sys_sendto net/socket.c:2225 [inline]
 __x64_sys_sendto+0xe9/0x100 net/socket.c:2225
 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fe96d7907e3
RSP: 002b:00007fff40404568 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe96e4e4620 RCX: 00007fe96d7907e3
RDX: 000000000000002c RSI: 00007fe96e4e4670 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007fff40404584 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003
R13: 0000000000000000 R14: 00007fe96e4e4670 R15: 0000000000000000
 </TASK>
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-g2e58e85c038f #0 c5e7ad78b71ddb211d6a9cda70735ca8545dcbc5
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x10c/0x190 lib/dump_stack.c:120
 dump_stack+0x19/0x20 lib/dump_stack.c:129
 nmi_cpu_backtrace+0x2bf/0x2d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41
 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline]
 watchdog+0xd8f/0xed0 kernel/hung_task.c:423
 kthread+0x2c7/0x370 kernel/kthread.c:389
 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 391 Comm: kworker/0:3 Not tainted 6.12.30-syzkaller-g2e58e85c038f #0 c5e7ad78b71ddb211d6a9cda70735ca8545dcbc5
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x5/0x90 kernel/kcov.c:313
Code: 11 10 48 89 74 11 18 48 89 44 11 20 5d c3 cc cc cc cc cc 66 90 b8 44 86 1e b2 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 48 8b 45 08 65 48 8b 14 25 40 e9 04 00 65 8b 0d ec 39 7f
RSP: 0018:ffffc90000007148 EFLAGS: 00000246
RAX: ffffffff84ded5d3 RBX: 0000000000000000 RCX: 0000000000000100
RDX: ffff8881176b8000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc900000071e8 R08: ffffc90000007540 R09: ffffc90000007550
R10: ffffc900000076b0 R11: fffff52000000eda R12: 0000000000000006
R13: ffff888115a460c0 R14: 0000000000000003 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff3a6ee5000 CR3: 00000001023b8000 CR4: 00000000003526b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 find_match+0x176/0x10f0 net/ipv6/route.c:786
 __find_rr_leaf+0x23c/0x790 net/ipv6/route.c:869
 find_rr_leaf net/ipv6/route.c:890 [inline]
 rt6_select net/ipv6/route.c:934 [inline]
 fib6_table_lookup+0x2c5/0x9b0 net/ipv6/route.c:2230
 ip6_pol_route+0x167/0x12c0 net/ipv6/route.c:2266
 ip6_pol_route_input+0x5a/0x80 net/ipv6/route.c:2323
 pol_lookup_func include/net/ip6_fib.h:626 [inline]
 fib6_rule_lookup+0x4cc/0x6b0 net/ipv6/fib6_rules.c:117
 ip6_route_input_lookup net/ipv6/route.c:2335 [inline]
 ip6_route_input+0x59f/0x8d0 net/ipv6/route.c:2631
 ip6_rcv_finish_core net/ipv6/ip6_input.c:66 [inline]
 ip6_rcv_finish+0x15a/0x3c0 net/ipv6/ip6_input.c:77
 NF_HOOK include/linux/netfilter.h:317 [inline]
 ipv6_rcv+0xed/0x220 net/ipv6/ip6_input.c:309
 __netif_receive_skb_one_core net/core/dev.c:5757 [inline]
 __netif_receive_skb net/core/dev.c:5870 [inline]
 process_backlog+0x44b/0xae0 net/core/dev.c:6202
 __napi_poll+0xd3/0x610 net/core/dev.c:6853
 napi_poll net/core/dev.c:6922 [inline]
 net_rx_action+0x584/0xce0 net/core/dev.c:7044
 handle_softirqs+0x1ae/0x630 kernel/softirq.c:603
 __do_softirq+0xf/0x16 kernel/softirq.c:641
 do_softirq+0xa6/0x100 kernel/softirq.c:485
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0x74/0x80 kernel/softirq.c:412
 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline]
 _raw_spin_unlock_bh+0x54/0x60 kernel/locking/spinlock.c:210
 spin_unlock_bh include/linux/spinlock.h:396 [inline]
 ptr_ring_consume_bh include/linux/ptr_ring.h:367 [inline]
 wg_packet_encrypt_worker+0x2a7/0x14f0 drivers/net/wireguard/send.c:293
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0x7d5/0x1020 kernel/workqueue.c:3319
 worker_thread+0xc58/0x1250 kernel/workqueue.c:3400
 kthread+0x2c7/0x370 kernel/kthread.c:389
 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

final repro crashed as (corrupted=false):
INFO: task kworker/u8:1:13 blocked for more than 122 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:1    state:D stack:0     pid:13    tgid:13    ppid:2      flags:0x00004000
Workqueue: events_unbound linkwatch_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 __mutex_lock_common kernel/locking/mutex.c:707 [inline]
 __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803
 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134
 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285
 rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79
 linkwatch_event+0x12/0x60 net/core/link_watch.c:285
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0x7d5/0x1020 kernel/workqueue.c:3319
 worker_thread+0xc58/0x1250 kernel/workqueue.c:3400
 kthread+0x2c7/0x370 kernel/kthread.c:389
 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/u8:2:46 blocked for more than 125 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:2    state:D stack:0     pid:46    tgid:46    ppid:2      flags:0x00004000
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 __mutex_lock_common kernel/locking/mutex.c:707 [inline]
 __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803
 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134
 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285
 rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79
 addrconf_dad_work+0xca/0x14e0 net/ipv6/addrconf.c:4240
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0x7d5/0x1020 kernel/workqueue.c:3319
 worker_thread+0xc58/0x1250 kernel/workqueue.c:3400
 kthread+0x2c7/0x370 kernel/kthread.c:389
 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task syz-executor:409 blocked for more than 126 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:0     pid:409   tgid:409   ppid:1      flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 __mutex_lock_common kernel/locking/mutex.c:707 [inline]
 __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803
 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134
 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285
 rtnl_lock net/core/rtnetlink.c:79 [inline]
 rtnetlink_rcv_msg+0x75f/0xa00 net/core/rtnetlink.c:6675
 netlink_rcv_skb+0x22b/0x4a0 net/netlink/af_netlink.c:2537
 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6696
 netlink_unicast_kernel net/netlink/af_netlink.c:1316 [inline]
 netlink_unicast+0x8c9/0xa60 net/netlink/af_netlink.c:1342
 netlink_sendmsg+0x7f0/0xaf0 net/netlink/af_netlink.c:1886
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 __sys_sendto+0x66a/0x6f0 net/socket.c:2217
 __do_sys_sendto net/socket.c:2229 [inline]
 __se_sys_sendto net/socket.c:2225 [inline]
 __x64_sys_sendto+0xe9/0x100 net/socket.c:2225
 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f181a9907e3
RSP: 002b:00007ffde22adc58 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f181b6e4620 RCX: 00007f181a9907e3
RDX: 000000000000002c RSI: 00007f181b6e4670 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007ffde22adc74 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f181b6e4670 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:410 blocked for more than 127 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:0     pid:410   tgid:410   ppid:1      flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 __mutex_lock_common kernel/locking/mutex.c:707 [inline]
 __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803
 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134
 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285
 rtnl_lock net/core/rtnetlink.c:79 [inline]
 rtnetlink_rcv_msg+0x75f/0xa00 net/core/rtnetlink.c:6675
 netlink_rcv_skb+0x22b/0x4a0 net/netlink/af_netlink.c:2537
 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6696
 netlink_unicast_kernel net/netlink/af_netlink.c:1316 [inline]
 netlink_unicast+0x8c9/0xa60 net/netlink/af_netlink.c:1342
 netlink_sendmsg+0x7f0/0xaf0 net/netlink/af_netlink.c:1886
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 __sys_sendto+0x66a/0x6f0 net/socket.c:2217
 __do_sys_sendto net/socket.c:2229 [inline]
 __se_sys_sendto net/socket.c:2225 [inline]
 __x64_sys_sendto+0xe9/0x100 net/socket.c:2225
 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f9e537907e3
RSP: 002b:00007ffd4949af18 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f9e544e4620 RCX: 00007f9e537907e3
RDX: 0000000000000028 RSI: 00007f9e544e4670 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007ffd4949af34 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f9e544e4670 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:412 blocked for more than 128 seconds.
      Not tainted 6.12.30-syzkaller-g2e58e85c038f #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:0     pid:412   tgid:412   ppid:1      flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5945 [inline]
 __schedule+0x132b/0x1e00 kernel/sched/core.c:7789
 __schedule_loop kernel/sched/core.c:7870 [inline]
 schedule+0xc6/0x240 kernel/sched/core.c:7885
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:7942
 __mutex_lock_common kernel/locking/mutex.c:707 [inline]
 __mutex_lock+0x81e/0x1b50 kernel/locking/mutex.c:803
 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134
 mutex_lock+0x102/0x1c0 kernel/locking/mutex.c:285
 rtnl_lock net/core/rtnetlink.c:79 [inline]
 rtnetlink_rcv_msg+0x75f/0xa00 net/core/rtnetlink.c:6675
 netlink_rcv_skb+0x22b/0x4a0 net/netlink/af_netlink.c:2537
 rtnetlink_rcv+0x20/0x30 net/core/rtnetlink.c:6696
 netlink_unicast_kernel net/netlink/af_netlink.c:1316 [inline]
 netlink_unicast+0x8c9/0xa60 net/netlink/af_netlink.c:1342
 netlink_sendmsg+0x7f0/0xaf0 net/netlink/af_netlink.c:1886
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 __sys_sendto+0x66a/0x6f0 net/socket.c:2217
 __do_sys_sendto net/socket.c:2229 [inline]
 __se_sys_sendto net/socket.c:2225 [inline]
 __x64_sys_sendto+0xe9/0x100 net/socket.c:2225
 x64_sys_call+0x2c2c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:45
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fe96d7907e3
RSP: 002b:00007fff40404568 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe96e4e4620 RCX: 00007fe96d7907e3
RDX: 000000000000002c RSI: 00007fe96e4e4670 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007fff40404584 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003
R13: 0000000000000000 R14: 00007fe96e4e4670 R15: 0000000000000000
 </TASK>
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-g2e58e85c038f #0 c5e7ad78b71ddb211d6a9cda70735ca8545dcbc5
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x10c/0x190 lib/dump_stack.c:120
 dump_stack+0x19/0x20 lib/dump_stack.c:129
 nmi_cpu_backtrace+0x2bf/0x2d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41
 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline]
 watchdog+0xd8f/0xed0 kernel/hung_task.c:423
 kthread+0x2c7/0x370 kernel/kthread.c:389
 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 391 Comm: kworker/0:3 Not tainted 6.12.30-syzkaller-g2e58e85c038f #0 c5e7ad78b71ddb211d6a9cda70735ca8545dcbc5
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x5/0x90 kernel/kcov.c:313
Code: 11 10 48 89 74 11 18 48 89 44 11 20 5d c3 cc cc cc cc cc 66 90 b8 44 86 1e b2 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 48 8b 45 08 65 48 8b 14 25 40 e9 04 00 65 8b 0d ec 39 7f
RSP: 0018:ffffc90000007148 EFLAGS: 00000246
RAX: ffffffff84ded5d3 RBX: 0000000000000000 RCX: 0000000000000100
RDX: ffff8881176b8000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc900000071e8 R08: ffffc90000007540 R09: ffffc90000007550
R10: ffffc900000076b0 R11: fffff52000000eda R12: 0000000000000006
R13: ffff888115a460c0 R14: 0000000000000003 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff3a6ee5000 CR3: 00000001023b8000 CR4: 00000000003526b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 find_match+0x176/0x10f0 net/ipv6/route.c:786
 __find_rr_leaf+0x23c/0x790 net/ipv6/route.c:869
 find_rr_leaf net/ipv6/route.c:890 [inline]
 rt6_select net/ipv6/route.c:934 [inline]
 fib6_table_lookup+0x2c5/0x9b0 net/ipv6/route.c:2230
 ip6_pol_route+0x167/0x12c0 net/ipv6/route.c:2266
 ip6_pol_route_input+0x5a/0x80 net/ipv6/route.c:2323
 pol_lookup_func include/net/ip6_fib.h:626 [inline]
 fib6_rule_lookup+0x4cc/0x6b0 net/ipv6/fib6_rules.c:117
 ip6_route_input_lookup net/ipv6/route.c:2335 [inline]
 ip6_route_input+0x59f/0x8d0 net/ipv6/route.c:2631
 ip6_rcv_finish_core net/ipv6/ip6_input.c:66 [inline]
 ip6_rcv_finish+0x15a/0x3c0 net/ipv6/ip6_input.c:77
 NF_HOOK include/linux/netfilter.h:317 [inline]
 ipv6_rcv+0xed/0x220 net/ipv6/ip6_input.c:309
 __netif_receive_skb_one_core net/core/dev.c:5757 [inline]
 __netif_receive_skb net/core/dev.c:5870 [inline]
 process_backlog+0x44b/0xae0 net/core/dev.c:6202
 __napi_poll+0xd3/0x610 net/core/dev.c:6853
 napi_poll net/core/dev.c:6922 [inline]
 net_rx_action+0x584/0xce0 net/core/dev.c:7044
 handle_softirqs+0x1ae/0x630 kernel/softirq.c:603
 __do_softirq+0xf/0x16 kernel/softirq.c:641
 do_softirq+0xa6/0x100 kernel/softirq.c:485
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0x74/0x80 kernel/softirq.c:412
 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline]
 _raw_spin_unlock_bh+0x54/0x60 kernel/locking/spinlock.c:210
 spin_unlock_bh include/linux/spinlock.h:396 [inline]
 ptr_ring_consume_bh include/linux/ptr_ring.h:367 [inline]
 wg_packet_encrypt_worker+0x2a7/0x14f0 drivers/net/wireguard/send.c:293
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0x7d5/0x1020 kernel/workqueue.c:3319
 worker_thread+0xc58/0x1250 kernel/workqueue.c:3400
 kthread+0x2c7/0x370 kernel/kthread.c:389
 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>